This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/vPQBem4pFfJhR9QZ5fen0WTQSYQ.cer File: vPQBem4pFfJhR9QZ5fen0WTQSYQ.cer (raw, json) Hash identifier: jvWTblkJB7vAGrbwPLWAJcWgh3UU4DnvrnGxxqUoJmc= Subject key identifier: BC:F4:01:7A:6E:29:15:F2:61:47:D4:19:E5:F7:A7:D1:64:D0:49:84 Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Certificate serial: E831 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2072/vPQBem4pFfJhR9QZ5fen0WTQSYQ.mft caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2072/ Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml Certificate not before: Thu 22 Jan 2026 19:56:46 +0000 Certificate not after: Sat 09 Jan 2027 08:23:18 +0000 Subordinate resources: IP: 103.67.172.0/22 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 06:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59441 (0xe831) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0000, serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Validity Not Before: Jan 22 19:56:46 2026 GMT Not After : Jan 9 08:23:18 2027 GMT Subject: CN=BCF4017A6E2915F26147D419E5F7A7D164D04984 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:16:62:fb:4f:f0:7b:64:a8:4b:02:5a:5d:25: 5c:6d:08:f9:5c:91:98:b7:58:4c:c9:46:d9:6f:95: 51:5a:75:50:cd:88:28:aa:32:a4:88:b3:a5:be:fc: 66:dd:eb:d2:b8:7c:57:c7:60:52:46:15:56:eb:84: ce:b9:22:3e:28:0c:5c:8e:ec:08:f8:07:80:8f:82: 1a:c5:6d:91:d9:ea:bf:d0:71:f3:f4:47:35:8f:bb: b5:1a:b4:2a:4c:53:30:6c:0e:18:94:dd:00:ff:8d: af:2a:b1:92:b5:6c:b0:3c:07:44:24:a6:ae:52:33: 9d:a9:c3:a8:cf:e5:60:dd:b0:51:d5:ac:75:3c:69: dc:53:3b:0f:4e:f2:b6:b4:0d:12:36:d9:fb:32:c2: 89:1e:7c:4e:1f:7c:31:c5:e2:c2:af:59:ca:6d:d9: 6b:f4:0a:78:52:74:5f:c8:53:71:75:df:6e:3a:21: 0f:bf:d7:4f:ff:1b:ae:2e:04:98:e9:02:39:24:77: 29:bd:0b:fa:1c:01:a5:85:f0:13:f5:a7:85:b2:cf: fb:2c:c9:0a:f3:5b:04:d1:52:af:42:4c:08:cf:5a: 0b:7a:f8:71:54:5c:b5:e5:89:28:99:42:76:5d:2d: ec:04:dd:2c:75:23:19:76:8e:1b:e2:27:8e:9c:31: 98:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:F4:01:7A:6E:29:15:F2:61:47:D4:19:E5:F7:A7:D1:64:D0:49:84 X509v3 Authority Key Identifier: keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2072/ RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2072/vPQBem4pFfJhR9QZ5fen0WTQSYQ.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.67.172.0/22 Signature Algorithm: sha256WithRSAEncryption 1a:6a:f3:f7:2e:39:e2:96:4f:ee:52:38:f8:a5:b2:3e:0b:2e: ac:86:df:17:8a:b2:52:28:8a:da:b0:30:5f:9c:27:de:49:bb: 1f:64:c8:c0:a0:0e:8a:3e:b8:7f:5f:4f:f6:90:a5:6e:07:c0: c8:d6:93:c8:1c:12:1c:4e:32:e7:9e:d2:eb:f3:1f:c4:fb:d0: 00:4f:18:08:81:a5:c1:0f:67:f1:76:69:ed:cf:06:88:5c:3b: 99:a4:e7:fa:87:bf:14:8b:31:67:3a:28:63:06:be:ac:3f:a4: 40:d9:82:cb:a9:b6:b9:a8:58:f3:02:36:d8:f2:3e:f4:fc:f3: 94:09:b7:54:12:0c:0c:cf:c8:cf:2b:6a:da:50:8d:5d:4a:be: ff:9e:95:62:2f:19:1e:70:8c:51:ac:00:66:63:ab:e6:86:b1: 0b:b2:3d:ee:15:93:d3:50:16:64:fd:9a:cb:25:0e:56:c4:6c: 4a:8b:ee:5c:f1:bf:61:8b:f7:81:8b:2f:51:f4:b0:86:4f:14: 4d:8d:1e:4c:4f:6a:3d:87:96:95:0a:20:c7:98:28:5e:ef:8a: 26:42:a2:5f:32:ba:9f:69:43:37:9d:2b:3c:69:53:57:d3:42: 9e:5e:af:f4:e8:d1:27:d2:5a:ce:36:d9:4d:87:2f:c3:13:ac: 6d:05:58:f6 -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgIDAOgxMA0GCSqGSIb3DQEBCwUAMEoxFTATBgNVBAMTDEE5 MTYyRTNEMDAwMDExMC8GA1UEBRMoMDQxNjI5QjZBOUVBQjdDQjEzMjRFQTM5NzhG MDM3OTZGODg5QjU0MDAeFw0yNjAxMjIxOTU2NDZaFw0yNzAxMDkwODIzMThaMDMx MTAvBgNVBAMTKEJDRjQwMTdBNkUyOTE1RjI2MTQ3RDQxOUU1RjdBN0QxNjREMDQ5 ODQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+FmL7T/B7ZKhLAlpd JVxtCPlckZi3WEzJRtlvlVFadVDNiCiqMqSIs6W+/Gbd69K4fFfHYFJGFVbrhM65 Ij4oDFyO7Aj4B4CPghrFbZHZ6r/QcfP0RzWPu7UatCpMUzBsDhiU3QD/ja8qsZK1 bLA8B0Qkpq5SM52pw6jP5WDdsFHVrHU8adxTOw9O8ra0DRI22fsywokefE4ffDHF 4sKvWcpt2Wv0CnhSdF/IU3F13246IQ+/10//G64uBJjpAjkkdym9C/ocAaWF8BP1 p4Wyz/ssyQrzWwTRUq9CTAjPWgt6+HFUXLXliSiZQnZdLewE3Sx1Ixl2jhviJ46c MZghAgMBAAGjggJVMIICUTAdBgNVHQ4EFgQUvPQBem4pFfJhR9QZ5fen0WTQSYQw HwYDVR0jBBgwFoAUBBYptqnqt8sTJOo5ePA3lviJtUAwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjBYBgNVHR8EUTBPME2gS6BJhkdyc3luYzovL3Jwa2kuY25uaWMu Y24vcnBraS9BOTE2MkUzRDAwMDAvQkJZcHRxbnF0OHNUSk9vNWVQQTNsdmlKdFVB LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZE MUZGMi9CQllwdHFucXQ4c1RKT281ZVBBM2x2aUp0VUEuY2VyMA8GA1UdEwEB/wQF MAMBAf8wDgYDVR0PAQH/BAQDAgEGMIHYBggrBgEFBQcBCwSByzCByDA5BggrBgEF BQcwBYYtcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzIw NzIvMFgGCCsGAQUFBzAKhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2 MkUzRDAwMDAvMjA3Mi92UFFCZW00cEZmSmhSOVFaNWZlbjBXVFFTWVEubWZ0MDEG CCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMuY24vcnJkcC9ub3RpZnkueG1s MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCZ0OsMA0GCSqGSIb3DQEBCwUA A4IBAQAaavP3Ljnilk/uUjj4pbI+Cy6sht8XirJSKIrasDBfnCfeSbsfZMjAoA6K Prh/X0/2kKVuB8DI1pPIHBIcTjLnntLr8x/E+9AATxgIgaXBD2fxdmntzwaIXDuZ pOf6h78UizFnOihjBr6sP6RA2YLLqba5qFjzAjbY8j70/POUCbdUEgwMz8jPK2ra UI1dSr7/npViLxkecIxRrABmY6vmhrELsj3uFZPTUBZk/ZrLJQ5WxGxKi+5c8b9h i/eBiy9R9LCGTxRNjR5MT2o9h5aVCiDHmChe74omQqJfMrqfaUM3nSs8aVNX00Ke Xq/06NEn0lrONtlNhy/DE6xtBVj2 -----END CERTIFICATE-----Generated at Sun Jan 25 04:28:27 2026 by rpki-client