This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/yxZwfq8L39Eyav2b3sav-m5jupg.cer File: yxZwfq8L39Eyav2b3sav-m5jupg.cer (raw, json) Hash identifier: ERlTfxc9iPWKGWox2nfOr6DBHVO1PNgKer1DU+CoFJE= Subject key identifier: CB:16:70:7E:AF:0B:DF:D1:32:6A:FD:9B:DE:C6:AF:FA:6E:63:BA:98 Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Certificate serial: E6AA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3095/yxZwfq8L39Eyav2b3sav-m5jupg.mft caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3095/ Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml Certificate not before: Fri 09 Jan 2026 08:27:30 +0000 Certificate not after: Sat 09 Jan 2027 08:23:18 +0000 Subordinate resources: AS: 37968 IP: 103.2.164.0/22 IP: 103.168.98.0/23 IP: 202.46.224.0/20 IP: 2407:8f40::/32 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 11:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59050 (0xe6aa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0000, serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Validity Not Before: Jan 9 08:27:30 2026 GMT Not After : Jan 9 08:23:18 2027 GMT Subject: CN=CB16707EAF0BDFD1326AFD9BDEC6AFFA6E63BA98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:e3:77:fc:8d:77:10:86:f6:17:af:4a:1d:90: 0c:e8:53:e8:2c:f3:79:a6:8c:c4:9e:03:ba:9e:06: ef:22:01:51:4b:e4:5c:5e:3b:f0:62:b6:6a:a0:20: 11:20:87:67:11:0f:cc:2e:53:4c:2b:a6:b0:e6:0a: 08:be:c0:9c:4c:16:ab:50:a0:74:76:26:fb:20:81: c0:e3:7a:a6:45:d1:15:24:eb:ae:1a:a0:43:20:4c: 6e:8b:1d:77:59:64:6e:7d:d6:67:51:ec:7e:b1:92: a6:3f:6c:1f:06:54:51:57:eb:10:a5:1d:ce:70:ca: 90:29:05:52:7f:83:c4:57:71:83:85:20:be:30:12: b3:94:df:7b:16:6d:e0:65:fa:38:5e:52:ce:25:94: a3:82:d3:27:81:fb:4d:d7:2f:5d:8a:ad:fb:98:f6: e4:9a:2b:b1:5a:5f:08:0e:5e:de:a3:57:4c:c3:b9: 22:90:1d:18:60:16:4a:0f:2d:64:77:7b:6b:f7:2b: d2:13:a4:b2:51:32:0f:bb:70:4c:6a:c1:74:8e:10: 26:35:35:f5:67:82:01:25:16:75:ec:03:58:3e:25: cf:bd:ae:16:85:60:a6:06:a8:e4:ac:60:7f:11:a5: 63:8a:ae:86:d6:aa:9d:81:84:19:85:51:76:99:80: eb:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:16:70:7E:AF:0B:DF:D1:32:6A:FD:9B:DE:C6:AF:FA:6E:63:BA:98 X509v3 Authority Key Identifier: keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3095/ RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3095/yxZwfq8L39Eyav2b3sav-m5jupg.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 37968 sbgp-ipAddrBlock: critical IPv4: 103.2.164.0/22 103.168.98.0/23 202.46.224.0/20 IPv6: 2407:8f40::/32 Signature Algorithm: sha256WithRSAEncryption 2f:20:4d:b0:c8:c8:97:fe:74:50:99:cb:83:28:b0:ec:13:2b: 7a:7c:a5:de:35:8d:e8:a4:1d:05:b7:d1:81:a7:9c:da:4b:17: e3:8b:08:45:e0:08:0c:7f:4f:f6:dc:7a:2d:de:b8:20:4c:c2: 4b:8d:f7:40:c4:f2:b1:f9:b4:94:d1:be:bc:6f:bb:98:96:33: 9f:d1:f5:ea:50:02:84:7a:54:af:be:8c:7b:4f:4c:3e:7b:a7: 4b:c5:31:c0:e7:78:16:83:1a:86:90:b8:0d:25:49:20:13:8c: 81:f5:61:85:90:85:c2:3b:43:a9:1f:51:4f:f9:80:5f:7c:ee: a8:16:91:11:59:b6:a5:a7:10:af:a6:c9:9a:d6:85:c5:aa:08: 33:26:06:b4:b9:61:0d:3c:58:c4:a4:7e:61:26:55:e4:d3:3a: f0:d3:27:72:29:51:94:4f:1a:06:22:7c:fd:87:03:66:e7:af: 8f:2c:b8:b9:f7:0e:f9:2f:13:7d:62:ab:92:2b:9b:14:ce:6b: cc:51:1b:5f:cb:0f:97:b0:0b:ba:b9:db:36:da:e1:6a:58:e7: 8f:ca:08:7b:f8:42:24:be:43:1d:d5:1d:3b:7c:ae:33:7b:ae: 4c:92:f8:83:72:88:57:23:bd:d1:60:af:a7:4f:dc:e5:e1:90: ce:df:c5:49 -----BEGIN CERTIFICATE----- MIIFiDCCBHCgAwIBAgIDAOaqMA0GCSqGSIb3DQEBCwUAMEoxFTATBgNVBAMTDEE5 MTYyRTNEMDAwMDExMC8GA1UEBRMoMDQxNjI5QjZBOUVBQjdDQjEzMjRFQTM5NzhG MDM3OTZGODg5QjU0MDAeFw0yNjAxMDkwODI3MzBaFw0yNzAxMDkwODIzMThaMDMx MTAvBgNVBAMTKENCMTY3MDdFQUYwQkRGRDEzMjZBRkQ5QkRFQzZBRkZBNkU2M0JB OTgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCo43f8jXcQhvYXr0od kAzoU+gs83mmjMSeA7qeBu8iAVFL5FxeO/BitmqgIBEgh2cRD8wuU0wrprDmCgi+ wJxMFqtQoHR2JvsggcDjeqZF0RUk664aoEMgTG6LHXdZZG591mdR7H6xkqY/bB8G VFFX6xClHc5wypApBVJ/g8RXcYOFIL4wErOU33sWbeBl+jheUs4llKOC0yeB+03X L12KrfuY9uSaK7FaXwgOXt6jV0zDuSKQHRhgFkoPLWR3e2v3K9ITpLJRMg+7cExq wXSOECY1NfVnggElFnXsA1g+Jc+9rhaFYKYGqOSsYH8RpWOKrobWqp2BhBmFUXaZ gOtHAgMBAAGjggKMMIICiDAdBgNVHQ4EFgQUyxZwfq8L39Eyav2b3sav+m5jupgw HwYDVR0jBBgwFoAUBBYptqnqt8sTJOo5ePA3lviJtUAwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjBYBgNVHR8EUTBPME2gS6BJhkdyc3luYzovL3Jwa2kuY25uaWMu Y24vcnBraS9BOTE2MkUzRDAwMDAvQkJZcHRxbnF0OHNUSk9vNWVQQTNsdmlKdFVB LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZE MUZGMi9CQllwdHFucXQ4c1RKT281ZVBBM2x2aUp0VUEuY2VyMA8GA1UdEwEB/wQF MAMBAf8wDgYDVR0PAQH/BAQDAgEGMIHYBggrBgEFBQcBCwSByzCByDA5BggrBgEF BQcwBYYtcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMw OTUvMFgGCCsGAQUFBzAKhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2 MkUzRDAwMDAvMzA5NS95eFp3ZnE4TDM5RXlhdjJiM3Nhdi1tNWp1cGcubWZ0MDEG CCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMuY24vcnJkcC9ub3RpZnkueG1s MBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwCUUDA6BggrBgEFBQcBBwEB/wQrMCkw GAQCAAEwEgMEAmcCpAMEAWeoYgMEBMou4DANBAIAAjAHAwUAJAePQDANBgkqhkiG 9w0BAQsFAAOCAQEALyBNsMjIl/50UJnLgyiw7BMrenyl3jWN6KQdBbfRgaec2ksX 44sIReAIDH9P9tx6Ld64IEzCS433QMTysfm0lNG+vG+7mJYzn9H16lAChHpUr76M e09MPnunS8UxwOd4FoMahpC4DSVJIBOMgfVhhZCFwjtDqR9RT/mAX3zuqBaREVm2 pacQr6bJmtaFxaoIMyYGtLlhDTxYxKR+YSZV5NM68NMncilRlE8aBiJ8/YcDZuev jyy4ufcO+S8TfWKrkiubFM5rzFEbX8sPl7ALurnbNtrhaljnj8oIe/hCJL5DHdUd O3yuM3uuTJL4g3KIVyO90WCvp0/c5eGQzt/FSQ== -----END CERTIFICATE-----Generated at Sun Jan 25 09:20:58 2026 by rpki-client