This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/Q-b9qw8VDunEPPWiu3ZYin5fhQI.cer File: Q-b9qw8VDunEPPWiu3ZYin5fhQI.cer (raw, json) Hash identifier: Z2WHV5q2NzTJ01bLOME4jm0l1AdpC6o/mVOl+aNTr3s= Subject key identifier: 43:E6:FD:AB:0F:15:0E:E9:C4:3C:F5:A2:BB:76:58:8A:7E:5F:85:02 Authority key identifier: D7:11:EC:0D:37:81:58:A4:47:6F:E6:EA:7D:70:A5:4A:95:19:5A:11 Certificate issuer: /CN=A9162E3D0000/serialNumber=D711EC0D378158A4476FE6EA7D70A54A95195A11 Certificate serial: 43B8 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3417/Q-b9qw8VDunEPPWiu3ZYin5fhQI.mft caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3417/ Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml Certificate not before: Mon 15 Dec 2025 02:23:51 +0000 Certificate not after: Sat 12 Dec 2026 07:10:43 +0000 Subordinate resources: IP: 144.79.118.0/23 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 00:39:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17336 (0x43b8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0000, serialNumber=D711EC0D378158A4476FE6EA7D70A54A95195A11 Validity Not Before: Dec 15 02:23:51 2025 GMT Not After : Dec 12 07:10:43 2026 GMT Subject: CN=43E6FDAB0F150EE9C43CF5A2BB76588A7E5F8502 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:0c:d6:ba:b8:af:c8:31:1b:73:15:ec:a4:83: 11:36:c5:43:8b:81:8b:94:a8:1d:66:c9:02:65:db: f6:59:a2:60:3d:4d:d1:1b:5f:50:e1:7d:58:99:03: 9c:30:87:d9:81:66:15:ef:9f:34:5d:39:f5:a9:53: b6:63:fc:97:8c:4a:76:6f:f6:86:fe:f7:5b:04:2a: 0e:c9:1b:68:99:8f:0d:c7:06:46:6a:fc:86:56:e2: e9:80:7f:a2:a0:f9:dd:21:64:4d:f8:8c:e9:e1:20: 52:38:c0:ea:ee:23:ba:57:37:76:68:e9:2f:8e:73: a6:7d:c4:14:22:3a:2c:01:bd:da:be:36:f0:e4:62: d5:da:93:ee:af:1b:95:13:bf:0a:0c:cb:06:6d:96: e0:77:87:35:22:4f:73:a2:8d:91:ed:51:53:f3:80: cc:ba:d0:e2:c5:da:2f:3f:63:e7:69:94:32:35:e5: 10:29:a0:20:14:83:c6:76:da:a6:53:22:43:76:25: a3:44:3a:22:05:69:74:12:d0:b3:1d:81:b3:4f:4b: cf:6b:79:d0:fa:13:db:1e:b0:13:c9:b1:75:5b:0e: 94:9a:87:6d:5f:28:78:2d:19:2e:d2:21:62:75:15: f9:35:cd:cf:01:77:c7:7f:a9:7f:78:d5:d8:27:46: 75:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:E6:FD:AB:0F:15:0E:E9:C4:3C:F5:A2:BB:76:58:8A:7E:5F:85:02 X509v3 Authority Key Identifier: keyid:D7:11:EC:0D:37:81:58:A4:47:6F:E6:EA:7D:70:A5:4A:95:19:5A:11 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3417/ RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3417/Q-b9qw8VDunEPPWiu3ZYin5fhQI.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 144.79.118.0/23 Signature Algorithm: sha256WithRSAEncryption 0a:c1:33:e7:c1:1b:9e:fe:c6:be:5d:a2:64:37:c4:7f:7e:75: 22:a7:2b:b1:8c:af:31:0b:6a:14:be:1f:fd:b0:df:56:5f:10: 3b:51:e0:32:32:5c:76:08:f7:89:c1:ef:74:de:18:24:d5:d7: 6d:a8:40:1f:f7:79:7c:de:34:db:be:32:69:88:b7:2b:86:11: 1e:98:3f:89:b0:e9:dd:85:c5:1b:d6:8d:96:df:47:f0:dd:92: 7f:ea:49:ac:90:68:b2:79:fe:5c:78:dd:69:3d:a8:f6:5d:0d: 03:42:91:df:82:91:7e:54:4a:1d:83:64:ab:83:02:91:7f:fe: 6f:85:2b:da:ae:09:8f:17:52:77:eb:10:87:11:dc:dd:fa:b6: 23:e5:24:64:59:f6:ba:b5:9c:73:26:31:8b:91:4d:79:06:18: ab:18:36:98:f3:17:68:14:9c:e6:8d:69:20:8d:ac:9b:f1:f8: fe:df:5b:c7:4f:8c:79:5a:b7:11:ae:81:c5:1e:b0:d9:48:51: 08:0e:97:a4:98:82:6e:7d:7b:7a:7e:c1:f4:09:83:ed:be:cf: 6c:d9:0c:61:92:35:3d:23:f6:66:2a:9b:dd:9e:e4:69:f5:45: 42:32:f9:63:31:d0:4b:e1:bc:21:cd:2c:0d:2e:39:9d:61:06: 2f:db:fd:0e -----BEGIN CERTIFICATE----- MIIFUDCCBDigAwIBAgICQ7gwDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx NjJFM0QwMDAwMTEwLwYDVQQFEyhENzExRUMwRDM3ODE1OEE0NDc2RkU2RUE3RDcw QTU0QTk1MTk1QTExMB4XDTI1MTIxNTAyMjM1MVoXDTI2MTIxMjA3MTA0M1owMzEx MC8GA1UEAxMoNDNFNkZEQUIwRjE1MEVFOUM0M0NGNUEyQkI3NjU4OEE3RTVGODUw MjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAL4M1rq4r8gxG3MV7KSD ETbFQ4uBi5SoHWbJAmXb9lmiYD1N0RtfUOF9WJkDnDCH2YFmFe+fNF059alTtmP8 l4xKdm/2hv73WwQqDskbaJmPDccGRmr8hlbi6YB/oqD53SFkTfiM6eEgUjjA6u4j ulc3dmjpL45zpn3EFCI6LAG92r428ORi1dqT7q8blRO/CgzLBm2W4HeHNSJPc6KN ke1RU/OAzLrQ4sXaLz9j52mUMjXlECmgIBSDxnbaplMiQ3Ylo0Q6IgVpdBLQsx2B s09Lz2t50PoT2x6wE8mxdVsOlJqHbV8oeC0ZLtIhYnUV+TXNzwF3x3+pf3jV2CdG dbsCAwEAAaOCAlUwggJRMB0GA1UdDgQWBBRD5v2rDxUO6cQ89aK7dliKfl+FAjAf BgNVHSMEGDAWgBTXEewNN4FYpEdv5up9cKVKlRlaETAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMFgGA1UdHwRRME8wTaBLoEmGR3JzeW5jOi8vcnBraS5jbm5pYy5j bi9ycGtpL0E5MTYyRTNEMDAwMC8xeEhzRFRlQldLUkhiLWJxZlhDbFNwVVpXaEUu Y3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFw bmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQx RkYyLzF4SHNEVGVCV0tSSGItYnFmWENsU3BVWldoRS5jZXIwDwYDVR0TAQH/BAUw AwEB/zAOBgNVHQ8BAf8EBAMCAQYwgdgGCCsGAQUFBwELBIHLMIHIMDkGCCsGAQUF BzAFhi1yc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzQx Ny8wWAYIKwYBBQUHMAqGTHJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYy RTNEMDAwMC8zNDE3L1EtYjlxdzhWRHVuRVBQV2l1M1pZaW41ZmhRSS5tZnQwMQYI KwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5pYy5jbi9ycmRwL25vdGlmeS54bWww HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAGQT3YwDQYJKoZIhvcNAQELBQAD ggEBAArBM+fBG57+xr5domQ3xH9+dSKnK7GMrzELahS+H/2w31ZfEDtR4DIyXHYI 94nB73TeGCTV122oQB/3eXzeNNu+MmmItyuGER6YP4mw6d2FxRvWjZbfR/Ddkn/q SayQaLJ5/lx43Wk9qPZdDQNCkd+CkX5USh2DZKuDApF//m+FK9quCY8XUnfrEIcR 3N36tiPlJGRZ9rq1nHMmMYuRTXkGGKsYNpjzF2gUnOaNaSCNrJvx+P7fW8dPjHla txGugcUesNlIUQgOl6SYgm59e3p+wfQJg+2+z2zZDGGSNT0j9mYqm92e5Gn1RUIy +WMx0EvhvCHNLA0uOZ1hBi/b/Q4= -----END CERTIFICATE-----Generated at Sat Dec 20 21:53:33 2025 by rpki-client