This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/nD9ngtSgjANGiVsLJHxcVBfpjgs.cer File: nD9ngtSgjANGiVsLJHxcVBfpjgs.cer (raw, json) Hash identifier: zY0Su1PevVDmst5MsYzPrFqkjHvcqGf2X4kDJ/KpV0g= Subject key identifier: 9C:3F:67:82:D4:A0:8C:03:46:89:5B:0B:24:7C:5C:54:17:E9:8E:0B Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Certificate serial: E59F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3419/nD9ngtSgjANGiVsLJHxcVBfpjgs.mft caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3419/ Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml Certificate not before: Wed 17 Dec 2025 04:40:42 +0000 Certificate not after: Thu 17 Dec 2026 04:18:37 +0000 Subordinate resources: AS: 9803 AS: 17963 AS: 23849 IP: 2402:b200::/32 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 17:40:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58783 (0xe59f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0000, serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Validity Not Before: Dec 17 04:40:42 2025 GMT Not After : Dec 17 04:18:37 2026 GMT Subject: CN=9C3F6782D4A08C0346895B0B247C5C5417E98E0B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:b3:b1:38:e8:36:df:5e:e2:51:69:27:c2:43: 57:df:78:9e:2b:4a:68:9f:af:ce:90:4b:d9:69:7c: 2c:5c:ea:67:0d:96:cb:2a:86:20:3e:5c:20:76:fd: 04:00:40:c7:68:b9:7e:24:c3:c7:1e:f8:55:2e:a8: 12:68:16:8d:dd:50:0d:b0:9f:b8:09:af:81:b7:8f: 19:88:9a:19:27:05:5c:41:53:81:95:db:9e:2b:93: 48:0a:64:c4:a2:3f:bf:03:cb:5b:58:24:ff:27:cf: 44:9d:40:23:c3:5a:d9:3a:ab:81:1e:f1:34:6c:c6: 14:c0:d1:27:32:8b:4e:49:25:d0:bf:89:36:3e:4f: 8c:73:8a:e0:2a:ed:3d:22:26:33:b2:0e:d8:80:4b: 6f:b4:21:c9:81:49:2a:1a:72:f6:22:9b:c4:01:3d: a9:37:84:72:01:49:98:f0:fd:92:c1:37:c7:5c:15: 1f:05:41:98:56:75:49:f4:15:74:d1:5f:4f:8d:5c: 69:bd:d4:b6:4c:2d:f8:b8:85:0a:bc:b2:c0:87:3f: 49:cf:ed:4f:f7:05:9d:af:d0:0f:83:d3:c5:6f:3b: 90:31:76:24:2a:79:b1:e8:cc:ea:d0:e5:05:9b:c5: 07:b6:55:0d:04:9b:99:d4:88:6a:16:14:3a:dd:ea: 29:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:3F:67:82:D4:A0:8C:03:46:89:5B:0B:24:7C:5C:54:17:E9:8E:0B X509v3 Authority Key Identifier: keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3419/ RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3419/nD9ngtSgjANGiVsLJHxcVBfpjgs.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 9803 17963 23849 sbgp-ipAddrBlock: critical IPv6: 2402:b200::/32 Signature Algorithm: sha256WithRSAEncryption 7b:cb:a5:fe:2e:42:f2:3e:90:9b:b6:82:b2:e4:0c:0a:6b:14: cf:7c:d4:db:15:18:af:cc:66:61:27:05:1c:e0:da:24:7f:a2: 2b:4e:8b:bf:0c:d0:c6:ea:6d:96:7e:64:f8:f1:91:b6:72:f5: dd:d5:75:9c:9e:d5:32:e9:10:45:7e:51:31:17:86:0d:a8:ce: 6b:ae:e3:ce:52:1f:43:eb:bb:1f:2c:62:f5:27:5b:ef:f7:11: c8:69:b4:88:17:b7:8e:57:d9:93:81:61:17:64:95:7f:0e:7c: 5f:de:6b:e2:0a:52:12:79:47:20:2a:36:16:6c:d2:19:ee:74: 43:7e:bd:36:34:af:0a:3b:55:57:05:ab:e3:b8:ef:be:cc:d7: b3:b2:0b:89:c5:d5:e0:e6:d3:88:27:ee:f3:46:cb:d9:19:2e: fd:fa:3c:6c:b0:25:e9:4c:e7:77:da:ac:ba:67:21:96:a1:56: 2c:50:a4:8f:4c:1e:70:03:7a:39:81:8b:79:65:ae:c7:59:13: e9:88:a2:13:b6:6a:f1:01:1d:75:62:f6:6e:ad:64:c9:5a:0b: bd:b4:80:5d:59:8b:a5:e2:38:68:25:6a:98:54:82:1f:e6:13: e4:ec:a4:a7:d4:09:ab:fe:7d:3f:8d:fd:a7:5b:fc:14:7e:6b: 39:e3:5f:d1 -----BEGIN CERTIFICATE----- MIIFdTCCBF2gAwIBAgIDAOWfMA0GCSqGSIb3DQEBCwUAMEoxFTATBgNVBAMTDEE5 MTYyRTNEMDAwMDExMC8GA1UEBRMoMDQxNjI5QjZBOUVBQjdDQjEzMjRFQTM5NzhG MDM3OTZGODg5QjU0MDAeFw0yNTEyMTcwNDQwNDJaFw0yNjEyMTcwNDE4MzdaMDMx MTAvBgNVBAMTKDlDM0Y2NzgyRDRBMDhDMDM0Njg5NUIwQjI0N0M1QzU0MTdFOThF MEIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjs7E46DbfXuJRaSfC Q1ffeJ4rSmifr86QS9lpfCxc6mcNlssqhiA+XCB2/QQAQMdouX4kw8ce+FUuqBJo Fo3dUA2wn7gJr4G3jxmImhknBVxBU4GV254rk0gKZMSiP78Dy1tYJP8nz0SdQCPD Wtk6q4Ee8TRsxhTA0Scyi05JJdC/iTY+T4xziuAq7T0iJjOyDtiAS2+0IcmBSSoa cvYim8QBPak3hHIBSZjw/ZLBN8dcFR8FQZhWdUn0FXTRX0+NXGm91LZMLfi4hQq8 ssCHP0nP7U/3BZ2v0A+D08VvO5AxdiQqebHozOrQ5QWbxQe2VQ0Em5nUiGoWFDrd 6inFAgMBAAGjggJ5MIICdTAdBgNVHQ4EFgQUnD9ngtSgjANGiVsLJHxcVBfpjgsw HwYDVR0jBBgwFoAUBBYptqnqt8sTJOo5ePA3lviJtUAwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjBYBgNVHR8EUTBPME2gS6BJhkdyc3luYzovL3Jwa2kuY25uaWMu Y24vcnBraS9BOTE2MkUzRDAwMDAvQkJZcHRxbnF0OHNUSk9vNWVQQTNsdmlKdFVB LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZE MUZGMi9CQllwdHFucXQ4c1RKT281ZVBBM2x2aUp0VUEuY2VyMA8GA1UdEwEB/wQF MAMBAf8wDgYDVR0PAQH/BAQDAgEGMIHYBggrBgEFBQcBCwSByzCByDA5BggrBgEF BQcwBYYtcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzM0 MTkvMFgGCCsGAQUFBzAKhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2 MkUzRDAwMDAvMzQxOS9uRDluZ3RTZ2pBTkdpVnNMSkh4Y1ZCZnBqZ3MubWZ0MDEG CCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMuY24vcnJkcC9ub3RpZnkueG1s MCEGCCsGAQUFBwEIAQH/BBIwEKAOMAwCAiZLAgJGKwICXSkwIAYIKwYBBQUHAQcB Af8EETAPMA0EAgACMAcDBQAkArIAMA0GCSqGSIb3DQEBCwUAA4IBAQB7y6X+LkLy PpCbtoKy5AwKaxTPfNTbFRivzGZhJwUc4Nokf6IrTou/DNDG6m2WfmT48ZG2cvXd 1XWcntUy6RBFflExF4YNqM5rruPOUh9D67sfLGL1J1vv9xHIabSIF7eOV9mTgWEX ZJV/Dnxf3mviClISeUcgKjYWbNIZ7nRDfr02NK8KO1VXBavjuO++zNezsguJxdXg 5tOIJ+7zRsvZGS79+jxssCXpTOd32qy6ZyGWoVYsUKSPTB5wA3o5gYt5Za7HWRPp iKITtmrxAR11YvZurWTJWgu9tIBdWYul4jhoJWqYVIIf5hPk7KSn1Amr/n0/jf2n W/wUfms541/R -----END CERTIFICATE-----Generated at Sun Dec 21 16:41:46 2025 by rpki-client