This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/tmBftHNNacJhmS-nrVH0xMQVa1Y.cer File: tmBftHNNacJhmS-nrVH0xMQVa1Y.cer (raw, json) Hash identifier: kqa15iRgikGa9TIFh2e8IkfHa9lxsLxSrlLU/OpBX/E= Subject key identifier: B6:60:5F:B4:73:4D:69:C2:61:99:2F:A7:AD:51:F4:C4:C4:15:6B:56 Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Certificate serial: E552 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3416/tmBftHNNacJhmS-nrVH0xMQVa1Y.mft caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3416/ Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml Certificate not before: Mon 08 Dec 2025 03:18:27 +0000 Certificate not after: Tue 08 Dec 2026 02:16:03 +0000 Subordinate resources: AS: 151235 IP: 2402:3de0::/32 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 17:40:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58706 (0xe552) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0000, serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Validity Not Before: Dec 8 03:18:27 2025 GMT Not After : Dec 8 02:16:03 2026 GMT Subject: CN=B6605FB4734D69C261992FA7AD51F4C4C4156B56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:4a:bf:66:82:97:14:eb:28:ee:9a:24:ae:18: d9:92:73:8f:65:d6:b4:2d:6b:c2:35:11:4d:e4:7d: b5:44:57:37:00:f6:7e:ac:e2:bf:d3:a7:f5:88:77: a8:c8:a5:97:3f:f0:45:2b:99:02:81:83:5d:f9:9b: 25:5a:03:dc:64:a9:ea:bc:a1:6a:43:63:30:a6:6c: d7:d9:bd:9c:93:50:e9:45:28:d0:f6:d9:b4:0d:b2: c6:0e:39:81:02:ec:80:19:85:00:9c:87:92:8c:4a: 6c:88:14:f4:33:4a:99:86:55:1c:fc:2a:7b:0f:05: 57:1c:e1:c8:61:97:18:44:02:ae:4d:e0:05:de:f7: bf:2e:91:f1:c6:2c:03:5b:13:a7:0b:3e:d1:a5:31: 74:c7:ac:d7:2e:2c:16:53:25:56:50:4d:36:b1:f9: 68:ad:7f:ac:f4:91:bd:f2:2a:b4:88:e5:70:e3:d6: fb:10:8c:8e:bd:d6:7d:b3:3d:55:9d:d3:59:13:84: 8c:83:e5:46:c4:cc:98:9e:1d:e0:8b:1e:7d:79:d2: e7:b1:6c:f2:5e:bb:11:8a:2e:73:72:6c:51:97:08: c0:09:d5:31:6d:7f:1e:dd:66:62:40:1b:1a:e5:1c: 51:30:9a:cd:89:7e:1c:99:b1:e5:92:f4:5c:b5:4f: ab:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:60:5F:B4:73:4D:69:C2:61:99:2F:A7:AD:51:F4:C4:C4:15:6B:56 X509v3 Authority Key Identifier: keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3416/ RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3416/tmBftHNNacJhmS-nrVH0xMQVa1Y.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 151235 sbgp-ipAddrBlock: critical IPv6: 2402:3de0::/32 Signature Algorithm: sha256WithRSAEncryption b7:1d:92:09:61:51:8d:2d:ef:ed:07:9e:57:28:a0:5a:3f:34: 46:00:2c:b0:68:aa:69:90:3e:7c:5f:7f:f7:6e:c3:db:35:a6: 9b:71:ec:a7:88:0b:21:6c:bd:5d:21:7e:8b:03:dd:0e:d3:be: fa:36:3f:fe:e7:ae:19:dd:91:c9:33:68:35:69:93:d8:4d:83: d7:fd:f5:2d:4e:d5:d2:89:67:29:7b:e2:83:db:7b:49:d1:91: 6d:cf:c2:5e:f5:0b:c2:5d:67:8f:61:1f:32:b8:0e:89:51:d2: 11:d8:9e:65:63:9e:9a:63:78:57:6a:fa:75:51:86:00:3a:bd: cf:f3:c7:56:d7:c0:e9:c0:34:57:2a:56:5b:e2:ed:a8:6f:00: 3c:f2:d6:fa:3b:61:da:04:ab:4d:e5:ea:e4:76:05:49:2f:fb: 52:f0:94:11:c1:11:98:e8:12:8b:29:89:db:d2:cf:29:ec:2f: 67:51:45:0c:d0:c1:de:6b:16:2c:8f:41:90:b4:c2:3f:da:17: 99:98:99:c2:10:30:19:b5:d1:1c:c7:d7:69:43:70:ef:77:fb: d2:65:58:36:d4:1c:0d:4d:54:c1:74:f6:1a:b7:69:24:49:74: 67:49:c9:f6:79:9d:25:78:f2:05:0d:13:38:8a:6a:9b:45:1a: c8:09:54:17 -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIDAOVSMA0GCSqGSIb3DQEBCwUAMEoxFTATBgNVBAMTDEE5 MTYyRTNEMDAwMDExMC8GA1UEBRMoMDQxNjI5QjZBOUVBQjdDQjEzMjRFQTM5NzhG MDM3OTZGODg5QjU0MDAeFw0yNTEyMDgwMzE4MjdaFw0yNjEyMDgwMjE2MDNaMDMx MTAvBgNVBAMTKEI2NjA1RkI0NzM0RDY5QzI2MTk5MkZBN0FENTFGNEM0QzQxNTZC NTYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDqSr9mgpcU6yjumiSu GNmSc49l1rQta8I1EU3kfbVEVzcA9n6s4r/Tp/WId6jIpZc/8EUrmQKBg135myVa A9xkqeq8oWpDYzCmbNfZvZyTUOlFKND22bQNssYOOYEC7IAZhQCch5KMSmyIFPQz SpmGVRz8KnsPBVcc4chhlxhEAq5N4AXe978ukfHGLANbE6cLPtGlMXTHrNcuLBZT JVZQTTax+Witf6z0kb3yKrSI5XDj1vsQjI691n2zPVWd01kThIyD5UbEzJieHeCL Hn150uexbPJeuxGKLnNybFGXCMAJ1TFtfx7dZmJAGxrlHFEwms2JfhyZseWS9Fy1 T6sfAgMBAAGjggJyMIICbjAdBgNVHQ4EFgQUtmBftHNNacJhmS+nrVH0xMQVa1Yw HwYDVR0jBBgwFoAUBBYptqnqt8sTJOo5ePA3lviJtUAwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjBYBgNVHR8EUTBPME2gS6BJhkdyc3luYzovL3Jwa2kuY25uaWMu Y24vcnBraS9BOTE2MkUzRDAwMDAvQkJZcHRxbnF0OHNUSk9vNWVQQTNsdmlKdFVB LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZE MUZGMi9CQllwdHFucXQ4c1RKT281ZVBBM2x2aUp0VUEuY2VyMA8GA1UdEwEB/wQF MAMBAf8wDgYDVR0PAQH/BAQDAgEGMIHYBggrBgEFBQcBCwSByzCByDA5BggrBgEF BQcwBYYtcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzM0 MTYvMFgGCCsGAQUFBzAKhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2 MkUzRDAwMDAvMzQxNi90bUJmdEhOTmFjSmhtUy1uclZIMHhNUVZhMVkubWZ0MDEG CCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMuY24vcnJkcC9ub3RpZnkueG1s MBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwJOwzAgBggrBgEFBQcBBwEB/wQRMA8w DQQCAAIwBwMFACQCPeAwDQYJKoZIhvcNAQELBQADggEBALcdkglhUY0t7+0Hnlco oFo/NEYALLBoqmmQPnxff/duw9s1pptx7KeICyFsvV0hfosD3Q7Tvvo2P/7nrhnd kckzaDVpk9hNg9f99S1O1dKJZyl74oPbe0nRkW3Pwl71C8JdZ49hHzK4DolR0hHY nmVjnppjeFdq+nVRhgA6vc/zx1bXwOnANFcqVlvi7ahvADzy1vo7YdoEq03l6uR2 BUkv+1LwlBHBEZjoEospidvSzynsL2dRRQzQwd5rFiyPQZC0wj/aF5mYmcIQMBm1 0RzH12lDcO93+9JlWDbUHA1NVMF09hq3aSRJdGdJyfZ5nSV48gUNEziKaptFGsgJ VBc= -----END CERTIFICATE-----Generated at Sun Dec 21 16:41:46 2025 by rpki-client