This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D6805DB309057612CC9272CB2C85BA6CB0D389E5.cer File: D6805DB309057612CC9272CB2C85BA6CB0D389E5.cer (raw, json) Hash identifier: HZ39693/e7iPrFYweALpp/vlqYc/OU/Ub/gh9VO8ITc= Subject key identifier: D6:80:5D:B3:09:05:76:12:CC:92:72:CB:2C:85:BA:6C:B0:D3:89:E5 Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Certificate serial: 658D627E5B8FFC8961C6733545F21A49C2237122 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1068363599790997506/0/D6805DB309057612CC9272CB2C85BA6CB0D389E5.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1068363599790997506/0/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Tue 27 Jan 2026 02:50:33 +0000 Certificate not after: Tue 26 Jan 2027 02:55:33 +0000 Subordinate resources: AS: 131486 AS: 137753 IP: 1.118.0.0/16 IP: 43.241.112.0/22 IP: 101.124.0.0/16 IP: 103.37.72.0/22 IP: 103.224.220.0/22 IP: 111.228.0.0/16 IP: 114.67.64.0 -- 114.67.255.255 IP: 116.196.64.0/18 IP: 116.198.0.0/16 IP: 117.72.0.0/16 IP: 122.12.0.0/16 IP: 123.62.0.0/16 IP: 124.69.0.0/16 IP: 2402:db40::/32 IP: 2403:1ec0::/32 IP: 240f:c000::/24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 16 Feb 2026 16:55:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:8d:62:7e:5b:8f:fc:89:61:c6:73:35:45:f2:1a:49:c2:23:71:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Validity Not Before: Jan 27 02:50:33 2026 GMT Not After : Jan 26 02:55:33 2027 GMT Subject: CN=D6805DB309057612CC9272CB2C85BA6CB0D389E5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:0e:1a:a6:18:ea:29:d4:6c:62:b1:ba:ec:f9: b1:21:4e:3f:45:2a:9f:77:34:a3:26:13:7a:90:f6: 38:78:1c:a5:79:d4:47:f4:70:de:b6:c5:75:92:b6: c2:a2:ed:ce:92:85:31:f7:6e:ae:96:dd:06:8e:a6: 62:97:70:bb:3b:d4:89:ec:82:e1:ac:80:fa:6b:29: 93:40:56:d6:af:2a:c8:8c:2e:b1:11:47:9b:d1:9a: bf:6a:cf:26:5e:48:e8:c2:a0:bd:13:2e:c1:77:5b: d1:54:1d:f5:a1:bb:c0:9e:fd:00:5f:49:aa:53:55: ba:90:19:10:2c:16:db:71:ec:6d:ef:f0:b7:f4:00: 74:b9:41:fb:72:11:b6:f5:90:6f:f9:03:a6:27:26: cd:3a:4e:8a:e6:7c:dc:b0:64:91:9a:40:36:b6:f7: eb:b7:93:66:09:92:02:61:e9:f9:f6:bf:07:05:55: d4:ba:64:ed:a3:bd:4c:07:2d:a8:4f:d3:94:26:6a: 98:01:b4:84:73:e9:60:47:7e:95:50:6a:8d:1f:97: be:1f:47:19:f4:2f:b3:ab:38:e0:1d:d0:f6:6f:ba: d6:c7:62:22:90:a6:76:3b:75:de:bf:e0:46:02:d1: 76:5e:7b:08:2d:a5:94:3b:cf:6c:db:8f:eb:19:49: 1a:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: D6:80:5D:B3:09:05:76:12:CC:92:72:CB:2C:85:BA:6C:B0:D3:89:E5 X509v3 Authority Key Identifier: keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1068363599790997506/0/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1068363599790997506/0/D6805DB309057612CC9272CB2C85BA6CB0D389E5.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 1.118.0.0/16 43.241.112.0/22 101.124.0.0/16 103.37.72.0/22 103.224.220.0/22 111.228.0.0/16 114.67.64.0-114.67.255.255 116.196.64.0/18 116.198.0.0/16 117.72.0.0/16 122.12.0.0/16 123.62.0.0/16 124.69.0.0/16 IPv6: 2402:db40::/32 2403:1ec0::/32 240f:c000::/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 131486 137753 Signature Algorithm: sha256WithRSAEncryption 09:de:00:7e:52:4f:c4:54:71:96:0b:c3:8e:3b:94:7b:bb:7e: 87:68:9d:d1:7e:4b:1d:0c:cb:e9:f8:ef:78:fe:fe:2f:76:ae: 83:f1:e1:a9:cc:5e:f9:ce:04:22:c0:72:a0:05:0b:0f:b2:ec: 77:8c:c6:a6:84:2f:b2:1a:e9:7e:93:51:39:8c:0f:33:4d:eb: 5a:98:84:eb:3c:79:64:44:20:f9:34:a8:ff:8a:41:da:8e:c1: d8:fd:0f:05:ee:af:dc:9d:80:8d:fa:c4:b4:23:2f:2f:8f:39: e8:af:7b:9e:16:02:20:72:43:f3:f9:52:cb:15:b4:eb:d6:48: b5:87:60:2a:26:d1:ce:22:0c:59:ff:3e:a5:59:21:54:e1:3a: 74:83:2a:d4:42:eb:8a:61:ac:ca:38:a6:09:9d:23:19:0e:3f: 53:33:06:20:55:f0:18:fc:2e:d1:18:86:97:60:c2:b8:15:2f: 38:8f:b8:24:d6:b7:eb:f5:12:d9:28:5f:d3:e4:b7:1d:50:10: 4d:6e:b3:20:2c:24:d9:96:46:28:c9:88:b5:3a:80:84:04:45: eb:e5:c7:27:7a:76:67:48:52:e7:2f:07:58:89:48:5e:49:38: 85:6d:48:50:54:19:f7:5a:ea:00:8e:d7:fc:49:4f:44:02:fc: f3:a7:f4:83 -----BEGIN CERTIFICATE----- MIIGLDCCBRSgAwIBAgIUZY1ifluP/IlhxnM1RfIaScIjcSIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDEyNzAyNTAzM1oX DTI3MDEyNjAyNTUzM1owMzExMC8GA1UEAxMoRDY4MDVEQjMwOTA1NzYxMkNDOTI3 MkNCMkM4NUJBNkNCMEQzODlFNTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAM4OGqYY6inUbGKxuuz5sSFOP0Uqn3c0oyYTepD2OHgcpXnUR/Rw3rbFdZK2 wqLtzpKFMfdurpbdBo6mYpdwuzvUieyC4ayA+mspk0BW1q8qyIwusRFHm9Gav2rP Jl5I6MKgvRMuwXdb0VQd9aG7wJ79AF9JqlNVupAZECwW23Hsbe/wt/QAdLlB+3IR tvWQb/kDpicmzTpOiuZ83LBkkZpANrb367eTZgmSAmHp+fa/BwVV1Lpk7aO9TAct qE/TlCZqmAG0hHPpYEd+lVBqjR+Xvh9HGfQvs6s44B3Q9m+61sdiIpCmdjt13r/g RgLRdl57CC2llDvPbNuP6xlJGj8CAwEAAaOCAx8wggMbMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFNaAXbMJBXYSzJJyyyyFumyw04nlMB8GA1UdIwQYMBaAFKVu hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTA2ODM2MzU5OTc5MDk5NzUwNi8wLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDY4MzYzNTk5NzkwOTk3NTA2 LzAvRDY4MDVEQjMwOTA1NzYxMkNDOTI3MkNCMkM4NUJBNkNCMEQzODlFNS5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwgYIGCCsGAQUF BwEHAQH/BHMwcTBTBAIAATBNAwMAAXYDBAIr8XADAwBlfAMEAmclSAMEAmfg3AMD AG/kMAsDBAZyQ0ADAwJyQAMEBnTEQAMDAHTGAwMAdUgDAwB6DAMDAHs+AwMAfEUw GgQCAAIwFAMFACQC20ADBQAkAx7AAwQAJA/AMB8GCCsGAQUFBwEIAQH/BBAwDqAM MAoCAwIBngIDAhoZMA0GCSqGSIb3DQEBCwUAA4IBAQAJ3gB+Uk/EVHGWC8OOO5R7 u36HaJ3RfksdDMvp+O94/v4vdq6D8eGpzF75zgQiwHKgBQsPsux3jMamhC+yGul+ k1E5jA8zTetamITrPHlkRCD5NKj/ikHajsHY/Q8F7q/cnYCN+sS0Iy8vjznor3ue FgIgckPz+VLLFbTr1ki1h2AqJtHOIgxZ/z6lWSFU4Tp0gyrUQuuKYazKOKYJnSMZ Dj9TMwYgVfAY/C7RGIaXYMK4FS84j7gk1rfr9RLZKF/T5LcdUBBNbrMgLCTZlkYo yYi1OoCEBEXr5ccnenZnSFLnLwdYiUheSTiFbUhQVBn3WuoAjtf8SU9EAvzzp/SD -----END CERTIFICATE-----Generated at Mon Feb 16 08:05:57 2026 by rpki-client