This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1FFF263C64163BC58514B539C10375CCB553D75E.cer File: 1FFF263C64163BC58514B539C10375CCB553D75E.cer (raw, json) Hash identifier: j0KW5pgXMeF7s6s0PdQrkTsux+Mk3VG+mcOmnQx0T+E= Subject key identifier: 1F:FF:26:3C:64:16:3B:C5:85:14:B5:39:C1:03:75:CC:B5:53:D7:5E Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Certificate serial: 29B18A38E2DA16DF87305804F80FA5F1CC52C775 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1065579534394327043/0/1FFF263C64163BC58514B539C10375CCB553D75E.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1065579534394327043/0/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Mon 19 Jan 2026 10:27:39 +0000 Certificate not after: Mon 18 Jan 2027 10:32:39 +0000 Subordinate resources: AS: 59083 IP: 43.254.152.0/22 IP: 45.252.8.0 -- 45.252.51.255 IP: 45.252.84.0/22 IP: 45.252.100.0/22 IP: 45.252.132.0 -- 45.252.139.255 IP: 45.252.144.0/22 IP: 59.153.168.0 -- 59.153.195.255 IP: 103.5.192.0/22 IP: 103.6.108.0/22 IP: 103.6.228.0/22 IP: 103.10.0.0/22 IP: 103.24.116.0/22 IP: 103.198.216.0 -- 103.198.247.255 IP: 103.220.248.0 -- 103.221.51.255 IP: 103.221.92.0/22 IP: 150.242.236.0/22 IP: 202.57.216.0/22 IP: 202.58.112.0/22 IP: 202.89.96.0/22 IP: 202.89.108.0/22 IP: 202.136.248.0/22 IP: 202.174.124.0/22 IP: 2403:1b80::/32 IP: 2406:1e80::/32 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 Jan 2026 02:23:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:b1:8a:38:e2:da:16:df:87:30:58:04:f8:0f:a5:f1:cc:52:c7:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Validity Not Before: Jan 19 10:27:39 2026 GMT Not After : Jan 18 10:32:39 2027 GMT Subject: CN=1FFF263C64163BC58514B539C10375CCB553D75E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:9f:e6:70:4d:42:9d:89:5c:ef:e7:cf:d2:c9: d0:98:e2:ac:72:63:b3:86:82:f1:d7:91:dd:37:16: c3:25:9b:4c:0c:bf:69:02:67:89:2b:78:ca:e5:77: 2f:60:9b:f7:ee:94:d9:58:9b:ea:cd:35:db:a1:d7: bb:69:d2:48:e8:3d:9b:dd:aa:19:44:ea:6f:a0:6e: 60:c1:e1:47:22:bc:c5:4a:8f:18:84:0a:eb:18:3f: ef:4e:f1:8e:92:15:75:bb:0f:12:d7:b2:37:ac:69: b4:10:62:b9:3b:1c:1e:ac:9d:56:aa:3d:04:bb:2b: 62:00:d7:ae:09:67:b3:7f:87:b1:17:b3:f6:85:c5: 2a:a2:3e:81:6d:a3:94:26:94:6b:3e:62:3a:46:18: d0:d2:78:0f:ed:fb:33:7f:eb:f9:7d:23:8d:c8:db: 05:96:54:c0:38:9f:19:7e:5e:63:c9:8e:b7:bb:2f: fc:86:a0:80:19:ff:43:04:a1:cb:a8:fc:a8:6f:23: d4:5b:cc:62:8d:0f:b5:85:dc:e6:c5:4f:5a:34:8a: fd:4e:1b:db:a9:8f:1c:f2:35:22:36:3d:ac:c8:c3: 29:25:11:8c:b3:c4:16:5f:49:37:22:4c:55:17:7a: d6:06:94:ec:08:85:a2:e5:3f:e8:80:76:be:b1:5b: d7:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 1F:FF:26:3C:64:16:3B:C5:85:14:B5:39:C1:03:75:CC:B5:53:D7:5E X509v3 Authority Key Identifier: keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394327043/0/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394327043/0/1FFF263C64163BC58514B539C10375CCB553D75E.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.254.152.0/22 45.252.8.0-45.252.51.255 45.252.84.0/22 45.252.100.0/22 45.252.132.0-45.252.139.255 45.252.144.0/22 59.153.168.0-59.153.195.255 103.5.192.0/22 103.6.108.0/22 103.6.228.0/22 103.10.0.0/22 103.24.116.0/22 103.198.216.0-103.198.247.255 103.220.248.0-103.221.51.255 103.221.92.0/22 150.242.236.0/22 202.57.216.0/22 202.58.112.0/22 202.89.96.0/22 202.89.108.0/22 202.136.248.0/22 202.174.124.0/22 IPv6: 2403:1b80::/32 2406:1e80::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 59083 Signature Algorithm: sha256WithRSAEncryption 87:18:d3:2b:f7:6d:28:a3:f8:50:64:76:8f:d7:16:a4:50:d2: 4f:6e:e2:d4:5a:a1:11:c7:7a:4f:d4:07:ba:c5:48:ac:27:68: 87:63:0e:c7:da:16:e0:d5:1a:4c:1d:49:c3:b3:ad:82:f2:6e: 96:92:ac:80:00:73:a5:ea:b0:fa:f6:53:0b:1e:a6:06:9c:30: 43:9c:63:e7:5c:e4:1e:c7:4d:c8:9e:0a:00:9a:c0:e5:a2:f3: 66:57:7c:ab:10:31:4c:09:50:37:26:52:4e:8e:d0:cf:d3:78: 03:96:0b:6c:1a:d4:f7:fd:51:b2:8b:d9:d5:4a:9d:38:ce:46: 47:2a:0a:05:af:8f:54:d3:c6:22:a4:b1:84:5d:69:d0:08:43: 30:e1:1b:20:ac:f4:d6:a1:d2:dc:71:a8:72:c8:4a:ec:7a:c7: 95:ba:f0:24:6f:29:c3:63:01:8c:14:4e:90:4f:ae:c2:3f:53: e3:20:ac:73:e3:af:8c:71:d5:45:76:ac:06:71:78:85:b7:fd: db:04:27:c0:fd:03:34:ba:9c:a1:b0:e4:59:76:a3:98:cb:f1: 61:20:8b:25:9c:a5:ec:1b:0e:0f:f9:80:3d:0c:9a:33:a5:1a: 0d:98:d9:4f:e1:6f:a0:da:e3:50:23:c3:54:68:2e:42:bb:9c: be:e9:dd:8e -----BEGIN CERTIFICATE----- MIIGhDCCBWygAwIBAgIUKbGKOOLaFt+HMFgE+A+l8cxSx3UwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDExOTEwMjczOVoX DTI3MDExODEwMzIzOVowMzExMC8GA1UEAxMoMUZGRjI2M0M2NDE2M0JDNTg1MTRC NTM5QzEwMzc1Q0NCNTUzRDc1RTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJ+f5nBNQp2JXO/nz9LJ0JjirHJjs4aC8deR3TcWwyWbTAy/aQJniSt4yuV3 L2Cb9+6U2Vib6s0126HXu2nSSOg9m92qGUTqb6BuYMHhRyK8xUqPGIQK6xg/707x jpIVdbsPEteyN6xptBBiuTscHqydVqo9BLsrYgDXrglns3+HsRez9oXFKqI+gW2j lCaUaz5iOkYY0NJ4D+37M3/r+X0jjcjbBZZUwDifGX5eY8mOt7sv/IaggBn/QwSh y6j8qG8j1FvMYo0PtYXc5sVPWjSK/U4b26mPHPI1IjY9rMjDKSURjLPEFl9JNyJM VRd61gaU7AiFouU/6IB2vrFb1yMCAwEAAaOCA3cwggNzMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFB//JjxkFjvFhRS1OcEDdcy1U9deMB8GA1UdIwQYMBaAFKVu hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTA2NTU3OTUzNDM5NDMyNzA0My8wLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDY1NTc5NTM0Mzk0MzI3MDQz LzAvMUZGRjI2M0M2NDE2M0JDNTg1MTRCNTM5QzEwMzc1Q0NCNTUzRDc1RS5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwgd8GCCsGAQUF BwEHAQH/BIHPMIHMMIGzBAIAATCBrAMEAiv+mDAMAwQDLfwIAwQCLfwwAwQCLfxU AwQCLfxkMAwDBAIt/IQDBAIt/IgDBAIt/JAwDAMEAzuZqAMEAjuZwAMEAmcFwAME AmcGbAMEAmcG5AMEAmcKAAMEAmcYdDAMAwQDZ8bYAwQDZ8bwMAwDBANn3PgDBAJn 3TADBAJn3VwDBAKW8uwDBALKOdgDBALKOnADBALKWWADBALKWWwDBALKiPgDBALK rnwwFAQCAAIwDgMFACQDG4ADBQAkBh6AMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwDmyzANBgkqhkiG9w0BAQsFAAOCAQEAhxjTK/dtKKP4UGR2j9cWpFDST27i1Fqh Ecd6T9QHusVIrCdoh2MOx9oW4NUaTB1Jw7OtgvJulpKsgABzpeqw+vZTCx6mBpww Q5xj51zkHsdNyJ4KAJrA5aLzZld8qxAxTAlQNyZSTo7Qz9N4A5YLbBrU9/1RsovZ 1UqdOM5GRyoKBa+PVNPGIqSxhF1p0AhDMOEbIKz01qHS3HGocshK7HrHlbrwJG8p w2MBjBROkE+uwj9T4yCsc+OvjHHVRXasBnF4hbf92wQnwP0DNLqcobDkWXajmMvx YSCLJZyl7BsOD/mAPQyaM6UaDZjZT+FvoNrjUCPDVGguQrucvundjg== -----END CERTIFICATE-----Generated at Wed Jan 21 11:11:20 2026 by rpki-client