This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B3CAFB59F10B03AD2106E8215DBB903F157D0C8E.cer File: B3CAFB59F10B03AD2106E8215DBB903F157D0C8E.cer (raw, json) Hash identifier: Uz+DuQbRhWhXET9xMffZOV4ISTjAFJtBs2HjQNLM85o= Subject key identifier: B3:CA:FB:59:F1:0B:03:AD:21:06:E8:21:5D:BB:90:3F:15:7D:0C:8E Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Certificate serial: 72B1BE105EAD6CE96D0EE639BD46536D6686186F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1065887644090630145/0/B3CAFB59F10B03AD2106E8215DBB903F157D0C8E.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1065887644090630145/0/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Tue 20 Jan 2026 06:52:00 +0000 Certificate not after: Tue 19 Jan 2027 06:57:00 +0000 Subordinate resources: AS: 45096 AS: 45108 IP: 39.96.0.0 -- 39.108.255.255 IP: 42.96.128.0/17 IP: 42.120.0.0/15 IP: 42.156.128.0/17 IP: 59.110.0.0/16 IP: 60.205.0.0/16 IP: 101.37.0.0/16 IP: 101.132.0.0/15 IP: 101.200.0.0/15 IP: 103.15.96.0/22 IP: 106.14.0.0/15 IP: 110.75.160.0/19 IP: 110.76.32.0/20 IP: 112.74.0.0/16 IP: 112.124.0.0/14 IP: 114.55.0.0/16 IP: 114.215.0.0/16 IP: 115.28.0.0/15 IP: 116.62.0.0/16 IP: 118.31.0.0/16 IP: 118.178.0.0/16 IP: 118.190.0.0/16 IP: 119.23.0.0/16 IP: 120.24.0.0/14 IP: 120.55.0.0/16 IP: 120.76.0.0/14 IP: 121.40.0.0/14 IP: 121.89.0.0/16 IP: 121.196.0.0/14 IP: 123.56.0.0/15 IP: 157.119.192.0/22 IP: 182.92.0.0/16 IP: 203.107.0.0/17 IP: 218.244.128.0/19 IP: 223.4.0.0/14 IP: 2400:3200::/32 IP: 2405:e000::/32 IP: 2406:2880::/32 IP: 2407:bc00::/32 IP: 2408:4000::/22 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 Jan 2026 02:23:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:b1:be:10:5e:ad:6c:e9:6d:0e:e6:39:bd:46:53:6d:66:86:18:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Validity Not Before: Jan 20 06:52:00 2026 GMT Not After : Jan 19 06:57:00 2027 GMT Subject: CN=B3CAFB59F10B03AD2106E8215DBB903F157D0C8E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:9e:6b:b6:a2:94:4d:de:25:a2:3d:6e:4b:e9: 1b:b7:99:44:6b:a6:b7:45:2e:5c:12:e7:b2:64:3d: 44:0c:78:0a:cd:df:80:b0:b9:be:7a:d5:20:d3:c6: 57:7e:4e:93:a2:33:4d:f7:2f:a8:bd:2d:a4:e0:74: 58:80:e9:a8:08:0a:4b:52:69:d0:20:d5:37:0b:f8: 74:a3:bd:c6:51:db:a2:0b:53:c5:1d:33:a0:c4:be: a4:35:1f:5b:45:0a:a9:d5:ae:26:e2:fa:85:6a:03: f6:36:54:77:ac:0e:d1:32:24:cf:3c:e8:0e:70:c6: b2:33:58:fc:a2:3d:58:da:a7:8c:c6:15:c6:b2:a9: 8d:93:ea:06:8c:ba:47:23:3e:97:e1:00:c9:ab:da: c9:d0:57:a1:15:1d:58:6a:73:8e:a8:33:97:3c:f8: 57:71:d4:4c:d8:e1:ce:8c:cf:d5:ca:77:cf:9b:1a: f6:a5:f7:35:87:06:fd:8b:79:ff:17:09:43:5e:fa: c0:ec:25:5c:f9:b5:c1:15:1f:10:2d:50:bd:34:42: b9:8a:fe:b9:b7:e1:60:2d:78:91:45:f2:9b:03:ae: 56:4c:94:cb:a8:c0:5c:53:18:ae:fd:02:d0:74:a7: 70:27:19:3c:57:ad:9a:bb:78:0b:e8:0e:5f:97:9b: db:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: B3:CA:FB:59:F1:0B:03:AD:21:06:E8:21:5D:BB:90:3F:15:7D:0C:8E X509v3 Authority Key Identifier: keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1065887644090630145/0/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1065887644090630145/0/B3CAFB59F10B03AD2106E8215DBB903F157D0C8E.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 39.96.0.0-39.108.255.255 42.96.128.0/17 42.120.0.0/15 42.156.128.0/17 59.110.0.0/16 60.205.0.0/16 101.37.0.0/16 101.132.0.0/15 101.200.0.0/15 103.15.96.0/22 106.14.0.0/15 110.75.160.0/19 110.76.32.0/20 112.74.0.0/16 112.124.0.0/14 114.55.0.0/16 114.215.0.0/16 115.28.0.0/15 116.62.0.0/16 118.31.0.0/16 118.178.0.0/16 118.190.0.0/16 119.23.0.0/16 120.24.0.0/14 120.55.0.0/16 120.76.0.0/14 121.40.0.0/14 121.89.0.0/16 121.196.0.0/14 123.56.0.0/15 157.119.192.0/22 182.92.0.0/16 203.107.0.0/17 218.244.128.0/19 223.4.0.0/14 IPv6: 2400:3200::/32 2405:e000::/32 2406:2880::/32 2407:bc00::/32 2408:4000::/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 45096 45108 Signature Algorithm: sha256WithRSAEncryption 75:ea:f7:57:ab:84:9c:77:69:a0:54:08:ec:b8:8e:bd:c3:ea: 40:dd:67:e2:08:0e:3e:7b:14:30:6b:13:0f:a1:7e:6f:a7:5c: 94:ca:66:1b:9b:42:23:d2:35:44:dc:99:7d:da:78:47:97:60: df:f1:9a:a1:e2:c4:08:e4:26:56:be:54:2d:b5:91:f2:1d:5c: 87:aa:95:f7:de:4a:72:c4:60:c7:75:d4:b6:43:9f:7d:51:ef: fb:31:62:7f:a9:f1:08:3f:e4:80:77:bf:2f:97:16:d8:a6:4b: 6c:58:15:5e:03:d4:e3:31:63:73:95:bf:f5:f5:f2:2c:84:dc: 93:b3:bb:2c:ed:c3:df:ac:3c:03:f0:6e:89:71:39:4a:df:b5: ee:50:fc:5f:86:6a:fa:9e:ce:b2:e2:a5:46:57:60:d2:4b:b4: cf:d6:f3:fe:e1:bf:09:f8:aa:20:0d:98:66:2b:f1:11:6e:07: f7:31:d3:80:6e:9e:8c:d4:06:fd:82:f6:a7:0e:89:e1:20:21: f0:d4:56:ea:6f:a3:af:5b:8f:b7:2c:45:33:fa:ba:89:17:29: 89:d6:ca:ad:50:b9:34:f6:a3:cc:d8:ce:22:94:b6:eb:d6:36: ce:ef:3e:8c:a8:7f:47:8f:0e:f5:4f:20:4b:f9:bc:4a:d8:17: 9d:bc:73:82 -----BEGIN CERTIFICATE----- MIIGsDCCBZigAwIBAgIUcrG+EF6tbOltDuY5vUZTbWaGGG8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDEyMDA2NTIwMFoX DTI3MDExOTA2NTcwMFowMzExMC8GA1UEAxMoQjNDQUZCNTlGMTBCMDNBRDIxMDZF ODIxNURCQjkwM0YxNTdEMEM4RTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMCea7ailE3eJaI9bkvpG7eZRGumt0UuXBLnsmQ9RAx4Cs3fgLC5vnrVINPG V35Ok6IzTfcvqL0tpOB0WIDpqAgKS1Jp0CDVNwv4dKO9xlHbogtTxR0zoMS+pDUf W0UKqdWuJuL6hWoD9jZUd6wO0TIkzzzoDnDGsjNY/KI9WNqnjMYVxrKpjZPqBoy6 RyM+l+EAyavaydBXoRUdWGpzjqgzlzz4V3HUTNjhzozP1cp3z5sa9qX3NYcG/Yt5 /xcJQ176wOwlXPm1wRUfEC1QvTRCuYr+ubfhYC14kUXymwOuVkyUy6jAXFMYrv0C 0HSncCcZPFetmrt4C+gOX5eb20MCAwEAAaOCA6MwggOfMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFLPK+1nxCwOtIQboIV27kD8VfQyOMB8GA1UdIwQYMBaAFKVu hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTA2NTg4NzY0NDA5MDYzMDE0NS8wLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDY1ODg3NjQ0MDkwNjMwMTQ1 LzAvQjNDQUZCNTlGMTBCMDNBRDIxMDZFODIxNURCQjkwM0YxNTdEMEM4RS5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwggEFBggrBgEF BQcBBwEB/wSB9TCB8jCBxQQCAAEwgb4wCgMDBSdgAwMAJ2wDBAcqYIADAwEqeAME ByqcgAMDADtuAwMAPM0DAwBlJQMDAWWEAwMBZcgDBAJnD2ADAwFqDgMEBW5LoAME BG5MIAMDAHBKAwMCcHwDAwByNwMDAHLXAwMBcxwDAwB0PgMDAHYfAwMAdrIDAwB2 vgMDAHcXAwMCeBgDAwB4NwMDAnhMAwMCeSgDAwB5WQMDAnnEAwMBezgDBAKdd8AD AwC2XAMEB8trAAMEBdr0gAMDAt8EMCgEAgACMCIDBQAkADIAAwUAJAXgAAMFACQG KIADBQAkB7wAAwQCJAhAMB8GCCsGAQUFBwEIAQH/BBAwDqAMMAoCAwCwKAIDALA0 MA0GCSqGSIb3DQEBCwUAA4IBAQB16vdXq4Scd2mgVAjsuI69w+pA3WfiCA4+exQw axMPoX5vp1yUymYbm0Ij0jVE3Jl92nhHl2Df8Zqh4sQI5CZWvlQttZHyHVyHqpX3 3kpyxGDHddS2Q599Ue/7MWJ/qfEIP+SAd78vlxbYpktsWBVeA9TjMWNzlb/19fIs hNyTs7ss7cPfrDwD8G6JcTlK37XuUPxfhmr6ns6y4qVGV2DSS7TP1vP+4b8J+Kog DZhmK/ERbgf3MdOAbp6M1Ab9gvanDonhICHw1Fbqb6OvW4+3LEUz+rqJFymJ1sqt ULk09qPM2M4ilLbr1jbO7z6MqH9Hjw71TyBL+bxK2BedvHOC -----END CERTIFICATE-----Generated at Wed Jan 21 19:35:13 2026 by rpki-client