This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B8C15036932176BBE4E7217ED5772ACA3DB00427.cer File: B8C15036932176BBE4E7217ED5772ACA3DB00427.cer (raw, json) Hash identifier: SHxoc4SS3hNaBSMhBGKzDHWs5bk8eNcmWVD6+z8+bTE= Subject key identifier: B8:C1:50:36:93:21:76:BB:E4:E7:21:7E:D5:77:2A:CA:3D:B0:04:27 Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Certificate serial: 417955A2E70C10DBA2F639F668EE8D2BC84963 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1065580055121690626/0/B8C15036932176BBE4E7217ED5772ACA3DB00427.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1065580055121690626/0/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Mon 19 Jan 2026 10:31:39 +0000 Certificate not after: Mon 18 Jan 2027 10:36:39 +0000 Subordinate resources: AS: 59015 IP: 43.224.240.0/22 IP: 43.247.100.0/22 IP: 103.43.240.0/22 IP: 103.234.128.0/22 IP: 119.38.224.0/19 IP: 2403:3d80::/32 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 24 Jan 2026 04:26:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:79:55:a2:e7:0c:10:db:a2:f6:39:f6:68:ee:8d:2b:c8:49:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Validity Not Before: Jan 19 10:31:39 2026 GMT Not After : Jan 18 10:36:39 2027 GMT Subject: CN=B8C15036932176BBE4E7217ED5772ACA3DB00427 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:13:81:bc:ee:4b:5f:13:8c:e4:ac:8f:0f:61: de:a4:01:1f:7e:15:b1:da:64:9c:7d:d2:4c:60:b2: 66:ec:08:db:4c:1c:74:83:9c:b9:5b:60:8a:c4:e7: 41:8c:8d:8f:51:1f:99:77:bd:39:9b:3a:7d:4e:95: 9c:47:a5:5c:81:60:2f:49:8c:10:aa:0f:ee:87:b5: 28:9f:80:0d:43:dc:93:a1:44:86:2f:d5:fb:35:dd: 28:5e:66:e7:1c:68:b1:ea:8c:b6:50:79:04:60:30: 60:0d:58:6e:e6:a4:ca:b6:5a:a6:13:1a:ac:a7:e3: d7:61:68:0d:d0:fe:c3:97:36:c1:a8:88:b0:55:63: 55:8d:20:cf:07:92:7a:a1:0e:3e:05:84:49:c8:06: 65:e0:21:9f:1f:e2:f5:0f:51:4a:10:7e:71:85:e0: 3e:20:35:e2:17:19:24:d7:56:75:c7:72:d9:22:4b: f6:b9:a2:cc:d7:64:55:33:53:f4:f0:bc:ea:df:79: 36:16:a1:e7:98:df:b6:12:01:17:d9:8b:06:f0:69: f2:01:f8:c9:7a:48:e7:81:a8:fc:9f:3e:4b:5e:55: 86:74:a9:50:7a:ab:95:9a:64:30:63:b8:ab:d9:9a: 5b:48:00:21:70:08:46:5d:49:79:f2:a5:f0:6d:48: cb:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: B8:C1:50:36:93:21:76:BB:E4:E7:21:7E:D5:77:2A:CA:3D:B0:04:27 X509v3 Authority Key Identifier: keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121690626/0/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121690626/0/B8C15036932176BBE4E7217ED5772ACA3DB00427.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.224.240.0/22 43.247.100.0/22 103.43.240.0/22 103.234.128.0/22 119.38.224.0/19 IPv6: 2403:3d80::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 59015 Signature Algorithm: sha256WithRSAEncryption 5a:09:f6:42:86:a7:65:06:f9:e8:38:c4:f6:13:39:1b:0e:b0: 9d:82:3d:07:ed:f8:19:0f:cf:49:7f:f3:a8:5f:48:db:1d:fd: 37:06:ef:21:f7:7a:b1:eb:c4:1d:91:b6:bd:b7:e6:79:65:d7: f7:35:4b:1e:29:29:88:fb:3a:30:a4:f4:f7:46:cc:c9:1d:c3: b4:e4:58:47:93:d0:c9:7d:dc:28:26:8c:54:46:fe:d0:29:ab: 64:ab:65:76:05:57:cc:30:95:47:f8:89:da:20:45:a3:f5:1d: 26:40:96:99:77:aa:db:f7:bc:e5:af:36:5a:49:7a:cb:05:2c: 16:50:56:d0:28:aa:76:e9:f8:5f:32:b9:67:d9:4e:20:78:c6: d5:9f:9f:28:7b:cc:84:20:65:16:3d:51:63:a5:74:77:56:ac: bb:80:97:58:86:99:43:28:71:4f:66:83:61:e5:ba:cb:e0:02: 6d:e4:ea:63:b7:b1:d1:5b:3d:cc:4c:72:91:a3:9b:e2:87:da: 82:a7:0a:4d:35:f8:d4:bd:55:0d:bd:1c:45:a8:84:42:49:0e: 3c:6a:79:7a:13:3f:a6:6d:d2:c5:82:83:8d:52:3f:ba:08:91: e5:35:84:28:14:09:39:af:67:b0:65:e1:6e:9b:a8:18:0b:de: c4:13:3c:66 -----BEGIN CERTIFICATE----- MIIF6TCCBNGgAwIBAgITQXlVoucMENui9jn2aO6NK8hJYzANBgkqhkiG9w0BAQsF ADBKMRUwEwYDVQQDDAxBOTE2MkUzRDAwMDExMTAvBgNVBAUTKEE1NkU4NzJBNDAz RTdCOUNFQjk0MzFBMDhGNTQwNDAxRDJGQkQ3MTAwHhcNMjYwMTE5MTAzMTM5WhcN MjcwMTE4MTAzNjM5WjAzMTEwLwYDVQQDEyhCOEMxNTAzNjkzMjE3NkJCRTRFNzIx N0VENTc3MkFDQTNEQjAwNDI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsBOBvO5LXxOM5KyPD2HepAEffhWx2mScfdJMYLJm7AjbTBx0g5y5W2CKxOdB jI2PUR+Zd705mzp9TpWcR6VcgWAvSYwQqg/uh7Uon4ANQ9yToUSGL9X7Nd0oXmbn HGix6oy2UHkEYDBgDVhu5qTKtlqmExqsp+PXYWgN0P7DlzbBqIiwVWNVjSDPB5J6 oQ4+BYRJyAZl4CGfH+L1D1FKEH5xheA+IDXiFxkk11Z1x3LZIkv2uaLM12RVM1P0 8Lzq33k2FqHnmN+2EgEX2YsG8GnyAfjJekjngaj8nz5LXlWGdKlQequVmmQwY7ir 2ZpbSAAhcAhGXUl58qXwbUjL/QIDAQABo4IC3TCCAtkwDwYDVR0TAQH/BAUwAwEB /zAdBgNVHQ4EFgQUuMFQNpMhdrvk5yF+1Xcqyj2wBCcwHwYDVR0jBBgwFoAUpW6H KkA+e5zrlDGgj1QEAdL71xAwDgYDVR0PAQH/BAQDAgEGMHMGA1UdHwRsMGowaKBm oGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA1NTM5MDc3NTA5 MDY3NTcxNS8xL0E1NkU4NzJBNDAzRTdCOUNFQjk0MzFBMDhGNTQwNDAxRDJGQkQ3 MTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BXNkhLa0EtZTV6cmxER2dqMVFFQWRMNzF4QS5jZXIwggEBBggrBgEF BQcBCwSB9DCB8TBCBggrBgEFBQcwBYY2cnN5bmM6Ly9ycGtpLXJwcy5jbm5pYy5j bi9yZXBvL0ExMDY1NTgwMDU1MTIxNjkwNjI2LzAvMG4GCCsGAQUFBzAKhmJyc3lu YzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNjU1ODAwNTUxMjE2OTA2MjYv MC9COEMxNTAzNjkzMjE3NkJCRTRFNzIxN0VENTc3MkFDQTNEQjAwNDI3Lm1mdDA7 BggrBgEFBQcwDYYvaHR0cHM6Ly9ycmRwLXJwcy5jbm5pYy5jbi9ycmRwL25vdGlm aWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBGBggrBgEFBQcB BwEB/wQ3MDUwJAQCAAEwHgMEAivg8AMEAiv3ZAMEAmcr8AMEAmfqgAMEBXcm4DAN BAIAAjAHAwUAJAM9gDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMA5ocwDQYJKoZI hvcNAQELBQADggEBAFoJ9kKGp2UG+eg4xPYTORsOsJ2CPQft+BkPz0l/86hfSNsd /TcG7yH3erHrxB2Rtr235nll1/c1Sx4pKYj7OjCk9PdGzMkdw7TkWEeT0Ml93Cgm jFRG/tApq2SrZXYFV8wwlUf4idogRaP1HSZAlpl3qtv3vOWvNlpJessFLBZQVtAo qnbp+F8yuWfZTiB4xtWfnyh7zIQgZRY9UWOldHdWrLuAl1iGmUMocU9mg2Hlusvg Am3k6mO3sdFbPcxMcpGjm+KH2oKnCk01+NS9VQ29HEWohEJJDjxqeXoTP6Zt0sWC g41SP7oIkeU1hCgUCTmvZ7Bl4W6bqBgL3sQTPGY= -----END CERTIFICATE-----Generated at Fri Jan 23 15:20:10 2026 by rpki-client