This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D55490FB885552307A1D271E02513B4D423A90AE.cer File: D55490FB885552307A1D271E02513B4D423A90AE.cer (raw, json) Hash identifier: 7e15V04A7CQ0cjHvJCFNqzMnWWW50km0r89VvMmtFhM= Subject key identifier: D5:54:90:FB:88:55:52:30:7A:1D:27:1E:02:51:3B:4D:42:3A:90:AE Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Certificate serial: 772499E1A8A1762AAE7E28E1DB7CF80799423B70 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1065576723371982850/0/D55490FB885552307A1D271E02513B4D423A90AE.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1065576723371982850/0/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Mon 19 Jan 2026 10:21:38 +0000 Certificate not after: Mon 18 Jan 2027 10:26:38 +0000 Subordinate resources: AS: 17442 IP: 43.243.232.0/22 IP: 45.250.12.0 -- 45.250.19.255 IP: 45.250.76.0 -- 45.250.99.255 IP: 45.250.104.0 -- 45.250.151.255 IP: 61.29.128.0/18 IP: 103.75.144.0/22 IP: 103.218.8.0 -- 103.218.23.255 IP: 103.218.28.0 -- 103.218.91.255 IP: 103.254.188.0/22 IP: 121.201.128.0/17 IP: 123.103.0.0 -- 123.103.23.255 IP: 123.103.28.0 -- 123.103.127.255 IP: 125.171.0.0/16 IP: 203.130.34.0 -- 203.130.63.255 IP: 203.212.0.0/20 IP: 210.185.192.0/18 IP: 210.192.96.0/19 IP: 211.156.176.0/20 IP: 220.242.0.0 -- 220.243.137.255 IP: 220.243.139.0 -- 220.243.255.255 IP: 2400:7680::/32 IP: 2406:cd80::/32 IP: 2406:ce80::/32 IP: 2406:cf80::/32 IP: 2406:d080::/32 IP: 2406:d180::/32 IP: 2406:d280::/32 IP: 2406:d380::/32 IP: 2406:d480::/32 IP: 2406:d580::/32 IP: 2406:d680::/32 IP: 2406:d780::/32 IP: 2406:d880::/32 IP: 2406:d980::/32 IP: 2406:db80::/32 IP: 2406:dc80::/32 IP: 2406:de80::/32 IP: 2406:df80::/32 IP: 2406:e080::/32 IP: 2406:e180::/32 IP: 2406:e380::/32 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 Jan 2026 07:51:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:24:99:e1:a8:a1:76:2a:ae:7e:28:e1:db:7c:f8:07:99:42:3b:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Validity Not Before: Jan 19 10:21:38 2026 GMT Not After : Jan 18 10:26:38 2027 GMT Subject: CN=D55490FB885552307A1D271E02513B4D423A90AE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:2b:fc:85:08:cb:99:0b:32:3d:62:d7:34:d6: 1f:96:e2:f8:cd:28:b9:1f:43:34:a1:c0:c4:45:88: c9:99:2b:71:91:b6:1e:9d:24:fa:20:73:fe:be:b6: 2a:a3:5a:5a:61:e2:52:a0:70:ab:e1:37:87:1d:75: d1:60:74:fb:dc:ba:73:5a:4e:cf:5e:5a:4d:61:f3: 3c:4b:88:36:5d:10:f2:d4:f0:ee:2c:ca:30:b0:19: 51:0c:79:49:a6:61:e6:0f:51:7b:b9:10:23:19:59: e0:e6:36:95:a5:1c:df:48:f9:b7:ca:00:57:bb:23: 17:e6:db:fc:7f:91:cd:17:d2:b8:ad:f2:6e:21:fe: e9:55:59:c2:c3:25:da:e9:87:33:1d:5c:00:a9:8e: 3c:23:5d:09:45:7d:b1:2a:72:bd:3a:c2:b5:8f:2f: f9:44:c0:5c:c2:3f:78:fb:6b:ee:ce:9c:06:7e:8f: 98:f4:ce:1d:6e:69:c1:d5:a0:68:56:5d:24:05:e7: 7a:7e:6d:90:f7:d8:f8:5e:ee:be:80:f4:04:b9:9f: d8:eb:39:05:16:d2:13:b0:a1:43:ff:13:14:cf:df: e8:f4:d6:7b:78:95:de:a3:91:10:05:e3:17:85:10: 5c:95:01:ff:de:3c:38:9c:36:20:7b:f0:c3:32:b6: e3:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: D5:54:90:FB:88:55:52:30:7A:1D:27:1E:02:51:3B:4D:42:3A:90:AE X509v3 Authority Key Identifier: keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723371982850/0/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723371982850/0/D55490FB885552307A1D271E02513B4D423A90AE.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.243.232.0/22 45.250.12.0-45.250.19.255 45.250.76.0-45.250.99.255 45.250.104.0-45.250.151.255 61.29.128.0/18 103.75.144.0/22 103.218.8.0-103.218.23.255 103.218.28.0-103.218.91.255 103.254.188.0/22 121.201.128.0/17 123.103.0.0-123.103.23.255 123.103.28.0-123.103.127.255 125.171.0.0/16 203.130.34.0-203.130.63.255 203.212.0.0/20 210.185.192.0/18 210.192.96.0/19 211.156.176.0/20 220.242.0.0-220.243.137.255 220.243.139.0-220.243.255.255 IPv6: 2400:7680::/32 2406:cd80::/32 2406:ce80::/32 2406:cf80::/32 2406:d080::/32 2406:d180::/32 2406:d280::/32 2406:d380::/32 2406:d480::/32 2406:d580::/32 2406:d680::/32 2406:d780::/32 2406:d880::/32 2406:d980::/32 2406:db80::/32 2406:dc80::/32 2406:de80::/32 2406:df80::/32 2406:e080::/32 2406:e180::/32 2406:e380::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 17442 Signature Algorithm: sha256WithRSAEncryption 88:65:3b:b9:69:72:b5:db:3d:9b:cc:11:7e:96:1f:64:92:81: 7e:7c:72:fb:c1:07:3a:7c:18:4e:07:c7:64:eb:01:e6:5a:b6: 8a:e5:3f:c2:a8:2c:f2:95:e7:32:33:3e:3f:cb:df:a2:b3:4d: a5:62:fe:51:6d:8c:66:ab:4a:4a:e7:14:c0:94:4a:aa:b3:cb: 28:10:f1:10:b2:e1:32:f2:a8:ed:f8:bc:8a:63:fc:ba:aa:90: bd:b1:0e:54:d3:0e:a0:08:e3:6b:51:c8:12:cf:e3:64:b0:3a: 3f:9a:15:a2:45:8a:04:ec:99:a4:7d:9b:78:9f:90:4d:1f:91: f9:51:c1:e4:ce:0e:7b:e8:10:94:24:70:ed:45:23:4e:f1:44: 3b:96:30:d6:8e:21:91:d8:ac:b2:2d:c1:ba:43:0a:cf:41:fc: 6c:16:53:b5:e8:87:c4:e4:9f:f3:ae:52:45:c6:60:2f:09:46: f6:c5:fa:92:23:00:8a:e5:95:c0:c9:eb:28:d3:d8:e4:75:dc: 88:63:e4:d1:42:fc:df:c7:11:3c:5d:8e:12:5a:81:4f:7e:25: 4e:e9:60:7b:2f:c9:19:75:bd:8b:8a:f9:8d:da:47:7a:f8:79: 37:d1:a0:ec:c1:03:64:15:cc:83:7d:24:3a:59:24:e9:65:a1: b9:54:fd:69 -----BEGIN CERTIFICATE----- MIIHJTCCBg2gAwIBAgIUdySZ4aihdiqufijh23z4B5lCO3AwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDExOTEwMjEzOFoX DTI3MDExODEwMjYzOFowMzExMC8GA1UEAxMoRDU1NDkwRkI4ODU1NTIzMDdBMUQy NzFFMDI1MTNCNEQ0MjNBOTBBRTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMAr/IUIy5kLMj1i1zTWH5bi+M0ouR9DNKHAxEWIyZkrcZG2Hp0k+iBz/r62 KqNaWmHiUqBwq+E3hx110WB0+9y6c1pOz15aTWHzPEuINl0Q8tTw7izKMLAZUQx5 SaZh5g9Re7kQIxlZ4OY2laUc30j5t8oAV7sjF+bb/H+RzRfSuK3ybiH+6VVZwsMl 2umHMx1cAKmOPCNdCUV9sSpyvTrCtY8v+UTAXMI/ePtr7s6cBn6PmPTOHW5pwdWg aFZdJAXnen5tkPfY+F7uvoD0BLmf2Os5BRbSE7ChQ/8TFM/f6PTWe3iV3qOREAXj F4UQXJUB/948OJw2IHvwwzK245kCAwEAAaOCBBgwggQUMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFNVUkPuIVVIweh0nHgJRO01COpCuMB8GA1UdIwQYMBaAFKVu hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTA2NTU3NjcyMzM3MTk4Mjg1MC8wLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDY1NTc2NzIzMzcxOTgyODUw LzAvRDU1NDkwRkI4ODU1NTIzMDdBMUQyNzFFMDI1MTNCNEQ0MjNBOTBBRS5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwggGABggrBgEF BQcBBwEB/wSCAW8wggFrMIHLBAIAATCBxAMEAivz6DAMAwQCLfoMAwQCLfoQMAwD BAIt+kwDBAIt+mAwDAMEAy36aAMEAy36kAMEBj0dgAMEAmdLkDAMAwQDZ9oIAwQD Z9oQMAwDBAJn2hwDBAJn2lgDBAJn/rwDBAd5yYAwCwMDAHtnAwQDe2cQMAwDBAJ7 ZxwDBAd7ZwADAwB9qzAMAwQBy4IiAwQGy4IAAwQEy9QAAwQG0rnAAwQF0sBgAwQE 05ywMAsDAwHc8gMEAdzziDALAwQA3POLAwMC3PAwgZoEAgACMIGTAwUAJAB2gAMF ACQGzYADBQAkBs6AAwUAJAbPgAMFACQG0IADBQAkBtGAAwUAJAbSgAMFACQG04AD BQAkBtSAAwUAJAbVgAMFACQG1oADBQAkBteAAwUAJAbYgAMFACQG2YADBQAkBtuA AwUAJAbcgAMFACQG3oADBQAkBt+AAwUAJAbggAMFACQG4YADBQAkBuOAMBkGCCsG AQUFBwEIAQH/BAowCKAGMAQCAkQiMA0GCSqGSIb3DQEBCwUAA4IBAQCIZTu5aXK1 2z2bzBF+lh9kkoF+fHL7wQc6fBhOB8dk6wHmWraK5T/CqCzylecyMz4/y9+is02l Yv5RbYxmq0pK5xTAlEqqs8soEPEQsuEy8qjt+LyKY/y6qpC9sQ5U0w6gCONrUcgS z+NksDo/mhWiRYoE7JmkfZt4n5BNH5H5UcHkzg576BCUJHDtRSNO8UQ7ljDWjiGR 2KyyLcG6QwrPQfxsFlO16IfE5J/zrlJFxmAvCUb2xfqSIwCK5ZXAyeso09jkddyI Y+TRQvzfxxE8XY4SWoFPfiVO6WB7L8kZdb2LivmN2kd6+Hk30aDswQNkFcyDfSQ6 WSTpZaG5VP1p -----END CERTIFICATE-----Generated at Tue Jan 20 09:26:03 2026 by rpki-client