This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/0/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.cer File: 01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.cer (raw, json) Hash identifier: OTqmalJYnGJ1DvTbxRIarDwZkd61tTpbUOcIuEaKNCc= Subject key identifier: 01:FB:56:09:FD:2A:A5:67:AD:7A:F6:9C:D2:0C:C4:AB:3E:BD:10:CA Authority key identifier: CB:02:14:A5:C4:04:D6:F8:40:43:3B:12:0C:AC:BB:5B:8C:59:E6:13 Certificate issuer: /CN=A9162E3D0001/serialNumber=CB0214A5C404D6F840433B120CACBB5B8C59E613 Certificate serial: 6571463C466AD13DFB3958CC0DFBA5CCC9102777 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/1/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/1/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Mon 19 Jan 2026 10:32:58 +0000 Certificate not after: Mon 18 Jan 2027 10:37:58 +0000 Subordinate resources: IP: 139.198.0.0/16 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 16:37:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:71:46:3c:46:6a:d1:3d:fb:39:58:cc:0d:fb:a5:cc:c9:10:27:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=CB0214A5C404D6F840433B120CACBB5B8C59E613 Validity Not Before: Jan 19 10:32:58 2026 GMT Not After : Jan 18 10:37:58 2027 GMT Subject: CN=01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:d2:f0:42:ba:64:f6:73:72:17:9f:b0:90:56: 73:14:05:8b:77:38:79:6e:36:e4:39:a3:5a:bd:dd: 39:a4:37:76:d1:d5:fa:b1:40:7a:9c:e6:9d:e3:c8: 4d:ff:91:5e:86:ff:64:99:66:31:ce:93:09:f5:f1: eb:77:0c:bc:b2:8a:f6:95:d3:39:41:97:f9:fc:91: 09:c8:2d:3e:85:27:67:1a:52:d9:7c:1f:49:b3:1a: 7d:b8:09:79:62:a9:aa:c5:18:50:71:bc:a7:3e:f2: c5:06:ae:1f:cb:db:58:a7:8c:de:54:6b:bf:ed:e7: 29:a2:52:cd:db:13:97:9e:60:1b:fa:b1:1b:20:b9: 28:f1:7a:b6:68:dd:ed:c0:94:26:7e:7e:aa:b7:d6: fa:89:77:a2:c0:52:a8:f3:3a:3b:bb:70:40:77:93: 2a:bd:fa:3e:7b:83:bc:ce:f0:05:d6:ac:88:3f:17: b4:8b:c6:81:5a:97:05:2b:d6:f3:4c:43:c2:d7:4c: c3:da:49:92:0f:9c:6f:f0:5e:ca:7a:a7:10:fc:06: 8e:66:27:24:82:a7:c1:52:fd:b4:25:cc:b6:a3:29: e1:33:d9:90:7c:f7:92:38:19:15:c3:c7:6f:46:86: 8d:3a:ea:88:6f:fd:4b:63:bd:b9:00:97:02:7d:6a: fb:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 01:FB:56:09:FD:2A:A5:67:AD:7A:F6:9C:D2:0C:C4:AB:3E:BD:10:CA X509v3 Authority Key Identifier: keyid:CB:02:14:A5:C4:04:D6:F8:40:43:3B:12:0C:AC:BB:5B:8C:59:E6:13 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/1/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/1/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 139.198.0.0/16 Signature Algorithm: sha256WithRSAEncryption 6e:64:8f:12:5b:0a:3f:49:cc:ea:e3:b2:cc:1d:c8:19:6b:ae: 1b:0b:cd:20:52:a2:d5:9f:36:78:2d:28:53:45:15:a2:9c:05: 1d:5b:47:88:21:40:62:21:a8:96:72:7f:eb:ff:06:b1:ff:85: 7c:a8:aa:c2:76:46:f1:19:05:98:42:ea:24:b7:30:e8:24:6a: 9a:1f:bd:11:ad:6e:09:a8:90:77:78:d8:11:55:57:dd:88:0a: 5b:e1:20:ce:e2:8f:f3:86:90:8d:5e:60:e6:95:38:8e:5d:c3: 15:a7:cc:44:ff:6a:44:bb:fb:6a:e5:e8:5b:48:5b:76:08:46: d0:17:46:cf:10:83:cb:dd:1b:50:e6:74:6a:a4:70:11:1c:3c: de:a9:82:8d:06:43:5a:cc:93:ee:32:9c:a1:f9:4d:c9:f7:a5: ca:33:6f:d8:d9:47:2a:42:1f:0f:18:05:09:2b:e0:58:82:73: f2:d5:1f:5b:ce:0a:3e:98:38:92:21:8a:8b:37:42:4b:6d:b8: 71:b5:1b:88:89:d8:86:3b:8a:53:d6:75:d3:21:56:4e:41:57: e8:80:47:96:4e:d3:22:32:33:76:b3:cc:9e:ab:8c:9a:fe:58: 26:10:0a:db:4c:64:33:74:cf:d9:b2:06:67:3c:8d:58:26:13: 0b:9e:56:9a -----BEGIN CERTIFICATE----- MIIFpjCCBI6gAwIBAgIUZXFGPEZq0T37OVjMDfulzMkQJ3cwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhDQjAyMTRBNUM0 MDRENkY4NDA0MzNCMTIwQ0FDQkI1QjhDNTlFNjEzMB4XDTI2MDExOTEwMzI1OFoX DTI3MDExODEwMzc1OFowMzExMC8GA1UEAxMoMDFGQjU2MDlGRDJBQTU2N0FEN0FG NjlDRDIwQ0M0QUIzRUJEMTBDQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAM7S8EK6ZPZzchefsJBWcxQFi3c4eW425DmjWr3dOaQ3dtHV+rFAepzmnePI Tf+RXob/ZJlmMc6TCfXx63cMvLKK9pXTOUGX+fyRCcgtPoUnZxpS2XwfSbMafbgJ eWKpqsUYUHG8pz7yxQauH8vbWKeM3lRrv+3nKaJSzdsTl55gG/qxGyC5KPF6tmjd 7cCUJn5+qrfW+ol3osBSqPM6O7twQHeTKr36PnuDvM7wBdasiD8XtIvGgVqXBSvW 80xDwtdMw9pJkg+cb/BeynqnEPwGjmYnJIKnwVL9tCXMtqMp4TPZkHz3kjgZFcPH b0aGjTrqiG/9S2O9uQCXAn1q+x0CAwEAAaOCApkwggKVMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFAH7Vgn9KqVnrXr2nNIMxKs+vRDKMB8GA1UdIwQYMBaAFMsC FKXEBNb4QEM7Egysu1uMWeYTMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMC9DQjAyMTRBNUM0MDRENkY4NDA0MzNCMTIwQ0FDQkI1QjhDNTlF NjEzLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CM0EyNEYyMDFENjYxMUUyOEFDODgzN0M3 MkZEMUZGMi95d0lVcGNRRTF2aEFRenNTREt5N1c0eFo1aE0uY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTA2NTU3OTUzNDM5NDUyMzY1MS8xLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDY1NTc5NTM0Mzk0NTIzNjUx LzEvMDFGQjU2MDlGRDJBQTU2N0FEN0FGNjlDRDIwQ0M0QUIzRUJEMTBDQS5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUH AQcBAf8EDzANMAsEAgABMAUDAwCLxjANBgkqhkiG9w0BAQsFAAOCAQEAbmSPElsK P0nM6uOyzB3IGWuuGwvNIFKi1Z82eC0oU0UVopwFHVtHiCFAYiGolnJ/6/8Gsf+F fKiqwnZG8RkFmELqJLcw6CRqmh+9Ea1uCaiQd3jYEVVX3YgKW+EgzuKP84aQjV5g 5pU4jl3DFafMRP9qRLv7auXoW0hbdghG0BdGzxCDy90bUOZ0aqRwERw83qmCjQZD WsyT7jKcoflNyfelyjNv2NlHKkIfDxgFCSvgWIJz8tUfW84KPpg4kiGKizdCS224 cbUbiInYhjuKU9Z10yFWTkFX6IBHlk7TIjIzdrPMnquMmv5YJhAK20xkM3TP2bIG ZzyNWCYTC55Wmg== -----END CERTIFICATE-----Generated at Sun Jan 25 09:03:29 2026 by rpki-client