This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/0/19AE5566BF83D1472FD9D9BAE5CC701265BC77AD.cer File: 19AE5566BF83D1472FD9D9BAE5CC701265BC77AD.cer (raw, json) Hash identifier: 1AaS6DqbRJFC0vtmE7vWy2PJmLa8/2N7Zg8/TCx/rgc= Subject key identifier: 19:AE:55:66:BF:83:D1:47:2F:D9:D9:BA:E5:CC:70:12:65:BC:77:AD Authority key identifier: CB:02:14:A5:C4:04:D6:F8:40:43:3B:12:0C:AC:BB:5B:8C:59:E6:13 Certificate issuer: /CN=A9162E3D0001/serialNumber=CB0214A5C404D6F840433B120CACBB5B8C59E613 Certificate serial: 3B128A5A70A9D4FB43187147A59EA0399C5CBFE7 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1065588553129394179/1/19AE5566BF83D1472FD9D9BAE5CC701265BC77AD.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1065588553129394179/1/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Mon 19 Jan 2026 11:03:32 +0000 Certificate not after: Mon 18 Jan 2027 11:08:32 +0000 Subordinate resources: IP: 144.79.10.0/23 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 16:37:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:12:8a:5a:70:a9:d4:fb:43:18:71:47:a5:9e:a0:39:9c:5c:bf:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=CB0214A5C404D6F840433B120CACBB5B8C59E613 Validity Not Before: Jan 19 11:03:32 2026 GMT Not After : Jan 18 11:08:32 2027 GMT Subject: CN=19AE5566BF83D1472FD9D9BAE5CC701265BC77AD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:c2:05:db:91:f1:6d:4f:4b:96:e9:2b:17:7b: 15:06:9c:30:c8:6c:80:bd:d3:3b:ea:18:27:08:2d: 54:5e:6e:b6:2a:7f:28:4c:9f:df:46:0d:26:4e:e1: cc:5a:01:85:15:49:6d:53:22:3e:06:93:57:f5:5d: bd:12:49:1a:bc:b4:b7:95:67:17:d3:f0:ed:69:5f: bc:66:a6:a9:3c:a8:f8:61:b8:41:ac:d3:52:f3:d5: 54:7b:7b:be:bf:49:d5:68:12:23:f0:61:62:66:35: 01:04:f6:77:56:29:dc:04:c3:b6:c4:ac:cb:7c:78: 16:15:f7:d9:13:1b:3f:c7:d8:4c:97:46:47:da:cc: d3:c0:b8:d8:12:34:06:7e:b1:7a:84:43:73:52:b9: 36:68:f6:a7:2e:ca:02:f4:aa:78:64:c0:7c:a1:60: 9c:08:10:ab:5f:00:f6:bc:b4:fc:aa:c3:12:33:17: 69:c5:c7:77:47:9a:6a:3a:54:3b:37:16:92:da:e0: b2:45:b8:38:ca:3b:dd:d7:d0:63:3b:f0:f9:bf:3b: 6e:14:d7:ef:b9:40:6c:f8:fe:c8:b1:37:2a:34:83: 68:f3:f1:6e:a0:fd:23:c9:98:69:0f:1a:29:c8:8a: be:19:5c:81:7b:10:e0:d8:36:2c:5c:b3:5a:34:3e: 8d:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 19:AE:55:66:BF:83:D1:47:2F:D9:D9:BA:E5:CC:70:12:65:BC:77:AD X509v3 Authority Key Identifier: keyid:CB:02:14:A5:C4:04:D6:F8:40:43:3B:12:0C:AC:BB:5B:8C:59:E6:13 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129394179/1/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129394179/1/19AE5566BF83D1472FD9D9BAE5CC701265BC77AD.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 144.79.10.0/23 Signature Algorithm: sha256WithRSAEncryption 9a:21:85:78:a4:dc:4f:10:3e:57:06:9a:b7:eb:12:7b:56:55: ea:16:a9:e8:bd:32:2e:60:64:0a:28:db:86:c9:e7:35:7f:e0: 40:cc:c5:b1:7a:c2:03:ac:29:c2:ba:ca:87:8c:26:9f:31:1f: eb:1a:61:0c:39:9d:69:a9:9e:9d:aa:48:d5:e5:5a:26:95:2e: 01:d4:64:eb:bd:dd:dc:e0:cb:04:4f:66:1b:37:2f:d3:bd:79: 28:8b:6f:24:b0:2b:c5:77:81:dd:4f:9a:6e:5b:98:65:25:69: 58:4a:54:c4:17:14:cd:46:c8:a4:46:7b:f9:10:58:0e:91:41: 78:c8:bb:ee:3d:7e:24:83:4d:ea:07:09:fa:87:66:ff:51:03: a8:13:46:8b:7b:13:85:5e:e8:0a:d0:83:41:7d:02:3b:e5:21: 22:0a:4b:2c:dc:8f:23:58:f9:30:78:47:53:bf:a8:e7:dd:10: 7d:d2:40:4a:4f:c6:25:3e:3e:cc:ad:64:32:a1:fb:22:9a:e3: 19:6d:ee:8a:45:8c:ff:7a:e4:a2:6b:17:05:5b:1c:6a:99:79: fa:7d:80:e3:17:35:8e:17:1c:91:13:cb:88:98:60:e7:a5:13: 4a:3b:c1:5d:e1:a3:9e:03:e4:80:b4:8a:9e:e5:18:8e:d7:f3: ee:df:ec:42 -----BEGIN CERTIFICATE----- MIIFpzCCBI+gAwIBAgIUOxKKWnCp1PtDGHFHpZ6gOZxcv+cwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhDQjAyMTRBNUM0 MDRENkY4NDA0MzNCMTIwQ0FDQkI1QjhDNTlFNjEzMB4XDTI2MDExOTExMDMzMloX DTI3MDExODExMDgzMlowMzExMC8GA1UEAxMoMTlBRTU1NjZCRjgzRDE0NzJGRDlE OUJBRTVDQzcwMTI2NUJDNzdBRDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOPCBduR8W1PS5bpKxd7FQacMMhsgL3TO+oYJwgtVF5utip/KEyf30YNJk7h zFoBhRVJbVMiPgaTV/VdvRJJGry0t5VnF9Pw7WlfvGamqTyo+GG4QazTUvPVVHt7 vr9J1WgSI/BhYmY1AQT2d1Yp3ATDtsSsy3x4FhX32RMbP8fYTJdGR9rM08C42BI0 Bn6xeoRDc1K5Nmj2py7KAvSqeGTAfKFgnAgQq18A9ry0/KrDEjMXacXHd0eaajpU OzcWktrgskW4OMo73dfQYzvw+b87bhTX77lAbPj+yLE3KjSDaPPxbqD9I8mYaQ8a KciKvhlcgXsQ4Ng2LFyzWjQ+jdsCAwEAAaOCApowggKWMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFBmuVWa/g9FHL9nZuuXMcBJlvHetMB8GA1UdIwQYMBaAFMsC FKXEBNb4QEM7Egysu1uMWeYTMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMC9DQjAyMTRBNUM0MDRENkY4NDA0MzNCMTIwQ0FDQkI1QjhDNTlF NjEzLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CM0EyNEYyMDFENjYxMUUyOEFDODgzN0M3 MkZEMUZGMi95d0lVcGNRRTF2aEFRenNTREt5N1c0eFo1aE0uY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTA2NTU4ODU1MzEyOTM5NDE3OS8xLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDY1NTg4NTUzMTI5Mzk0MTc5 LzEvMTlBRTU1NjZCRjgzRDE0NzJGRDlEOUJBRTVDQzcwMTI2NUJDNzdBRC5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAGQTwowDQYJKoZIhvcNAQELBQADggEBAJohhXik 3E8QPlcGmrfrEntWVeoWqei9Mi5gZAoo24bJ5zV/4EDMxbF6wgOsKcK6yoeMJp8x H+saYQw5nWmpnp2qSNXlWiaVLgHUZOu93dzgywRPZhs3L9O9eSiLbySwK8V3gd1P mm5bmGUlaVhKVMQXFM1GyKRGe/kQWA6RQXjIu+49fiSDTeoHCfqHZv9RA6gTRot7 E4Ve6ArQg0F9AjvlISIKSyzcjyNY+TB4R1O/qOfdEH3SQEpPxiU+PsytZDKh+yKa 4xlt7opFjP965KJrFwVbHGqZefp9gOMXNY4XHJETy4iYYOelE0o7wV3ho54D5IC0 ip7lGI7X8+7f7EI= -----END CERTIFICATE-----Generated at Sun Jan 25 09:40:49 2026 by rpki-client