This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/0/34D58A062B3D996DB1E8A2BB2764188FDEF00DBA.cer File: 34D58A062B3D996DB1E8A2BB2764188FDEF00DBA.cer (raw, json) Hash identifier: G77qGupkauIQrFBZXdfNdvKoU0Rr9B8gDuOaNv3JueU= Subject key identifier: 34:D5:8A:06:2B:3D:99:6D:B1:E8:A2:BB:27:64:18:8F:DE:F0:0D:BA Authority key identifier: CB:02:14:A5:C4:04:D6:F8:40:43:3B:12:0C:AC:BB:5B:8C:59:E6:13 Certificate issuer: /CN=A9162E3D0001/serialNumber=CB0214A5C404D6F840433B120CACBB5B8C59E613 Certificate serial: 33A42763ED0745EAAB6BAA9F9EB7FB0411749DE3 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1065588993548156930/1/34D58A062B3D996DB1E8A2BB2764188FDEF00DBA.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1065588993548156930/1/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Mon 19 Jan 2026 11:05:34 +0000 Certificate not after: Mon 18 Jan 2027 11:10:34 +0000 Subordinate resources: IP: 139.159.0.0 -- 139.159.95.255 IP: 139.159.116.0 -- 139.159.127.255 IP: 140.210.64.0/18 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Jan 2026 09:17:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:a4:27:63:ed:07:45:ea:ab:6b:aa:9f:9e:b7:fb:04:11:74:9d:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=CB0214A5C404D6F840433B120CACBB5B8C59E613 Validity Not Before: Jan 19 11:05:34 2026 GMT Not After : Jan 18 11:10:34 2027 GMT Subject: CN=34D58A062B3D996DB1E8A2BB2764188FDEF00DBA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:01:eb:73:de:7e:1f:50:e8:57:6e:02:5b:1a: 36:a8:a7:18:61:f5:0f:b4:24:7d:61:ec:45:92:87: b8:1d:51:4d:b9:c3:74:e8:f2:2d:80:38:ff:a8:8d: ef:96:34:31:26:ed:43:9a:c6:b4:56:68:b5:90:68: 83:6d:85:29:3f:3a:ce:44:77:49:41:47:e6:6f:50: 20:ce:86:cf:52:fb:87:15:5d:29:c6:c3:1d:90:88: 59:c9:eb:fc:54:5b:58:17:89:2c:25:bc:c9:58:35: 80:61:2d:c3:19:a7:c1:39:f1:28:a0:6f:c6:95:9e: 8a:8b:c0:91:e0:89:97:70:35:60:36:df:fb:5f:9c: a3:cc:f9:9b:44:f4:0e:86:cc:67:b5:b9:d6:3b:b4: 26:c8:68:d0:f3:40:ff:1f:49:24:84:ed:8f:a5:b9: 3f:f9:57:ab:be:3e:fc:85:48:88:c1:5a:ce:94:76: 06:38:ac:66:42:40:ec:17:d7:aa:a0:1a:55:4f:6b: 0a:b9:e6:34:a1:f3:39:e0:80:f9:63:ce:67:65:7b: 14:ff:68:11:25:d1:b8:58:ce:b8:48:c7:1f:b7:29: d0:2f:77:62:ae:f5:02:2e:78:d7:3c:8b:db:03:98: ac:c1:60:bf:8f:7e:c7:53:d3:1d:2c:30:14:30:0a: 8c:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 34:D5:8A:06:2B:3D:99:6D:B1:E8:A2:BB:27:64:18:8F:DE:F0:0D:BA X509v3 Authority Key Identifier: keyid:CB:02:14:A5:C4:04:D6:F8:40:43:3B:12:0C:AC:BB:5B:8C:59:E6:13 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548156930/1/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548156930/1/34D58A062B3D996DB1E8A2BB2764188FDEF00DBA.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 139.159.0.0-139.159.95.255 139.159.116.0-139.159.127.255 140.210.64.0/18 Signature Algorithm: sha256WithRSAEncryption 74:dd:70:46:c2:9c:ea:db:94:83:8e:de:6a:07:04:ed:13:2c: ab:cb:a5:a6:46:42:59:93:c6:fc:c1:f0:11:a0:aa:23:ca:25: 09:d2:ee:6e:7e:68:5f:16:29:3c:5d:33:fb:77:f0:15:0b:2d: 62:88:32:ba:0a:03:d3:47:87:d2:12:8d:ba:49:79:38:71:04: 8b:69:49:16:67:94:3e:3c:f0:24:e2:4a:fd:15:76:ab:e6:62: 6b:59:a1:b6:bd:e1:a6:a1:e7:c4:3c:57:ad:09:f2:a1:7d:66: 38:26:78:1e:89:ad:bc:08:41:14:0b:09:ad:14:48:13:4d:94: 9d:54:fa:26:a8:2c:74:f7:37:69:a0:82:dc:9c:c9:d2:e5:29: 5a:3b:a4:29:cd:f9:7e:f9:b1:9c:a8:a8:dd:ef:50:f2:7b:c3: 0e:30:fd:1b:3f:e1:68:14:67:e1:7b:c9:43:f6:aa:95:6d:ca: f7:2a:77:b7:25:e3:ed:cf:6d:d2:a4:7b:50:a3:f1:f3:4f:a9: 00:85:8e:c4:a5:96:c4:ef:0f:7e:0b:1d:72:5b:38:a1:37:66: 88:37:dc:c0:b4:2e:90:0c:16:e0:ff:54:57:67:8d:48:1c:48: 5a:d1:f2:7b:39:c6:bf:05:cd:27:ca:72:e9:d7:75:d2:25:1b: 47:d0:0d:08 -----BEGIN CERTIFICATE----- MIIFwjCCBKqgAwIBAgIUM6QnY+0HReqra6qfnrf7BBF0neMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhDQjAyMTRBNUM0 MDRENkY4NDA0MzNCMTIwQ0FDQkI1QjhDNTlFNjEzMB4XDTI2MDExOTExMDUzNFoX DTI3MDExODExMTAzNFowMzExMC8GA1UEAxMoMzRENThBMDYyQjNEOTk2REIxRThB MkJCMjc2NDE4OEZERUYwMERCQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAM0B63Pefh9Q6FduAlsaNqinGGH1D7QkfWHsRZKHuB1RTbnDdOjyLYA4/6iN 75Y0MSbtQ5rGtFZotZBog22FKT86zkR3SUFH5m9QIM6Gz1L7hxVdKcbDHZCIWcnr /FRbWBeJLCW8yVg1gGEtwxmnwTnxKKBvxpWeiovAkeCJl3A1YDbf+1+co8z5m0T0 DobMZ7W51ju0Jsho0PNA/x9JJITtj6W5P/lXq74+/IVIiMFazpR2BjisZkJA7BfX qqAaVU9rCrnmNKHzOeCA+WPOZ2V7FP9oESXRuFjOuEjHH7cp0C93Yq71Ai541zyL 2wOYrMFgv49+x1PTHSwwFDAKjKMCAwEAAaOCArUwggKxMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFDTVigYrPZltseiiuydkGI/e8A26MB8GA1UdIwQYMBaAFMsC FKXEBNb4QEM7Egysu1uMWeYTMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMC9DQjAyMTRBNUM0MDRENkY4NDA0MzNCMTIwQ0FDQkI1QjhDNTlF NjEzLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CM0EyNEYyMDFENjYxMUUyOEFDODgzN0M3 MkZEMUZGMi95d0lVcGNRRTF2aEFRenNTREt5N1c0eFo1aE0uY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTA2NTU4ODk5MzU0ODE1NjkzMC8xLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDY1NTg4OTkzNTQ4MTU2OTMw LzEvMzRENThBMDYyQjNEOTk2REIxRThBMkJCMjc2NDE4OEZERUYwMERCQS5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwOgYIKwYBBQUH AQcBAf8EKzApMCcEAgABMCEwCwMDAIufAwQFi59AMAwDBAKLn3QDBAeLnwADBAaM 0kAwDQYJKoZIhvcNAQELBQADggEBAHTdcEbCnOrblIOO3moHBO0TLKvLpaZGQlmT xvzB8BGgqiPKJQnS7m5+aF8WKTxdM/t38BULLWKIMroKA9NHh9ISjbpJeThxBItp SRZnlD488CTiSv0VdqvmYmtZoba94aah58Q8V60J8qF9ZjgmeB6JrbwIQRQLCa0U SBNNlJ1U+iaoLHT3N2mggtycydLlKVo7pCnN+X75sZyoqN3vUPJ7ww4w/Rs/4WgU Z+F7yUP2qpVtyvcqd7cl4+3PbdKke1Cj8fNPqQCFjsSllsTvD34LHXJbOKE3Zog3 3MC0LpAMFuD/VFdnjUgcSFrR8ns5xr8FzSfKcunXddIlG0fQDQg= -----END CERTIFICATE-----Generated at Sun Jan 25 12:46:10 2026 by rpki-client