This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/0/855381EC93CF009732540F616E4905D544D838C8.cer File: 855381EC93CF009732540F616E4905D544D838C8.cer (raw, json) Hash identifier: 9ZqWFHNj5yESQReKNEa/c29xnt6bqF7yJ+Gd9oV4dqU= Subject key identifier: 85:53:81:EC:93:CF:00:97:32:54:0F:61:6E:49:05:D5:44:D8:38:C8 Authority key identifier: CB:02:14:A5:C4:04:D6:F8:40:43:3B:12:0C:AC:BB:5B:8C:59:E6:13 Certificate issuer: /CN=A9162E3D0001/serialNumber=CB0214A5C404D6F840433B120CACBB5B8C59E613 Certificate serial: 57FC80AE9AB8936FFA937C62DF3B5C1E90D093EB Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/1/855381EC93CF009732540F616E4905D544D838C8.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/1/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Mon 19 Jan 2026 10:26:54 +0000 Certificate not after: Mon 18 Jan 2027 10:31:54 +0000 Subordinate resources: IP: 158.140.252.0/22 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Jan 2026 09:17:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:fc:80:ae:9a:b8:93:6f:fa:93:7c:62:df:3b:5c:1e:90:d0:93:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=CB0214A5C404D6F840433B120CACBB5B8C59E613 Validity Not Before: Jan 19 10:26:54 2026 GMT Not After : Jan 18 10:31:54 2027 GMT Subject: CN=855381EC93CF009732540F616E4905D544D838C8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:3c:8a:cb:ec:8c:bf:d5:29:86:9d:36:9d:3f: be:10:75:1e:b6:b0:5f:34:b8:b8:40:59:89:d6:9e: 38:9d:36:b9:21:c1:0d:3b:a2:98:f4:8e:98:6f:95: cb:23:9b:d6:6b:5b:37:85:aa:82:b3:11:eb:5e:c8: 58:ad:42:ff:a6:34:77:9e:b7:dd:89:30:fd:d5:14: 4b:85:4a:62:a2:00:bd:62:11:35:4e:7d:57:6c:95: dd:20:f8:8c:da:e3:bb:35:75:6f:5f:1a:e7:54:7b: 44:55:dc:93:f5:01:4d:b5:e0:86:43:9f:cf:8b:e1: df:1f:37:fa:5d:91:c2:cb:f3:3a:68:23:cb:10:fc: 34:f7:0c:b0:39:e2:5b:0f:b3:c6:ed:92:4f:45:b2: 45:3f:5c:20:0d:df:14:e4:f0:30:28:5e:ed:db:eb: f5:d1:33:2f:f7:04:c2:54:fb:63:0e:a0:6b:5e:7a: 0d:76:3f:96:57:4c:46:ce:7c:39:74:55:a7:98:b5: 93:f2:d3:72:03:24:35:78:7e:c4:6f:be:2a:62:f5: 7d:56:bd:de:d1:05:65:6a:bf:32:0b:b1:3a:b6:ef: 1a:14:46:6b:a5:3a:7a:8b:c4:6e:84:96:b3:84:c6: 8b:7b:4d:db:96:95:11:9a:26:ac:fa:66:f7:28:31: fa:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 85:53:81:EC:93:CF:00:97:32:54:0F:61:6E:49:05:D5:44:D8:38:C8 X509v3 Authority Key Identifier: keyid:CB:02:14:A5:C4:04:D6:F8:40:43:3B:12:0C:AC:BB:5B:8C:59:E6:13 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/1/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/1/855381EC93CF009732540F616E4905D544D838C8.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 158.140.252.0/22 Signature Algorithm: sha256WithRSAEncryption 9d:7a:20:5a:7d:0e:42:96:72:9e:91:9e:f5:d1:bd:f6:30:a4: 83:c7:f0:c3:3c:cc:32:c0:e3:26:f4:30:d4:9f:0e:5f:2c:f2: 84:3f:89:2d:06:08:fe:df:66:35:f7:3a:c4:f4:f8:70:84:3a: 8b:49:38:af:39:e5:0e:4e:b9:ec:1b:c1:10:b7:cb:fe:b4:5b: 56:be:dc:f4:39:27:af:93:34:2b:1c:1a:c5:1f:7d:36:f6:66: b1:67:33:87:3d:43:22:ed:e6:45:0d:51:c1:13:c8:51:be:1b: 0c:24:d0:cc:e4:51:ae:6f:65:27:14:48:71:ce:3e:29:bb:a7: 0a:ce:9a:3e:df:55:b7:ad:23:d8:09:47:fd:56:93:5c:84:82: 2e:45:85:14:98:b7:98:56:d9:54:07:13:f5:9c:1b:9f:a5:60: cf:3e:0c:66:11:67:ca:54:98:c2:42:ac:12:15:63:95:94:96: 1a:d9:fd:84:05:f6:7f:66:3c:ba:1b:b7:53:8f:bd:b3:d1:f5: ee:89:68:28:19:26:f2:33:11:ef:5e:13:0f:31:1f:41:a6:11: c4:60:ce:2d:ba:12:30:d5:55:7d:be:f1:cd:08:a8:ef:63:62: 3b:93:7a:c5:4f:9f:1a:0d:b4:20:66:02:7e:7b:fb:1b:d8:4e: 13:00:84:a3 -----BEGIN CERTIFICATE----- MIIFpzCCBI+gAwIBAgIUV/yArpq4k2/6k3xi3ztcHpDQk+swDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhDQjAyMTRBNUM0 MDRENkY4NDA0MzNCMTIwQ0FDQkI1QjhDNTlFNjEzMB4XDTI2MDExOTEwMjY1NFoX DTI3MDExODEwMzE1NFowMzExMC8GA1UEAxMoODU1MzgxRUM5M0NGMDA5NzMyNTQw RjYxNkU0OTA1RDU0NEQ4MzhDODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOM8isvsjL/VKYadNp0/vhB1HrawXzS4uEBZidaeOJ02uSHBDTuimPSOmG+V yyOb1mtbN4WqgrMR617IWK1C/6Y0d5633Ykw/dUUS4VKYqIAvWIRNU59V2yV3SD4 jNrjuzV1b18a51R7RFXck/UBTbXghkOfz4vh3x83+l2RwsvzOmgjyxD8NPcMsDni Ww+zxu2ST0WyRT9cIA3fFOTwMChe7dvr9dEzL/cEwlT7Yw6ga156DXY/lldMRs58 OXRVp5i1k/LTcgMkNXh+xG++KmL1fVa93tEFZWq/MguxOrbvGhRGa6U6eovEboSW s4TGi3tN25aVEZomrPpm9ygx+pUCAwEAAaOCApowggKWMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFIVTgeyTzwCXMlQPYW5JBdVE2DjIMB8GA1UdIwQYMBaAFMsC FKXEBNb4QEM7Egysu1uMWeYTMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMC9DQjAyMTRBNUM0MDRENkY4NDA0MzNCMTIwQ0FDQkI1QjhDNTlF NjEzLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CM0EyNEYyMDFENjYxMUUyOEFDODgzN0M3 MkZEMUZGMi95d0lVcGNRRTF2aEFRenNTREt5N1c0eFo1aE0uY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTA2NTU3NzI0MTk0NzYwMjk0NS8xLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDY1NTc3MjQxOTQ3NjAyOTQ1 LzEvODU1MzgxRUM5M0NGMDA5NzMyNTQwRjYxNkU0OTA1RDU0NEQ4MzhDOC5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAKejPwwDQYJKoZIhvcNAQELBQADggEBAJ16IFp9 DkKWcp6RnvXRvfYwpIPH8MM8zDLA4yb0MNSfDl8s8oQ/iS0GCP7fZjX3OsT0+HCE OotJOK855Q5OuewbwRC3y/60W1a+3PQ5J6+TNCscGsUffTb2ZrFnM4c9QyLt5kUN UcETyFG+Gwwk0MzkUa5vZScUSHHOPim7pwrOmj7fVbetI9gJR/1Wk1yEgi5FhRSY t5hW2VQHE/WcG5+lYM8+DGYRZ8pUmMJCrBIVY5WUlhrZ/YQF9n9mPLobt1OPvbPR 9e6JaCgZJvIzEe9eEw8xH0GmEcRgzi26EjDVVX2+8c0IqO9jYjuTesVPnxoNtCBm An57+xvYThMAhKM= -----END CERTIFICATE-----Generated at Sun Jan 25 12:46:02 2026 by rpki-client