This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/0/8BD835B2E215D686F24FB31A8AECEEE44FBDBDC8.cer File: 8BD835B2E215D686F24FB31A8AECEEE44FBDBDC8.cer (raw, json) Hash identifier: l5Fh8JRsthgDgewgC41E75W4ZViwpAqqnNTQLh3BoD8= Subject key identifier: 8B:D8:35:B2:E2:15:D6:86:F2:4F:B3:1A:8A:EC:EE:E4:4F:BD:BD:C8 Authority key identifier: CB:02:14:A5:C4:04:D6:F8:40:43:3B:12:0C:AC:BB:5B:8C:59:E6:13 Certificate issuer: /CN=A9162E3D0001/serialNumber=CB0214A5C404D6F840433B120CACBB5B8C59E613 Certificate serial: 32C07BF09A3BAFD22DD609A693C0483ED2FC5044 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1065585911217586179/1/8BD835B2E215D686F24FB31A8AECEEE44FBDBDC8.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1065585911217586179/1/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Mon 19 Jan 2026 11:01:46 +0000 Certificate not after: Mon 18 Jan 2027 11:06:46 +0000 Subordinate resources: IP: 161.248.84.0/23 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 16:37:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:c0:7b:f0:9a:3b:af:d2:2d:d6:09:a6:93:c0:48:3e:d2:fc:50:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=CB0214A5C404D6F840433B120CACBB5B8C59E613 Validity Not Before: Jan 19 11:01:46 2026 GMT Not After : Jan 18 11:06:46 2027 GMT Subject: CN=8BD835B2E215D686F24FB31A8AECEEE44FBDBDC8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:e8:ac:e2:92:58:6b:80:1e:f2:77:1d:b5:54: 1f:77:82:78:f9:cd:02:23:0e:94:65:63:07:7f:8d: 41:de:43:e2:aa:49:0d:46:ec:c5:ef:78:19:8d:c1: 30:51:e8:c0:62:04:1e:c5:72:c0:6e:51:5f:07:29: 8e:01:de:8b:7f:00:18:07:13:4d:57:62:a1:f1:47: 0c:9d:36:09:df:d4:0f:36:18:b7:97:84:3b:fc:27: 5a:fd:02:7b:ee:8a:5d:2e:4a:00:18:df:35:7e:68: a0:00:50:e5:a1:b7:f6:f2:e7:97:44:72:20:3d:17: b8:0b:15:7e:f4:4b:37:10:43:ec:86:24:8c:7c:6b: e0:5a:51:8a:47:df:f6:e0:23:99:48:87:fb:22:15: 03:41:29:e4:aa:ea:38:f9:e2:77:82:78:f9:89:f2: fc:01:59:2e:b4:f4:f4:ee:af:27:d5:36:9f:e0:40: dc:db:91:09:b1:35:54:b3:99:54:27:50:ad:75:78: f6:fa:65:f5:0d:13:96:03:d6:3c:91:28:85:ec:2a: 2f:3e:79:8e:fd:ae:59:83:4b:36:69:03:a3:89:33: 18:38:84:05:71:b1:2d:43:ad:2a:5a:d9:d8:dc:81: c0:ce:8b:0e:30:c7:51:0e:a2:21:87:04:71:b4:a4: 47:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 8B:D8:35:B2:E2:15:D6:86:F2:4F:B3:1A:8A:EC:EE:E4:4F:BD:BD:C8 X509v3 Authority Key Identifier: keyid:CB:02:14:A5:C4:04:D6:F8:40:43:3B:12:0C:AC:BB:5B:8C:59:E6:13 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217586179/1/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217586179/1/8BD835B2E215D686F24FB31A8AECEEE44FBDBDC8.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 161.248.84.0/23 Signature Algorithm: sha256WithRSAEncryption 10:a5:85:9b:02:d8:17:d3:12:86:41:cb:35:a6:62:2c:13:c6: 7c:a5:84:e8:d7:2f:eb:22:9a:fc:dc:ee:35:90:3f:63:ba:67: 73:84:ea:09:a6:1c:23:73:b9:f9:d5:92:2a:b6:cb:ab:5a:c8: bb:3f:53:93:84:e6:69:49:dc:d5:5f:09:59:ae:75:ff:59:c9: ae:c1:aa:f5:2e:dd:cd:dc:f9:f7:e8:a7:ac:1f:96:52:19:45: 93:be:bb:ab:5b:e6:53:b8:7d:a3:e2:11:ce:2c:51:50:ac:2e: 81:4f:d7:de:21:b8:df:83:eb:84:3d:34:08:06:1f:f9:f4:3e: 98:b8:de:be:83:d7:a4:b5:2d:17:a1:8e:ff:d6:89:f9:4f:8c: 5f:c3:5e:2a:36:df:1f:2b:a6:9f:d9:39:1f:a7:79:3d:2d:ba: 24:a5:69:f7:91:de:d5:c3:3d:26:d8:82:6d:0d:18:5d:af:40: 8a:7f:a6:52:d5:59:84:d4:dd:b9:a9:8e:01:a0:eb:48:df:3f: 3d:23:98:aa:be:d1:4c:6f:2e:e2:8e:69:32:aa:81:ec:a6:74: ed:b7:26:73:b6:6a:19:89:0f:b6:18:9b:6e:56:cf:87:34:b2: c4:b3:99:3d:84:eb:df:c6:ad:58:b9:8c:1e:58:05:f2:bd:ed: db:01:70:10 -----BEGIN CERTIFICATE----- MIIFpzCCBI+gAwIBAgIUMsB78Jo7r9It1gmmk8BIPtL8UEQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhDQjAyMTRBNUM0 MDRENkY4NDA0MzNCMTIwQ0FDQkI1QjhDNTlFNjEzMB4XDTI2MDExOTExMDE0NloX DTI3MDExODExMDY0NlowMzExMC8GA1UEAxMoOEJEODM1QjJFMjE1RDY4NkYyNEZC MzFBOEFFQ0VFRTQ0RkJEQkRDODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALLorOKSWGuAHvJ3HbVUH3eCePnNAiMOlGVjB3+NQd5D4qpJDUbsxe94GY3B MFHowGIEHsVywG5RXwcpjgHei38AGAcTTVdiofFHDJ02Cd/UDzYYt5eEO/wnWv0C e+6KXS5KABjfNX5ooABQ5aG39vLnl0RyID0XuAsVfvRLNxBD7IYkjHxr4FpRikff 9uAjmUiH+yIVA0Ep5KrqOPnid4J4+Yny/AFZLrT09O6vJ9U2n+BA3NuRCbE1VLOZ VCdQrXV49vpl9Q0TlgPWPJEohewqLz55jv2uWYNLNmkDo4kzGDiEBXGxLUOtKlrZ 2NyBwM6LDjDHUQ6iIYcEcbSkR/MCAwEAAaOCApowggKWMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFIvYNbLiFdaG8k+zGors7uRPvb3IMB8GA1UdIwQYMBaAFMsC FKXEBNb4QEM7Egysu1uMWeYTMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMC9DQjAyMTRBNUM0MDRENkY4NDA0MzNCMTIwQ0FDQkI1QjhDNTlF NjEzLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CM0EyNEYyMDFENjYxMUUyOEFDODgzN0M3 MkZEMUZGMi95d0lVcGNRRTF2aEFRenNTREt5N1c0eFo1aE0uY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTA2NTU4NTkxMTIxNzU4NjE3OS8xLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDY1NTg1OTExMjE3NTg2MTc5 LzEvOEJEODM1QjJFMjE1RDY4NkYyNEZCMzFBOEFFQ0VFRTQ0RkJEQkRDOC5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAGh+FQwDQYJKoZIhvcNAQELBQADggEBABClhZsC 2BfTEoZByzWmYiwTxnylhOjXL+simvzc7jWQP2O6Z3OE6gmmHCNzufnVkiq2y6ta yLs/U5OE5mlJ3NVfCVmudf9Zya7BqvUu3c3c+ffop6wfllIZRZO+u6tb5lO4faPi Ec4sUVCsLoFP194huN+D64Q9NAgGH/n0Ppi43r6D16S1LRehjv/WiflPjF/DXio2 3x8rpp/ZOR+neT0tuiSlafeR3tXDPSbYgm0NGF2vQIp/plLVWYTU3bmpjgGg60jf Pz0jmKq+0UxvLuKOaTKqgeymdO23JnO2ahmJD7YYm25Wz4c0ssSzmT2E69/GrVi5 jB5YBfK97dsBcBA= -----END CERTIFICATE-----Generated at Sun Jan 25 10:32:41 2026 by rpki-client