This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/0/A5B2B14D97513B6C0C82B1E540703EB912DFD229.cer File: A5B2B14D97513B6C0C82B1E540703EB912DFD229.cer (raw, json) Hash identifier: 0vGkmaTdF/cPG2QQ5aviW+cPg3IqrCLaFoM15NkMuJA= Subject key identifier: A5:B2:B1:4D:97:51:3B:6C:0C:82:B1:E5:40:70:3E:B9:12:DF:D2:29 Authority key identifier: CB:02:14:A5:C4:04:D6:F8:40:43:3B:12:0C:AC:BB:5B:8C:59:E6:13 Certificate issuer: /CN=A9162E3D0001/serialNumber=CB0214A5C404D6F840433B120CACBB5B8C59E613 Certificate serial: 660A49BF9ECB540EF572C02CEE03A7E9E3A4BC4C Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1065887644090630145/1/A5B2B14D97513B6C0C82B1E540703EB912DFD229.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1065887644090630145/1/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Tue 20 Jan 2026 06:52:00 +0000 Certificate not after: Tue 19 Jan 2027 06:57:00 +0000 Subordinate resources: IP: 47.92.0.0 -- 47.127.255.255 IP: 139.129.0.0/16 IP: 139.196.0.0/16 IP: 139.224.0.0/16 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Jan 2026 09:17:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:0a:49:bf:9e:cb:54:0e:f5:72:c0:2c:ee:03:a7:e9:e3:a4:bc:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=CB0214A5C404D6F840433B120CACBB5B8C59E613 Validity Not Before: Jan 20 06:52:00 2026 GMT Not After : Jan 19 06:57:00 2027 GMT Subject: CN=A5B2B14D97513B6C0C82B1E540703EB912DFD229 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:c1:22:ef:8d:aa:41:5a:0e:c9:ec:26:e0:50: b0:79:cb:04:bd:5e:65:49:d7:e6:52:e0:56:b4:1b: 2b:e4:f9:a5:c1:df:7a:05:33:c7:38:96:0e:0d:97: 4a:dc:f9:c6:57:1b:9f:50:9b:03:5f:c1:ec:b7:a0: 7b:78:0a:98:36:20:ed:b9:e3:31:d5:b0:21:2d:f3: 35:a4:61:80:d4:55:1b:bc:20:fa:52:46:55:85:2e: 7d:55:6e:f2:46:c0:5d:3e:ab:74:8c:31:94:ba:d0: 26:c2:0c:2b:9a:b6:f3:8a:cf:f7:4c:7a:ea:62:bd: 6d:77:86:72:4e:aa:79:d8:42:bc:8f:63:b3:d3:3c: df:f9:61:24:6a:2a:f0:ce:fc:b2:0f:0d:d0:cd:d7: db:aa:b7:5a:dc:c6:55:ba:4e:23:0a:ef:9f:5d:02: 18:28:e1:ed:dc:bc:cb:89:1a:e5:f7:20:cd:50:e1: 47:ce:c6:38:4f:d9:ef:c2:8e:41:61:42:32:bf:c5: 57:99:43:73:0d:0c:fe:5f:ef:c7:4f:c6:b2:26:13: e1:f9:63:dd:03:39:9c:b5:5a:f3:35:c4:cf:ac:e1: fa:45:53:fd:55:d6:87:bd:55:86:78:48:c0:4a:a5: f1:9b:95:dd:ae:6a:76:51:65:6e:21:81:89:e5:98: 20:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: A5:B2:B1:4D:97:51:3B:6C:0C:82:B1:E5:40:70:3E:B9:12:DF:D2:29 X509v3 Authority Key Identifier: keyid:CB:02:14:A5:C4:04:D6:F8:40:43:3B:12:0C:AC:BB:5B:8C:59:E6:13 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1065887644090630145/1/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1065887644090630145/1/A5B2B14D97513B6C0C82B1E540703EB912DFD229.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 47.92.0.0-47.127.255.255 139.129.0.0/16 139.196.0.0/16 139.224.0.0/16 Signature Algorithm: sha256WithRSAEncryption 04:1c:e3:71:ae:78:6c:a8:aa:38:3e:79:12:72:b9:5a:b6:c5: 2a:ba:25:4c:53:b1:2b:a6:66:1b:17:9f:1c:2f:0a:3a:40:3c: 10:49:59:a3:9d:34:06:17:cc:80:32:40:f9:ae:28:37:29:ca: 92:27:b5:45:d7:2b:b7:1f:f0:f6:5d:7f:3e:56:0d:73:f9:b7: 6c:92:ff:70:91:39:82:fb:c8:12:7e:5c:31:fb:d6:55:a0:30: f3:18:64:66:48:0e:c2:00:b1:69:b8:39:b5:78:a6:1b:8a:62: c7:91:87:eb:27:3c:be:b1:0b:c5:24:aa:3d:27:a3:8f:d6:0d: 2e:b9:b6:77:91:a0:07:1e:2b:78:c1:86:10:c2:ca:6d:4b:59: 11:2a:82:51:f6:15:79:2a:26:1b:5f:04:fe:74:94:35:b2:01: 09:4d:e3:52:d0:ab:4c:70:d8:e3:6f:8c:fe:71:b1:ef:5c:27: ce:61:4d:49:24:dc:f8:70:9e:18:47:5f:50:9e:59:fd:ec:6b: 74:d7:a4:da:6f:e3:cf:5b:ba:d6:24:ad:17:d2:65:28:e9:dc: e9:bf:07:8d:62:44:50:39:5c:93:d0:e2:c9:cb:2c:84:a9:29: 51:a7:2e:98:c1:ed:55:2f:59:c2:27:40:b6:9a:bf:29:00:73: b3:27:3e:c7 -----BEGIN CERTIFICATE----- MIIFvDCCBKSgAwIBAgIUZgpJv57LVA71csAs7gOn6eOkvEwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhDQjAyMTRBNUM0 MDRENkY4NDA0MzNCMTIwQ0FDQkI1QjhDNTlFNjEzMB4XDTI2MDEyMDA2NTIwMFoX DTI3MDExOTA2NTcwMFowMzExMC8GA1UEAxMoQTVCMkIxNEQ5NzUxM0I2QzBDODJC MUU1NDA3MDNFQjkxMkRGRDIyOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOTBIu+NqkFaDsnsJuBQsHnLBL1eZUnX5lLgVrQbK+T5pcHfegUzxziWDg2X Stz5xlcbn1CbA1/B7Lege3gKmDYg7bnjMdWwIS3zNaRhgNRVG7wg+lJGVYUufVVu 8kbAXT6rdIwxlLrQJsIMK5q284rP90x66mK9bXeGck6qedhCvI9js9M83/lhJGoq 8M78sg8N0M3X26q3WtzGVbpOIwrvn10CGCjh7dy8y4ka5fcgzVDhR87GOE/Z78KO QWFCMr/FV5lDcw0M/l/vx0/GsiYT4flj3QM5nLVa8zXEz6zh+kVT/VXWh71VhnhI wEql8ZuV3a5qdlFlbiGBieWYINUCAwEAAaOCAq8wggKrMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFKWysU2XUTtsDIKx5UBwPrkS39IpMB8GA1UdIwQYMBaAFMsC FKXEBNb4QEM7Egysu1uMWeYTMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMC9DQjAyMTRBNUM0MDRENkY4NDA0MzNCMTIwQ0FDQkI1QjhDNTlF NjEzLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CM0EyNEYyMDFENjYxMUUyOEFDODgzN0M3 MkZEMUZGMi95d0lVcGNRRTF2aEFRenNTREt5N1c0eFo1aE0uY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTA2NTg4NzY0NDA5MDYzMDE0NS8xLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDY1ODg3NjQ0MDkwNjMwMTQ1 LzEvQTVCMkIxNEQ5NzUxM0I2QzBDODJCMUU1NDA3MDNFQjkxMkRGRDIyOS5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwNAYIKwYBBQUH AQcBAf8EJTAjMCEEAgABMBswCgMDAi9cAwMHLwADAwCLgQMDAIvEAwMAi+AwDQYJ KoZIhvcNAQELBQADggEBAAQc43GueGyoqjg+eRJyuVq2xSq6JUxTsSumZhsXnxwv CjpAPBBJWaOdNAYXzIAyQPmuKDcpypIntUXXK7cf8PZdfz5WDXP5t2yS/3CROYL7 yBJ+XDH71lWgMPMYZGZIDsIAsWm4ObV4phuKYseRh+snPL6xC8Ukqj0no4/WDS65 tneRoAceK3jBhhDCym1LWREqglH2FXkqJhtfBP50lDWyAQlN41LQq0xw2ONvjP5x se9cJ85hTUkk3PhwnhhHX1CeWf3sa3TXpNpv489butYkrRfSZSjp3Om/B41iRFA5 XJPQ4snLLISpKVGnLpjB7VUvWcInQLaavykAc7MnPsc= -----END CERTIFICATE-----Generated at Sun Jan 25 14:20:40 2026 by rpki-client