This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/0/D369F71DFD96519DEB4BCA28C2A7B2374B242704.cer File: D369F71DFD96519DEB4BCA28C2A7B2374B242704.cer (raw, json) Hash identifier: yaLbEp/Ox4j4gvJPdR9xu/NP9n1/yj4LD0OxDLQd6M8= Subject key identifier: D3:69:F7:1D:FD:96:51:9D:EB:4B:CA:28:C2:A7:B2:37:4B:24:27:04 Authority key identifier: CB:02:14:A5:C4:04:D6:F8:40:43:3B:12:0C:AC:BB:5B:8C:59:E6:13 Certificate issuer: /CN=A9162E3D0001/serialNumber=CB0214A5C404D6F840433B120CACBB5B8C59E613 Certificate serial: 2227CEF23D94FDA9BC0E349D5E548198E766914D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/1/D369F71DFD96519DEB4BCA28C2A7B2374B242704.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/1/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Mon 19 Jan 2026 10:59:51 +0000 Certificate not after: Mon 18 Jan 2027 11:04:51 +0000 Subordinate resources: IP: 160.191.110.0/23 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Jan 2026 09:17:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:27:ce:f2:3d:94:fd:a9:bc:0e:34:9d:5e:54:81:98:e7:66:91:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=CB0214A5C404D6F840433B120CACBB5B8C59E613 Validity Not Before: Jan 19 10:59:51 2026 GMT Not After : Jan 18 11:04:51 2027 GMT Subject: CN=D369F71DFD96519DEB4BCA28C2A7B2374B242704 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:59:4c:b1:e7:16:31:ba:52:f5:95:b4:63:4b: cb:1d:eb:b5:76:df:be:ea:95:89:d1:a6:85:40:ef: 1d:50:b6:6e:78:70:66:ad:b3:f9:ff:a5:1e:94:cd: 22:c0:4b:5b:3a:93:ec:ad:ad:75:9b:e7:2e:0f:76: 03:e0:f4:ac:64:1a:4e:97:97:7b:ff:24:29:0c:20: f7:3d:78:ff:b9:1a:7c:87:af:8e:05:cc:44:a5:3b: 22:41:44:f1:bb:c9:e5:e3:d2:23:0d:58:bd:0b:a1: 4e:4b:39:93:89:f0:bc:0a:04:5b:99:69:65:ee:93: 9b:d4:6e:97:fc:83:f4:7e:e1:99:c2:f0:c9:84:88: 31:38:6c:d9:8a:4d:f4:f4:4c:00:5c:70:7b:91:f5: b7:78:23:f4:ec:70:5c:53:e3:6e:d6:c4:4f:5b:eb: b3:ea:39:0c:48:0a:5f:33:28:aa:36:8a:a1:38:34: b6:30:85:e6:7b:65:81:ae:4f:5c:de:f4:0d:c3:49: 09:3a:c8:74:19:ea:10:76:ed:f8:cb:b6:d2:c6:8a: bc:0e:31:1c:66:88:ed:85:63:b3:27:db:bc:8b:b3: 32:50:6e:9c:da:8f:4f:12:a0:3f:66:2f:0c:0a:92: 1f:b5:21:71:cf:13:9b:9c:95:42:cf:cc:ee:89:f5: ee:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: D3:69:F7:1D:FD:96:51:9D:EB:4B:CA:28:C2:A7:B2:37:4B:24:27:04 X509v3 Authority Key Identifier: keyid:CB:02:14:A5:C4:04:D6:F8:40:43:3B:12:0C:AC:BB:5B:8C:59:E6:13 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/1/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/1/D369F71DFD96519DEB4BCA28C2A7B2374B242704.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.191.110.0/23 Signature Algorithm: sha256WithRSAEncryption 94:33:c2:1b:42:66:00:15:93:ba:dd:95:42:9a:69:a1:88:60: 80:8c:bd:e7:71:5b:21:cd:38:ed:91:40:a8:7c:8b:74:9f:76: f7:6b:bc:6e:19:88:91:8d:a5:8f:80:51:eb:ad:c4:54:86:d6: 24:7d:1e:6d:d2:a4:17:59:02:70:f2:7e:44:6b:cd:87:34:c1: 22:e1:bf:bd:6e:67:54:2f:cd:5f:b8:f0:80:11:0b:e5:8f:53: c1:88:99:16:40:35:d3:65:d1:2e:0f:2b:83:12:6e:a9:f8:ba: e1:f6:5f:9a:57:f6:6c:f8:d5:87:b7:8e:73:1c:c3:28:45:57: c4:8e:f2:8d:a4:a3:95:b2:fd:05:1f:9e:67:c6:16:18:fe:01: 7c:09:bb:3e:28:09:38:10:df:ae:b2:f1:d2:bc:c7:f2:82:1e: 00:a2:25:09:51:3b:d0:8e:8b:8c:cd:cd:90:28:b7:35:c7:0f: 93:4b:b8:da:70:bc:74:20:92:0a:b4:06:65:a2:ed:be:03:12: cc:55:a5:36:98:d0:b6:99:78:52:2c:dc:99:b8:2e:b5:ef:57: a1:cc:4e:3c:8d:e7:5d:d8:44:39:64:a4:c8:e1:dc:b4:98:4e: 94:7a:d2:f2:96:8b:49:92:2c:56:2a:24:ff:40:f5:01:34:70: 8b:5b:a9:15 -----BEGIN CERTIFICATE----- MIIFpzCCBI+gAwIBAgIUIifO8j2U/am8DjSdXlSBmOdmkU0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhDQjAyMTRBNUM0 MDRENkY4NDA0MzNCMTIwQ0FDQkI1QjhDNTlFNjEzMB4XDTI2MDExOTEwNTk1MVoX DTI3MDExODExMDQ1MVowMzExMC8GA1UEAxMoRDM2OUY3MURGRDk2NTE5REVCNEJD QTI4QzJBN0IyMzc0QjI0MjcwNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAN1ZTLHnFjG6UvWVtGNLyx3rtXbfvuqVidGmhUDvHVC2bnhwZq2z+f+lHpTN IsBLWzqT7K2tdZvnLg92A+D0rGQaTpeXe/8kKQwg9z14/7kafIevjgXMRKU7IkFE 8bvJ5ePSIw1YvQuhTks5k4nwvAoEW5lpZe6Tm9Rul/yD9H7hmcLwyYSIMThs2YpN 9PRMAFxwe5H1t3gj9OxwXFPjbtbET1vrs+o5DEgKXzMoqjaKoTg0tjCF5ntlga5P XN70DcNJCTrIdBnqEHbt+Mu20saKvA4xHGaI7YVjsyfbvIuzMlBunNqPTxKgP2Yv DAqSH7Uhcc8Tm5yVQs/M7on17k8CAwEAAaOCApowggKWMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFNNp9x39llGd60vKKMKnsjdLJCcEMB8GA1UdIwQYMBaAFMsC FKXEBNb4QEM7Egysu1uMWeYTMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMC9DQjAyMTRBNUM0MDRENkY4NDA0MzNCMTIwQ0FDQkI1QjhDNTlF NjEzLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CM0EyNEYyMDFENjYxMUUyOEFDODgzN0M3 MkZEMUZGMi95d0lVcGNRRTF2aEFRenNTREt5N1c0eFo1aE0uY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTA2NTU4NTkxMTIxNzQ1NTEwNy8xLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDY1NTg1OTExMjE3NDU1MTA3 LzEvRDM2OUY3MURGRDk2NTE5REVCNEJDQTI4QzJBN0IyMzc0QjI0MjcwNC5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAGgv24wDQYJKoZIhvcNAQELBQADggEBAJQzwhtC ZgAVk7rdlUKaaaGIYICMvedxWyHNOO2RQKh8i3SfdvdrvG4ZiJGNpY+AUeutxFSG 1iR9Hm3SpBdZAnDyfkRrzYc0wSLhv71uZ1QvzV+48IARC+WPU8GImRZANdNl0S4P K4MSbqn4uuH2X5pX9mz41Ye3jnMcwyhFV8SO8o2ko5Wy/QUfnmfGFhj+AXwJuz4o CTgQ366y8dK8x/KCHgCiJQlRO9COi4zNzZAotzXHD5NLuNpwvHQgkgq0BmWi7b4D EsxVpTaY0LaZeFIs3Jm4LrXvV6HMTjyN513YRDlkpMjh3LSYTpR60vKWi0mSLFYq JP9A9QE0cItbqRU= -----END CERTIFICATE-----Generated at Mon Jan 26 02:02:04 2026 by rpki-client