This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/0/D850080623F8BDB006D1C2A5705B45346A8CA661.cer File: D850080623F8BDB006D1C2A5705B45346A8CA661.cer (raw, json) Hash identifier: 1hqS2reNU6w6jabkJ89V24C370HZiqo537RLLWU8IjY= Subject key identifier: D8:50:08:06:23:F8:BD:B0:06:D1:C2:A5:70:5B:45:34:6A:8C:A6:61 Authority key identifier: CB:02:14:A5:C4:04:D6:F8:40:43:3B:12:0C:AC:BB:5B:8C:59:E6:13 Certificate issuer: /CN=A9162E3D0001/serialNumber=CB0214A5C404D6F840433B120CACBB5B8C59E613 Certificate serial: 1259DBC6FAE68ED5E3851D237CDE200C1DACBDDF Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1065585389265747969/1/D850080623F8BDB006D1C2A5705B45346A8CA661.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1065585389265747969/1/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Mon 19 Jan 2026 10:58:13 +0000 Certificate not after: Mon 18 Jan 2027 11:03:13 +0000 Subordinate resources: IP: 157.10.220.0/23 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Jan 2026 09:17:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:59:db:c6:fa:e6:8e:d5:e3:85:1d:23:7c:de:20:0c:1d:ac:bd:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=CB0214A5C404D6F840433B120CACBB5B8C59E613 Validity Not Before: Jan 19 10:58:13 2026 GMT Not After : Jan 18 11:03:13 2027 GMT Subject: CN=D850080623F8BDB006D1C2A5705B45346A8CA661 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:1d:69:4c:80:32:8c:db:03:ab:79:32:a7:98: b6:09:25:fd:8f:bc:b5:6c:12:7f:39:e1:5b:99:95: 63:6e:97:9c:a5:61:6e:12:ff:94:ee:37:3a:9f:ed: fe:f8:f0:f1:de:f0:29:7c:c8:0f:3a:2d:5c:c9:ef: 91:dc:7c:57:de:0c:04:37:2c:6c:28:84:50:d2:06: b0:98:9d:6f:d1:b1:12:35:fd:7f:63:80:c8:e1:39: dd:de:13:28:43:86:75:07:43:a7:73:bb:a6:a7:02: a9:cc:cc:c3:74:3d:66:7d:ff:f2:a8:b8:e4:a7:70: 5a:0f:bc:e0:b9:04:53:6e:15:22:1e:d7:80:4a:f2: eb:5d:8c:3b:7c:de:2b:98:1f:1e:58:3a:e9:41:f6: b6:86:07:39:0c:87:b1:94:59:3b:fa:34:22:fd:ef: 6d:da:66:8c:a3:a8:9e:e7:8f:78:f8:4d:91:d9:ec: 34:9f:d2:8a:91:39:65:b6:03:d2:23:6e:3f:2e:e4: ec:b5:b0:c7:1f:1c:7b:56:88:44:ac:30:50:fc:99: 67:9f:a4:09:69:5f:0f:a7:85:f3:b5:a8:0d:fb:e4: 8a:96:b5:18:16:74:d5:a7:91:df:f4:16:33:0a:6f: 97:7f:c9:53:e7:17:52:af:34:9c:c0:2a:9c:01:b3: 9b:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: D8:50:08:06:23:F8:BD:B0:06:D1:C2:A5:70:5B:45:34:6A:8C:A6:61 X509v3 Authority Key Identifier: keyid:CB:02:14:A5:C4:04:D6:F8:40:43:3B:12:0C:AC:BB:5B:8C:59:E6:13 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265747969/1/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265747969/1/D850080623F8BDB006D1C2A5705B45346A8CA661.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.10.220.0/23 Signature Algorithm: sha256WithRSAEncryption 1f:0c:42:28:7c:cf:f2:c9:50:da:bf:b2:38:15:ae:f0:8f:08: 28:70:76:7a:21:53:69:0a:11:3d:36:08:95:77:82:d2:00:65: 95:c7:ff:ac:3e:ef:c8:e7:93:5f:9e:be:7e:c8:4d:e0:c7:45: c3:ac:fd:31:0a:0e:92:76:45:f5:61:c6:3f:72:32:1e:bc:cf: fd:39:55:1e:fd:aa:f4:dd:51:50:83:d2:e5:ae:57:e2:61:dd: e7:87:39:30:b9:4e:21:d3:80:66:d3:3e:8d:a4:2a:72:08:84: 21:fa:04:b4:c2:93:e9:ec:e6:2b:3c:20:dd:32:a6:21:2f:cf: 79:fd:94:e6:c9:9e:54:fe:84:db:aa:da:df:5e:fd:34:46:33: 7d:83:30:ab:0f:c6:2a:f8:a7:4f:2b:c4:02:1a:8b:fe:16:48: b2:65:fb:53:33:44:d8:66:c8:fb:b6:58:d4:e9:ed:16:49:27: a6:c3:4f:d0:36:f2:9b:69:2b:ec:6b:9b:ac:ac:05:ec:c9:8d: b7:1a:82:b4:30:c8:35:6f:69:4a:63:59:fc:40:bd:8a:f9:ce: d0:07:e9:4e:34:80:bb:c0:b8:63:bf:18:77:02:cf:32:6a:d2: 4b:34:7a:68:ab:16:f5:db:43:a3:89:f1:3c:a1:5e:92:84:c7: 45:88:d6:e2 -----BEGIN CERTIFICATE----- MIIFpzCCBI+gAwIBAgIUElnbxvrmjtXjhR0jfN4gDB2svd8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhDQjAyMTRBNUM0 MDRENkY4NDA0MzNCMTIwQ0FDQkI1QjhDNTlFNjEzMB4XDTI2MDExOTEwNTgxM1oX DTI3MDExODExMDMxM1owMzExMC8GA1UEAxMoRDg1MDA4MDYyM0Y4QkRCMDA2RDFD MkE1NzA1QjQ1MzQ2QThDQTY2MTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOQdaUyAMozbA6t5MqeYtgkl/Y+8tWwSfznhW5mVY26XnKVhbhL/lO43Op/t /vjw8d7wKXzIDzotXMnvkdx8V94MBDcsbCiEUNIGsJidb9GxEjX9f2OAyOE53d4T KEOGdQdDp3O7pqcCqczMw3Q9Zn3/8qi45KdwWg+84LkEU24VIh7XgEry612MO3ze K5gfHlg66UH2toYHOQyHsZRZO/o0Iv3vbdpmjKOonuePePhNkdnsNJ/SipE5ZbYD 0iNuPy7k7LWwxx8ce1aIRKwwUPyZZ5+kCWlfD6eF87WoDfvkipa1GBZ01aeR3/QW Mwpvl3/JU+cXUq80nMAqnAGzm20CAwEAAaOCApowggKWMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFNhQCAYj+L2wBtHCpXBbRTRqjKZhMB8GA1UdIwQYMBaAFMsC FKXEBNb4QEM7Egysu1uMWeYTMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMC9DQjAyMTRBNUM0MDRENkY4NDA0MzNCMTIwQ0FDQkI1QjhDNTlF NjEzLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CM0EyNEYyMDFENjYxMUUyOEFDODgzN0M3 MkZEMUZGMi95d0lVcGNRRTF2aEFRenNTREt5N1c0eFo1aE0uY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTA2NTU4NTM4OTI2NTc0Nzk2OS8xLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDY1NTg1Mzg5MjY1NzQ3OTY5 LzEvRDg1MDA4MDYyM0Y4QkRCMDA2RDFDMkE1NzA1QjQ1MzQ2QThDQTY2MS5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAGdCtwwDQYJKoZIhvcNAQELBQADggEBAB8MQih8 z/LJUNq/sjgVrvCPCChwdnohU2kKET02CJV3gtIAZZXH/6w+78jnk1+evn7ITeDH RcOs/TEKDpJ2RfVhxj9yMh68z/05VR79qvTdUVCD0uWuV+Jh3eeHOTC5TiHTgGbT Po2kKnIIhCH6BLTCk+ns5is8IN0ypiEvz3n9lObJnlT+hNuq2t9e/TRGM32DMKsP xir4p08rxAIai/4WSLJl+1MzRNhmyPu2WNTp7RZJJ6bDT9A28ptpK+xrm6ysBezJ jbcagrQwyDVvaUpjWfxAvYr5ztAH6U40gLvAuGO/GHcCzzJq0ks0emirFvXbQ6OJ 8TyhXpKEx0WI1uI= -----END CERTIFICATE-----Generated at Sun Jan 25 14:19:36 2026 by rpki-client