This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/0/F8EFF99E092A172620E148B3D7996FD9A2D8B852.cer File: F8EFF99E092A172620E148B3D7996FD9A2D8B852.cer (raw, json) Hash identifier: 1qt+cCCuDTlBXzYb1bgFUCarAsIMkBcy8I1HtsFXcZk= Subject key identifier: F8:EF:F9:9E:09:2A:17:26:20:E1:48:B3:D7:99:6F:D9:A2:D8:B8:52 Authority key identifier: CB:02:14:A5:C4:04:D6:F8:40:43:3B:12:0C:AC:BB:5B:8C:59:E6:13 Certificate issuer: /CN=A9162E3D0001/serialNumber=CB0214A5C404D6F840433B120CACBB5B8C59E613 Certificate serial: 6167570E6210F8C821C9293DEAEDC0BD241E5421 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1065585911217651715/1/F8EFF99E092A172620E148B3D7996FD9A2D8B852.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1065585911217651715/1/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Mon 19 Jan 2026 11:02:03 +0000 Certificate not after: Mon 18 Jan 2027 11:07:03 +0000 Subordinate resources: IP: 165.101.70.0/23 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Jan 2026 09:17:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:67:57:0e:62:10:f8:c8:21:c9:29:3d:ea:ed:c0:bd:24:1e:54:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=CB0214A5C404D6F840433B120CACBB5B8C59E613 Validity Not Before: Jan 19 11:02:03 2026 GMT Not After : Jan 18 11:07:03 2027 GMT Subject: CN=F8EFF99E092A172620E148B3D7996FD9A2D8B852 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:d4:6c:47:8b:3f:f3:bc:aa:62:e3:4b:06:73: 60:25:2f:5f:86:9f:37:30:db:99:87:0d:95:69:fb: 26:85:65:3f:62:72:53:3a:e4:8e:84:53:96:a4:a2: 16:c7:87:6f:95:1f:b0:51:9b:ab:3f:24:3e:07:3d: 01:60:b3:f3:5f:ae:d8:a2:83:fd:13:e9:9e:bf:ce: f4:ae:52:35:d1:97:1f:8b:12:18:e8:73:1a:fb:9c: 00:fe:a6:88:4f:3d:be:02:23:27:c2:ad:eb:62:a7: b6:ec:b2:b2:5b:94:e2:91:c1:75:98:52:d2:b2:19: 9a:04:e6:62:5f:f1:6f:0d:5d:66:9d:65:18:d0:bc: 8f:a1:ae:71:5f:77:27:a2:f2:dd:7e:c2:b4:ee:99: c9:19:bd:86:dc:7f:76:13:98:d4:5d:3d:91:49:59: f3:55:13:46:28:a4:8f:d4:22:98:8a:0e:37:a5:8c: 5b:f4:28:de:06:40:75:be:0f:12:1d:fd:2f:14:f9: 2a:14:96:9c:5b:1f:20:60:bd:78:d8:88:b1:c4:f5: 1d:d1:6c:08:b5:99:e4:fa:c8:0b:6e:ba:d0:85:73: b3:79:08:c8:05:d2:b9:82:71:5c:35:c5:36:df:f7: da:7e:3f:de:6f:30:f5:60:9e:71:45:ca:03:b6:db: 6d:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: F8:EF:F9:9E:09:2A:17:26:20:E1:48:B3:D7:99:6F:D9:A2:D8:B8:52 X509v3 Authority Key Identifier: keyid:CB:02:14:A5:C4:04:D6:F8:40:43:3B:12:0C:AC:BB:5B:8C:59:E6:13 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217651715/1/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217651715/1/F8EFF99E092A172620E148B3D7996FD9A2D8B852.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 165.101.70.0/23 Signature Algorithm: sha256WithRSAEncryption 9b:17:f2:47:7d:8d:69:b7:29:41:db:bd:44:eb:7b:f0:7c:12: 4e:51:75:3d:43:e6:7d:6e:b4:23:8a:23:69:eb:c3:93:34:37: 8f:f0:24:ff:96:49:6c:77:86:6f:e5:72:51:4f:64:dd:ea:5b: a4:d4:90:4c:bd:6c:84:dc:55:81:c2:d2:ce:a3:d9:8b:b0:be: c8:6b:52:dd:e2:87:ee:07:41:e4:da:08:f4:77:cf:ef:a9:f3: ed:a8:ef:af:54:bf:9d:5b:d4:6b:9e:3f:d6:3f:c9:84:3e:bd: 60:d1:ea:f5:67:ed:57:3e:31:62:77:dd:40:b5:a0:56:50:b0: 52:1c:f8:68:f4:40:cb:37:7f:bc:3a:aa:36:a2:4e:ac:3f:0b: 70:c7:7e:9b:0e:de:d7:c3:e3:a1:b6:8e:36:18:42:2d:1d:9e: 92:97:19:06:02:4c:75:a4:35:d0:86:4c:02:d8:be:e4:8f:23: 5e:96:d1:6b:7b:20:4c:a4:03:35:95:13:67:2a:aa:f4:68:57: 7a:a8:34:02:3a:95:1a:b8:58:f6:8c:9b:47:36:1d:2d:49:02: 27:98:57:da:7b:2d:a8:5c:4c:15:d5:51:6c:c2:c9:3c:07:2c: b4:73:b8:79:79:46:7e:93:c2:b7:93:cf:78:0c:7a:1c:6f:05: 5b:2b:85:ac -----BEGIN CERTIFICATE----- MIIFpzCCBI+gAwIBAgIUYWdXDmIQ+MghySk96u3AvSQeVCEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhDQjAyMTRBNUM0 MDRENkY4NDA0MzNCMTIwQ0FDQkI1QjhDNTlFNjEzMB4XDTI2MDExOTExMDIwM1oX DTI3MDExODExMDcwM1owMzExMC8GA1UEAxMoRjhFRkY5OUUwOTJBMTcyNjIwRTE0 OEIzRDc5OTZGRDlBMkQ4Qjg1MjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANPUbEeLP/O8qmLjSwZzYCUvX4afNzDbmYcNlWn7JoVlP2JyUzrkjoRTlqSi FseHb5UfsFGbqz8kPgc9AWCz81+u2KKD/RPpnr/O9K5SNdGXH4sSGOhzGvucAP6m iE89vgIjJ8Kt62KntuyysluU4pHBdZhS0rIZmgTmYl/xbw1dZp1lGNC8j6GucV93 J6Ly3X7CtO6ZyRm9htx/dhOY1F09kUlZ81UTRiikj9QimIoON6WMW/Qo3gZAdb4P Eh39LxT5KhSWnFsfIGC9eNiIscT1HdFsCLWZ5PrIC2660IVzs3kIyAXSuYJxXDXF Nt/32n4/3m8w9WCecUXKA7bbbccCAwEAAaOCApowggKWMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFPjv+Z4JKhcmIOFIs9eZb9mi2LhSMB8GA1UdIwQYMBaAFMsC FKXEBNb4QEM7Egysu1uMWeYTMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMC9DQjAyMTRBNUM0MDRENkY4NDA0MzNCMTIwQ0FDQkI1QjhDNTlF NjEzLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CM0EyNEYyMDFENjYxMUUyOEFDODgzN0M3 MkZEMUZGMi95d0lVcGNRRTF2aEFRenNTREt5N1c0eFo1aE0uY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTA2NTU4NTkxMTIxNzY1MTcxNS8xLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDY1NTg1OTExMjE3NjUxNzE1 LzEvRjhFRkY5OUUwOTJBMTcyNjIwRTE0OEIzRDc5OTZGRDlBMkQ4Qjg1Mi5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAGlZUYwDQYJKoZIhvcNAQELBQADggEBAJsX8kd9 jWm3KUHbvUTre/B8Ek5RdT1D5n1utCOKI2nrw5M0N4/wJP+WSWx3hm/lclFPZN3q W6TUkEy9bITcVYHC0s6j2YuwvshrUt3ih+4HQeTaCPR3z++p8+2o769Uv51b1Gue P9Y/yYQ+vWDR6vVn7Vc+MWJ33UC1oFZQsFIc+Gj0QMs3f7w6qjaiTqw/C3DHfpsO 3tfD46G2jjYYQi0dnpKXGQYCTHWkNdCGTALYvuSPI16W0Wt7IEykAzWVE2cqqvRo V3qoNAI6lRq4WPaMm0c2HS1JAieYV9p7LahcTBXVUWzCyTwHLLRzuHl5Rn6TwreT z3gMehxvBVsrhaw= -----END CERTIFICATE-----Generated at Sun Jan 25 11:12:14 2026 by rpki-client