This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/056F7F9E03587DDFEC6A049EA0F20FA1C0CF157F.cer File: 056F7F9E03587DDFEC6A049EA0F20FA1C0CF157F.cer (raw, json) Hash identifier: TQvvF/Iqw4q71y9ZDfgSbCKA5/2JSITV1YP4xETt0k0= Subject key identifier: 05:6F:7F:9E:03:58:7D:DF:EC:6A:04:9E:A0:F2:0F:A1:C0:CF:15:7F Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Certificate serial: 7419C6B7F40C95F7E1DDF74858F314ABF21DA2E8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1065576199948337155/0/056F7F9E03587DDFEC6A049EA0F20FA1C0CF157F.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1065576199948337155/0/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Mon 19 Jan 2026 10:21:10 +0000 Certificate not after: Mon 18 Jan 2027 10:26:10 +0000 Subordinate resources: AS: 37963 AS: 45102 -- 45104 AS: 59028 AS: 59051 -- 59055 IP: 43.230.32.0/22 IP: 43.250.12.0/22 IP: 45.112.208.0/20 IP: 59.82.0.0/16 IP: 103.216.108.0/22 IP: 110.75.192.0/19 IP: 117.49.0.0/16 IP: 119.38.208.0/20 IP: 121.0.16.0/20 IP: 157.119.240.0/22 IP: 203.119.128.0/17 IP: 2401:2e00::/32 IP: 2401:b180::/32 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 19:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:19:c6:b7:f4:0c:95:f7:e1:dd:f7:48:58:f3:14:ab:f2:1d:a2:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Validity Not Before: Jan 19 10:21:10 2026 GMT Not After : Jan 18 10:26:10 2027 GMT Subject: CN=056F7F9E03587DDFEC6A049EA0F20FA1C0CF157F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:49:b6:06:55:be:e2:2e:d2:24:7f:28:74:11: 88:3c:65:f6:cb:07:c7:b7:a8:88:de:fb:21:86:c5: 37:54:a9:03:70:10:79:96:72:46:ec:8a:39:cc:6b: 25:47:43:bd:9b:1c:73:1c:bf:8b:ff:01:3a:fd:c0: f2:93:da:e2:7a:da:6f:4b:0b:0f:09:77:4e:a8:0a: 7a:9b:b4:19:42:7f:2f:48:de:65:24:11:85:70:c9: fe:f4:79:9b:5d:2f:aa:8f:ce:d3:43:8f:41:b7:e5: 45:ad:4a:37:48:7d:7f:9b:fa:6c:24:a7:02:61:28: 2c:f1:56:91:57:05:40:2f:54:69:b6:06:34:91:54: 34:b2:4e:cf:62:ea:d1:cd:9c:ff:58:b0:3c:f0:81: 84:da:e3:a1:42:5e:18:bb:38:67:9d:e7:71:f8:99: 7d:e2:12:06:b2:b5:b3:72:e5:d5:57:93:34:16:d3: be:ac:81:c0:48:cd:c0:76:ac:12:74:87:4c:cb:4c: 19:cf:15:65:cd:d6:e1:16:56:f0:7d:81:e8:05:79: 34:e4:34:26:ee:1c:98:c7:44:3a:64:9f:0d:d4:d1: 97:64:66:12:54:14:7a:a5:24:0e:46:84:4a:cc:42: 76:bf:76:41:11:c8:72:29:17:b5:50:7c:84:9e:b9: e0:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 05:6F:7F:9E:03:58:7D:DF:EC:6A:04:9E:A0:F2:0F:A1:C0:CF:15:7F X509v3 Authority Key Identifier: keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948337155/0/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948337155/0/056F7F9E03587DDFEC6A049EA0F20FA1C0CF157F.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.230.32.0/22 43.250.12.0/22 45.112.208.0/20 59.82.0.0/16 103.216.108.0/22 110.75.192.0/19 117.49.0.0/16 119.38.208.0/20 121.0.16.0/20 157.119.240.0/22 203.119.128.0/17 IPv6: 2401:2e00::/32 2401:b180::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 37963 45102-45104 59028 59051-59055 Signature Algorithm: sha256WithRSAEncryption 2d:c3:fb:4d:09:f8:00:8c:44:ec:a9:d4:57:95:bf:a0:9d:6a: 67:59:ce:15:f9:4e:72:7a:ae:96:1e:5b:e9:5f:4d:0e:aa:dc: 0a:4f:e8:8d:fd:06:41:6f:10:09:28:d9:48:17:ab:7f:4f:39: bd:58:f1:94:dd:97:0d:b4:08:c4:f3:5b:d1:24:9c:1c:05:2c: 5f:8b:d7:4a:54:a9:98:32:82:88:3c:46:69:90:9f:6d:65:3f: e3:cd:cf:4f:94:bf:87:4f:d5:8a:80:d4:33:17:e0:3f:be:29: 14:dd:72:1a:d8:25:69:8d:39:2d:75:11:38:0f:27:d8:c4:eb: 2f:ec:0f:03:6d:37:7e:6a:4e:67:7f:2e:90:cf:1a:11:20:53: b7:29:07:a5:8e:89:83:eb:a2:66:2d:da:44:b3:a7:f3:ad:03: 74:06:95:1b:d8:59:61:ed:31:96:34:b3:e3:d9:2a:17:bd:90: ac:7b:5f:08:ba:b1:39:92:60:c4:a4:8d:b1:0f:e9:3b:5a:41: e9:cb:11:13:23:e9:7a:42:e8:c7:b4:b0:9b:f1:66:f9:b8:ce: b8:a7:b6:4f:2a:04:bc:93:4e:36:3a:19:08:30:07:40:92:b1: 45:fd:f6:dc:fa:fd:a4:79:a2:16:80:0e:7a:f2:26:de:a5:d3: 81:03:23:4b -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUdBnGt/QMlffh3fdIWPMUq/IdougwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDExOTEwMjExMFoX DTI3MDExODEwMjYxMFowMzExMC8GA1UEAxMoMDU2RjdGOUUwMzU4N0RERkVDNkEw NDlFQTBGMjBGQTFDMENGMTU3RjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAN9JtgZVvuIu0iR/KHQRiDxl9ssHx7eoiN77IYbFN1SpA3AQeZZyRuyKOcxr JUdDvZsccxy/i/8BOv3A8pPa4nrab0sLDwl3TqgKepu0GUJ/L0jeZSQRhXDJ/vR5 m10vqo/O00OPQbflRa1KN0h9f5v6bCSnAmEoLPFWkVcFQC9UabYGNJFUNLJOz2Lq 0c2c/1iwPPCBhNrjoUJeGLs4Z53ncfiZfeISBrK1s3Ll1VeTNBbTvqyBwEjNwHas EnSHTMtMGc8VZc3W4RZW8H2B6AV5NOQ0Ju4cmMdEOmSfDdTRl2RmElQUeqUkDkaE SsxCdr92QRHIcikXtVB8hJ654CsCAwEAAaOCAyMwggMfMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFAVvf54DWH3f7GoEnqDyD6HAzxV/MB8GA1UdIwQYMBaAFKVu hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTA2NTU3NjE5OTk0ODMzNzE1NS8wLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDY1NTc2MTk5OTQ4MzM3MTU1 LzAvMDU2RjdGOUUwMzU4N0RERkVDNkEwNDlFQTBGMjBGQTFDMENGMTU3Ri5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwbwYIKwYBBQUH AQcBAf8EYDBeMEYEAgABMEADBAIr5iADBAIr+gwDBAQtcNADAwA7UgMEAmfYbAME BW5LwAMDAHUxAwQEdybQAwQEeQAQAwQCnXfwAwQHy3eAMBQEAgACMA4DBQAkAS4A AwUAJAGxgDA3BggrBgEFBQcBCAEB/wQoMCagJDAiAgMAlEswCgIDALAuAgMAsDAC AwDmlDAKAgMA5qsCAwDmrzANBgkqhkiG9w0BAQsFAAOCAQEALcP7TQn4AIxE7KnU V5W/oJ1qZ1nOFflOcnqulh5b6V9NDqrcCk/ojf0GQW8QCSjZSBerf085vVjxlN2X DbQIxPNb0SScHAUsX4vXSlSpmDKCiDxGaZCfbWU/483PT5S/h0/VioDUMxfgP74p FN1yGtglaY05LXUROA8n2MTrL+wPA203fmpOZ38ukM8aESBTtykHpY6Jg+uiZi3a RLOn860DdAaVG9hZYe0xljSz49kqF72QrHtfCLqxOZJgxKSNsQ/pO1pB6csREyPp ekLox7Swm/Fm+bjOuKe2TyoEvJNONjoZCDAHQJKxRf323Pr9pHmiFoAOevIm3qXT gQMjSw== -----END CERTIFICATE-----Generated at Sun Jan 25 05:57:31 2026 by rpki-client