This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0AFFEB3DB5B290035312103A162969BF6E9D25E6.cer File: 0AFFEB3DB5B290035312103A162969BF6E9D25E6.cer (raw, json) Hash identifier: mevn8DGeWXjpf39UK6vmK1g97wtYhAbRC35t7OFSttU= Subject key identifier: 0A:FF:EB:3D:B5:B2:90:03:53:12:10:3A:16:29:69:BF:6E:9D:25:E6 Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Certificate serial: 07D377C2199F605D9F6454F03275E8B21A2D9F76 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1065585911217389571/0/0AFFEB3DB5B290035312103A162969BF6E9D25E6.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1065585911217389571/0/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Mon 19 Jan 2026 10:59:34 +0000 Certificate not after: Mon 18 Jan 2027 11:04:34 +0000 Subordinate resources: AS: 151277 IP: 2401:bda0::/32 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 19:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:d3:77:c2:19:9f:60:5d:9f:64:54:f0:32:75:e8:b2:1a:2d:9f:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Validity Not Before: Jan 19 10:59:34 2026 GMT Not After : Jan 18 11:04:34 2027 GMT Subject: CN=0AFFEB3DB5B290035312103A162969BF6E9D25E6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:b8:84:82:5e:8c:ac:0a:8a:70:2a:1f:93:19: be:d5:b3:b7:cf:29:4d:26:7a:9c:42:aa:64:a7:c3: b1:c9:7c:83:b3:81:f2:e1:56:ca:22:4a:80:fb:8d: ca:0e:ca:e3:e2:54:47:74:14:72:a1:33:a3:b5:ee: ea:3e:58:a4:f0:bc:0d:01:2a:dd:cc:94:09:1b:cf: c9:58:a9:86:a7:b9:20:41:2c:9b:f6:d4:0b:9b:24: cb:3b:89:e5:6b:58:71:f3:df:1e:d8:97:51:2e:49: 6e:9d:71:7b:9e:44:cb:fe:a5:95:df:8f:d6:b5:0d: 3d:fb:67:0f:ee:3e:1a:a5:9f:de:39:d2:26:4e:25: 97:c8:8b:c8:1b:1f:ba:07:4a:61:49:3c:a4:f8:9e: 6e:6c:ca:3a:81:1d:bb:94:01:24:09:d8:e5:4b:eb: 16:b8:7e:8b:a6:1e:2f:80:a1:01:3e:4c:93:cd:49: d8:87:73:35:8d:75:82:ce:45:de:18:06:77:64:8b: 67:c1:bb:d4:81:e7:67:34:cc:b2:ea:47:de:9c:61: b9:7e:13:99:0f:41:bb:11:3f:e9:33:ae:c6:c3:ba: f8:18:3a:3c:44:e9:e5:26:a1:c0:a3:30:7c:be:5f: f7:36:bb:ac:8b:a0:0e:b9:58:cf:26:7f:62:a1:ea: fe:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 0A:FF:EB:3D:B5:B2:90:03:53:12:10:3A:16:29:69:BF:6E:9D:25:E6 X509v3 Authority Key Identifier: keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217389571/0/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217389571/0/0AFFEB3DB5B290035312103A162969BF6E9D25E6.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2401:bda0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 151277 Signature Algorithm: sha256WithRSAEncryption 01:74:34:c6:a0:b7:9f:c2:2b:df:9b:ad:2d:54:37:28:60:c3: 65:99:92:ba:7f:3d:e2:83:7a:6a:22:a0:9f:e6:5b:e5:19:92: 9c:07:e2:be:66:5e:0f:79:c2:63:0b:19:e2:95:75:f8:7f:a3: 7a:94:8d:94:41:e1:d9:03:ed:ae:93:63:4f:1e:fc:98:0c:84: 40:8c:0a:0c:b1:23:0f:c7:e8:72:af:8c:74:f5:9f:f7:88:bc: 49:3d:85:5b:7b:b8:5c:bd:e7:94:ab:df:40:9d:47:e0:64:7b: bd:9f:a1:37:2e:b6:b7:ec:d8:c1:9f:bb:e8:bd:a1:90:31:e8: ff:f2:57:43:18:97:f0:f3:30:88:7d:32:66:80:04:f5:e1:f7: 21:34:48:7e:a1:cd:01:e9:82:ab:c8:0c:7d:8a:28:c7:5b:fb: 43:e1:d5:c7:20:6e:42:1d:81:d9:64:6f:4c:26:dd:b6:64:bd: 6b:c5:f8:f5:20:a4:d4:9a:5d:f7:41:4a:a9:0f:6c:a3:7e:c8: 97:ea:15:c4:3a:f5:60:46:b6:7d:4c:a4:58:35:26:4d:c4:a9: 94:39:08:a9:48:a0:cb:64:bc:2d:54:22:5e:73:ce:d9:fd:6e: 48:1d:74:67:3f:8e:f7:38:e3:f9:a5:a9:c8:e8:b8:49:91:61: 4d:1a:d6:72 -----BEGIN CERTIFICATE----- MIIFxDCCBKygAwIBAgIUB9N3whmfYF2fZFTwMnXoshotn3YwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDExOTEwNTkzNFoX DTI3MDExODExMDQzNFowMzExMC8GA1UEAxMoMEFGRkVCM0RCNUIyOTAwMzUzMTIx MDNBMTYyOTY5QkY2RTlEMjVFNjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALK4hIJejKwKinAqH5MZvtWzt88pTSZ6nEKqZKfDscl8g7OB8uFWyiJKgPuN yg7K4+JUR3QUcqEzo7Xu6j5YpPC8DQEq3cyUCRvPyViphqe5IEEsm/bUC5skyzuJ 5WtYcfPfHtiXUS5Jbp1xe55Ey/6lld+P1rUNPftnD+4+GqWf3jnSJk4ll8iLyBsf ugdKYUk8pPiebmzKOoEdu5QBJAnY5UvrFrh+i6YeL4ChAT5Mk81J2IdzNY11gs5F 3hgGd2SLZ8G71IHnZzTMsupH3pxhuX4TmQ9BuxE/6TOuxsO6+Bg6PETp5SahwKMw fL5f9za7rIugDrlYzyZ/YqHq/pMCAwEAAaOCArcwggKzMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFAr/6z21spADUxIQOhYpab9unSXmMB8GA1UdIwQYMBaAFKVu hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTA2NTU4NTkxMTIxNzM4OTU3MS8wLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDY1NTg1OTExMjE3Mzg5NTcx LzAvMEFGRkVCM0RCNUIyOTAwMzUzMTIxMDNBMTYyOTY5QkY2RTlEMjVFNi5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUH AQcBAf8EETAPMA0EAgACMAcDBQAkAb2gMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwJO7TANBgkqhkiG9w0BAQsFAAOCAQEAAXQ0xqC3n8Ir35utLVQ3KGDDZZmSun89 4oN6aiKgn+Zb5RmSnAfivmZeD3nCYwsZ4pV1+H+jepSNlEHh2QPtrpNjTx78mAyE QIwKDLEjD8focq+MdPWf94i8ST2FW3u4XL3nlKvfQJ1H4GR7vZ+hNy62t+zYwZ+7 6L2hkDHo//JXQxiX8PMwiH0yZoAE9eH3ITRIfqHNAemCq8gMfYoox1v7Q+HVxyBu Qh2B2WRvTCbdtmS9a8X49SCk1Jpd90FKqQ9so37Il+oVxDr1YEa2fUykWDUmTcSp lDkIqUigy2S8LVQiXnPO2f1uSB10Zz+O9zjj+aWpyOi4SZFhTRrWcg== -----END CERTIFICATE-----Generated at Sun Jan 25 06:01:43 2026 by rpki-client