This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1133679B2C104A0446FA0C3764EEE246C5D21075.cer File: 1133679B2C104A0446FA0C3764EEE246C5D21075.cer (raw, json) Hash identifier: F+LY5n708RsNCatO4XmOv5K4mmxi1Npnsj7tnzxP44Y= Subject key identifier: 11:33:67:9B:2C:10:4A:04:46:FA:0C:37:64:EE:E2:46:C5:D2:10:75 Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Certificate serial: 3196E5E60E08C9816E45C4D5A16006FEAD05A1B3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1065582741577400322/0/1133679B2C104A0446FA0C3764EEE246C5D21075.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1065582741577400322/0/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Mon 19 Jan 2026 10:41:08 +0000 Certificate not after: Mon 18 Jan 2027 10:46:08 +0000 Subordinate resources: AS: 55991 IP: 43.228.204.0/22 IP: 43.228.240.0/22 IP: 103.41.116.0/22 IP: 103.44.144.0/22 IP: 103.56.100.0 -- 103.56.107.255 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 19:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:96:e5:e6:0e:08:c9:81:6e:45:c4:d5:a1:60:06:fe:ad:05:a1:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Validity Not Before: Jan 19 10:41:08 2026 GMT Not After : Jan 18 10:46:08 2027 GMT Subject: CN=1133679B2C104A0446FA0C3764EEE246C5D21075 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:ed:b4:88:44:d9:06:ef:b2:7a:fc:90:a9:2c: 20:94:bf:92:8b:50:6d:fa:7e:fe:0c:00:e9:4e:0e: 2d:18:98:10:9c:9a:93:f9:b5:94:d9:9e:5c:6a:d9: 70:35:f6:35:84:cc:2c:50:c5:3c:e8:5d:8e:b8:f6: 51:28:89:56:b6:10:e0:47:8b:b6:13:9d:69:2e:ad: 56:0c:8f:ec:5c:75:5f:c0:04:7f:2d:d3:c9:e1:67: d5:eb:8c:7e:fb:83:8a:b8:bd:7c:91:77:5f:37:b0: 19:40:ef:23:82:11:be:06:38:87:0d:11:d0:ad:d8: 00:49:15:bb:d6:d0:f9:04:07:38:7f:05:3e:fc:2d: 49:e9:9e:0a:32:fd:a3:d8:b5:0e:96:2e:07:91:2d: 51:c8:8e:f9:bf:d0:99:36:92:b1:9b:01:16:65:80: 51:51:81:df:84:00:73:15:88:59:65:1a:fd:30:bd: db:37:80:38:66:0b:89:6b:9e:da:6a:b5:4b:a4:2d: d8:1d:a9:27:dc:fb:09:05:a0:de:75:0d:0b:b9:62: a0:7f:a0:6b:ae:67:65:60:ab:b2:84:10:05:5a:08: 1d:ff:58:73:e5:38:09:7c:ab:29:48:42:db:b2:35: 81:6f:fb:45:d8:f2:6e:27:de:b3:da:02:48:1a:1b: 41:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 11:33:67:9B:2C:10:4A:04:46:FA:0C:37:64:EE:E2:46:C5:D2:10:75 X509v3 Authority Key Identifier: keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577400322/0/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577400322/0/1133679B2C104A0446FA0C3764EEE246C5D21075.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.228.204.0/22 43.228.240.0/22 103.41.116.0/22 103.44.144.0/22 103.56.100.0-103.56.107.255 sbgp-autonomousSysNum: critical Autonomous System Numbers: 55991 Signature Algorithm: sha256WithRSAEncryption 6a:c1:5d:42:7b:f3:c8:5d:3f:25:b4:95:f9:33:61:6b:ec:00: 20:3a:9c:e7:e8:1d:bb:35:dd:a6:b1:6a:08:4d:cc:62:b0:5c: 62:03:36:82:87:72:71:0f:56:1e:e2:11:68:18:98:6b:ea:1a: 27:dc:ae:d7:15:b1:ef:2e:b2:81:b2:e2:42:1d:b4:2c:05:0c: bc:fd:ad:b9:48:4e:62:df:2f:34:31:6a:a9:04:28:3b:0f:07: 14:b3:82:a7:19:d0:75:f8:b3:62:20:3d:1c:20:e6:26:e8:af: 9d:2e:7a:a1:3d:72:33:52:7c:9c:e1:19:2a:8f:44:fe:f3:c1: fc:99:c9:d8:ee:8f:da:ad:9f:c2:ec:6f:c0:d4:d9:aa:11:24: 2c:bd:20:02:54:d9:89:35:37:72:33:e3:82:17:ee:72:7b:a9: 04:f9:4b:65:30:9c:cd:4b:3f:1f:c2:34:db:14:2a:d4:86:fc: a6:64:14:a1:46:fd:56:f3:18:0a:2a:b2:ff:26:a1:f2:cc:98: ae:8a:91:5e:dd:85:c7:84:7c:ed:32:dc:93:0c:5b:02:39:c5: 15:ed:5b:ec:44:81:0f:76:af:af:ed:7e:01:f4:cd:93:67:8c: a3:83:ba:06:99:64:bc:78:be:15:9b:31:a2:a5:1c:0e:27:c0: 62:be:a9:98 -----BEGIN CERTIFICATE----- MIIF4zCCBMugAwIBAgIUMZbl5g4IyYFuRcTVoWAG/q0FobMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDExOTEwNDEwOFoX DTI3MDExODEwNDYwOFowMzExMC8GA1UEAxMoMTEzMzY3OUIyQzEwNEEwNDQ2RkEw QzM3NjRFRUUyNDZDNUQyMTA3NTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANrttIhE2Qbvsnr8kKksIJS/kotQbfp+/gwA6U4OLRiYEJyak/m1lNmeXGrZ cDX2NYTMLFDFPOhdjrj2USiJVrYQ4EeLthOdaS6tVgyP7Fx1X8AEfy3TyeFn1euM fvuDiri9fJF3XzewGUDvI4IRvgY4hw0R0K3YAEkVu9bQ+QQHOH8FPvwtSemeCjL9 o9i1DpYuB5EtUciO+b/QmTaSsZsBFmWAUVGB34QAcxWIWWUa/TC92zeAOGYLiWue 2mq1S6Qt2B2pJ9z7CQWg3nUNC7lioH+ga65nZWCrsoQQBVoIHf9Yc+U4CXyrKUhC 27I1gW/7Rdjybifes9oCSBobQUECAwEAAaOCAtYwggLSMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFBEzZ5ssEEoERvoMN2Tu4kbF0hB1MB8GA1UdIwQYMBaAFKVu hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTA2NTU4Mjc0MTU3NzQwMDMyMi8wLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDY1NTgyNzQxNTc3NDAwMzIy LzAvMTEzMzY3OUIyQzEwNEEwNDQ2RkEwQzM3NjRFRUUyNDZDNUQyMTA3NS5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwPwYIKwYBBQUH AQcBAf8EMDAuMCwEAgABMCYDBAIr5MwDBAIr5PADBAJnKXQDBAJnLJAwDAMEAmc4 ZAMEAmc4aDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMA2rcwDQYJKoZIhvcNAQEL BQADggEBAGrBXUJ788hdPyW0lfkzYWvsACA6nOfoHbs13aaxaghNzGKwXGIDNoKH cnEPVh7iEWgYmGvqGifcrtcVse8usoGy4kIdtCwFDLz9rblITmLfLzQxaqkEKDsP BxSzgqcZ0HX4s2IgPRwg5ibor50ueqE9cjNSfJzhGSqPRP7zwfyZydjuj9qtn8Ls b8DU2aoRJCy9IAJU2Yk1N3Iz44IX7nJ7qQT5S2UwnM1LPx/CNNsUKtSG/KZkFKFG /VbzGAoqsv8mofLMmK6KkV7dhceEfO0y3JMMWwI5xRXtW+xEgQ92r6/tfgH0zZNn jKODugaZZLx4vhWbMaKlHA4nwGK+qZg= -----END CERTIFICATE-----Generated at Sun Jan 25 11:11:35 2026 by rpki-client