This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18841C63CD89383303F1BA048085C2212B03B0BD.cer File: 18841C63CD89383303F1BA048085C2212B03B0BD.cer (raw, json) Hash identifier: fpKg7RASTRDMpyO4BaGFFUijHvzJAqhYLPIYy56fUMo= Subject key identifier: 18:84:1C:63:CD:89:38:33:03:F1:BA:04:80:85:C2:21:2B:03:B0:BD Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Certificate serial: 72B97B8CDB07F9B5A0A4CF9C317D0DCCF4D0E1EA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1065585911217586179/0/18841C63CD89383303F1BA048085C2212B03B0BD.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1065585911217586179/0/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Mon 19 Jan 2026 11:01:46 +0000 Certificate not after: Mon 18 Jan 2027 11:06:46 +0000 Subordinate resources: AS: 38372 IP: 112.73.0.0/16 IP: 119.38.128.0/18 IP: 120.31.0.0/16 IP: 2402:3240::/32 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 19:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:b9:7b:8c:db:07:f9:b5:a0:a4:cf:9c:31:7d:0d:cc:f4:d0:e1:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Validity Not Before: Jan 19 11:01:46 2026 GMT Not After : Jan 18 11:06:46 2027 GMT Subject: CN=18841C63CD89383303F1BA048085C2212B03B0BD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:f8:29:4e:79:37:18:5b:3e:12:26:35:8c:8d: b0:4d:9a:f3:3f:76:01:16:ba:9c:cf:3f:5f:18:9f: 7c:8e:6e:00:e8:9d:ad:cd:62:97:b9:b9:91:ea:a4: 3b:11:3f:fa:ab:a6:0e:21:31:71:b7:8c:f6:7b:a4: bb:e6:35:ad:d5:23:be:7e:19:19:b3:f0:1e:96:d1: f0:9e:9e:26:39:0c:ea:f8:e7:04:ca:7f:c3:50:e0: 39:37:ab:e5:d9:e7:f5:75:af:5c:ea:9b:6c:6b:6b: 82:03:46:33:05:de:61:f8:e5:e8:40:63:14:44:f5: ab:95:dc:5c:ca:92:f7:54:c2:2d:af:f7:c4:0a:9d: 8e:eb:e9:03:70:1f:98:c1:df:a9:d6:31:25:f3:68: fa:85:bc:52:c4:b1:f4:5e:57:6f:d0:3c:48:09:a5: df:96:b7:77:f5:ac:62:5e:3f:bb:6c:aa:d9:9b:c5: a3:38:32:ce:cc:99:22:a2:f6:a1:3e:ce:7f:4c:e5: df:da:6c:f9:af:f7:26:cd:bb:af:42:eb:f3:a3:0b: 5f:2b:c1:a5:a0:fc:5d:6c:96:a2:12:2a:40:4c:f6: dd:26:b6:78:eb:16:8f:08:50:c0:8f:31:e4:a4:fd: 2b:41:b5:dc:e7:0b:f8:23:4b:7b:d6:1b:ce:69:35: 69:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 18:84:1C:63:CD:89:38:33:03:F1:BA:04:80:85:C2:21:2B:03:B0:BD X509v3 Authority Key Identifier: keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217586179/0/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217586179/0/18841C63CD89383303F1BA048085C2212B03B0BD.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 112.73.0.0/16 119.38.128.0/18 120.31.0.0/16 IPv6: 2402:3240::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 38372 Signature Algorithm: sha256WithRSAEncryption 8f:4e:73:0f:07:d6:ce:3f:fe:86:7b:58:8b:45:e0:4c:7c:55: ad:b6:1b:f1:37:f3:3c:1f:db:4d:e1:f7:f4:40:01:3a:bd:8a: a6:11:2e:bf:39:bd:25:16:2c:3d:ac:bb:bf:8a:d3:0e:3f:16: 98:c1:24:45:67:9e:76:ee:8c:33:70:b5:bb:d1:2d:79:88:21: 81:37:82:23:80:25:1c:ca:aa:59:cf:ae:7d:a6:bb:a2:a9:90: 8f:67:a8:3f:a0:cd:62:41:dc:62:3b:46:66:52:3e:45:3f:12: 30:12:cc:e5:20:08:58:7e:04:25:79:0f:33:c5:b9:32:52:d7: ce:09:f6:38:70:43:6b:c5:b2:5c:95:6d:60:65:77:b3:97:18: 64:df:c4:83:1a:b9:d2:70:37:bb:d5:d6:59:8c:63:f1:af:65: a9:1b:66:b7:f2:d1:6f:01:14:80:54:9c:b1:08:82:28:ff:40: 0e:46:33:6e:9b:f7:3e:71:1b:e8:52:d4:7d:bd:03:92:87:84: 38:c2:5d:9c:30:f5:11:b4:7c:3b:d2:f1:24:ba:8a:a9:17:eb: 39:26:23:e1:ca:ba:ea:72:ef:f0:ac:70:8a:98:69:08:04:e3: 2e:d5:9f:17:63:63:61:11:38:d7:d2:57:36:67:bf:8f:93:1d: 1b:f1:84:91 -----BEGIN CERTIFICATE----- MIIF3DCCBMSgAwIBAgIUcrl7jNsH+bWgpM+cMX0NzPTQ4eowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDExOTExMDE0NloX DTI3MDExODExMDY0NlowMzExMC8GA1UEAxMoMTg4NDFDNjNDRDg5MzgzMzAzRjFC QTA0ODA4NUMyMjEyQjAzQjBCRDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANP4KU55NxhbPhImNYyNsE2a8z92ARa6nM8/XxiffI5uAOidrc1il7m5keqk OxE/+qumDiExcbeM9nuku+Y1rdUjvn4ZGbPwHpbR8J6eJjkM6vjnBMp/w1DgOTer 5dnn9XWvXOqbbGtrggNGMwXeYfjl6EBjFET1q5XcXMqS91TCLa/3xAqdjuvpA3Af mMHfqdYxJfNo+oW8UsSx9F5Xb9A8SAml35a3d/WsYl4/u2yq2ZvFozgyzsyZIqL2 oT7Of0zl39ps+a/3Js27r0Lr86MLXyvBpaD8XWyWohIqQEz23Sa2eOsWjwhQwI8x 5KT9K0G13OcL+CNLe9Ybzmk1abcCAwEAAaOCAs8wggLLMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFBiEHGPNiTgzA/G6BICFwiErA7C9MB8GA1UdIwQYMBaAFKVu hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTA2NTU4NTkxMTIxNzU4NjE3OS8wLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDY1NTg1OTExMjE3NTg2MTc5 LzAvMTg4NDFDNjNDRDg5MzgzMzAzRjFCQTA0ODA4NUMyMjEyQjAzQjBCRC5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwOAYIKwYBBQUH AQcBAf8EKTAnMBYEAgABMBADAwBwSQMEBncmgAMDAHgfMA0EAgACMAcDBQAkAjJA MBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwCV5DANBgkqhkiG9w0BAQsFAAOCAQEA j05zDwfWzj/+hntYi0XgTHxVrbYb8TfzPB/bTeH39EABOr2KphEuvzm9JRYsPay7 v4rTDj8WmMEkRWeedu6MM3C1u9EteYghgTeCI4AlHMqqWc+ufaa7oqmQj2eoP6DN YkHcYjtGZlI+RT8SMBLM5SAIWH4EJXkPM8W5MlLXzgn2OHBDa8WyXJVtYGV3s5cY ZN/Egxq50nA3u9XWWYxj8a9lqRtmt/LRbwEUgFScsQiCKP9ADkYzbpv3PnEb6FLU fb0DkoeEOMJdnDD1EbR8O9LxJLqKqRfrOSYj4cq66nLv8KxwiphpCATjLtWfF2Nj YRE419JXNme/j5MdG/GEkQ== -----END CERTIFICATE-----Generated at Sun Jan 25 05:38:10 2026 by rpki-client