This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1A5D93C2B21C390D054872B547EF671BC1112ED5.cer File: 1A5D93C2B21C390D054872B547EF671BC1112ED5.cer (raw, json) Hash identifier: KelA4EyzqMHdvSae4X5EQ1JNC3ViUYm+coSSmBIoFuk= Subject key identifier: 1A:5D:93:C2:B2:1C:39:0D:05:48:72:B5:47:EF:67:1B:C1:11:2E:D5 Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Certificate serial: 43E436B130436322315E141F20F9EC0E3BA85CBD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1065588993548353538/0/1A5D93C2B21C390D054872B547EF671BC1112ED5.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1065588993548353538/0/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Mon 19 Jan 2026 11:07:33 +0000 Certificate not after: Mon 18 Jan 2027 11:12:33 +0000 Subordinate resources: IP: 43.228.76.0/22 IP: 43.254.252.0/22 IP: 103.23.8.0/22 IP: 103.47.80.0/22 IP: 103.90.192.0/22 IP: 103.203.140.0/22 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 19:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:e4:36:b1:30:43:63:22:31:5e:14:1f:20:f9:ec:0e:3b:a8:5c:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Validity Not Before: Jan 19 11:07:33 2026 GMT Not After : Jan 18 11:12:33 2027 GMT Subject: CN=1A5D93C2B21C390D054872B547EF671BC1112ED5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:62:67:d0:8d:24:6a:b6:78:b1:50:6a:ba:69: 6f:0d:0c:14:72:b7:08:de:bb:6d:9f:a4:76:0f:7d: f9:69:c4:9a:b4:71:2f:da:54:8b:68:cb:0d:f4:ac: 7d:54:95:c5:46:c0:63:99:f5:8b:af:78:e7:f7:8a: bc:a5:85:ec:40:5d:75:03:3d:4f:19:89:fc:e8:35: b9:bd:01:47:6d:6a:58:ce:18:5c:77:c9:64:69:3f: 70:9b:4e:9a:8e:58:4a:57:73:df:8b:18:56:46:c7: 77:cf:27:6c:61:46:4b:ba:e2:a2:b3:e9:6b:6a:34: 5e:ae:8e:d6:ea:f5:20:17:61:8c:7f:9e:8b:5f:b9: f1:38:f5:c6:09:42:8b:74:d2:35:ec:86:19:9f:e5: 05:ec:52:c3:f3:53:b5:78:b8:b2:af:09:0b:ec:23: 55:d5:25:26:03:7e:4c:c6:42:86:60:6d:64:0c:74: 97:d2:19:c6:d2:b6:6b:4b:66:59:16:21:81:03:f6: 72:7a:b4:08:f6:ea:40:7a:3a:ed:20:d1:39:0a:12: 17:70:4c:10:d6:ad:f6:8d:8e:a8:73:32:69:b4:1f: 5c:36:8d:7e:20:b9:89:3d:81:be:fc:b0:73:3f:e0: e7:dc:9c:99:ee:bc:94:0d:a2:59:bd:b3:cd:fa:b2: 76:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 1A:5D:93:C2:B2:1C:39:0D:05:48:72:B5:47:EF:67:1B:C1:11:2E:D5 X509v3 Authority Key Identifier: keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548353538/0/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548353538/0/1A5D93C2B21C390D054872B547EF671BC1112ED5.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.228.76.0/22 43.254.252.0/22 103.23.8.0/22 103.47.80.0/22 103.90.192.0/22 103.203.140.0/22 Signature Algorithm: sha256WithRSAEncryption 57:52:1f:73:63:78:26:ac:ca:bb:d4:7e:01:ca:cf:6f:0f:f2: 82:44:8d:fa:fb:d7:b4:6b:32:2e:c1:80:bb:c1:5e:61:84:00: cd:e5:09:02:1c:23:ef:d8:82:17:f7:eb:30:43:e2:0f:27:d0: 51:37:59:15:04:ae:79:76:d6:8f:24:06:bc:6b:84:94:df:37: ff:ee:f8:2b:5e:89:ff:f7:bc:fb:9a:97:45:fd:71:58:7e:11: 84:37:c1:0b:59:77:c7:23:43:38:c4:d9:72:1a:50:76:4c:ae: 94:5e:ad:77:d8:51:36:1e:08:19:44:cb:1a:80:b7:92:ce:61: c7:21:88:c8:03:d1:94:62:18:76:11:dd:a1:ea:c7:4b:fc:52: 3a:a5:00:fd:48:f2:8c:93:a9:ff:ed:e6:c2:11:41:68:74:12: 60:b1:24:53:58:40:b1:5d:cc:a5:fc:3b:8e:7f:88:d4:df:ef: d5:52:03:6b:dd:3f:85:58:65:93:a6:84:cb:19:73:9d:f6:13: cc:02:19:b6:e0:c5:53:f2:c4:c5:c9:c4:b6:6a:b4:64:ad:d4: 26:b3:01:b7:4d:af:61:6f:99:84:17:31:2e:dd:d0:8d:35:61: 80:35:3c:d9:86:99:a5:94:0e:4d:c0:81:93:ec:a9:c3:46:fc: 2a:98:25:bf -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUQ+Q2sTBDYyIxXhQfIPnsDjuoXL0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDExOTExMDczM1oX DTI3MDExODExMTIzM1owMzExMC8GA1UEAxMoMUE1RDkzQzJCMjFDMzkwRDA1NDg3 MkI1NDdFRjY3MUJDMTExMkVENTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANNiZ9CNJGq2eLFQarppbw0MFHK3CN67bZ+kdg99+WnEmrRxL9pUi2jLDfSs fVSVxUbAY5n1i6945/eKvKWF7EBddQM9TxmJ/Og1ub0BR21qWM4YXHfJZGk/cJtO mo5YSldz34sYVkbHd88nbGFGS7riorPpa2o0Xq6O1ur1IBdhjH+ei1+58Tj1xglC i3TSNeyGGZ/lBexSw/NTtXi4sq8JC+wjVdUlJgN+TMZChmBtZAx0l9IZxtK2a0tm WRYhgQP2cnq0CPbqQHo67SDROQoSF3BMENat9o2OqHMyabQfXDaNfiC5iT2Bvvyw cz/g59ycme68lA2iWb2zzfqydrMCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFBpdk8KyHDkNBUhytUfvZxvBES7VMB8GA1UdIwQYMBaAFKVu hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTA2NTU4ODk5MzU0ODM1MzUzOC8wLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDY1NTg4OTkzNTQ4MzUzNTM4 LzAvMUE1RDkzQzJCMjFDMzkwRDA1NDg3MkI1NDdFRjY3MUJDMTExMkVENS5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwPQYIKwYBBQUH AQcBAf8ELjAsMCoEAgABMCQDBAIr5EwDBAIr/vwDBAJnFwgDBAJnL1ADBAJnWsAD BAJny4wwDQYJKoZIhvcNAQELBQADggEBAFdSH3NjeCasyrvUfgHKz28P8oJEjfr7 17RrMi7BgLvBXmGEAM3lCQIcI+/Yghf36zBD4g8n0FE3WRUErnl21o8kBrxrhJTf N//u+Cteif/3vPual0X9cVh+EYQ3wQtZd8cjQzjE2XIaUHZMrpRerXfYUTYeCBlE yxqAt5LOYcchiMgD0ZRiGHYR3aHqx0v8UjqlAP1I8oyTqf/t5sIRQWh0EmCxJFNY QLFdzKX8O45/iNTf79VSA2vdP4VYZZOmhMsZc532E8wCGbbgxVPyxMXJxLZqtGSt 1CazAbdNr2FvmYQXMS7d0I01YYA1PNmGmaWUDk3AgZPsqcNG/CqYJb8= -----END CERTIFICATE-----Generated at Sun Jan 25 06:01:36 2026 by rpki-client