This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1BF077990B3EF2F79478B657B4C3AF7BDEB8F260.cer File: 1BF077990B3EF2F79478B657B4C3AF7BDEB8F260.cer (raw, json) Hash identifier: nQwnH2g8OS/ItEB1z7nl8Jdk6S+C3sXaq0OPUhFav9k= Subject key identifier: 1B:F0:77:99:0B:3E:F2:F7:94:78:B6:57:B4:C3:AF:7B:DE:B8:F2:60 Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Certificate serial: 3419AC65CFD647038BE3510B8F91D33E5D71CD48 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1065583221972402179/0/1BF077990B3EF2F79478B657B4C3AF7BDEB8F260.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1065583221972402179/0/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Mon 19 Jan 2026 10:50:37 +0000 Certificate not after: Mon 18 Jan 2027 10:55:37 +0000 Subordinate resources: AS: 139139 IP: 103.152.186.0/23 IP: 2406:3340::/32 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 19:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:19:ac:65:cf:d6:47:03:8b:e3:51:0b:8f:91:d3:3e:5d:71:cd:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Validity Not Before: Jan 19 10:50:37 2026 GMT Not After : Jan 18 10:55:37 2027 GMT Subject: CN=1BF077990B3EF2F79478B657B4C3AF7BDEB8F260 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:e7:13:a8:1a:73:83:11:8e:22:89:0c:eb:b3: 0f:18:9c:04:c1:ec:0e:0a:b9:08:91:f4:ac:84:23: cf:35:a0:c5:0a:7e:3b:91:9e:b8:4a:4e:83:7b:ea: 9e:2a:3e:62:08:f8:8d:db:70:31:5e:d1:9e:27:ae: 25:e8:f9:70:0c:47:f5:59:16:fa:3e:2e:46:f0:c9: cd:96:19:ef:3a:b8:ff:94:89:fe:90:a7:c1:80:8b: c4:54:31:ef:c8:d8:a0:0d:ac:2d:c6:0c:de:06:73: f6:a0:63:4e:9f:89:63:43:59:c6:65:12:38:29:f3: 68:e7:7a:60:db:f0:b6:de:0a:9d:bf:0b:c1:ed:48: 70:17:f4:38:f8:d9:eb:2a:f4:1e:6a:af:f9:c1:4f: 83:d0:54:a9:c8:3e:da:6e:c2:e4:f3:b0:88:a2:1d: 25:e6:c2:a0:62:2c:b7:f0:f0:67:d4:24:30:9b:db: 00:0c:a7:cf:c1:06:4f:1d:97:69:96:df:fa:d8:e3: b0:f4:e8:1e:56:91:f6:50:fd:1f:da:9c:05:a7:e2: 19:52:be:dd:ba:20:f3:c6:22:8f:ec:07:2f:1c:9b: 72:85:e2:68:bf:23:11:36:9c:a6:73:b1:a3:04:dc: 65:b9:83:76:7b:3c:00:3b:7b:8b:d5:43:c8:6e:44: 28:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 1B:F0:77:99:0B:3E:F2:F7:94:78:B6:57:B4:C3:AF:7B:DE:B8:F2:60 X509v3 Authority Key Identifier: keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1065583221972402179/0/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1065583221972402179/0/1BF077990B3EF2F79478B657B4C3AF7BDEB8F260.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.152.186.0/23 IPv6: 2406:3340::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 139139 Signature Algorithm: sha256WithRSAEncryption 30:53:44:51:a0:e3:98:e9:a0:9f:7e:d7:6c:e5:0d:3c:7a:9d: f7:84:15:ea:96:3b:ae:d3:5b:16:a4:85:17:4f:79:fe:52:6f: 21:4c:ce:4a:29:9f:ef:89:00:56:0d:4e:e9:16:36:f8:2c:ab: c9:01:50:ef:22:a5:42:7a:db:5e:35:4d:e1:49:97:9b:5a:54: 08:ae:e7:e0:ad:b8:3e:a0:76:9a:76:dd:c2:45:7b:48:b0:02: 80:20:56:96:3e:45:bf:d4:8e:12:78:be:d0:13:3e:72:6c:c4: c6:23:71:b4:03:ed:d1:3c:a1:78:ce:0e:11:2c:85:46:63:f1: be:28:a2:0b:78:d0:bf:8f:2f:64:cf:ab:ed:33:0d:06:64:ba: 98:db:c1:49:c6:50:da:45:cf:74:99:a2:d8:89:86:4b:07:52: 13:08:0d:38:f4:66:89:65:35:95:b5:e9:3e:1b:b2:da:19:1e: 90:6a:33:11:df:58:5a:07:7c:2f:58:0c:08:7d:0b:fa:ff:99: d3:20:fd:79:9f:7c:b2:f0:6f:42:5d:c3:7d:36:a3:b5:d7:e2: 12:be:e3:99:41:1d:ef:49:c7:ce:fb:00:fb:21:bd:1a:61:d5: 19:f2:96:c6:ff:d7:62:a1:02:65:e0:2d:60:b0:b9:56:78:88: 2b:e6:0b:53 -----BEGIN CERTIFICATE----- MIIF0jCCBLqgAwIBAgIUNBmsZc/WRwOL41ELj5HTPl1xzUgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDExOTEwNTAzN1oX DTI3MDExODEwNTUzN1owMzExMC8GA1UEAxMoMUJGMDc3OTkwQjNFRjJGNzk0NzhC NjU3QjRDM0FGN0JERUI4RjI2MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAPTnE6gac4MRjiKJDOuzDxicBMHsDgq5CJH0rIQjzzWgxQp+O5GeuEpOg3vq nio+Ygj4jdtwMV7RnieuJej5cAxH9VkW+j4uRvDJzZYZ7zq4/5SJ/pCnwYCLxFQx 78jYoA2sLcYM3gZz9qBjTp+JY0NZxmUSOCnzaOd6YNvwtt4Knb8Lwe1IcBf0OPjZ 6yr0Hmqv+cFPg9BUqcg+2m7C5POwiKIdJebCoGIst/DwZ9QkMJvbAAynz8EGTx2X aZbf+tjjsPToHlaR9lD9H9qcBafiGVK+3bog88Yij+wHLxybcoXiaL8jETacpnOx owTcZbmDdns8ADt7i9VDyG5EKIUCAwEAAaOCAsUwggLBMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFBvwd5kLPvL3lHi2V7TDr3veuPJgMB8GA1UdIwQYMBaAFKVu hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTA2NTU4MzIyMTk3MjQwMjE3OS8wLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDY1NTgzMjIxOTcyNDAyMTc5 LzAvMUJGMDc3OTkwQjNFRjJGNzk0NzhCNjU3QjRDM0FGN0JERUI4RjI2MC5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUH AQcBAf8EHzAdMAwEAgABMAYDBAFnmLowDQQCAAIwBwMFACQGM0AwGgYIKwYBBQUH AQgBAf8ECzAJoAcwBQIDAh+DMA0GCSqGSIb3DQEBCwUAA4IBAQAwU0RRoOOY6aCf ftds5Q08ep33hBXqljuu01sWpIUXT3n+Um8hTM5KKZ/viQBWDU7pFjb4LKvJAVDv IqVCetteNU3hSZebWlQIrufgrbg+oHaadt3CRXtIsAKAIFaWPkW/1I4SeL7QEz5y bMTGI3G0A+3RPKF4zg4RLIVGY/G+KKILeNC/jy9kz6vtMw0GZLqY28FJxlDaRc90 maLYiYZLB1ITCA049GaJZTWVtek+G7LaGR6QajMR31haB3wvWAwIfQv6/5nTIP15 n3yy8G9CXcN9NqO11+ISvuOZQR3vScfO+wD7Ib0aYdUZ8pbG/9dioQJl4C1gsLlW eIgr5gtT -----END CERTIFICATE-----Generated at Sun Jan 25 05:55:38 2026 by rpki-client