This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2339921363F7003C3DEB47ED8534AFE1F482D8D5.cer File: 2339921363F7003C3DEB47ED8534AFE1F482D8D5.cer (raw, json) Hash identifier: 2zHRqXzeTpQcpmXkFwyEHF2JJpiSVjj6GFINeliXpmE= Subject key identifier: 23:39:92:13:63:F7:00:3C:3D:EB:47:ED:85:34:AF:E1:F4:82:D8:D5 Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Certificate serial: 0DACD6F20B71353CF7DA8EFD871825186452EF93 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1065577241947275265/0/2339921363F7003C3DEB47ED8534AFE1F482D8D5.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1065577241947275265/0/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Mon 19 Jan 2026 10:19:07 +0000 Certificate not after: Mon 18 Jan 2027 10:24:07 +0000 Subordinate resources: AS: 24427 IP: 119.235.128.0/18 IP: 202.170.216.0/21 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 19:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:ac:d6:f2:0b:71:35:3c:f7:da:8e:fd:87:18:25:18:64:52:ef:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Validity Not Before: Jan 19 10:19:07 2026 GMT Not After : Jan 18 10:24:07 2027 GMT Subject: CN=2339921363F7003C3DEB47ED8534AFE1F482D8D5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:5b:9d:05:cf:2e:ec:06:8a:b9:c0:00:d6:c3: 2a:43:60:55:bb:08:cf:dc:35:9d:7f:62:a9:d4:aa: 70:1c:ce:ef:f3:24:7f:ff:25:38:76:03:81:5e:05: 9d:e3:81:00:09:05:68:01:49:fb:0b:d0:bc:ef:6b: 25:ed:80:7f:4d:94:24:1f:73:82:d3:c8:bf:c2:50: a8:6a:70:66:94:ff:aa:6e:2e:e1:76:b9:3a:bc:22: 9d:f2:d0:48:b5:8b:e1:f9:45:ab:b6:43:9b:b9:a8: 9e:7e:6b:3e:93:b5:c6:db:fb:4f:73:2d:40:f9:ea: 90:bf:07:5d:52:f5:41:76:74:55:a5:72:93:16:46: 6d:ba:38:f7:28:34:ca:9f:06:16:78:d8:02:29:13: 1b:19:02:5a:3e:69:3a:ce:f9:8c:65:9a:23:25:ca: a6:44:25:48:1e:c4:d3:07:56:13:18:b9:c0:7a:6c: 0b:53:cc:8a:8b:06:c5:21:6e:6e:d9:18:e8:6c:7e: f3:19:d6:4e:a3:29:56:cb:d5:60:e1:d6:1e:0d:3b: da:ae:0e:ad:4f:29:58:fd:24:0c:a9:6a:55:f4:d3: d5:fa:2f:06:aa:14:56:a0:78:31:d4:0f:28:49:46: 58:ae:2c:c4:c4:e9:c6:2a:95:d2:04:39:1a:f1:53: e8:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 23:39:92:13:63:F7:00:3C:3D:EB:47:ED:85:34:AF:E1:F4:82:D8:D5 X509v3 Authority Key Identifier: keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947275265/0/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947275265/0/2339921363F7003C3DEB47ED8534AFE1F482D8D5.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 119.235.128.0/18 202.170.216.0/21 sbgp-autonomousSysNum: critical Autonomous System Numbers: 24427 Signature Algorithm: sha256WithRSAEncryption 56:9e:d4:2d:b9:e4:21:04:69:80:0e:a6:a0:a5:69:7d:7b:ea: d2:9b:72:3b:b5:9d:01:4f:3d:47:05:cf:6d:8b:fb:e1:d3:e9: 85:b9:64:a8:cc:9e:80:cd:94:44:ca:bb:2b:7d:13:3d:eb:36: ab:9a:c2:1e:7f:23:1b:74:a2:c9:e3:c4:10:00:b3:68:d4:63: e6:0f:b8:56:d0:5f:f7:0b:ac:d6:62:31:fd:91:7c:8f:ba:a4: b4:5e:b8:a4:36:7f:b1:69:a9:28:c8:46:64:1a:48:bf:c2:fb: 23:fc:61:a0:31:47:cd:2c:f3:39:93:ce:ac:14:5e:0b:e0:72: 9a:13:e3:39:47:17:76:b2:fd:41:b3:6c:68:39:f1:77:99:0d: 98:75:a0:b9:c2:60:c9:cc:06:e9:45:bd:e2:d9:17:60:f5:e4: fb:b2:88:7f:0a:0b:60:0c:4c:e9:c7:ff:53:a8:48:0e:5f:19: e0:25:9e:83:9b:cf:47:e5:7b:41:09:df:40:a8:e0:99:21:b6: 6a:5d:a0:9d:3a:f2:4d:ba:a3:cd:28:51:55:7d:58:c7:04:9d: 06:ca:f6:1e:2b:c0:38:67:73:c9:d7:5c:18:dd:09:46:fc:d1: 1a:01:51:31:fb:63:f5:77:fa:73:de:93:fb:26:fd:ee:2f:e0: 8b:d5:35:a2 -----BEGIN CERTIFICATE----- MIIFyDCCBLCgAwIBAgIUDazW8gtxNTz32o79hxglGGRS75MwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDExOTEwMTkwN1oX DTI3MDExODEwMjQwN1owMzExMC8GA1UEAxMoMjMzOTkyMTM2M0Y3MDAzQzNERUI0 N0VEODUzNEFGRTFGNDgyRDhENTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALFbnQXPLuwGirnAANbDKkNgVbsIz9w1nX9iqdSqcBzO7/Mkf/8lOHYDgV4F neOBAAkFaAFJ+wvQvO9rJe2Af02UJB9zgtPIv8JQqGpwZpT/qm4u4Xa5OrwinfLQ SLWL4flFq7ZDm7monn5rPpO1xtv7T3MtQPnqkL8HXVL1QXZ0VaVykxZGbbo49yg0 yp8GFnjYAikTGxkCWj5pOs75jGWaIyXKpkQlSB7E0wdWExi5wHpsC1PMiosGxSFu btkY6Gx+8xnWTqMpVsvVYOHWHg072q4OrU8pWP0kDKlqVfTT1fovBqoUVqB4MdQP KElGWK4sxMTpxiqV0gQ5GvFT6MECAwEAAaOCArswggK3MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFCM5khNj9wA8PetH7YU0r+H0gtjVMB8GA1UdIwQYMBaAFKVu hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTA2NTU3NzI0MTk0NzI3NTI2NS8wLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDY1NTc3MjQxOTQ3Mjc1MjY1 LzAvMjMzOTkyMTM2M0Y3MDAzQzNERUI0N0VEODUzNEFGRTFGNDgyRDhENS5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwJQYIKwYBBQUH AQcBAf8EFjAUMBIEAgABMAwDBAZ364ADBAPKqtgwGQYIKwYBBQUHAQgBAf8ECjAI oAYwBAICX2swDQYJKoZIhvcNAQELBQADggEBAFae1C255CEEaYAOpqClaX176tKb cju1nQFPPUcFz22L++HT6YW5ZKjMnoDNlETKuyt9Ez3rNquawh5/Ixt0osnjxBAA s2jUY+YPuFbQX/cLrNZiMf2RfI+6pLReuKQ2f7FpqSjIRmQaSL/C+yP8YaAxR80s 8zmTzqwUXgvgcpoT4zlHF3ay/UGzbGg58XeZDZh1oLnCYMnMBulFveLZF2D15Puy iH8KC2AMTOnH/1OoSA5fGeAlnoObz0fle0EJ30Co4JkhtmpdoJ068k26o80oUVV9 WMcEnQbK9h4rwDhnc8nXXBjdCUb80RoBUTH7Y/V3+nPek/sm/e4v4IvVNaI= -----END CERTIFICATE-----Generated at Sun Jan 25 05:56:55 2026 by rpki-client