This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/25C6596195B162409A5AFAA92570F258BAD3C42D.cer File: 25C6596195B162409A5AFAA92570F258BAD3C42D.cer (raw, json) Hash identifier: J8PQnZ2I+QErKzEUWRxsnG+lYVFc1jh7P+nKVBMjL8I= Subject key identifier: 25:C6:59:61:95:B1:62:40:9A:5A:FA:A9:25:70:F2:58:BA:D3:C4:2D Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Certificate serial: 69E68442BD10BD5114BF227E9125740630793227 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1065585911216996355/0/25C6596195B162409A5AFAA92570F258BAD3C42D.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1065585911216996355/0/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Mon 19 Jan 2026 10:53:00 +0000 Certificate not after: Mon 18 Jan 2027 10:58:00 +0000 Subordinate resources: AS: 131516 IP: 43.224.176.0/22 IP: 43.255.184.0/22 IP: 103.43.196.0/22 IP: 103.239.184.0/22 IP: 103.248.152.0/22 IP: 116.89.144.0/20 IP: 116.196.128.0 -- 116.196.175.255 IP: 123.176.80.0/20 IP: 150.242.240.0/22 IP: 211.147.96.0/19 IP: 2407:23c0::/32 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 19:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:e6:84:42:bd:10:bd:51:14:bf:22:7e:91:25:74:06:30:79:32:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Validity Not Before: Jan 19 10:53:00 2026 GMT Not After : Jan 18 10:58:00 2027 GMT Subject: CN=25C6596195B162409A5AFAA92570F258BAD3C42D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:66:36:b3:58:f3:07:69:76:b6:5c:dc:4f:43: bc:fb:6c:80:12:89:99:70:42:8f:75:dc:75:82:a9: e6:95:c5:9d:b9:5b:52:72:e2:e2:75:73:29:c2:70: e1:d9:e2:ac:5d:d7:09:c8:dc:15:f4:7a:90:61:9d: 68:37:02:5f:7d:a1:06:fd:31:cf:44:14:7e:7b:33: dd:1d:de:ea:08:ed:7a:6e:6b:02:9e:24:a3:65:42: e5:e3:5d:8d:b2:83:51:08:93:c1:8f:c5:f3:7d:e2: 69:22:64:c4:e8:f4:25:c9:0f:9e:c5:e9:86:44:fb: cb:b0:8b:1e:8e:5c:88:ad:b2:ae:05:30:c9:36:15: 13:f7:b6:78:df:5b:9f:58:1d:c8:03:b5:db:80:22: c8:8e:1a:ee:14:6e:89:ac:dc:75:55:2a:51:e4:ae: ba:0b:09:00:fd:96:d7:dd:0e:f6:c0:38:f4:56:7e: f3:2a:9a:a4:e5:f6:6e:a0:96:75:35:70:ff:44:20: 92:16:e6:47:48:06:f8:fb:1d:f8:db:a1:a9:55:57: a5:b7:65:29:2d:17:74:f0:18:df:88:2d:3a:0d:68: 2a:3c:df:b3:5b:41:e5:67:b5:e8:bc:26:45:b7:3b: 57:69:4f:a3:dc:63:bb:48:f5:80:ad:80:e0:f6:de: 12:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 25:C6:59:61:95:B1:62:40:9A:5A:FA:A9:25:70:F2:58:BA:D3:C4:2D X509v3 Authority Key Identifier: keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911216996355/0/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911216996355/0/25C6596195B162409A5AFAA92570F258BAD3C42D.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.224.176.0/22 43.255.184.0/22 103.43.196.0/22 103.239.184.0/22 103.248.152.0/22 116.89.144.0/20 116.196.128.0-116.196.175.255 123.176.80.0/20 150.242.240.0/22 211.147.96.0/19 IPv6: 2407:23c0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 131516 Signature Algorithm: sha256WithRSAEncryption 34:e4:02:61:0e:44:b1:15:e0:3b:54:35:75:1f:e1:87:19:f1: f0:e2:23:3a:fa:72:6a:61:45:79:fc:25:07:50:da:2f:a5:2d: bf:b5:2f:81:16:13:70:d2:ce:79:f6:15:65:62:96:c0:2d:dd: 1c:46:1f:12:95:e4:9a:fb:e1:07:c5:40:54:c7:bc:fc:1d:4e: e9:e0:02:96:c3:34:a6:35:a8:ef:0d:8d:2c:40:29:df:e3:49: 7a:2c:6e:5f:20:79:18:2b:f8:ff:64:7e:0b:2d:d9:2f:96:83: 8f:a9:0d:06:87:8e:93:ca:d0:ff:67:bb:6f:6b:b3:04:6d:70: 67:f3:9d:44:7a:28:c5:47:b9:c2:76:cb:82:4e:cb:ae:9b:6a: 5b:ea:ef:34:cb:f4:fd:1a:91:7a:71:81:0b:a7:34:7c:40:f5: ab:3d:e4:53:3e:55:61:15:e2:7a:29:c4:cc:70:6a:a2:13:eb: a6:43:7d:e9:3f:c1:dd:4a:78:f9:a1:e8:09:13:39:44:0c:00: c5:4b:f5:4b:d9:fe:cc:46:64:df:11:9a:4e:6f:4d:4d:1f:07: 2a:99:8a:55:b2:6b:43:8b:37:ff:dd:26:87:bf:44:27:a2:52: 66:0f:fd:67:56:4b:2f:d1:b2:11:b8:10:60:02:3a:52:bf:b1: 3a:83:af:a5 -----BEGIN CERTIFICATE----- MIIGEDCCBPigAwIBAgIUaeaEQr0QvVEUvyJ+kSV0BjB5MicwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDExOTEwNTMwMFoX DTI3MDExODEwNTgwMFowMzExMC8GA1UEAxMoMjVDNjU5NjE5NUIxNjI0MDlBNUFG QUE5MjU3MEYyNThCQUQzQzQyRDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAL9mNrNY8wdpdrZc3E9DvPtsgBKJmXBCj3XcdYKp5pXFnblbUnLi4nVzKcJw 4dnirF3XCcjcFfR6kGGdaDcCX32hBv0xz0QUfnsz3R3e6gjtem5rAp4ko2VC5eNd jbKDUQiTwY/F833iaSJkxOj0JckPnsXphkT7y7CLHo5ciK2yrgUwyTYVE/e2eN9b n1gdyAO124AiyI4a7hRuiazcdVUqUeSuugsJAP2W190O9sA49FZ+8yqapOX2bqCW dTVw/0QgkhbmR0gG+Psd+NuhqVVXpbdlKS0XdPAY34gtOg1oKjzfs1tB5We16Lwm Rbc7V2lPo9xju0j1gK2A4PbeEoECAwEAAaOCAwMwggL/MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFCXGWWGVsWJAmlr6qSVw8li608QtMB8GA1UdIwQYMBaAFKVu hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTA2NTU4NTkxMTIxNjk5NjM1NS8wLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDY1NTg1OTExMjE2OTk2MzU1 LzAvMjVDNjU5NjE5NUIxNjI0MDlBNUFGQUE5MjU3MEYyNThCQUQzQzQyRC5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwbAYIKwYBBQUH AQcBAf8EXTBbMEoEAgABMEQDBAIr4LADBAIr/7gDBAJnK8QDBAJn77gDBAJn+JgD BAR0WZAwDAMEB3TEgAMEBHTEoAMEBHuwUAMEApby8AMEBdOTYDANBAIAAjAHAwUA JAcjwDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMCAbwwDQYJKoZIhvcNAQELBQAD ggEBADTkAmEORLEV4DtUNXUf4YcZ8fDiIzr6cmphRXn8JQdQ2i+lLb+1L4EWE3DS znn2FWVilsAt3RxGHxKV5Jr74QfFQFTHvPwdTungApbDNKY1qO8NjSxAKd/jSXos bl8geRgr+P9kfgst2S+Wg4+pDQaHjpPK0P9nu29rswRtcGfznUR6KMVHucJ2y4JO y66balvq7zTL9P0akXpxgQunNHxA9as95FM+VWEV4nopxMxwaqIT66ZDfek/wd1K ePmh6AkTOUQMAMVL9UvZ/sxGZN8Rmk5vTU0fByqZilWya0OLN//dJoe/RCeiUmYP /WdWSy/RshG4EGACOlK/sTqDr6U= -----END CERTIFICATE-----Generated at Sun Jan 25 06:01:44 2026 by rpki-client