This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.cer File: 2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.cer (raw, json) Hash identifier: I0B9CvTs7GlsWuSxlyhgmL6DzdJ3JXG37TAjQcjNzUY= Subject key identifier: 2F:2C:83:39:CC:8E:44:46:7D:F5:BA:5D:0F:66:14:3C:18:D6:B3:60 Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Certificate serial: 47D78F90B347BEF875A2C1770FD635D1E8B32C5F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1065576199948140547/0/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1065576199948140547/0/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Mon 19 Jan 2026 10:18:05 +0000 Certificate not after: Mon 18 Jan 2027 10:23:05 +0000 Subordinate resources: AS: 24426 IP: 43.239.32.0 -- 43.239.51.255 IP: 43.246.0.0 -- 43.246.99.255 IP: 103.35.32.0 -- 103.35.51.255 IP: 103.236.0.0 -- 103.236.51.255 IP: 110.44.144.0/20 IP: 202.10.64.0/20 IP: 2400:9a00::/32 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 19:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:d7:8f:90:b3:47:be:f8:75:a2:c1:77:0f:d6:35:d1:e8:b3:2c:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Validity Not Before: Jan 19 10:18:05 2026 GMT Not After : Jan 18 10:23:05 2027 GMT Subject: CN=2F2C8339CC8E44467DF5BA5D0F66143C18D6B360 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:5a:45:47:25:8b:67:19:23:7a:4e:73:78:e0: 6f:53:df:ba:91:b1:5d:40:87:0b:f3:3f:9c:7f:06: 59:9b:0d:4d:86:8e:d6:fb:ee:a9:c6:8b:d9:d4:a2: 3e:35:c2:bb:6d:b3:90:96:c5:a3:b2:64:f3:ce:4d: ee:2c:74:de:2d:21:f7:e1:47:07:50:5c:2c:c8:36: 35:82:80:07:78:a8:47:46:47:c9:85:4d:7e:80:a0: 0a:18:ea:dd:85:74:69:7e:fe:70:78:b1:b6:1c:c9: 50:fc:df:d5:7c:32:97:ee:b3:8e:91:16:ea:de:4d: 7d:d6:a5:07:60:bc:d9:00:46:0f:7e:32:15:2d:64: c0:0d:c0:3b:2c:ce:ce:97:85:0e:ff:f7:fc:c1:1c: 7b:c6:d2:f5:72:96:ea:09:d3:74:42:fa:8f:28:d0: 36:e8:89:2b:ca:ec:2c:e9:27:36:9f:72:21:57:08: 55:fd:59:e5:56:7a:f6:2f:74:48:e6:e7:70:9b:04: be:26:75:d2:f7:ae:ff:74:a9:44:13:43:f2:9f:e5: 52:e8:73:15:53:07:fa:7e:b7:f2:c7:dc:0a:e6:1a: a7:bb:59:b8:af:5d:73:44:de:31:cb:2a:45:f9:5d: 43:07:40:1c:e6:16:1a:65:f4:23:6b:49:8f:92:df: b7:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 2F:2C:83:39:CC:8E:44:46:7D:F5:BA:5D:0F:66:14:3C:18:D6:B3:60 X509v3 Authority Key Identifier: keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948140547/0/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948140547/0/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.239.32.0-43.239.51.255 43.246.0.0-43.246.99.255 103.35.32.0-103.35.51.255 103.236.0.0-103.236.51.255 110.44.144.0/20 202.10.64.0/20 IPv6: 2400:9a00::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 24426 Signature Algorithm: sha256WithRSAEncryption 58:55:91:aa:e6:f7:7e:d9:ec:f5:96:a9:ce:ed:d7:88:44:ee: 8d:63:8f:0e:37:4e:56:7f:87:7b:04:c0:44:c9:13:76:4d:c8: d3:00:02:95:7b:03:c0:96:20:2a:6f:5f:18:09:06:d9:17:ef: fa:8a:e4:fb:5d:f4:b9:70:89:5b:1c:0a:e3:e5:30:98:0d:59: 86:41:1d:78:80:65:51:75:ba:1c:75:6c:70:41:45:b6:8d:12: 90:82:d8:d1:9b:c8:54:5d:50:09:7f:8c:22:2f:fd:c5:ff:bb: 71:97:54:63:4f:2a:cc:67:4d:de:b6:69:57:66:0d:4f:4f:90: 60:5f:ac:c4:97:16:39:41:f3:98:08:76:c4:6d:cd:7f:a7:4d: ae:f3:3e:a8:78:42:1e:73:98:74:2c:7f:df:67:dd:3c:1b:fe: c6:7a:6b:27:99:92:97:26:b7:fc:2f:37:96:b0:03:87:6a:d8: 16:fb:53:d1:54:83:89:71:5e:d8:1d:b2:c6:8e:27:ef:b8:ef: 75:31:d1:2c:0b:54:71:5c:90:14:a4:04:3d:f1:15:26:4d:3b: c5:a3:a7:a9:74:5b:59:b9:28:d7:cc:41:87:38:8f:e0:08:ab: e8:4e:75:2c:85:34:c7:6b:c8:b4:f8:72:3f:1d:80:b4:12:bd: 6d:58:2e:05 -----BEGIN CERTIFICATE----- MIIGDTCCBPWgAwIBAgIUR9ePkLNHvvh1osF3D9Y10eizLF8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDExOTEwMTgwNVoX DTI3MDExODEwMjMwNVowMzExMC8GA1UEAxMoMkYyQzgzMzlDQzhFNDQ0NjdERjVC QTVEMEY2NjE0M0MxOEQ2QjM2MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANZaRUcli2cZI3pOc3jgb1PfupGxXUCHC/M/nH8GWZsNTYaO1vvuqcaL2dSi PjXCu22zkJbFo7Jk885N7ix03i0h9+FHB1BcLMg2NYKAB3ioR0ZHyYVNfoCgChjq 3YV0aX7+cHixthzJUPzf1Xwyl+6zjpEW6t5NfdalB2C82QBGD34yFS1kwA3AOyzO zpeFDv/3/MEce8bS9XKW6gnTdEL6jyjQNuiJK8rsLOknNp9yIVcIVf1Z5VZ69i90 SObncJsEviZ10veu/3SpRBND8p/lUuhzFVMH+n638sfcCuYap7tZuK9dc0TeMcsq RfldQwdAHOYWGmX0I2tJj5Lft18CAwEAAaOCAwAwggL8MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFC8sgznMjkRGffW6XQ9mFDwY1rNgMB8GA1UdIwQYMBaAFKVu hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTA2NTU3NjE5OTk0ODE0MDU0Ny8wLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDY1NTc2MTk5OTQ4MTQwNTQ3 LzAvMkYyQzgzMzlDQzhFNDQ0NjdERjVCQTVEMEY2NjE0M0MxOEQ2QjM2MC5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwagYIKwYBBQUH AQcBAf8EWzBZMEgEAgABMEIwDAMEBSvvIAMEAivvMDALAwMBK/YDBAIr9mAwDAME BWcjIAMEAmcjMDALAwMCZ+wDBAJn7DADBARuLJADBATKCkAwDQQCAAIwBwMFACQA mgAwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAICX2owDQYJKoZIhvcNAQELBQADggEB AFhVkarm937Z7PWWqc7t14hE7o1jjw43TlZ/h3sEwETJE3ZNyNMAApV7A8CWICpv XxgJBtkX7/qK5Ptd9LlwiVscCuPlMJgNWYZBHXiAZVF1uhx1bHBBRbaNEpCC2NGb yFRdUAl/jCIv/cX/u3GXVGNPKsxnTd62aVdmDU9PkGBfrMSXFjlB85gIdsRtzX+n Ta7zPqh4Qh5zmHQsf99n3Twb/sZ6ayeZkpcmt/wvN5awA4dq2Bb7U9FUg4lxXtgd ssaOJ++473Ux0SwLVHFckBSkBD3xFSZNO8Wjp6l0W1m5KNfMQYc4j+AIq+hOdSyF NMdryLT4cj8dgLQSvW1YLgU= -----END CERTIFICATE-----Generated at Sun Jan 25 05:57:21 2026 by rpki-client