This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.cer File: 30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.cer (raw, json) Hash identifier: kZlY6LhEOfcbEOsH8DH3M1qDMWyCq1LCIjBjVDd0qog= Subject key identifier: 30:77:46:53:B3:B7:BF:15:B3:8B:8B:BF:FD:73:A5:C2:D1:EE:F3:8F Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Certificate serial: 0E8D17BED0FF04C5CEA64367DBF2D75E665944B0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1065585649345691650/0/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1065585649345691650/0/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Mon 19 Jan 2026 10:52:14 +0000 Certificate not after: Mon 18 Jan 2027 10:57:14 +0000 Subordinate resources: AS: 137718 IP: 14.103.0.0/16 IP: 27.54.192.0/18 IP: 27.103.0.0/16 IP: 27.109.32.0/19 IP: 36.0.64.0/18 IP: 42.157.64.0/18 IP: 43.236.0.0/16 IP: 43.239.0.0/19 IP: 43.247.200.0/22 IP: 45.255.0.0/18 IP: 49.4.192.0/18 IP: 60.55.0.0/16 IP: 61.45.128.0/18 IP: 101.78.32.0/19 IP: 101.96.160.0 -- 101.96.255.255 IP: 101.126.0.0/16 IP: 101.238.0.0/16 IP: 101.251.96.0/19 IP: 103.35.0.0/19 IP: 103.64.32.0 -- 103.64.127.255 IP: 103.159.142.0/23 IP: 103.223.32.0/19 IP: 103.238.20.0/22 IP: 106.2.160.0 -- 106.2.223.255 IP: 112.75.0.0/16 IP: 113.31.0.0 -- 113.31.95.255 IP: 113.209.0.0/17 IP: 115.103.0.0/16 IP: 115.172.64.0/19 IP: 115.172.192.0/18 IP: 115.173.128.0/17 IP: 115.181.0.0/16 IP: 115.190.0.0/15 IP: 116.70.0.0/18 IP: 116.213.64.0 -- 116.213.255.255 IP: 117.76.0.0/15 IP: 117.78.64.0 -- 117.78.255.255 IP: 117.121.0.0/19 IP: 117.121.64.0/18 IP: 117.122.128.0/18 IP: 118.126.0.0/19 IP: 118.145.32.0 -- 118.145.255.255 IP: 118.196.0.0/15 IP: 119.10.0.0/17 IP: 119.16.0.0/16 IP: 120.128.0.0 -- 120.130.255.255 IP: 123.100.0.0/19 IP: 123.137.0.0/16 IP: 123.199.160.0 -- 123.199.255.255 IP: 124.15.192.0/18 IP: 124.174.0.0/15 IP: 124.242.0.0/16 IP: 125.61.192.0/18 IP: 125.169.0.0/16 IP: 180.184.0.0/15 IP: 202.70.0.0/19 IP: 203.128.32.0/19 IP: 203.128.96.0/19 IP: 203.175.192.0 -- 203.176.63.255 IP: 210.16.128.0/19 IP: 210.78.96.0/19 IP: 220.112.64.0/18 IP: 221.136.0.0/16 IP: 223.255.0.0/17 IP: 2406:d440::/32 IP: 240b:6000::/20 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 19:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:8d:17:be:d0:ff:04:c5:ce:a6:43:67:db:f2:d7:5e:66:59:44:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Validity Not Before: Jan 19 10:52:14 2026 GMT Not After : Jan 18 10:57:14 2027 GMT Subject: CN=30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:85:86:10:ad:6f:56:6c:a0:ba:cc:2d:18:99: 6f:3b:a9:ac:cd:fe:08:e0:72:4e:7d:ad:a0:0f:53: 1d:1b:f8:b0:e5:a7:97:78:e7:36:8f:e4:9d:71:cf: 44:e1:8e:87:39:7e:f5:03:5c:f3:8c:8b:dd:26:d2: e0:c1:30:69:20:b0:a8:07:23:bd:ef:0f:2b:80:df: b9:9a:29:73:22:b0:29:5f:10:d9:7c:ab:8e:f2:0f: ca:eb:e4:1e:1b:c6:bc:ae:1f:8b:82:a4:45:01:5c: 70:7c:8a:92:30:b2:51:cd:82:b6:35:46:a4:7a:86: 0e:2c:42:e0:90:44:f4:46:eb:85:f8:64:f9:00:2c: 6d:2e:c8:6e:f7:40:fd:ad:04:c8:92:52:3d:64:cc: 75:a7:1e:87:a7:70:e5:8d:e7:dc:96:c4:62:6f:f4: ea:9c:d5:36:da:f9:54:d3:16:b4:9b:86:7a:7d:c5: 44:b6:62:8f:79:ff:d3:97:20:11:4a:77:1c:47:aa: 23:64:18:7f:1d:d1:68:2b:91:e6:e7:bb:9f:f5:3b: d6:10:c7:68:cb:11:c0:68:0e:f3:4b:f1:88:60:d4: c7:94:ec:08:63:10:24:09:c8:36:89:95:59:52:48: a1:71:02:55:57:8b:71:7f:d6:05:67:a2:80:63:0d: 25:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 30:77:46:53:B3:B7:BF:15:B3:8B:8B:BF:FD:73:A5:C2:D1:EE:F3:8F X509v3 Authority Key Identifier: keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345691650/0/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345691650/0/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 14.103.0.0/16 27.54.192.0/18 27.103.0.0/16 27.109.32.0/19 36.0.64.0/18 42.157.64.0/18 43.236.0.0/16 43.239.0.0/19 43.247.200.0/22 45.255.0.0/18 49.4.192.0/18 60.55.0.0/16 61.45.128.0/18 101.78.32.0/19 101.96.160.0-101.96.255.255 101.126.0.0/16 101.238.0.0/16 101.251.96.0/19 103.35.0.0/19 103.64.32.0-103.64.127.255 103.159.142.0/23 103.223.32.0/19 103.238.20.0/22 106.2.160.0-106.2.223.255 112.75.0.0/16 113.31.0.0-113.31.95.255 113.209.0.0/17 115.103.0.0/16 115.172.64.0/19 115.172.192.0/18 115.173.128.0/17 115.181.0.0/16 115.190.0.0/15 116.70.0.0/18 116.213.64.0-116.213.255.255 117.76.0.0/15 117.78.64.0-117.78.255.255 117.121.0.0/19 117.121.64.0/18 117.122.128.0/18 118.126.0.0/19 118.145.32.0-118.145.255.255 118.196.0.0/15 119.10.0.0/17 119.16.0.0/16 120.128.0.0-120.130.255.255 123.100.0.0/19 123.137.0.0/16 123.199.160.0-123.199.255.255 124.15.192.0/18 124.174.0.0/15 124.242.0.0/16 125.61.192.0/18 125.169.0.0/16 180.184.0.0/15 202.70.0.0/19 203.128.32.0/19 203.128.96.0/19 203.175.192.0-203.176.63.255 210.16.128.0/19 210.78.96.0/19 220.112.64.0/18 221.136.0.0/16 223.255.0.0/17 IPv6: 2406:d440::/32 240b:6000::/20 sbgp-autonomousSysNum: critical Autonomous System Numbers: 137718 Signature Algorithm: sha256WithRSAEncryption 94:21:07:1b:94:65:6e:34:a3:fb:f5:ca:6b:83:15:f7:86:52: e3:72:54:61:e7:d8:2f:5d:e9:78:04:5c:43:26:fe:3f:4d:06: 1f:e2:97:6f:1f:8b:7a:69:7b:56:8d:9a:56:c4:78:fb:63:a4: 64:d1:56:0e:fe:56:ba:74:52:ef:e1:70:f3:c3:d8:ab:09:48: 39:71:74:67:e0:26:6a:87:ed:18:5b:88:dc:ec:81:f6:91:05: 35:83:a3:74:1b:36:9d:cc:3c:d2:c3:22:19:0a:ab:06:30:9c: 0a:c5:52:2e:db:51:0c:7a:f0:23:5a:71:12:c7:a2:80:7f:10: 02:b2:6d:be:a5:7f:23:24:91:cd:68:fd:ef:4d:01:11:cf:70: 18:69:25:14:f3:9a:39:5b:49:bf:1b:27:35:27:24:03:7a:5c: ed:be:4a:88:a8:fc:d3:4a:86:26:70:91:5d:83:94:b3:46:54: 8d:60:7b:99:88:e3:99:04:58:c0:5f:66:7b:09:50:31:07:16: 1c:88:23:e5:1b:b5:5e:d9:d8:c5:ca:06:8f:ce:6b:f9:8b:4a: e0:c5:2b:29:44:08:00:ce:48:1a:1b:8d:83:f7:eb:08:cd:ad: db:41:e6:35:f1:4b:c5:e8:6d:fd:cf:22:8b:65:6b:04:7a:62: 6d:47:1d:ad -----BEGIN CERTIFICATE----- MIIHkTCCBnmgAwIBAgIUDo0XvtD/BMXOpkNn2/LXXmZZRLAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDExOTEwNTIxNFoX DTI3MDExODEwNTcxNFowMzExMC8GA1UEAxMoMzA3NzQ2NTNCM0I3QkYxNUIzOEI4 QkJGRkQ3M0E1QzJEMUVFRjM4RjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKaFhhCtb1ZsoLrMLRiZbzuprM3+COByTn2toA9THRv4sOWnl3jnNo/knXHP ROGOhzl+9QNc84yL3SbS4MEwaSCwqAcjve8PK4DfuZopcyKwKV8Q2XyrjvIPyuvk HhvGvK4fi4KkRQFccHyKkjCyUc2CtjVGpHqGDixC4JBE9Ebrhfhk+QAsbS7IbvdA /a0EyJJSPWTMdaceh6dw5Y3n3JbEYm/06pzVNtr5VNMWtJuGen3FRLZij3n/05cg EUp3HEeqI2QYfx3RaCuR5ue7n/U71hDHaMsRwGgO80vxiGDUx5TsCGMQJAnINomV WVJIoXECVVeLcX/WBWeigGMNJT8CAwEAAaOCBIQwggSAMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFDB3RlOzt78Vs4uLv/1zpcLR7vOPMB8GA1UdIwQYMBaAFKVu hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTA2NTU4NTY0OTM0NTY5MTY1MC8wLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDY1NTg1NjQ5MzQ1NjkxNjUw LzAvMzA3NzQ2NTNCM0I3QkYxNUIzOEI4QkJGRkQ3M0E1QzJEMUVFRjM4Ri5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwggHrBggrBgEF BQcBBwEB/wSCAdowggHWMIIBvQQCAAEwggG1AwMADmcDBAYbNsADAwAbZwMEBRtt IAMEBiQAQAMEBiqdQAMDACvsAwQFK+8AAwQCK/fIAwQGLf8AAwQGMQTAAwMAPDcD BAY9LYADBAVlTiAwCwMEBWVgoAMDAGVgAwMAZX4DAwBl7gMEBWX7YAMEBWcjADAM AwQFZ0AgAwQHZ0AAAwQBZ5+OAwQFZ98gAwQCZ+4UMAwDBAVqAqADBAVqAsADAwBw SzALAwMAcR8DBAVxH0ADBAdx0QADAwBzZwMEBXOsQAMEBnOswAMEB3OtgAMDAHO1 AwMBc74DBAZ0RgAwCwMEBnTVQAMDAXTUAwMBdUwwCwMEBnVOQAMDAHVOAwQFdXkA AwQGdXlAAwQGdXqAAwQFdn4AMAsDBAV2kSADAwF2kAMDAXbEAwQHdwoAAwMAdxAw CgMDB3iAAwMAeIIDBAV7ZAADAwB7iTALAwQFe8egAwMDe8ADBAZ8D8ADAwF8rgMD AHzyAwQGfT3AAwMAfakDAwG0uAMEBcpGAAMEBcuAIAMEBcuAYDAMAwQGy6/AAwQG y7AAAwQF0hCAAwQF0k5gAwQG3HBAAwMA3YgDBAff/wAwEwQCAAIwDQMFACQG1EAD BAQkC2AwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDAhn2MA0GCSqGSIb3DQEBCwUA A4IBAQCUIQcblGVuNKP79cprgxX3hlLjclRh59gvXel4BFxDJv4/TQYf4pdvH4t6 aXtWjZpWxHj7Y6Rk0VYO/la6dFLv4XDzw9irCUg5cXRn4CZqh+0YW4jc7IH2kQU1 g6N0GzadzDzSwyIZCqsGMJwKxVIu21EMevAjWnESx6KAfxACsm2+pX8jJJHNaP3v TQERz3AYaSUU85o5W0m/Gyc1JyQDelztvkqIqPzTSoYmcJFdg5SzRlSNYHuZiOOZ BFjAX2Z7CVAxBxYciCPlG7Ve2djFygaPzmv5i0rgxSspRAgAzkgaG42D9+sIza3b QeY18UvF6G39zyKLZWsEemJtRx2t -----END CERTIFICATE-----Generated at Sun Jan 25 05:55:38 2026 by rpki-client