This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3685DAC8828B3EB4989761422A77AA7B265F96CE.cer File: 3685DAC8828B3EB4989761422A77AA7B265F96CE.cer (raw, json) Hash identifier: a/+Z72pGthoDuzoRKQHK4HwcXXOWyxFBNqbjA37/eOg= Subject key identifier: 36:85:DA:C8:82:8B:3E:B4:98:97:61:42:2A:77:AA:7B:26:5F:96:CE Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Certificate serial: 5547524F27CCB78008C04678A86967BBEC1124EC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/0/3685DAC8828B3EB4989761422A77AA7B265F96CE.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/0/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Mon 19 Jan 2026 10:32:58 +0000 Certificate not after: Mon 18 Jan 2027 10:37:58 +0000 Subordinate resources: AS: 59078 IP: 43.242.52.0/22 IP: 101.48.0.0/16 IP: 103.235.84.0/22 IP: 2402:e7c0::/32 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 19:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:47:52:4f:27:cc:b7:80:08:c0:46:78:a8:69:67:bb:ec:11:24:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Validity Not Before: Jan 19 10:32:58 2026 GMT Not After : Jan 18 10:37:58 2027 GMT Subject: CN=3685DAC8828B3EB4989761422A77AA7B265F96CE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:31:1d:f9:85:65:24:75:c5:4e:77:87:38:4d: 6f:15:e9:2b:26:25:93:21:f6:fe:9a:05:35:59:f5: d0:7d:ed:52:50:91:9c:0c:38:a2:fa:a7:e4:a7:a3: 4e:54:1d:b8:49:2a:bf:68:f9:60:2d:76:89:fd:a7: 0d:f3:bb:04:3b:55:02:5e:b5:40:a4:52:59:61:d1: 2e:4f:71:6c:b8:97:7a:9f:c4:47:11:90:e6:de:d2: 53:66:4d:31:6f:a1:e5:76:d1:9f:0c:79:bd:3d:70: 49:76:50:a1:35:fa:6c:af:68:74:4c:a6:73:84:50: d5:d7:67:d6:26:15:11:50:f1:dc:bd:05:e2:52:6f: 2e:49:65:65:5f:97:35:bf:46:dd:3f:99:5a:2e:a2: 16:cb:bc:1c:4a:25:12:48:5e:a8:b3:fb:cc:23:ed: 96:85:69:17:55:43:8a:55:45:42:02:f5:8c:3e:99: 4d:9c:bd:4f:46:5e:7b:16:84:4a:f8:2f:f2:10:b5: 55:ab:13:d6:84:43:8d:15:6f:76:bf:76:c1:10:bb: dc:12:33:b0:46:c2:9b:a3:6c:c0:84:4a:a9:bd:b3: 70:41:fe:ac:18:3d:e8:f3:44:ee:02:ab:14:78:ac: a3:4d:59:b0:24:d3:d3:29:84:80:82:f1:a8:45:76: aa:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 36:85:DA:C8:82:8B:3E:B4:98:97:61:42:2A:77:AA:7B:26:5F:96:CE X509v3 Authority Key Identifier: keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/0/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/0/3685DAC8828B3EB4989761422A77AA7B265F96CE.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.242.52.0/22 101.48.0.0/16 103.235.84.0/22 IPv6: 2402:e7c0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 59078 Signature Algorithm: sha256WithRSAEncryption 3a:12:fd:a7:1f:cd:d1:2b:37:17:a1:31:22:be:73:af:27:87: 3b:f0:2a:00:43:74:41:31:d2:97:fa:e4:56:a0:50:c9:6b:a8: 72:53:83:cd:83:7d:7d:22:a8:0d:5e:2e:b3:f4:8b:b5:b7:81: 3e:8d:37:80:85:66:74:99:42:ed:aa:43:f3:00:55:44:2d:65: 9a:2d:35:40:1d:60:03:6f:33:4a:d2:9a:39:11:95:55:6a:61: 61:74:71:cf:b3:3e:50:88:81:b0:68:61:ca:18:24:04:d0:04: 58:55:58:3a:ba:60:9b:71:d2:68:74:94:56:2c:58:ab:2c:07: 6c:d6:af:97:d9:e4:b6:31:c3:0a:d8:f3:7a:41:84:08:f2:54: 27:02:66:54:b7:a6:dd:96:70:b3:45:ec:3e:60:a5:37:bd:b4: b7:61:a0:ab:5b:e5:29:ab:10:18:90:1a:4e:b9:b1:b1:34:a2: 79:63:ac:e1:ca:95:2a:d5:25:91:df:ba:3a:3e:2b:3b:8a:ea: ce:5e:f6:66:2c:2f:fc:b4:ea:e8:5f:82:fa:a2:df:03:96:7b: b5:bf:32:a2:a8:9e:da:ce:03:82:b5:92:61:8e:1c:e8:c9:21: 97:8f:85:4d:8d:07:c2:86:93:39:c9:f6:9f:15:1c:f9:b9:48: 0f:14:e5:d9 -----BEGIN CERTIFICATE----- MIIF3TCCBMWgAwIBAgIUVUdSTyfMt4AIwEZ4qGlnu+wRJOwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDExOTEwMzI1OFoX DTI3MDExODEwMzc1OFowMzExMC8GA1UEAxMoMzY4NURBQzg4MjhCM0VCNDk4OTc2 MTQyMkE3N0FBN0IyNjVGOTZDRTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKoxHfmFZSR1xU53hzhNbxXpKyYlkyH2/poFNVn10H3tUlCRnAw4ovqn5Kej TlQduEkqv2j5YC12if2nDfO7BDtVAl61QKRSWWHRLk9xbLiXep/ERxGQ5t7SU2ZN MW+h5XbRnwx5vT1wSXZQoTX6bK9odEymc4RQ1ddn1iYVEVDx3L0F4lJvLkllZV+X Nb9G3T+ZWi6iFsu8HEolEkheqLP7zCPtloVpF1VDilVFQgL1jD6ZTZy9T0ZeexaE Svgv8hC1VasT1oRDjRVvdr92wRC73BIzsEbCm6NswIRKqb2zcEH+rBg96PNE7gKr FHiso01ZsCTT0ymEgILxqEV2qh8CAwEAAaOCAtAwggLMMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFDaF2siCiz60mJdhQip3qnsmX5bOMB8GA1UdIwQYMBaAFKVu hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTA2NTU3OTUzNDM5NDUyMzY1MS8wLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDY1NTc5NTM0Mzk0NTIzNjUx LzAvMzY4NURBQzg4MjhCM0VCNDk4OTc2MTQyMkE3N0FBN0IyNjVGOTZDRS5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwOQYIKwYBBQUH AQcBAf8EKjAoMBcEAgABMBEDBAIr8jQDAwBlMAMEAmfrVDANBAIAAjAHAwUAJALn wDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMA5sYwDQYJKoZIhvcNAQELBQADggEB ADoS/acfzdErNxehMSK+c68nhzvwKgBDdEEx0pf65FagUMlrqHJTg82DfX0iqA1e LrP0i7W3gT6NN4CFZnSZQu2qQ/MAVUQtZZotNUAdYANvM0rSmjkRlVVqYWF0cc+z PlCIgbBoYcoYJATQBFhVWDq6YJtx0mh0lFYsWKssB2zWr5fZ5LYxwwrY83pBhAjy VCcCZlS3pt2WcLNF7D5gpTe9tLdhoKtb5SmrEBiQGk65sbE0onljrOHKlSrVJZHf ujo+KzuK6s5e9mYsL/y06uhfgvqi3wOWe7W/MqKontrOA4K1kmGOHOjJIZePhU2N B8KGkznJ9p8VHPm5SA8U5dk= -----END CERTIFICATE-----Generated at Sun Jan 25 11:12:27 2026 by rpki-client