This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/373B103C68D9B84455801815E437C49839794406.cer File: 373B103C68D9B84455801815E437C49839794406.cer (raw, json) Hash identifier: fDVcsUR/39mfJDhtoNKT+EjjCU3F/Z623v0wADNdwM4= Subject key identifier: 37:3B:10:3C:68:D9:B8:44:55:80:18:15:E4:37:C4:98:39:79:44:06 Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Certificate serial: 5690D2DC680EC43D1B6A699A1DD8D53F6FF2DFF7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1065576199948468227/0/373B103C68D9B84455801815E437C49839794406.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1065576199948468227/0/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Mon 19 Jan 2026 10:24:10 +0000 Certificate not after: Mon 18 Jan 2027 10:29:10 +0000 Subordinate resources: AS: 58840 IP: 110.236.0.0/15 IP: 113.18.0.0/16 IP: 182.157.0.0/16 IP: 2407:c400::/32 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 19:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:90:d2:dc:68:0e:c4:3d:1b:6a:69:9a:1d:d8:d5:3f:6f:f2:df:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Validity Not Before: Jan 19 10:24:10 2026 GMT Not After : Jan 18 10:29:10 2027 GMT Subject: CN=373B103C68D9B84455801815E437C49839794406 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:c1:c1:00:f1:45:b3:06:70:fe:d9:5f:39:f0: e1:c1:ce:95:e3:8f:a2:59:e3:09:84:fc:ca:e4:e4: b4:c4:9d:d7:8b:84:e8:4e:ee:f0:24:ff:fa:e5:d4: 41:a8:6d:51:ad:ff:17:90:96:89:84:00:ca:fa:ba: 16:51:66:97:a0:88:2b:8f:39:6b:33:cb:21:4b:50: 44:d6:ef:18:39:d4:12:bf:ca:41:80:ed:73:5b:c9: 73:89:73:38:be:9a:4a:5d:3d:69:79:8e:c9:fc:cd: 18:d4:e0:4a:5e:04:32:10:d1:4d:04:b5:90:35:66: b2:62:96:78:f1:0b:dd:76:87:f5:b0:cc:98:7d:6f: 7c:e3:98:4f:df:26:ce:99:0b:e9:7f:f2:ff:89:7c: ec:88:86:56:7f:13:84:6c:b8:a3:c2:35:68:8f:8c: c6:2f:25:63:c0:ee:8f:d6:d0:47:89:12:fa:3e:da: 38:d4:de:5a:4c:4e:98:9e:e5:82:62:06:b7:17:e9: ab:00:3f:03:e0:6a:3d:0a:88:eb:1d:24:54:84:83: 1c:a6:c8:79:7f:be:33:1d:76:34:bc:03:d6:34:e9: 72:d2:e5:53:bc:56:6c:4d:c4:77:75:db:16:e3:c8: 30:81:40:93:b1:4b:64:b3:dc:63:3f:7e:ef:f0:6e: e3:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 37:3B:10:3C:68:D9:B8:44:55:80:18:15:E4:37:C4:98:39:79:44:06 X509v3 Authority Key Identifier: keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948468227/0/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948468227/0/373B103C68D9B84455801815E437C49839794406.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 110.236.0.0/15 113.18.0.0/16 182.157.0.0/16 IPv6: 2407:c400::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 58840 Signature Algorithm: sha256WithRSAEncryption 94:48:02:99:be:c4:7a:a3:48:71:6c:79:49:58:70:2f:db:4e: 4c:81:02:ca:f8:62:4f:ef:7b:95:1c:7f:d9:e4:ee:4d:2e:52: 8c:9f:48:b4:27:77:da:7e:52:75:d5:13:f8:f0:c5:87:c5:1e: 9c:01:bb:cc:65:bb:b5:c4:3c:ee:2a:14:08:30:9c:10:6d:b1: d8:e4:32:32:cd:e9:86:49:21:20:8d:1b:51:e9:82:69:06:ac: 02:78:23:45:03:e0:63:f8:5e:6a:05:54:5d:c2:d0:50:0e:79: 1b:b6:55:ab:88:aa:ce:f7:10:77:3e:18:c4:ee:f1:2a:c7:1b: db:3f:97:3f:3a:c9:20:e6:d6:eb:0a:a0:a3:41:01:4d:1c:0c: b2:f6:e1:a2:75:c2:bb:36:5f:ae:07:e2:7e:a8:0a:f5:09:62: 39:b8:78:53:a9:73:7b:de:ff:f8:8a:20:37:23:fe:cd:dc:c0: ee:56:73:4b:72:ad:f1:d0:d3:d0:67:0e:06:c2:eb:42:3e:e7: 4e:b5:90:ec:99:d3:9e:5d:41:fb:15:38:7c:25:06:0e:0f:31: 03:ed:03:46:14:41:4c:9b:c5:d1:f9:15:91:a9:c8:20:d0:14: b9:6a:ec:ae:3c:1f:e1:be:01:e9:51:0b:df:eb:e7:4d:44:6e: e3:bf:0f:5e -----BEGIN CERTIFICATE----- MIIF2zCCBMOgAwIBAgIUVpDS3GgOxD0bammaHdjVP2/y3/cwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDExOTEwMjQxMFoX DTI3MDExODEwMjkxMFowMzExMC8GA1UEAxMoMzczQjEwM0M2OEQ5Qjg0NDU1ODAx ODE1RTQzN0M0OTgzOTc5NDQwNjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKXBwQDxRbMGcP7ZXznw4cHOleOPolnjCYT8yuTktMSd14uE6E7u8CT/+uXU QahtUa3/F5CWiYQAyvq6FlFml6CIK485azPLIUtQRNbvGDnUEr/KQYDtc1vJc4lz OL6aSl09aXmOyfzNGNTgSl4EMhDRTQS1kDVmsmKWePEL3XaH9bDMmH1vfOOYT98m zpkL6X/y/4l87IiGVn8ThGy4o8I1aI+Mxi8lY8Duj9bQR4kS+j7aONTeWkxOmJ7l gmIGtxfpqwA/A+BqPQqI6x0kVISDHKbIeX++Mx12NLwD1jTpctLlU7xWbE3Ed3Xb FuPIMIFAk7FLZLPcYz9+7/Bu468CAwEAAaOCAs4wggLKMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFDc7EDxo2bhEVYAYFeQ3xJg5eUQGMB8GA1UdIwQYMBaAFKVu hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTA2NTU3NjE5OTk0ODQ2ODIyNy8wLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDY1NTc2MTk5OTQ4NDY4MjI3 LzAvMzczQjEwM0M2OEQ5Qjg0NDU1ODAxODE1RTQzN0M0OTgzOTc5NDQwNi5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwNwYIKwYBBQUH AQcBAf8EKDAmMBUEAgABMA8DAwFu7AMDAHESAwMAtp0wDQQCAAIwBwMFACQHxAAw GgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDAOXYMA0GCSqGSIb3DQEBCwUAA4IBAQCU SAKZvsR6o0hxbHlJWHAv205MgQLK+GJP73uVHH/Z5O5NLlKMn0i0J3faflJ11RP4 8MWHxR6cAbvMZbu1xDzuKhQIMJwQbbHY5DIyzemGSSEgjRtR6YJpBqwCeCNFA+Bj +F5qBVRdwtBQDnkbtlWriKrO9xB3PhjE7vEqxxvbP5c/Oskg5tbrCqCjQQFNHAyy 9uGidcK7Nl+uB+J+qAr1CWI5uHhTqXN73v/4iiA3I/7N3MDuVnNLcq3x0NPQZw4G wutCPudOtZDsmdOeXUH7FTh8JQYODzED7QNGFEFMm8XR+RWRqcgg0BS5auyuPB/h vgHpUQvf6+dNRG7jvw9e -----END CERTIFICATE-----Generated at Sun Jan 25 06:01:44 2026 by rpki-client