This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/39872673DCCDC86720A2E1C24F3DCF26B4DAB8F5.cer File: 39872673DCCDC86720A2E1C24F3DCF26B4DAB8F5.cer (raw, json) Hash identifier: +U8qqsednCiqOMG5syZLvDEXOwyo09ouiQiu9kFuSCE= Subject key identifier: 39:87:26:73:DC:CD:C8:67:20:A2:E1:C2:4F:3D:CF:26:B4:DA:B8:F5 Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Certificate serial: 748E56F20DDDA4A01F783E09BB30DF8E508440B1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1065588335524708353/0/39872673DCCDC86720A2E1C24F3DCF26B4DAB8F5.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1065588335524708353/0/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Mon 19 Jan 2026 11:02:39 +0000 Certificate not after: Mon 18 Jan 2027 11:07:39 +0000 Subordinate resources: AS: 131511 IP: 157.119.252.0/22 IP: 202.6.202.0/23 IP: 2402:2620::/32 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 19:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:8e:56:f2:0d:dd:a4:a0:1f:78:3e:09:bb:30:df:8e:50:84:40:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Validity Not Before: Jan 19 11:02:39 2026 GMT Not After : Jan 18 11:07:39 2027 GMT Subject: CN=39872673DCCDC86720A2E1C24F3DCF26B4DAB8F5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:61:94:94:6b:67:25:53:80:1e:a1:e9:60:84: 6e:b4:5c:45:46:7a:e7:61:0b:a0:aa:63:3d:f7:5d: 9a:a3:e0:3a:88:d8:6c:b7:64:d0:ec:36:97:90:6c: ac:e5:d6:0b:f1:24:f7:cb:ed:2a:96:a6:1e:6e:53: ec:60:0f:c8:95:7c:da:84:37:f5:b3:2a:7a:af:a3: ab:81:20:e8:d9:6a:e5:db:31:98:38:38:a9:b4:3f: f3:88:11:98:72:1b:23:e7:b1:fd:d0:7d:a4:c7:fd: 71:c4:c9:35:30:d2:73:f6:13:75:4b:58:9f:d2:42: 38:45:e7:7b:2d:db:c1:f0:e5:d3:91:1e:3e:ff:0a: f2:2a:cc:3b:dd:de:56:a0:0c:82:72:fe:55:6b:56: e9:a8:3f:ad:d0:38:59:e1:5b:e0:22:0f:13:e8:54: 33:8c:73:9c:f3:d6:e5:5f:01:9a:0d:d3:be:72:39: 6b:f7:2c:8d:92:0e:15:ce:97:75:2f:70:f7:05:a6: ca:b2:f4:99:69:bf:56:39:fd:21:19:ec:9e:8d:63: 90:43:a2:ff:bd:0e:ae:39:41:92:8e:6a:e9:da:05: 4f:2a:80:45:74:aa:1a:db:67:6f:ce:15:a7:86:8a: 5b:ba:94:05:5a:b8:9b:0f:00:6e:94:ed:03:5f:6b: 3e:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 39:87:26:73:DC:CD:C8:67:20:A2:E1:C2:4F:3D:CF:26:B4:DA:B8:F5 X509v3 Authority Key Identifier: keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335524708353/0/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335524708353/0/39872673DCCDC86720A2E1C24F3DCF26B4DAB8F5.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.119.252.0/22 202.6.202.0/23 IPv6: 2402:2620::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 131511 Signature Algorithm: sha256WithRSAEncryption 70:b5:7b:3f:f1:d9:26:c0:97:8e:26:dc:99:cd:1c:66:6f:55: 54:88:93:79:31:d9:7c:6c:7a:ab:91:bf:63:e2:c4:46:dc:bb: 81:36:59:b9:fc:12:49:78:0c:90:95:74:42:2d:fe:f1:6c:5d: c7:bd:7f:09:c6:ec:c3:02:56:43:4f:ab:76:3d:e8:06:d0:b9: 26:7f:92:e9:32:2b:2b:4e:37:33:49:11:21:ea:4e:d6:ef:a1: 94:07:bd:77:ec:b8:3b:b7:d3:0a:cf:fa:28:d6:5a:84:03:8d: a0:1f:bd:be:a4:b3:2b:ba:b2:02:d9:5a:08:a1:ae:21:23:e5: 20:c6:62:1d:ae:54:ed:09:82:fe:3c:55:cf:a1:48:04:dd:f5: cf:14:c9:1a:bb:5d:bd:d9:6f:73:ac:71:f2:ab:72:38:d3:d0: f3:14:40:9e:f2:ca:77:07:ca:f4:4b:b9:e0:29:18:b6:37:5f: 5e:66:d8:0e:ad:0f:59:04:8d:8d:8a:fc:47:73:d8:a3:35:6d: 12:d0:94:96:c5:05:46:01:ba:65:ab:4d:43:6a:02:3c:1c:0d: 24:30:c8:29:0f:ed:1a:4e:6c:1d:9c:02:70:05:12:cb:fe:35: 19:8c:f2:22:30:4d:f1:88:37:01:42:61:c3:45:b9:d1:31:fc: a4:8b:79:bf -----BEGIN CERTIFICATE----- MIIF2DCCBMCgAwIBAgIUdI5W8g3dpKAfeD4JuzDfjlCEQLEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDExOTExMDIzOVoX DTI3MDExODExMDczOVowMzExMC8GA1UEAxMoMzk4NzI2NzNEQ0NEQzg2NzIwQTJF MUMyNEYzRENGMjZCNERBQjhGNTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMphlJRrZyVTgB6h6WCEbrRcRUZ652ELoKpjPfddmqPgOojYbLdk0Ow2l5Bs rOXWC/Ek98vtKpamHm5T7GAPyJV82oQ39bMqeq+jq4Eg6Nlq5dsxmDg4qbQ/84gR mHIbI+ex/dB9pMf9ccTJNTDSc/YTdUtYn9JCOEXney3bwfDl05EePv8K8irMO93e VqAMgnL+VWtW6ag/rdA4WeFb4CIPE+hUM4xznPPW5V8Bmg3TvnI5a/csjZIOFc6X dS9w9wWmyrL0mWm/Vjn9IRnsno1jkEOi/70OrjlBko5q6doFTyqARXSqGttnb84V p4aKW7qUBVq4mw8AbpTtA19rPmECAwEAAaOCAsswggLHMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFDmHJnPczchnIKLhwk89zya02rj1MB8GA1UdIwQYMBaAFKVu hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTA2NTU4ODMzNTUyNDcwODM1My8wLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDY1NTg4MzM1NTI0NzA4MzUz LzAvMzk4NzI2NzNEQ0NEQzg2NzIwQTJFMUMyNEYzRENGMjZCNERBQjhGNS5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwNAYIKwYBBQUH AQcBAf8EJTAjMBIEAgABMAwDBAKdd/wDBAHKBsowDQQCAAIwBwMFACQCJiAwGgYI KwYBBQUHAQgBAf8ECzAJoAcwBQIDAgG3MA0GCSqGSIb3DQEBCwUAA4IBAQBwtXs/ 8dkmwJeOJtyZzRxmb1VUiJN5Mdl8bHqrkb9j4sRG3LuBNlm5/BJJeAyQlXRCLf7x bF3HvX8JxuzDAlZDT6t2PegG0Lkmf5LpMisrTjczSREh6k7W76GUB7137Lg7t9MK z/oo1lqEA42gH72+pLMrurIC2VoIoa4hI+UgxmIdrlTtCYL+PFXPoUgE3fXPFMka u1292W9zrHHyq3I409DzFECe8sp3B8r0S7ngKRi2N19eZtgOrQ9ZBI2NivxHc9ij NW0S0JSWxQVGAbplq01DagI8HA0kMMgpD+0aTmwdnAJwBRLL/jUZjPIiME3xiDcB QmHDRbnRMfyki3m/ -----END CERTIFICATE-----Generated at Sun Jan 25 05:57:33 2026 by rpki-client