This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4A07CD19A1B070EE064707237E6CE29C315163F0.cer File: 4A07CD19A1B070EE064707237E6CE29C315163F0.cer (raw, json) Hash identifier: Xm6EPWgy1NTL1ETZ9I+ZXUSEjyyYlzdQqz38JgaeqJU= Subject key identifier: 4A:07:CD:19:A1:B0:70:EE:06:47:07:23:7E:6C:E2:9C:31:51:63:F0 Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Certificate serial: 1B3BFCFA54FF1ED107608830CBDD1F8AF4A5DCF0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1065588335525101569/0/4A07CD19A1B070EE064707237E6CE29C315163F0.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1065588335525101569/0/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Mon 19 Jan 2026 11:10:04 +0000 Certificate not after: Mon 18 Jan 2027 11:15:04 +0000 Subordinate resources: IP: 42.201.32.0/19 IP: 103.81.200.0/22 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 19:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:3b:fc:fa:54:ff:1e:d1:07:60:88:30:cb:dd:1f:8a:f4:a5:dc:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Validity Not Before: Jan 19 11:10:04 2026 GMT Not After : Jan 18 11:15:04 2027 GMT Subject: CN=4A07CD19A1B070EE064707237E6CE29C315163F0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:04:17:70:2a:f3:0b:ab:61:bf:8d:9b:b1:e7: 49:93:f0:bc:3c:52:92:3a:0d:6a:ac:5f:88:fe:ef: 6a:8e:10:c5:fb:09:34:ea:20:42:ed:fd:dc:64:fb: 58:af:e3:fe:93:ae:e9:a7:e9:2f:0b:e4:e3:6f:c7: 5a:83:ac:ba:bc:a2:9c:15:bd:cb:e8:65:8d:a7:cf: 31:2c:43:31:59:cf:41:58:46:72:a5:bf:14:ad:7a: fc:e1:ad:14:e0:6e:21:1f:58:f9:7b:d6:71:c9:07: 00:c6:2b:db:47:dd:32:15:12:28:79:8e:c0:5b:76: b8:d9:8e:5b:79:ad:5a:87:99:9f:d0:1b:de:c8:ce: 6b:88:13:b1:35:2c:e9:dd:8a:f1:29:af:8e:d9:37: 7f:ea:b9:f0:85:ed:57:a4:32:20:25:89:d7:de:63: c4:d2:d7:67:fe:0c:63:57:a1:41:ed:a5:2a:ee:32: 7d:0e:a4:5d:29:c8:35:5b:9f:d7:8c:a4:4f:42:54: f1:fd:4f:d8:8a:42:6b:69:18:b7:9f:57:e5:e9:9f: 31:b2:0a:b2:11:f5:cf:73:75:61:30:1f:89:92:15: 5b:94:71:df:42:3a:de:1b:84:a7:15:a1:78:d7:79: 9b:82:fc:e2:e8:06:50:74:7c:70:73:46:44:a1:68: 7a:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 4A:07:CD:19:A1:B0:70:EE:06:47:07:23:7E:6C:E2:9C:31:51:63:F0 X509v3 Authority Key Identifier: keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335525101569/0/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335525101569/0/4A07CD19A1B070EE064707237E6CE29C315163F0.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 42.201.32.0/19 103.81.200.0/22 Signature Algorithm: sha256WithRSAEncryption 71:37:71:d6:b0:ca:9f:2c:ae:73:14:1c:13:d1:20:52:c4:55: 44:34:0c:14:dd:e8:a1:c8:7b:70:4c:1b:01:72:5e:3d:a9:cb: 4e:1c:0e:82:1e:6e:16:e0:90:a8:7a:b3:87:51:33:9c:12:20: 2a:01:ac:81:05:a2:9b:a4:be:03:a2:57:c4:20:c6:6a:f8:ba: 56:e7:ff:e2:39:78:80:b9:bf:6e:67:28:69:76:e1:da:1b:dc: fe:e1:8d:11:09:b9:8a:84:7e:c0:48:e4:54:bc:09:db:96:56: eb:7e:8e:1b:e1:35:69:32:88:23:39:51:fa:9d:9e:a6:94:88: 48:83:cc:4d:01:00:f0:82:de:08:4c:70:c1:f5:e8:ee:3e:99: e9:29:59:72:b3:83:98:cd:71:61:f1:56:da:3f:bb:60:c2:c9: e5:f7:ad:d1:13:3f:19:98:3e:97:82:30:e7:f9:a7:ad:45:51: 69:4c:4c:1b:c8:3a:da:20:c1:49:49:b5:e6:14:a8:da:c6:b6: 6c:d9:8d:cf:96:72:4b:87:d8:5b:02:75:09:17:a6:e1:f8:f8: 4d:5a:43:0d:c0:48:e4:e5:af:39:bc:a9:fe:09:94:d3:3f:df: 29:17:54:10:c7:cb:7d:2e:15:03:37:80:94:2d:0a:eb:ed:5b: 9a:25:13:2c -----BEGIN CERTIFICATE----- MIIFrTCCBJWgAwIBAgIUGzv8+lT/HtEHYIgwy90fivSl3PAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDExOTExMTAwNFoX DTI3MDExODExMTUwNFowMzExMC8GA1UEAxMoNEEwN0NEMTlBMUIwNzBFRTA2NDcw NzIzN0U2Q0UyOUMzMTUxNjNGMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAN4EF3Aq8wurYb+Nm7HnSZPwvDxSkjoNaqxfiP7vao4QxfsJNOogQu393GT7 WK/j/pOu6afpLwvk42/HWoOsuryinBW9y+hljafPMSxDMVnPQVhGcqW/FK16/OGt FOBuIR9Y+XvWcckHAMYr20fdMhUSKHmOwFt2uNmOW3mtWoeZn9Ab3sjOa4gTsTUs 6d2K8Smvjtk3f+q58IXtV6QyICWJ195jxNLXZ/4MY1ehQe2lKu4yfQ6kXSnINVuf 14ykT0JU8f1P2IpCa2kYt59X5emfMbIKshH1z3N1YTAfiZIVW5Rx30I63huEpxWh eNd5m4L84ugGUHR8cHNGRKFoesUCAwEAAaOCAqAwggKcMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFEoHzRmhsHDuBkcHI35s4pwxUWPwMB8GA1UdIwQYMBaAFKVu hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTA2NTU4ODMzNTUyNTEwMTU2OS8wLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDY1NTg4MzM1NTI1MTAxNTY5 LzAvNEEwN0NEMTlBMUIwNzBFRTA2NDcwNzIzN0U2Q0UyOUMzMTUxNjNGMC5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwJQYIKwYBBQUH AQcBAf8EFjAUMBIEAgABMAwDBAUqySADBAJnUcgwDQYJKoZIhvcNAQELBQADggEB AHE3cdawyp8srnMUHBPRIFLEVUQ0DBTd6KHIe3BMGwFyXj2py04cDoIebhbgkKh6 s4dRM5wSICoBrIEFopukvgOiV8Qgxmr4ulbn/+I5eIC5v25nKGl24dob3P7hjREJ uYqEfsBI5FS8CduWVut+jhvhNWkyiCM5UfqdnqaUiEiDzE0BAPCC3ghMcMH16O4+ mekpWXKzg5jNcWHxVto/u2DCyeX3rdETPxmYPpeCMOf5p61FUWlMTBvIOtogwUlJ teYUqNrGtmzZjc+WckuH2FsCdQkXpuH4+E1aQw3ASOTlrzm8qf4JlNM/3ykXVBDH y30uFQM3gJQtCuvtW5olEyw= -----END CERTIFICATE-----Generated at Sun Jan 25 05:55:41 2026 by rpki-client