This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4BD2BCAA35B0AE87654A70D7633583B2BC5C346A.cer File: 4BD2BCAA35B0AE87654A70D7633583B2BC5C346A.cer (raw, json) Hash identifier: Lnw4a/4NlCjP+7pILiLwbRR3Rntxwx0i0UbgcEDlqlE= Subject key identifier: 4B:D2:BC:AA:35:B0:AE:87:65:4A:70:D7:63:35:83:B2:BC:5C:34:6A Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Certificate serial: 06A4FDC5130D24E8C635F19938755A911B23603B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1065579534395047939/0/4BD2BCAA35B0AE87654A70D7633583B2BC5C346A.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1065579534395047939/0/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Mon 19 Jan 2026 10:37:11 +0000 Certificate not after: Mon 18 Jan 2027 10:42:11 +0000 Subordinate resources: AS: 59065 IP: 103.59.120.0/22 IP: 2402:7080::/32 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 19:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:a4:fd:c5:13:0d:24:e8:c6:35:f1:99:38:75:5a:91:1b:23:60:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Validity Not Before: Jan 19 10:37:11 2026 GMT Not After : Jan 18 10:42:11 2027 GMT Subject: CN=4BD2BCAA35B0AE87654A70D7633583B2BC5C346A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:ce:2b:23:41:b2:56:3a:c2:a2:73:f5:b8:91: d7:f4:ef:19:f3:fa:82:72:8a:7d:c9:7a:c4:e5:d8: f3:63:d2:df:e4:98:f1:2d:e2:fd:05:09:bd:be:4c: ad:3c:5e:94:fe:a6:8b:e2:81:bb:fa:60:88:9c:b7: c0:3c:bf:bf:91:6a:3a:74:04:3c:db:47:8e:03:3f: 26:61:e0:1d:96:24:c1:bb:e8:ff:18:81:a0:1d:59: 62:9b:59:84:39:ee:cb:38:1e:12:0f:9b:ce:ba:75: 3b:f7:3b:e4:53:99:5f:2d:fe:19:b6:f4:bf:87:f7: 3f:01:9b:d0:39:37:d0:7c:19:b6:e1:b9:40:70:76: 5b:8d:29:28:41:db:6e:8f:3c:9a:bd:36:ab:73:b6: e1:a3:8c:d5:1e:97:e6:9c:19:47:d0:e4:75:32:9e: 1a:6e:d8:96:ca:3b:e3:47:89:3d:70:4e:62:38:ae: 25:d8:c1:b5:5f:3e:73:9e:9f:b5:b5:8d:69:bf:3c: 84:ef:22:9b:48:08:ac:19:c4:14:e5:72:60:85:45: d1:d2:e6:bd:af:ef:87:55:1e:19:d7:65:dd:66:1f: fc:d9:5d:23:da:51:8f:76:0c:92:2f:87:ac:ed:a2: 08:3c:7b:4e:34:be:d8:20:44:2c:67:e0:64:f7:60: 77:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 4B:D2:BC:AA:35:B0:AE:87:65:4A:70:D7:63:35:83:B2:BC:5C:34:6A X509v3 Authority Key Identifier: keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534395047939/0/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534395047939/0/4BD2BCAA35B0AE87654A70D7633583B2BC5C346A.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.59.120.0/22 IPv6: 2402:7080::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 59065 Signature Algorithm: sha256WithRSAEncryption 66:9c:05:ba:7b:e5:72:6d:43:e6:17:15:2f:ce:ee:0f:5a:33: db:71:b4:3d:98:84:b7:9c:ba:1e:5a:bc:ea:04:4e:bb:97:9e: 10:03:9a:6b:0d:60:91:7b:15:38:f3:9d:8b:dc:a9:2d:e4:a3: 41:44:77:dd:67:e4:ae:ee:3f:85:5e:ec:7d:18:36:3a:4b:c2: 1a:ef:af:b8:31:10:90:a9:a7:03:05:c8:bc:cd:d7:01:4d:c1: 38:bb:24:18:a2:3f:ed:5b:4a:65:41:a6:d1:62:b3:8c:00:5e: 3d:02:19:9d:6d:99:53:c1:7e:11:3b:7d:1e:5f:36:2f:68:ff: 9b:a9:93:a0:3f:9e:e7:43:f3:6f:47:5b:a2:a4:53:cb:88:f7: 6a:28:2c:16:46:74:34:1b:3a:0d:21:fc:f4:3b:35:b7:61:eb: 87:63:27:fe:a1:a3:65:2d:3e:e7:72:24:4e:73:92:c9:95:2c: d3:63:cf:a0:41:a0:f9:82:cd:de:77:96:b1:ef:c6:b3:57:27: 5e:98:51:01:38:e8:23:16:5b:b6:17:b5:97:0f:30:48:f7:3d: c6:b4:31:b5:eb:4f:6d:72:82:b6:b2:8a:c3:64:75:44:7f:a2: c8:24:e8:86:0e:a1:56:29:49:a3:9c:37:c2:4a:cc:3c:b1:b1: 19:d3:9b:eb -----BEGIN CERTIFICATE----- MIIF0jCCBLqgAwIBAgIUBqT9xRMNJOjGNfGZOHVakRsjYDswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDExOTEwMzcxMVoX DTI3MDExODEwNDIxMVowMzExMC8GA1UEAxMoNEJEMkJDQUEzNUIwQUU4NzY1NEE3 MEQ3NjMzNTgzQjJCQzVDMzQ2QTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMTOKyNBslY6wqJz9biR1/TvGfP6gnKKfcl6xOXY82PS3+SY8S3i/QUJvb5M rTxelP6mi+KBu/pgiJy3wDy/v5FqOnQEPNtHjgM/JmHgHZYkwbvo/xiBoB1ZYptZ hDnuyzgeEg+bzrp1O/c75FOZXy3+Gbb0v4f3PwGb0Dk30HwZtuG5QHB2W40pKEHb bo88mr02q3O24aOM1R6X5pwZR9DkdTKeGm7Ylso740eJPXBOYjiuJdjBtV8+c56f tbWNab88hO8im0gIrBnEFOVyYIVF0dLmva/vh1UeGddl3WYf/NldI9pRj3YMki+H rO2iCDx7TjS+2CBELGfgZPdgd5sCAwEAAaOCAsUwggLBMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFEvSvKo1sK6HZUpw12M1g7K8XDRqMB8GA1UdIwQYMBaAFKVu hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTA2NTU3OTUzNDM5NTA0NzkzOS8wLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDY1NTc5NTM0Mzk1MDQ3OTM5 LzAvNEJEMkJDQUEzNUIwQUU4NzY1NEE3MEQ3NjMzNTgzQjJCQzVDMzQ2QS5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUH AQcBAf8EHzAdMAwEAgABMAYDBAJnO3gwDQQCAAIwBwMFACQCcIAwGgYIKwYBBQUH AQgBAf8ECzAJoAcwBQIDAOa5MA0GCSqGSIb3DQEBCwUAA4IBAQBmnAW6e+VybUPm FxUvzu4PWjPbcbQ9mIS3nLoeWrzqBE67l54QA5prDWCRexU4852L3Kkt5KNBRHfd Z+Su7j+FXux9GDY6S8Ia76+4MRCQqacDBci8zdcBTcE4uyQYoj/tW0plQabRYrOM AF49AhmdbZlTwX4RO30eXzYvaP+bqZOgP57nQ/NvR1uipFPLiPdqKCwWRnQ0GzoN Ifz0OzW3YeuHYyf+oaNlLT7nciROc5LJlSzTY8+gQaD5gs3ed5ax78azVydemFEB OOgjFlu2F7WXDzBI9z3GtDG1609tcoK2sorDZHVEf6LIJOiGDqFWKUmjnDfCSsw8 sbEZ05vr -----END CERTIFICATE-----Generated at Sun Jan 25 06:01:37 2026 by rpki-client