This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5047083B4637A3F02DF9DEEBA67BEDDC04FD69DD.cer File: 5047083B4637A3F02DF9DEEBA67BEDDC04FD69DD.cer (raw, json) Hash identifier: fh6Dkyt29caIv9bho+4k7kxwAX2HFKK4aJHXdffi4EY= Subject key identifier: 50:47:08:3B:46:37:A3:F0:2D:F9:DE:EB:A6:7B:ED:DC:04:FD:69:DD Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Certificate serial: 244D8980F05D6FF0D231380EA45BCC0493E7644E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1065580055121559554/0/5047083B4637A3F02DF9DEEBA67BEDDC04FD69DD.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1065580055121559554/0/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Mon 19 Jan 2026 10:30:57 +0000 Certificate not after: Mon 18 Jan 2027 10:35:57 +0000 Subordinate resources: AS: 63578 AS: 63708 IP: 43.247.88.0/22 IP: 43.255.84.0/22 IP: 43.255.212.0/22 IP: 45.65.24.0/21 IP: 103.210.160.0/22 IP: 103.210.172.0 -- 103.210.183.255 IP: 103.228.160.0/22 IP: 103.229.212.0/22 IP: 139.5.60.0/22 IP: 160.19.208.0/22 IP: 163.53.168.0/22 IP: 211.150.192.0/18 IP: 211.154.96.0/19 IP: 2404:1f40::/32 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Jan 2026 14:51:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:4d:89:80:f0:5d:6f:f0:d2:31:38:0e:a4:5b:cc:04:93:e7:64:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Validity Not Before: Jan 19 10:30:57 2026 GMT Not After : Jan 18 10:35:57 2027 GMT Subject: CN=5047083B4637A3F02DF9DEEBA67BEDDC04FD69DD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:21:0c:06:33:9e:e8:06:fe:fc:b6:8c:67:25: ce:1f:a4:c0:0a:eb:f9:e3:ca:9b:c3:04:f0:dd:bc: 50:c9:ec:ec:40:e4:0c:4e:6c:57:5f:56:59:c7:d7: c5:73:fb:45:0a:83:6a:97:30:80:35:6a:32:1b:dc: 38:11:72:ac:28:d6:0d:94:ee:82:d4:17:cb:5c:41: 0a:45:2d:fd:4e:fc:28:d0:63:91:f0:27:39:f3:51: a9:b7:55:c4:72:46:e3:68:07:0f:b9:71:04:2e:b8: 51:37:92:d9:7f:39:0f:8b:dc:88:f4:5d:e6:2f:88: 54:f4:9e:00:a7:11:d6:4a:72:cf:58:59:93:dd:d1: 7e:45:51:a4:d7:f6:77:39:6f:45:87:a4:a9:20:7d: cb:fc:85:cf:0a:5d:b7:21:de:84:dc:46:e1:94:92: c4:9e:0d:61:69:15:ea:13:27:7c:53:66:3e:21:94: f1:d3:3e:6c:45:cd:c1:7e:9e:dd:dd:1b:c2:5d:ec: 8e:91:b0:53:c3:56:ff:3e:a5:23:f5:3b:fa:91:3b: 86:41:50:88:bc:04:7a:92:f3:5c:73:86:e6:79:33: 7e:b2:fe:2b:27:65:35:c8:2c:9f:10:8d:21:8e:4a: ee:a7:ac:64:9a:7a:00:79:46:1a:85:2b:96:a6:6d: 1e:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 50:47:08:3B:46:37:A3:F0:2D:F9:DE:EB:A6:7B:ED:DC:04:FD:69:DD X509v3 Authority Key Identifier: keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121559554/0/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121559554/0/5047083B4637A3F02DF9DEEBA67BEDDC04FD69DD.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.247.88.0/22 43.255.84.0/22 43.255.212.0/22 45.65.24.0/21 103.210.160.0/22 103.210.172.0-103.210.183.255 103.228.160.0/22 103.229.212.0/22 139.5.60.0/22 160.19.208.0/22 163.53.168.0/22 211.150.192.0/18 211.154.96.0/19 IPv6: 2404:1f40::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 63578 63708 Signature Algorithm: sha256WithRSAEncryption 35:33:06:77:48:3d:58:bf:69:f8:f8:59:87:69:bb:61:1e:73: ae:70:1a:92:92:34:f8:0a:bf:27:5a:85:d3:ee:16:e0:03:48: 5e:4e:41:11:6d:14:d7:e6:3c:a7:c8:8d:b1:37:c9:e8:61:8b: 23:db:4a:c7:a6:6f:5f:08:de:e4:eb:ee:be:99:fe:40:50:93: 32:07:72:61:24:61:82:ff:fb:49:02:42:ca:a5:24:08:96:9b: e7:04:15:81:ef:34:95:e9:59:fa:26:6c:2e:62:11:15:86:f7: 5f:5e:00:f3:d6:e1:6c:87:22:6c:2f:8c:42:61:32:64:53:d3: d9:ac:9f:b8:20:47:5f:1a:6a:79:fb:d5:28:09:86:13:0d:18: 1a:3d:fa:76:8a:a5:43:7a:39:87:4e:3d:eb:2f:2d:85:cf:6f: e5:65:2d:fb:8c:2f:94:dc:ed:67:c2:39:5c:fd:ae:17:cc:16: f0:7f:58:9f:4e:f6:57:99:a7:65:3e:9e:9b:30:62:4f:b9:fa: 24:42:dc:da:d1:65:8b:f9:2d:38:85:c4:ca:d8:1c:ca:f5:a6: bc:a5:16:5e:8f:e5:9b:1a:89:13:b5:cf:a1:72:e6:e3:de:0e: e0:06:de:23:c1:8d:5f:9c:4c:b7:03:0f:2f:91:46:dc:51:6e: f4:c5:bc:b7 -----BEGIN CERTIFICATE----- MIIGJzCCBQ+gAwIBAgIUJE2JgPBdb/DSMTgOpFvMBJPnZE4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDExOTEwMzA1N1oX DTI3MDExODEwMzU1N1owMzExMC8GA1UEAxMoNTA0NzA4M0I0NjM3QTNGMDJERjlE RUVCQTY3QkVEREMwNEZENjlERDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOQhDAYznugG/vy2jGclzh+kwArr+ePKm8ME8N28UMns7EDkDE5sV19WWcfX xXP7RQqDapcwgDVqMhvcOBFyrCjWDZTugtQXy1xBCkUt/U78KNBjkfAnOfNRqbdV xHJG42gHD7lxBC64UTeS2X85D4vciPRd5i+IVPSeAKcR1kpyz1hZk93RfkVRpNf2 dzlvRYekqSB9y/yFzwpdtyHehNxG4ZSSxJ4NYWkV6hMnfFNmPiGU8dM+bEXNwX6e 3d0bwl3sjpGwU8NW/z6lI/U7+pE7hkFQiLwEepLzXHOG5nkzfrL+KydlNcgsnxCN IY5K7qesZJp6AHlGGoUrlqZtHksCAwEAAaOCAxowggMWMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFFBHCDtGN6PwLfne66Z77dwE/WndMB8GA1UdIwQYMBaAFKVu hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTA2NTU4MDA1NTEyMTU1OTU1NC8wLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDY1NTgwMDU1MTIxNTU5NTU0 LzAvNTA0NzA4M0I0NjM3QTNGMDJERjlERUVCQTY3QkVEREMwNEZENjlERC5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwfgYIKwYBBQUH AQcBAf8EbzBtMFwEAgABMFYDBAIr91gDBAIr/1QDBAIr/9QDBAMtQRgDBAJn0qAw DAMEAmfSrAMEA2fSsAMEAmfkoAMEAmfl1AMEAosFPAMEAqAT0AMEAqM1qAMEBtOW wAMEBdOaYDANBAIAAjAHAwUAJAQfQDAfBggrBgEFBQcBCAEB/wQQMA6gDDAKAgMA +FoCAwD43DANBgkqhkiG9w0BAQsFAAOCAQEANTMGd0g9WL9p+PhZh2m7YR5zrnAa kpI0+Aq/J1qF0+4W4ANIXk5BEW0U1+Y8p8iNsTfJ6GGLI9tKx6ZvXwje5Ovuvpn+ QFCTMgdyYSRhgv/7SQJCyqUkCJab5wQVge80lelZ+iZsLmIRFYb3X14A89bhbIci bC+MQmEyZFPT2ayfuCBHXxpqefvVKAmGEw0YGj36doqlQ3o5h0496y8thc9v5WUt +4wvlNztZ8I5XP2uF8wW8H9Yn072V5mnZT6emzBiT7n6JELc2tFli/ktOIXEytgc yvWmvKUWXo/lmxqJE7XPoXLm494O4AbeI8GNX5xMtwMPL5FG3FFu9MW8tw== -----END CERTIFICATE-----Generated at Sun Jan 25 17:35:48 2026 by rpki-client