This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/528FB7389148F9961BE07564A1BCC28DE1440954.cer File: 528FB7389148F9961BE07564A1BCC28DE1440954.cer (raw, json) Hash identifier: zIfc2FTjHYxFvYrrmcipk9mcSwHOFHWoQs73mwpyZFY= Subject key identifier: 52:8F:B7:38:91:48:F9:96:1B:E0:75:64:A1:BC:C2:8D:E1:44:09:54 Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Certificate serial: 3CDA27921AA8F7706C43299DA5ABC79EC9592A5D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1065591195721531393/0/528FB7389148F9961BE07564A1BCC28DE1440954.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1065591195721531393/0/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Mon 19 Jan 2026 11:15:19 +0000 Certificate not after: Mon 18 Jan 2027 11:20:19 +0000 Subordinate resources: IP: 103.152.246.0/23 IP: 2406:3ac0::/32 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 19:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:da:27:92:1a:a8:f7:70:6c:43:29:9d:a5:ab:c7:9e:c9:59:2a:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Validity Not Before: Jan 19 11:15:19 2026 GMT Not After : Jan 18 11:20:19 2027 GMT Subject: CN=528FB7389148F9961BE07564A1BCC28DE1440954 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:be:dc:43:eb:b2:ca:dc:0a:91:4a:57:c4:42: 48:1e:a8:4a:3d:74:9d:39:66:f3:b0:d1:09:75:fd: 06:2d:8c:c2:4e:13:b6:cf:97:d5:5b:3c:2d:bf:9c: fd:03:2f:42:3d:02:0a:53:7f:e4:e0:10:3a:9d:7c: 89:6e:bd:ee:c4:f9:02:48:f8:14:cc:09:5f:46:9b: f3:c6:86:79:9e:d0:ed:9f:16:e7:7c:9d:d5:f8:b0: 34:7c:99:fb:a4:86:be:72:94:c5:73:37:16:69:84: e6:c5:49:bd:8d:8d:20:4a:8d:32:87:f9:70:77:6e: 32:17:ad:e5:62:59:68:e6:f5:75:2c:f4:6e:43:74: 69:5a:ed:89:7f:59:62:db:06:66:5a:5f:9a:d8:7a: a0:3f:96:89:5b:c4:9a:ca:1d:68:8b:6f:42:34:60: 61:7c:e4:4c:e2:35:f3:58:2f:0e:d9:95:2d:78:a3: 54:b0:70:ff:15:1b:93:3d:dd:0e:1a:e3:8f:4c:8f: 92:51:5e:79:63:c2:ab:54:05:6e:10:2f:e7:75:a0: ef:35:58:c3:8c:95:1c:ef:e9:70:6f:43:82:76:7a: 51:ed:61:03:ec:13:1a:f2:8a:b6:96:b0:5f:f2:04: 0f:bf:fd:ef:49:64:8c:1a:79:a9:0e:ae:88:ed:ea: 5b:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 52:8F:B7:38:91:48:F9:96:1B:E0:75:64:A1:BC:C2:8D:E1:44:09:54 X509v3 Authority Key Identifier: keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721531393/0/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721531393/0/528FB7389148F9961BE07564A1BCC28DE1440954.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.152.246.0/23 IPv6: 2406:3ac0::/32 Signature Algorithm: sha256WithRSAEncryption 03:fe:4a:6c:a9:ce:b4:88:09:a0:77:ca:ff:75:ad:d5:e2:d4: 88:0f:82:19:9b:12:ca:ef:fa:0a:52:5c:15:46:fd:92:e8:67: f9:14:0d:97:83:ee:0a:ff:b1:e3:67:2e:f7:4f:e3:e1:16:13: 48:17:e4:8c:3b:01:87:68:27:b3:b0:23:24:f1:d9:07:1b:5e: fa:66:61:f3:71:c1:89:6a:8c:49:b9:79:b4:b8:a3:df:9f:e2: 80:90:7d:15:b5:65:8d:1d:0a:7c:40:6a:74:c7:a1:bf:65:9d: 78:90:8b:6f:f1:2a:35:a9:71:ff:4a:13:c9:54:74:20:b0:b3: 78:21:fa:1e:0f:f1:81:89:32:8a:28:02:0a:c6:92:8d:aa:70: 61:6b:77:d4:9c:28:71:7a:fc:ff:39:2f:d8:bb:e3:7c:d8:3a: 05:32:02:c7:6f:d4:a6:d9:72:76:39:1e:dc:60:c9:c7:70:c4: 7f:3f:37:8f:e8:cf:91:69:2e:34:77:20:fb:f9:51:66:03:0e: a6:5e:25:f0:01:64:9f:6f:a8:29:9f:4e:43:21:20:f9:50:96: b1:d4:d5:cc:18:91:20:6f:12:e3:f8:0f:c5:da:6a:da:75:78: fd:ab:e8:ee:7d:1b:fa:45:07:5d:79:a2:39:dd:34:40:51:e9: ba:69:3a:83 -----BEGIN CERTIFICATE----- MIIFtjCCBJ6gAwIBAgIUPNonkhqo93BsQymdpavHnslZKl0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDExOTExMTUxOVoX DTI3MDExODExMjAxOVowMzExMC8GA1UEAxMoNTI4RkI3Mzg5MTQ4Rjk5NjFCRTA3 NTY0QTFCQ0MyOERFMTQ0MDk1NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOa+3EPrssrcCpFKV8RCSB6oSj10nTlm87DRCXX9Bi2Mwk4Tts+X1Vs8Lb+c /QMvQj0CClN/5OAQOp18iW697sT5Akj4FMwJX0ab88aGeZ7Q7Z8W53yd1fiwNHyZ +6SGvnKUxXM3FmmE5sVJvY2NIEqNMof5cHduMhet5WJZaOb1dSz0bkN0aVrtiX9Z YtsGZlpfmth6oD+WiVvEmsodaItvQjRgYXzkTOI181gvDtmVLXijVLBw/xUbkz3d Dhrjj0yPklFeeWPCq1QFbhAv53Wg7zVYw4yVHO/pcG9DgnZ6Ue1hA+wTGvKKtpaw X/IED7/970lkjBp5qQ6uiO3qWwkCAwEAAaOCAqkwggKlMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFFKPtziRSPmWG+B1ZKG8wo3hRAlUMB8GA1UdIwQYMBaAFKVu hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTA2NTU5MTE5NTcyMTUzMTM5My8wLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDY1NTkxMTk1NzIxNTMxMzkz LzAvNTI4RkI3Mzg5MTQ4Rjk5NjFCRTA3NTY0QTFCQ0MyOERFMTQ0MDk1NC5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUH AQcBAf8EHzAdMAwEAgABMAYDBAFnmPYwDQQCAAIwBwMFACQGOsAwDQYJKoZIhvcN AQELBQADggEBAAP+SmypzrSICaB3yv91rdXi1IgPghmbEsrv+gpSXBVG/ZLoZ/kU DZeD7gr/seNnLvdP4+EWE0gX5Iw7AYdoJ7OwIyTx2QcbXvpmYfNxwYlqjEm5ebS4 o9+f4oCQfRW1ZY0dCnxAanTHob9lnXiQi2/xKjWpcf9KE8lUdCCws3gh+h4P8YGJ MoooAgrGko2qcGFrd9ScKHF6/P85L9i743zYOgUyAsdv1KbZcnY5HtxgycdwxH8/ N4/oz5FpLjR3IPv5UWYDDqZeJfABZJ9vqCmfTkMhIPlQlrHU1cwYkSBvEuP4D8Xa atp1eP2r6O59G/pFB115ojndNEBR6bppOoM= -----END CERTIFICATE-----Generated at Sun Jan 25 06:01:26 2026 by rpki-client