This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/52FBEC63231AAADF153ABC98E48B2A634CE07D2A.cer File: 52FBEC63231AAADF153ABC98E48B2A634CE07D2A.cer (raw, json) Hash identifier: lEgWqJaMZ/QaJtMvVyIHWVs7sP68lfGOcvhWGep8AIY= Subject key identifier: 52:FB:EC:63:23:1A:AA:DF:15:3A:BC:98:E4:8B:2A:63:4C:E0:7D:2A Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Certificate serial: 0E020E404CFF2394C8F5E6A682232CBF85844126 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1065591195721334785/0/52FBEC63231AAADF153ABC98E48B2A634CE07D2A.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1065591195721334785/0/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Mon 19 Jan 2026 11:14:17 +0000 Certificate not after: Mon 18 Jan 2027 11:19:17 +0000 Subordinate resources: IP: 103.126.100.0/22 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 19:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:02:0e:40:4c:ff:23:94:c8:f5:e6:a6:82:23:2c:bf:85:84:41:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Validity Not Before: Jan 19 11:14:17 2026 GMT Not After : Jan 18 11:19:17 2027 GMT Subject: CN=52FBEC63231AAADF153ABC98E48B2A634CE07D2A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:07:8c:aa:ef:a6:59:17:44:95:63:e0:fc:ef: 90:b4:6a:0a:9a:e0:1c:47:f1:55:8a:10:e8:79:ff: c6:92:14:ba:a9:1c:9b:53:d5:a9:80:00:ca:1f:ad: 1b:be:56:dc:aa:04:9a:60:b0:a5:05:72:31:c5:e1: 7c:5b:c7:ef:19:43:88:30:be:45:cc:42:74:2c:88: c7:b9:c0:e8:d4:be:2b:3b:47:62:18:a0:d6:57:c2: e0:e1:99:c8:b6:c7:43:86:43:4a:00:11:bf:3e:13: 9f:d8:59:98:77:a2:a6:8b:d5:c6:30:98:59:9a:84: a1:34:35:6d:75:64:e9:15:76:9c:1b:f3:83:c8:2d: f4:61:b5:1d:97:cf:c1:4e:9b:33:d6:be:8f:66:95: 62:da:46:e2:fc:89:ee:dc:a9:03:53:49:c7:cd:2f: 02:02:e7:ee:91:52:e5:0c:11:69:50:59:9a:ef:75: 30:03:aa:9d:c7:de:b1:9f:8a:a5:20:eb:bc:11:8d: 7b:b8:40:8e:67:93:1e:0e:5c:86:59:5f:9d:8a:e2: 15:38:cc:a6:2d:76:e1:97:20:72:2f:78:bd:ac:61: 44:ee:16:18:98:90:49:94:27:71:d8:33:14:e9:d4: bb:f2:14:8c:63:7a:bc:12:ef:70:45:eb:f6:b1:11: 08:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 52:FB:EC:63:23:1A:AA:DF:15:3A:BC:98:E4:8B:2A:63:4C:E0:7D:2A X509v3 Authority Key Identifier: keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721334785/0/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721334785/0/52FBEC63231AAADF153ABC98E48B2A634CE07D2A.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.126.100.0/22 Signature Algorithm: sha256WithRSAEncryption 77:40:66:e6:0a:69:35:33:b2:4a:dd:91:d0:92:ed:8c:6b:6e: 26:44:bd:17:31:66:ee:ea:f6:40:bc:49:ad:38:91:64:ff:84: de:89:04:58:f0:b7:ec:9b:0a:2f:bb:d4:67:0d:2b:83:9e:14: 33:d3:4d:1d:0a:2e:bd:19:ee:6d:c1:aa:34:2a:ea:8d:32:73: 98:a3:3f:ad:6a:d0:1f:05:2c:df:59:ab:55:a1:8c:25:bc:c1: a8:9a:79:72:c6:62:30:9a:c8:d5:6c:0b:8c:d3:5c:23:a1:4c: 7f:6a:64:cc:18:72:11:9e:f6:63:97:e2:64:0e:70:1c:ec:28: 07:33:8d:50:cd:b8:ee:54:a1:d9:0e:64:4a:8b:2b:86:4a:a2: 89:e0:1d:0c:70:7a:7a:61:13:e5:07:a8:4a:1f:81:63:b7:6a: 52:57:55:54:b9:3a:07:88:5c:8e:c5:af:8c:cf:0c:a3:78:2b: 62:09:44:22:97:60:63:74:db:45:6d:83:13:2d:c3:b4:ca:35: f5:d1:4a:77:53:52:41:ee:5d:3f:7c:5f:aa:a0:0f:30:e8:5c: 2a:32:13:0e:9f:28:dc:34:78:64:6f:7a:55:26:4d:b1:31:09: 65:e2:c6:d8:41:4c:6d:17:f7:be:2e:33:7a:51:5b:66:8c:f1: 24:4b:ef:71 -----BEGIN CERTIFICATE----- MIIFpzCCBI+gAwIBAgIUDgIOQEz/I5TI9eamgiMsv4WEQSYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDExOTExMTQxN1oX DTI3MDExODExMTkxN1owMzExMC8GA1UEAxMoNTJGQkVDNjMyMzFBQUFERjE1M0FC Qzk4RTQ4QjJBNjM0Q0UwN0QyQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAPQHjKrvplkXRJVj4PzvkLRqCprgHEfxVYoQ6Hn/xpIUuqkcm1PVqYAAyh+t G75W3KoEmmCwpQVyMcXhfFvH7xlDiDC+RcxCdCyIx7nA6NS+KztHYhig1lfC4OGZ yLbHQ4ZDSgARvz4Tn9hZmHeipovVxjCYWZqEoTQ1bXVk6RV2nBvzg8gt9GG1HZfP wU6bM9a+j2aVYtpG4vyJ7typA1NJx80vAgLn7pFS5QwRaVBZmu91MAOqncfesZ+K pSDrvBGNe7hAjmeTHg5chllfnYriFTjMpi124Zcgci94vaxhRO4WGJiQSZQncdgz FOnUu/IUjGN6vBLvcEXr9rERCJ0CAwEAAaOCApowggKWMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFFL77GMjGqrfFTq8mOSLKmNM4H0qMB8GA1UdIwQYMBaAFKVu hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTA2NTU5MTE5NTcyMTMzNDc4NS8wLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDY1NTkxMTk1NzIxMzM0Nzg1 LzAvNTJGQkVDNjMyMzFBQUFERjE1M0FCQzk4RTQ4QjJBNjM0Q0UwN0QyQS5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAJnfmQwDQYJKoZIhvcNAQELBQADggEBAHdAZuYK aTUzskrdkdCS7YxrbiZEvRcxZu7q9kC8Sa04kWT/hN6JBFjwt+ybCi+71GcNK4Oe FDPTTR0KLr0Z7m3BqjQq6o0yc5ijP61q0B8FLN9Zq1WhjCW8waiaeXLGYjCayNVs C4zTXCOhTH9qZMwYchGe9mOX4mQOcBzsKAczjVDNuO5UodkOZEqLK4ZKoongHQxw enphE+UHqEofgWO3alJXVVS5OgeIXI7Fr4zPDKN4K2IJRCKXYGN020VtgxMtw7TK NfXRSndTUkHuXT98X6qgDzDoXCoyEw6fKNw0eGRvelUmTbExCWXixthBTG0X974u M3pRW2aM8SRL73E= -----END CERTIFICATE-----Generated at Sun Jan 25 05:57:28 2026 by rpki-client