This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/57FBC602F8DD1AA06D45E7F3F1993968E7995AE0.cer File: 57FBC602F8DD1AA06D45E7F3F1993968E7995AE0.cer (raw, json) Hash identifier: Xwv+b5bOwIrVogtqAFZcwY2rVG/Ze1AD0ws3g8Mh97Y= Subject key identifier: 57:FB:C6:02:F8:DD:1A:A0:6D:45:E7:F3:F1:99:39:68:E7:99:5A:E0 Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Certificate serial: 3BD8D54BA831F50BCF19F84C1A3FDA6E3AC71D41 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1065576199947878403/0/57FBC602F8DD1AA06D45E7F3F1993968E7995AE0.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1065576199947878403/0/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Mon 19 Jan 2026 10:14:52 +0000 Certificate not after: Mon 18 Jan 2027 10:19:52 +0000 Subordinate resources: AS: 17969 AS: 38355 IP: 27.144.0.0/16 IP: 42.50.0.0/16 IP: 42.123.128.0/17 IP: 117.59.0.0/16 IP: 125.62.0.0/18 IP: 203.161.192.0/19 IP: 218.244.0.0/19 IP: 2401:7e00::/32 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 19:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:d8:d5:4b:a8:31:f5:0b:cf:19:f8:4c:1a:3f:da:6e:3a:c7:1d:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Validity Not Before: Jan 19 10:14:52 2026 GMT Not After : Jan 18 10:19:52 2027 GMT Subject: CN=57FBC602F8DD1AA06D45E7F3F1993968E7995AE0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:32:50:2d:b3:50:cd:aa:bd:37:13:34:80:a0: 0b:42:ff:54:ba:e1:bd:68:74:fb:bc:57:49:4a:cb: e0:ed:0a:9a:02:27:35:ee:95:8b:f0:3b:43:b3:91: 49:18:be:bc:11:8d:57:51:d1:26:56:b5:df:51:c1: 5b:69:4c:41:a6:75:89:eb:c8:97:9a:93:fc:09:61: f5:71:c6:28:9c:6d:eb:e5:6e:eb:8e:a5:7a:b6:d5: 4a:ef:f5:6a:84:b3:dc:ae:9c:41:6e:b1:56:1a:c9: c6:51:15:d4:48:e9:6d:c8:78:85:09:d6:eb:54:3c: c3:05:e7:ea:fc:80:d4:6d:91:49:ef:02:1d:c0:ad: 29:22:f2:06:47:f7:2d:9c:0c:f2:85:cc:4d:b2:52: db:f4:1f:3b:e3:f0:90:6d:89:38:87:6f:43:8a:de: a4:9b:fa:54:31:da:a4:b1:39:b5:0b:e0:f2:81:12: a3:6a:bf:97:08:aa:dc:7f:df:25:7b:7f:67:54:b4: 21:47:ea:96:94:68:e8:dd:38:4f:30:be:17:64:7d: 0f:9d:6a:8a:55:8a:70:c4:e3:e8:67:b8:82:22:b7: f0:9a:fd:3c:bf:b2:b2:5a:29:05:22:e7:ec:25:37: 4b:da:ac:5e:8a:86:eb:ef:7e:bf:f5:de:d6:c0:2b: 5d:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 57:FB:C6:02:F8:DD:1A:A0:6D:45:E7:F3:F1:99:39:68:E7:99:5A:E0 X509v3 Authority Key Identifier: keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947878403/0/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947878403/0/57FBC602F8DD1AA06D45E7F3F1993968E7995AE0.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 27.144.0.0/16 42.50.0.0/16 42.123.128.0/17 117.59.0.0/16 125.62.0.0/18 203.161.192.0/19 218.244.0.0/19 IPv6: 2401:7e00::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 17969 38355 Signature Algorithm: sha256WithRSAEncryption 56:25:aa:cb:c8:b9:45:b5:9b:6a:b4:88:6f:92:21:34:f6:e1: a4:e1:51:33:18:87:63:c3:31:d9:4a:94:8a:1a:1a:f0:e3:0f: 26:80:56:2b:c9:54:7c:d5:d0:ea:f0:9f:50:b8:45:59:06:7d: ab:40:38:1e:d0:87:19:a5:25:1f:2a:65:00:7a:12:9a:8b:71: a6:12:9a:12:1d:a2:2d:7f:b1:0b:27:b7:cd:7a:e2:74:86:74: 3e:21:c2:b0:ac:79:92:31:d9:2a:0b:47:72:3c:3d:c5:23:4e: 08:e5:b5:cd:a0:c0:f7:8a:24:7a:c5:f9:f5:6a:ca:3a:e6:04: dc:7b:fc:f4:ce:a7:e2:d4:54:6f:a5:a0:0c:36:62:40:06:78: 7f:69:26:27:ab:65:f3:92:f6:25:1f:a1:f2:3c:d7:ab:e2:6c: 31:dd:a0:e8:8f:3c:d4:a6:9f:bf:1b:2d:b7:ce:7f:e7:df:ab: 23:10:70:4c:d7:67:8d:9b:53:a0:98:3a:b4:1a:d8:c3:65:eb: 71:00:34:8a:f5:3a:c6:25:54:56:be:37:65:40:44:32:2a:f6: e0:e2:fa:08:89:fd:5c:59:02:ca:92:51:a8:f0:d3:2e:90:4e: 62:49:e1:3b:72:90:4e:6b:d5:84:20:3a:92:0e:51:da:3e:a8: 36:55:c1:9b -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUO9jVS6gx9QvPGfhMGj/abjrHHUEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDExOTEwMTQ1MloX DTI3MDExODEwMTk1MlowMzExMC8GA1UEAxMoNTdGQkM2MDJGOEREMUFBMDZENDVF N0YzRjE5OTM5NjhFNzk5NUFFMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAN4yUC2zUM2qvTcTNICgC0L/VLrhvWh0+7xXSUrL4O0KmgInNe6Vi/A7Q7OR SRi+vBGNV1HRJla131HBW2lMQaZ1ievIl5qT/Alh9XHGKJxt6+Vu646lerbVSu/1 aoSz3K6cQW6xVhrJxlEV1Ejpbch4hQnW61Q8wwXn6vyA1G2RSe8CHcCtKSLyBkf3 LZwM8oXMTbJS2/QfO+PwkG2JOIdvQ4repJv6VDHapLE5tQvg8oESo2q/lwiq3H/f JXt/Z1S0IUfqlpRo6N04TzC+F2R9D51qilWKcMTj6Ge4giK38Jr9PL+yslopBSLn 7CU3S9qsXoqG6+9+v/Xe1sArXR0CAwEAAaOCAuowggLmMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFFf7xgL43RqgbUXn8/GZOWjnmVrgMB8GA1UdIwQYMBaAFKVu hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTA2NTU3NjE5OTk0Nzg3ODQwMy8wLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDY1NTc2MTk5OTQ3ODc4NDAz LzAvNTdGQkM2MDJGOEREMUFBMDZENDVFN0YzRjE5OTM5NjhFNzk5NUFFMC5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwTwYIKwYBBQUH AQcBAf8EQDA+MC0EAgABMCcDAwAbkAMDACoyAwQHKnuAAwMAdTsDBAZ9PgADBAXL ocADBAXa9AAwDQQCAAIwBwMFACQBfgAwHgYIKwYBBQUHAQgBAf8EDzANoAswCQIC RjECAwCV0zANBgkqhkiG9w0BAQsFAAOCAQEAViWqy8i5RbWbarSIb5IhNPbhpOFR MxiHY8Mx2UqUihoa8OMPJoBWK8lUfNXQ6vCfULhFWQZ9q0A4HtCHGaUlHyplAHoS motxphKaEh2iLX+xCye3zXridIZ0PiHCsKx5kjHZKgtHcjw9xSNOCOW1zaDA94ok esX59WrKOuYE3Hv89M6n4tRUb6WgDDZiQAZ4f2kmJ6tl85L2JR+h8jzXq+JsMd2g 6I881Kafvxstt85/59+rIxBwTNdnjZtToJg6tBrYw2XrcQA0ivU6xiVUVr43ZUBE Mir24OL6CIn9XFkCypJRqPDTLpBOYknhO3KQTmvVhCA6kg5R2j6oNlXBmw== -----END CERTIFICATE-----Generated at Sun Jan 25 11:11:38 2026 by rpki-client