This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5B5862FC7F554C1EA820E9A8F4BB2EC0C9E3F136.cer File: 5B5862FC7F554C1EA820E9A8F4BB2EC0C9E3F136.cer (raw, json) Hash identifier: l4KPvMnhbo0BzgHlpb+lsI04vvcvqWKFRIxdLHCIpR0= Subject key identifier: 5B:58:62:FC:7F:55:4C:1E:A8:20:E9:A8:F4:BB:2E:C0:C9:E3:F1:36 Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Certificate serial: 7F2CD6E782FA0642856DF28EBB09D496A905C123 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1065580055121756162/0/5B5862FC7F554C1EA820E9A8F4BB2EC0C9E3F136.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1065580055121756162/0/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Mon 19 Jan 2026 10:35:32 +0000 Certificate not after: Mon 18 Jan 2027 10:40:32 +0000 Subordinate resources: AS: 63582 -- 63583 AS: 139137 AS: 139140 IP: 45.120.240.0/22 IP: 103.61.60.0/22 IP: 2402:7d80::/32 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 19:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:2c:d6:e7:82:fa:06:42:85:6d:f2:8e:bb:09:d4:96:a9:05:c1:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Validity Not Before: Jan 19 10:35:32 2026 GMT Not After : Jan 18 10:40:32 2027 GMT Subject: CN=5B5862FC7F554C1EA820E9A8F4BB2EC0C9E3F136 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:c7:65:35:de:79:f0:b0:ec:26:82:6b:5a:d5: 52:91:75:f2:8e:79:93:e1:12:ad:31:b2:38:71:c2: c6:ad:b7:af:81:67:44:fa:73:9d:d8:0a:74:1f:87: 23:a0:1b:12:08:d5:6c:f2:1b:27:97:16:d6:3e:c0: f2:f6:97:73:bb:22:99:d9:34:9b:21:fc:3e:25:09: 7e:48:a0:74:3d:e5:aa:c9:c2:29:50:d6:8a:65:7c: 00:65:2e:2d:9b:71:b8:db:05:6c:46:47:8c:24:d9: cc:89:5a:1c:76:06:94:d2:4c:e4:9c:7d:d7:d9:24: 44:6a:18:c2:44:b7:c6:54:da:c5:01:61:5f:aa:56: 93:c2:f3:69:dd:64:bb:39:27:f8:7e:6e:f4:40:97: 0f:0f:10:81:93:de:f2:6d:70:46:c9:eb:9a:6d:90: a2:6a:e0:be:93:17:0e:44:b4:9c:57:11:a7:9e:a5: 69:c3:df:01:55:94:43:10:18:77:5d:9f:dc:5b:b9: 15:a2:dd:9b:7e:fc:1b:bb:f8:44:5b:f8:36:27:33: a7:1b:95:f5:6b:02:f5:8e:6c:41:0d:b3:7e:ea:48: 8a:ef:5c:0b:34:5c:9d:8a:69:47:ec:67:bd:30:56: a8:f9:b1:4f:de:3f:26:7a:a8:ac:58:55:68:a0:1b: 92:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 5B:58:62:FC:7F:55:4C:1E:A8:20:E9:A8:F4:BB:2E:C0:C9:E3:F1:36 X509v3 Authority Key Identifier: keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121756162/0/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121756162/0/5B5862FC7F554C1EA820E9A8F4BB2EC0C9E3F136.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.120.240.0/22 103.61.60.0/22 IPv6: 2402:7d80::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 63582-63583 139137 139140 Signature Algorithm: sha256WithRSAEncryption 6a:d9:4a:09:84:0b:ed:3c:ae:23:fe:e0:48:1d:7c:3b:16:32: f1:ff:06:62:5a:fe:4f:c0:7d:6d:58:1f:3b:e8:43:ba:86:66: ec:6f:ef:bf:21:4f:97:b3:ca:33:41:9e:54:ce:04:98:33:06: e5:7a:81:d6:3d:ef:4f:b7:b2:c9:0d:41:45:72:93:8e:7d:63: 60:95:af:f4:b8:f6:1f:92:b2:e1:aa:36:ac:5d:03:04:48:e9: 52:ab:d8:f8:f6:84:df:7a:92:3f:c1:45:9e:b4:76:ba:c9:8a: eb:9e:d1:ac:67:52:3c:99:f7:05:ae:0a:8f:02:63:f7:d5:e8: 92:b1:0a:be:f9:cd:a6:f6:9a:80:9f:23:fa:87:8b:ea:29:e0: 8e:4d:bd:86:5a:9f:48:6a:2c:d1:8b:31:73:f6:43:9e:ee:f9: 23:c6:6e:87:d2:fc:95:06:74:a7:6e:3d:34:4d:e3:25:d3:05: 90:04:7b:95:c1:25:6c:eb:c3:eb:69:a5:1e:e5:d6:ec:9a:00: 37:b6:cb:d9:95:02:2b:87:bc:65:92:26:70:c6:e4:aa:56:fd: d4:d0:56:ac:f0:78:c5:e8:ec:2a:91:97:8d:cf:e9:67:8f:49: ef:ee:f6:b4:fe:1a:aa:1f:1f:a3:65:27:53:3c:30:e6:dd:bd: 59:4e:61:1e -----BEGIN CERTIFICATE----- MIIF6TCCBNGgAwIBAgIUfyzW54L6BkKFbfKOuwnUlqkFwSMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDExOTEwMzUzMloX DTI3MDExODEwNDAzMlowMzExMC8GA1UEAxMoNUI1ODYyRkM3RjU1NEMxRUE4MjBF OUE4RjRCQjJFQzBDOUUzRjEzNjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANjHZTXeefCw7CaCa1rVUpF18o55k+ESrTGyOHHCxq23r4FnRPpzndgKdB+H I6AbEgjVbPIbJ5cW1j7A8vaXc7simdk0myH8PiUJfkigdD3lqsnCKVDWimV8AGUu LZtxuNsFbEZHjCTZzIlaHHYGlNJM5Jx919kkRGoYwkS3xlTaxQFhX6pWk8Lzad1k uzkn+H5u9ECXDw8QgZPe8m1wRsnrmm2QomrgvpMXDkS0nFcRp56lacPfAVWUQxAY d12f3Fu5FaLdm378G7v4RFv4NiczpxuV9WsC9Y5sQQ2zfupIiu9cCzRcnYppR+xn vTBWqPmxT94/JnqorFhVaKAbkrcCAwEAAaOCAtwwggLYMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFFtYYvx/VUweqCDpqPS7LsDJ4/E2MB8GA1UdIwQYMBaAFKVu hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTA2NTU4MDA1NTEyMTc1NjE2Mi8wLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDY1NTgwMDU1MTIxNzU2MTYy LzAvNUI1ODYyRkM3RjU1NEMxRUE4MjBFOUE4RjRCQjJFQzBDOUUzRjEzNi5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwNAYIKwYBBQUH AQcBAf8EJTAjMBIEAgABMAwDBAItePADBAJnPTwwDQQCAAIwBwMFACQCfYAwKwYI KwYBBQUHAQgBAf8EHDAaoBgwFjAKAgMA+F4CAwD4XwIDAh+BAgMCH4QwDQYJKoZI hvcNAQELBQADggEBAGrZSgmEC+08riP+4EgdfDsWMvH/BmJa/k/AfW1YHzvoQ7qG Zuxv778hT5ezyjNBnlTOBJgzBuV6gdY970+3sskNQUVyk459Y2CVr/S49h+SsuGq NqxdAwRI6VKr2Pj2hN96kj/BRZ60drrJiuue0axnUjyZ9wWuCo8CY/fV6JKxCr75 zab2moCfI/qHi+op4I5NvYZan0hqLNGLMXP2Q57u+SPGbofS/JUGdKduPTRN4yXT BZAEe5XBJWzrw+tppR7l1uyaADe2y9mVAiuHvGWSJnDG5KpW/dTQVqzweMXo7CqR l43P6WePSe/u9rT+GqofH6NlJ1M8MObdvVlOYR4= -----END CERTIFICATE-----Generated at Sun Jan 25 06:01:20 2026 by rpki-client