This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5FF4C92D6AAB65FC205E3ED414AB92362344BA6C.cer File: 5FF4C92D6AAB65FC205E3ED414AB92362344BA6C.cer (raw, json) Hash identifier: O/4go2fNsujbPmBUbnYVpEzO+FbI3Vgd44nn6DFR2ZY= Subject key identifier: 5F:F4:C9:2D:6A:AB:65:FC:20:5E:3E:D4:14:AB:92:36:23:44:BA:6C Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Certificate serial: 420B5B7FE0E348DC3DC175682BE0AE5526CF9433 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1065580055121625090/0/5FF4C92D6AAB65FC205E3ED414AB92362344BA6C.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1065580055121625090/0/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Mon 19 Jan 2026 10:31:23 +0000 Certificate not after: Mon 18 Jan 2027 10:36:23 +0000 Subordinate resources: AS: 63719 IP: 45.255.152.0/22 IP: 103.232.144.0/22 IP: 2401:2780::/32 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 19:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:0b:5b:7f:e0:e3:48:dc:3d:c1:75:68:2b:e0:ae:55:26:cf:94:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Validity Not Before: Jan 19 10:31:23 2026 GMT Not After : Jan 18 10:36:23 2027 GMT Subject: CN=5FF4C92D6AAB65FC205E3ED414AB92362344BA6C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:e3:53:74:f5:60:95:10:fb:d2:86:6c:a1:3d: 44:01:f7:f7:01:3b:a7:53:58:a6:a4:a5:cf:ac:5f: 70:e3:cb:0f:c1:5a:e2:1d:b9:61:b1:d4:82:bd:f4: ec:7a:f8:10:4c:3e:e1:5d:ae:c1:3b:86:5d:5b:c5: bb:b7:7b:a0:63:07:ab:66:c6:86:b8:8a:c0:f4:10: b5:cb:55:5c:29:61:d5:a4:ae:7f:3b:fb:95:47:a1: b0:99:9e:d3:52:82:df:eb:cc:f5:a5:ed:90:f2:d8: 82:72:9c:3c:ee:d0:13:2d:bb:15:ff:aa:2b:52:e9: de:ff:56:4a:e5:6b:d3:b8:ed:da:db:cb:5c:bc:6e: 5f:32:a4:88:e3:0e:54:73:1a:ca:58:e5:fc:ed:1d: 6b:1a:ea:2f:0c:28:da:17:48:0e:02:41:64:89:1a: 72:3a:6a:c9:c4:c0:23:92:bb:10:25:71:81:ea:bb: 7c:a6:47:09:2a:ee:62:5a:28:82:06:60:e9:13:30: e7:ff:eb:0e:01:b7:00:28:3f:6e:41:3a:79:f3:b8: 56:73:d5:6d:61:4b:84:0c:d0:17:56:55:43:be:0d: 16:86:9d:bb:b8:93:2b:7a:1b:45:25:72:59:fe:dc: 7f:a8:5d:93:6b:f2:0a:c0:eb:69:e6:9a:12:5d:d3: 37:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 5F:F4:C9:2D:6A:AB:65:FC:20:5E:3E:D4:14:AB:92:36:23:44:BA:6C X509v3 Authority Key Identifier: keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121625090/0/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121625090/0/5FF4C92D6AAB65FC205E3ED414AB92362344BA6C.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.255.152.0/22 103.232.144.0/22 IPv6: 2401:2780::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 63719 Signature Algorithm: sha256WithRSAEncryption 52:c6:bd:c9:54:10:23:be:05:06:cb:b1:b3:03:4c:cc:5d:c8: eb:5b:44:12:e2:92:cf:1e:14:5a:3b:04:e5:e1:37:d1:76:b3: c1:d6:5f:d6:cc:9b:c3:20:6a:05:82:65:6d:ee:24:03:77:ad: ae:b1:4a:9a:36:4b:64:27:22:b1:02:98:45:5e:3b:1b:d1:33: 5a:83:c7:fe:95:d8:85:2a:14:b2:58:06:7a:c4:f6:99:b7:de: a9:41:1f:1f:c0:9c:c2:2c:7d:f1:5c:17:46:3e:f9:39:c3:77: ab:98:56:26:e1:cf:ce:41:18:32:21:ac:ce:c2:5d:17:8f:2e: 72:71:35:c9:0d:47:c1:b0:ff:13:6f:c1:35:7a:5d:3f:f7:cf: 85:07:14:5b:87:4f:e1:81:4c:fe:96:67:e1:bb:7c:b9:29:2c: 0b:53:98:b7:3d:f4:1a:92:33:78:c9:97:21:0d:ea:18:01:b2: e7:af:4d:61:08:22:15:63:5b:aa:79:f5:f2:9a:fc:93:9d:de: 6a:38:8b:a9:28:4c:88:30:eb:c3:b5:ca:a2:70:b7:25:cb:50: ce:ac:d8:64:0d:56:b7:21:92:b8:d5:d8:3d:8d:0c:c6:fd:a1: ab:a4:33:29:9d:ff:8e:ff:4b:4c:de:7f:d0:3c:92:e9:02:d7: fe:e9:b3:cd -----BEGIN CERTIFICATE----- MIIF2DCCBMCgAwIBAgIUQgtbf+DjSNw9wXVoK+CuVSbPlDMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDExOTEwMzEyM1oX DTI3MDExODEwMzYyM1owMzExMC8GA1UEAxMoNUZGNEM5MkQ2QUFCNjVGQzIwNUUz RUQ0MTRBQjkyMzYyMzQ0QkE2QzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANLjU3T1YJUQ+9KGbKE9RAH39wE7p1NYpqSlz6xfcOPLD8Fa4h25YbHUgr30 7Hr4EEw+4V2uwTuGXVvFu7d7oGMHq2bGhriKwPQQtctVXClh1aSufzv7lUehsJme 01KC3+vM9aXtkPLYgnKcPO7QEy27Ff+qK1Lp3v9WSuVr07jt2tvLXLxuXzKkiOMO VHMayljl/O0daxrqLwwo2hdIDgJBZIkacjpqycTAI5K7ECVxgeq7fKZHCSruYloo ggZg6RMw5//rDgG3ACg/bkE6efO4VnPVbWFLhAzQF1ZVQ74NFoadu7iTK3obRSVy Wf7cf6hdk2vyCsDraeaaEl3TNy0CAwEAAaOCAsswggLHMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFF/0yS1qq2X8IF4+1BSrkjYjRLpsMB8GA1UdIwQYMBaAFKVu hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTA2NTU4MDA1NTEyMTYyNTA5MC8wLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDY1NTgwMDU1MTIxNjI1MDkw LzAvNUZGNEM5MkQ2QUFCNjVGQzIwNUUzRUQ0MTRBQjkyMzYyMzQ0QkE2Qy5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwNAYIKwYBBQUH AQcBAf8EJTAjMBIEAgABMAwDBAIt/5gDBAJn6JAwDQQCAAIwBwMFACQBJ4AwGgYI KwYBBQUHAQgBAf8ECzAJoAcwBQIDAPjnMA0GCSqGSIb3DQEBCwUAA4IBAQBSxr3J VBAjvgUGy7GzA0zMXcjrW0QS4pLPHhRaOwTl4TfRdrPB1l/WzJvDIGoFgmVt7iQD d62usUqaNktkJyKxAphFXjsb0TNag8f+ldiFKhSyWAZ6xPaZt96pQR8fwJzCLH3x XBdGPvk5w3ermFYm4c/OQRgyIazOwl0Xjy5ycTXJDUfBsP8Tb8E1el0/98+FBxRb h0/hgUz+lmfhu3y5KSwLU5i3PfQakjN4yZchDeoYAbLnr01hCCIVY1uqefXymvyT nd5qOIupKEyIMOvDtcqicLcly1DOrNhkDVa3IZK41dg9jQzG/aGrpDMpnf+O/0tM 3n/QPJLpAtf+6bPN -----END CERTIFICATE-----Generated at Sun Jan 25 05:56:50 2026 by rpki-client