This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/67966D34EFBF4CBCFB00CF9C204539BFE0A25316.cer File: 67966D34EFBF4CBCFB00CF9C204539BFE0A25316.cer (raw, json) Hash identifier: 37ALhDS5+WO92SwCycgHgVgIiCFXJUm6ozDS2LACx1Q= Subject key identifier: 67:96:6D:34:EF:BF:4C:BC:FB:00:CF:9C:20:45:39:BF:E0:A2:53:16 Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Certificate serial: 0B41806C43E3926EEA764149D1AAD88213E8C7C4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1065582741577859074/0/67966D34EFBF4CBCFB00CF9C204539BFE0A25316.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1065582741577859074/0/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Mon 19 Jan 2026 10:47:52 +0000 Certificate not after: Mon 18 Jan 2027 10:52:52 +0000 Subordinate resources: AS: 139091 IP: 103.1.24.0/22 IP: 103.140.14.0/23 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 19:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:41:80:6c:43:e3:92:6e:ea:76:41:49:d1:aa:d8:82:13:e8:c7:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Validity Not Before: Jan 19 10:47:52 2026 GMT Not After : Jan 18 10:52:52 2027 GMT Subject: CN=67966D34EFBF4CBCFB00CF9C204539BFE0A25316 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:e8:6f:b5:fe:98:1a:e6:fb:fa:56:f8:4f:f7: a3:94:bd:33:5e:b3:b9:2e:90:bc:aa:b3:9f:f0:f0: af:da:9e:39:18:8e:61:e7:42:28:dd:d1:ac:d8:0d: 93:08:68:68:89:b4:87:a1:3f:3e:f7:f7:a3:45:e0: 7a:8f:0e:d4:19:47:ce:53:3b:ae:1f:0a:c0:d8:a6: 7e:1f:04:2b:e0:4c:23:65:4f:a4:41:ca:01:6d:ed: e7:b9:1a:c2:96:e5:0e:f1:9e:6b:d9:4c:cc:a1:20: 76:7a:b2:a9:3e:a4:da:30:d5:d1:8d:eb:c0:81:c0: 76:b6:2a:ec:6d:04:74:f1:83:2a:78:6d:3a:b1:89: 9a:9d:26:9c:d9:2a:14:c6:c7:4d:b9:61:91:4d:bc: 55:42:8a:78:26:ad:e4:10:c0:6d:66:ce:66:cf:13: 31:a4:f1:c0:91:bf:b2:91:80:e7:f7:f1:96:a6:95: e2:f1:26:fc:4c:4a:77:41:8a:fb:0c:8e:ef:23:9b: 2a:2c:49:0f:16:28:1c:95:bd:b3:25:c5:2c:38:55: a2:3d:0b:64:1c:78:9f:99:47:a6:c4:34:5f:22:dd: 91:ed:d7:29:6b:c8:6a:18:3d:07:d4:ca:7d:eb:9f: 59:9b:86:1e:f8:ea:5a:f4:a2:19:59:1c:41:8f:ec: 7d:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 67:96:6D:34:EF:BF:4C:BC:FB:00:CF:9C:20:45:39:BF:E0:A2:53:16 X509v3 Authority Key Identifier: keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577859074/0/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577859074/0/67966D34EFBF4CBCFB00CF9C204539BFE0A25316.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.1.24.0/22 103.140.14.0/23 sbgp-autonomousSysNum: critical Autonomous System Numbers: 139091 Signature Algorithm: sha256WithRSAEncryption 2a:68:e0:c7:c0:62:40:a6:90:67:4a:6b:1e:db:b7:f7:ae:bf: de:6b:50:44:c8:2a:e9:cc:c6:30:9b:e8:34:1f:16:51:c0:76: 8d:27:73:23:27:a3:57:3c:5d:9a:be:e1:52:3a:6b:ae:c1:9f: 89:09:d5:cc:13:b6:6a:52:92:12:4f:59:1f:78:84:cb:3b:f5: b3:9d:a5:a4:1f:e7:5d:a8:10:83:9e:33:80:bd:20:3f:df:2b: dd:4e:eb:e7:b1:99:9e:1b:cb:dd:0b:08:24:6a:98:f9:8b:a4: 5e:e8:4a:68:69:e3:32:be:7d:08:a9:b7:63:a9:50:d4:5d:59: 67:54:6c:ee:6b:6f:28:7f:79:dc:53:b2:d3:8c:2b:c9:cc:81: 47:79:e2:ac:16:19:92:fa:0f:56:b7:de:6e:5b:8f:9d:ca:9b: 1d:72:01:97:ba:16:87:ab:e8:0d:5e:e9:85:92:47:7b:0c:e5: a1:99:07:da:7d:c3:6c:91:07:10:64:51:35:eb:e0:b7:12:e6: 3b:aa:ad:c3:dd:4b:bf:c7:3d:e4:fd:cb:19:a8:8d:a8:6e:7d: 3b:fe:ae:2f:fd:61:09:4a:13:eb:a7:20:9b:bc:c6:7b:43:bc: 17:fe:1a:52:e3:de:e9:7f:8d:89:66:df:aa:f5:ea:bb:6e:8c: ac:4c:de:bf -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUC0GAbEPjkm7qdkFJ0arYghPox8QwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDExOTEwNDc1MloX DTI3MDExODEwNTI1MlowMzExMC8GA1UEAxMoNjc5NjZEMzRFRkJGNENCQ0ZCMDBD RjlDMjA0NTM5QkZFMEEyNTMxNjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKXob7X+mBrm+/pW+E/3o5S9M16zuS6QvKqzn/Dwr9qeORiOYedCKN3RrNgN kwhoaIm0h6E/Pvf3o0Xgeo8O1BlHzlM7rh8KwNimfh8EK+BMI2VPpEHKAW3t57ka wpblDvGea9lMzKEgdnqyqT6k2jDV0Y3rwIHAdrYq7G0EdPGDKnhtOrGJmp0mnNkq FMbHTblhkU28VUKKeCat5BDAbWbOZs8TMaTxwJG/spGA5/fxlqaV4vEm/ExKd0GK +wyO7yObKixJDxYoHJW9syXFLDhVoj0LZBx4n5lHpsQ0XyLdke3XKWvIahg9B9TK feufWZuGHvjqWvSiGVkcQY/sfZcCAwEAAaOCArwwggK4MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFGeWbTTvv0y8+wDPnCBFOb/golMWMB8GA1UdIwQYMBaAFKVu hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTA2NTU4Mjc0MTU3Nzg1OTA3NC8wLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDY1NTgyNzQxNTc3ODU5MDc0 LzAvNjc5NjZEMzRFRkJGNENCQ0ZCMDBDRjlDMjA0NTM5QkZFMEEyNTMxNi5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwJQYIKwYBBQUH AQcBAf8EFjAUMBIEAgABMAwDBAJnARgDBAFnjA4wGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDAh9TMA0GCSqGSIb3DQEBCwUAA4IBAQAqaODHwGJAppBnSmse27f3rr/e a1BEyCrpzMYwm+g0HxZRwHaNJ3MjJ6NXPF2avuFSOmuuwZ+JCdXME7ZqUpIST1kf eITLO/WznaWkH+ddqBCDnjOAvSA/3yvdTuvnsZmeG8vdCwgkapj5i6Re6EpoaeMy vn0IqbdjqVDUXVlnVGzua28of3ncU7LTjCvJzIFHeeKsFhmS+g9Wt95uW4+dypsd cgGXuhaHq+gNXumFkkd7DOWhmQfafcNskQcQZFE16+C3EuY7qq3D3Uu/xz3k/csZ qI2obn07/q4v/WEJShPrpyCbvMZ7Q7wX/hpS497pf42JZt+q9eq7boysTN6/ -----END CERTIFICATE-----Generated at Sun Jan 25 06:01:41 2026 by rpki-client