This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6A45D8322C3648F91E212472F604CAFDBA7019BB.cer File: 6A45D8322C3648F91E212472F604CAFDBA7019BB.cer (raw, json) Hash identifier: 3YMZG1HEifbW4GSf95CmkWoew3H189SDsjU/WrtZi7A= Subject key identifier: 6A:45:D8:32:2C:36:48:F9:1E:21:24:72:F6:04:CA:FD:BA:70:19:BB Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Certificate serial: 4D91D67DCA8E7D93CB42A9FA6CF628E500BB23AB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1065585389265289217/0/6A45D8322C3648F91E212472F604CAFDBA7019BB.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1065585389265289217/0/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Mon 19 Jan 2026 10:51:23 +0000 Certificate not after: Mon 18 Jan 2027 10:56:23 +0000 Subordinate resources: AS: 55989 IP: 45.124.76.0/22 IP: 103.43.132.0/22 IP: 103.157.212.0/23 IP: 103.192.208.0/22 IP: 103.235.100.0/22 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 19:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:91:d6:7d:ca:8e:7d:93:cb:42:a9:fa:6c:f6:28:e5:00:bb:23:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Validity Not Before: Jan 19 10:51:23 2026 GMT Not After : Jan 18 10:56:23 2027 GMT Subject: CN=6A45D8322C3648F91E212472F604CAFDBA7019BB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:a3:2a:bf:db:ba:9c:67:73:f1:1a:a4:0a:28: 90:72:a7:a1:1f:c1:c1:5c:80:4d:1f:ce:0c:a0:e6: 2f:c3:5d:3e:77:57:08:9e:b5:7d:87:b1:3b:82:e8: 99:b1:ee:65:6a:f1:94:2b:59:57:a8:04:4d:c4:b5: a5:4c:40:b6:93:cf:ab:f1:f9:27:4a:d0:25:c9:b3: 9c:53:bd:fd:5e:e1:d9:ac:5d:0b:14:d4:0a:bc:b4: ad:b4:bd:f8:4b:62:07:2f:3c:bd:c6:69:06:da:da: 84:e3:db:e4:3b:08:e4:7e:27:b6:b1:65:7d:16:9d: 00:5f:94:a6:cd:a0:aa:8d:e6:75:1d:f3:6e:ac:53: b6:92:e9:6d:19:87:b6:63:53:fa:c6:6a:e0:91:29: f3:e4:ac:71:94:8d:1c:bd:7d:ff:39:cf:30:86:5c: d9:5a:ff:c5:e0:44:33:5c:ce:12:18:9d:5e:cf:26: c7:60:55:94:8c:cd:f7:db:58:4a:22:a1:58:ee:b1: 32:62:0f:a6:d3:ea:66:2a:3d:36:3d:8b:47:5a:52: 64:29:80:68:10:7a:28:b3:17:ae:0e:58:d0:19:44: 8f:f8:d4:f9:41:29:c7:9a:38:93:b4:dd:77:8e:ec: 69:2a:e4:48:f4:fa:cd:97:e0:75:54:de:f5:f0:d9: 6c:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 6A:45:D8:32:2C:36:48:F9:1E:21:24:72:F6:04:CA:FD:BA:70:19:BB X509v3 Authority Key Identifier: keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265289217/0/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265289217/0/6A45D8322C3648F91E212472F604CAFDBA7019BB.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.124.76.0/22 103.43.132.0/22 103.157.212.0/23 103.192.208.0/22 103.235.100.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 55989 Signature Algorithm: sha256WithRSAEncryption 4a:29:93:7e:3a:0a:9f:83:53:6b:7e:12:68:cf:9b:02:95:ad: 54:66:cb:e8:76:91:9d:64:0a:d8:19:f0:eb:80:46:5f:b8:ee: e1:8a:6a:5c:e4:7b:92:f5:78:eb:e7:8a:6c:a4:d8:e8:37:f4: 04:86:9b:3c:65:b3:98:82:c4:e5:ea:ca:50:0d:d7:1e:40:79: f2:9f:28:46:e7:67:62:7b:25:82:89:7b:77:dd:56:8f:e6:04: cc:c1:16:d8:69:5c:18:d7:ed:e6:64:9d:5c:5f:ee:4a:4c:d0: 45:42:d6:2c:d5:8b:23:06:64:1a:94:94:ba:ac:07:c3:01:93: c1:76:ed:4b:42:0a:49:d1:85:85:be:ac:e3:d4:9a:e6:5b:05: 3d:15:26:19:eb:e3:40:1b:71:13:6e:ea:aa:09:fd:c6:cb:6b: 7e:1b:92:63:45:ab:18:11:c8:d6:c1:ba:16:3f:f0:5d:5f:b7: cd:b3:71:b0:60:12:9c:ba:67:88:00:44:1d:87:92:1e:ed:76: 11:7c:9d:9c:18:2e:a9:12:2d:58:78:60:48:b6:b4:4a:27:4c: 02:9d:a3:64:ac:01:c6:57:06:97:a0:ed:b0:98:25:48:05:23: 16:ad:73:9a:7a:31:2e:5f:3e:37:da:b2:71:e8:f2:ea:6b:7e: 35:34:6d:86 -----BEGIN CERTIFICATE----- MIIF2zCCBMOgAwIBAgIUTZHWfcqOfZPLQqn6bPYo5QC7I6swDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDExOTEwNTEyM1oX DTI3MDExODEwNTYyM1owMzExMC8GA1UEAxMoNkE0NUQ4MzIyQzM2NDhGOTFFMjEy NDcyRjYwNENBRkRCQTcwMTlCQjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKWjKr/bupxnc/EapAookHKnoR/BwVyATR/ODKDmL8NdPndXCJ61fYexO4Lo mbHuZWrxlCtZV6gETcS1pUxAtpPPq/H5J0rQJcmznFO9/V7h2axdCxTUCry0rbS9 +EtiBy88vcZpBtrahOPb5DsI5H4ntrFlfRadAF+Ups2gqo3mdR3zbqxTtpLpbRmH tmNT+sZq4JEp8+SscZSNHL19/znPMIZc2Vr/xeBEM1zOEhidXs8mx2BVlIzN99tY SiKhWO6xMmIPptPqZio9Nj2LR1pSZCmAaBB6KLMXrg5Y0BlEj/jU+UEpx5o4k7Td d47saSrkSPT6zZfgdVTe9fDZbAcCAwEAAaOCAs4wggLKMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFGpF2DIsNkj5HiEkcvYEyv26cBm7MB8GA1UdIwQYMBaAFKVu hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTA2NTU4NTM4OTI2NTI4OTIxNy8wLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDY1NTg1Mzg5MjY1Mjg5MjE3 LzAvNkE0NUQ4MzIyQzM2NDhGOTFFMjEyNDcyRjYwNENBRkRCQTcwMTlCQi5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwNwYIKwYBBQUH AQcBAf8EKDAmMCQEAgABMB4DBAItfEwDBAJnK4QDBAFnndQDBAJnwNADBAJn62Qw GgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDANq1MA0GCSqGSIb3DQEBCwUAA4IBAQBK KZN+Ogqfg1NrfhJoz5sCla1UZsvodpGdZArYGfDrgEZfuO7himpc5HuS9Xjr54ps pNjoN/QEhps8ZbOYgsTl6spQDdceQHnynyhG52dieyWCiXt33VaP5gTMwRbYaVwY 1+3mZJ1cX+5KTNBFQtYs1YsjBmQalJS6rAfDAZPBdu1LQgpJ0YWFvqzj1JrmWwU9 FSYZ6+NAG3ETbuqqCf3Gy2t+G5JjRasYEcjWwboWP/BdX7fNs3GwYBKcumeIAEQd h5Ie7XYRfJ2cGC6pEi1YeGBItrRKJ0wCnaNkrAHGVwaXoO2wmCVIBSMWrXOaejEu Xz432rJx6PLqa341NG2G -----END CERTIFICATE-----Generated at Sun Jan 25 06:01:41 2026 by rpki-client