This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.cer File: 6B57EAD7B38319269AE93A3E26FB3967D141F5D5.cer (raw, json) Hash identifier: EWvdkgFmGVY0nssXkT82tk0YswALG1fcRkGfwMdnBBo= Subject key identifier: 6B:57:EA:D7:B3:83:19:26:9A:E9:3A:3E:26:FB:39:67:D1:41:F5:D5 Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Certificate serial: 25552475A68D9967B3A720DAEDF73885DAAA29C6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Mon 19 Jan 2026 10:18:51 +0000 Certificate not after: Mon 18 Jan 2027 10:23:51 +0000 Subordinate resources: AS: 18118 AS: 45056 IP: 120.44.0.0/15 IP: 120.47.0.0/16 IP: 122.48.0.0/16 IP: 219.72.0.0/16 IP: 2400:3600::/32 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 19:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:55:24:75:a6:8d:99:67:b3:a7:20:da:ed:f7:38:85:da:aa:29:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Validity Not Before: Jan 19 10:18:51 2026 GMT Not After : Jan 18 10:23:51 2027 GMT Subject: CN=6B57EAD7B38319269AE93A3E26FB3967D141F5D5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:b9:f3:fe:5a:06:09:b9:9b:f0:c0:05:da:0d: 40:91:2a:98:7a:4a:32:5c:c6:2d:82:a2:41:09:a5: b9:d1:70:d6:d1:56:5f:61:84:03:0b:07:c9:f9:07: ad:21:16:3b:50:05:b1:bd:87:b5:6c:87:20:68:c5: f6:6f:7e:55:3a:13:ff:02:ab:e7:45:19:a9:64:67: 5c:4b:b9:82:34:95:a1:5c:6e:a7:66:0c:3f:e5:54: d4:2b:e1:76:96:d2:30:96:0b:0f:aa:26:d6:79:97: a7:af:aa:d4:7c:6b:15:33:3e:b9:b8:47:d2:b4:64: 3d:8b:58:ab:73:3e:43:67:56:dc:2a:f9:36:0c:05: 5f:53:53:96:ec:0c:8c:5d:9c:b5:59:eb:2a:cf:80: ed:ee:22:20:52:80:e0:97:38:f5:b5:0d:c1:a4:46: 5c:2c:94:6e:0f:48:dc:d0:04:6a:40:d3:33:0a:39: c7:05:69:13:4c:dd:de:4a:29:ea:51:6d:eb:51:df: 9c:fc:8f:7b:f0:3d:63:8f:4e:44:97:16:8f:4f:b1: 56:1a:1b:21:29:b8:df:58:e6:88:31:24:c2:13:07: dd:c0:3e:5b:7a:7d:41:66:68:1e:3c:b4:57:36:a3: bd:d3:08:6e:be:87:07:6d:70:12:7f:b7:0a:9a:ba: cf:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 6B:57:EA:D7:B3:83:19:26:9A:E9:3A:3E:26:FB:39:67:D1:41:F5:D5 X509v3 Authority Key Identifier: keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 120.44.0.0/15 120.47.0.0/16 122.48.0.0/16 219.72.0.0/16 IPv6: 2400:3600::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 18118 45056 Signature Algorithm: sha256WithRSAEncryption 7e:5d:76:70:4b:c1:dd:40:77:b5:2e:e1:0a:c3:78:ec:f9:9a: 2e:61:8c:69:e2:ae:0f:7a:f5:2a:90:13:14:08:04:e7:08:53: 33:f4:f5:9b:7e:60:55:5a:1d:03:c1:ee:2a:2a:85:7b:d1:84: 85:54:f1:93:35:d9:57:58:12:eb:48:94:8c:83:91:ed:76:cc: 7f:db:db:eb:de:a7:b0:74:80:90:1c:5a:a7:a3:d1:08:69:25: 99:5c:7e:80:75:38:2a:8f:44:0a:f1:c0:f0:ee:85:ac:56:bf: 57:bb:0a:e9:6f:dc:7c:8c:e4:4c:33:ed:22:f4:d6:f0:e1:97: 41:54:50:20:23:22:60:58:1f:f4:6c:a4:8c:69:8a:fb:db:c8: fa:aa:a9:79:fb:f9:40:8f:99:5f:eb:de:d9:9d:a4:26:13:36: b9:47:6e:5b:1b:79:55:47:30:4f:b2:03:0b:f8:c5:59:e2:16: fe:9e:3e:e9:e1:bd:ac:c7:83:42:0c:6a:8e:7a:6d:34:8d:c2: 99:f8:42:31:6d:b9:96:67:37:41:b3:29:f6:60:e8:4a:00:4f: 39:b0:5a:8b:a1:00:67:05:78:70:f1:75:d4:f9:37:89:0b:8d: 2f:6e:a6:e0:f0:c8:d8:80:38:8e:f6:70:54:77:13:5a:ee:dc: 66:af:67:6c -----BEGIN CERTIFICATE----- MIIF5DCCBMygAwIBAgIUJVUkdaaNmWezpyDa7fc4hdqqKcYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDExOTEwMTg1MVoX DTI3MDExODEwMjM1MVowMzExMC8GA1UEAxMoNkI1N0VBRDdCMzgzMTkyNjlBRTkz QTNFMjZGQjM5NjdEMTQxRjVENTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOC58/5aBgm5m/DABdoNQJEqmHpKMlzGLYKiQQmludFw1tFWX2GEAwsHyfkH rSEWO1AFsb2HtWyHIGjF9m9+VToT/wKr50UZqWRnXEu5gjSVoVxup2YMP+VU1Cvh dpbSMJYLD6om1nmXp6+q1HxrFTM+ubhH0rRkPYtYq3M+Q2dW3Cr5NgwFX1NTluwM jF2ctVnrKs+A7e4iIFKA4Jc49bUNwaRGXCyUbg9I3NAEakDTMwo5xwVpE0zd3kop 6lFt61HfnPyPe/A9Y49ORJcWj0+xVhobISm431jmiDEkwhMH3cA+W3p9QWZoHjy0 VzajvdMIbr6HB21wEn+3Cpq6zwsCAwEAAaOCAtcwggLTMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFGtX6tezgxkmmuk6Pib7OWfRQfXVMB8GA1UdIwQYMBaAFKVu hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTA2NTU3NzI0MTk0NzIwOTcyOS8wLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDY1NTc3MjQxOTQ3MjA5NzI5 LzAvNkI1N0VBRDdCMzgzMTkyNjlBRTkzQTNFMjZGQjM5NjdEMTQxRjVENS5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwPAYIKwYBBQUH AQcBAf8ELTArMBoEAgABMBQDAwF4LAMDAHgvAwMAejADAwDbSDANBAIAAjAHAwUA JAA2ADAeBggrBgEFBQcBCAEB/wQPMA2gCzAJAgJGxgIDALAAMA0GCSqGSIb3DQEB CwUAA4IBAQB+XXZwS8HdQHe1LuEKw3js+ZouYYxp4q4PevUqkBMUCATnCFMz9PWb fmBVWh0Dwe4qKoV70YSFVPGTNdlXWBLrSJSMg5Htdsx/29vr3qewdICQHFqno9EI aSWZXH6AdTgqj0QK8cDw7oWsVr9Xuwrpb9x8jORMM+0i9Nbw4ZdBVFAgIyJgWB/0 bKSMaYr728j6qql5+/lAj5lf697ZnaQmEza5R25bG3lVRzBPsgML+MVZ4hb+nj7p 4b2sx4NCDGqOem00jcKZ+EIxbbmWZzdBsyn2YOhKAE85sFqLoQBnBXhw8XXU+TeJ C40vbqbg8MjYgDiO9nBUdxNa7txmr2ds -----END CERTIFICATE-----Generated at Sun Jan 25 06:01:12 2026 by rpki-client