This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D.cer File: 7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D.cer (raw, json) Hash identifier: gScHzTQ9uYns+e7iDYRAJtUlUl8Y2VtV61qt157s0Q8= Subject key identifier: 73:89:E1:B7:DF:B5:0F:AE:6A:4F:0C:88:09:16:4A:D0:7F:E9:13:4D Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Certificate serial: 6DAE401690309729A2275DB48BE00491E9A67ED7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1065579534394916867/0/7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1065579534394916867/0/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Mon 19 Jan 2026 10:36:36 +0000 Certificate not after: Mon 18 Jan 2027 10:41:36 +0000 Subordinate resources: AS: 59033 AS: 63689 IP: 103.90.51.0/24 IP: 103.90.56.0/23 IP: 103.204.72.0/22 IP: 202.160.140.0/22 IP: 2402:1440::/32 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 19:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:ae:40:16:90:30:97:29:a2:27:5d:b4:8b:e0:04:91:e9:a6:7e:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Validity Not Before: Jan 19 10:36:36 2026 GMT Not After : Jan 18 10:41:36 2027 GMT Subject: CN=7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:7a:20:16:31:f7:f7:80:53:16:c1:e4:16:b9: 5d:67:ff:70:da:a7:a7:b1:9d:6c:29:5e:31:42:14: db:49:fa:39:d6:fd:91:e0:bb:08:3e:13:49:07:d6: 45:79:35:22:02:72:67:85:e4:dc:5c:c8:09:19:00: 63:61:ed:06:6f:77:79:de:97:2c:d7:5a:2a:af:30: 74:57:bf:e1:ec:5d:94:f5:e7:ee:db:15:48:93:ad: 4a:c5:0a:96:52:f4:ec:0f:52:d3:14:3a:03:20:6b: c6:3c:df:2f:8e:21:12:34:4b:49:ef:87:cf:4f:73: 30:ef:f5:29:1a:b8:2e:e9:d2:b0:d8:e0:f7:30:72: 0a:0b:f7:d4:c6:85:21:f3:94:6b:05:90:34:f7:9f: 5c:99:89:1b:81:8a:cb:59:1c:07:d9:ab:c8:eb:78: f3:bd:b1:6a:97:b0:f9:d6:b9:ac:63:f9:38:72:07: 35:c9:10:61:63:2b:b2:55:0c:ac:8f:ab:93:75:a2: 6a:f3:06:17:18:70:bf:a0:82:f2:1f:b9:6c:68:d0: 6d:d7:40:67:3b:62:68:84:02:21:3c:7e:23:5b:10: 5c:74:91:2c:61:e2:f5:c5:76:3b:73:b5:5a:b9:f6: 92:80:54:0f:d8:a0:ad:31:76:52:ae:13:18:85:c8: 19:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 73:89:E1:B7:DF:B5:0F:AE:6A:4F:0C:88:09:16:4A:D0:7F:E9:13:4D X509v3 Authority Key Identifier: keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394916867/0/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394916867/0/7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.90.51.0/24 103.90.56.0/23 103.204.72.0/22 202.160.140.0/22 IPv6: 2402:1440::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 59033 63689 Signature Algorithm: sha256WithRSAEncryption 2a:58:b4:bf:34:ba:a7:9e:58:1c:f0:f5:3e:ba:6a:dd:e6:c4: f3:d7:c4:17:1a:af:7b:a6:56:7e:6b:e2:d5:73:a7:fc:c7:1e: 3d:6c:e5:5d:a0:3b:25:0a:02:3c:91:cd:af:f3:cb:fb:c5:bf: d2:8a:32:06:a5:dd:a6:eb:69:a8:ea:cd:d1:6e:ac:ee:b0:27: d5:7d:2a:87:05:19:b9:3e:2f:db:58:5e:a1:cd:54:2a:20:7e: 3a:7b:01:6a:f6:4f:01:01:e4:7d:40:13:53:64:92:d3:81:f5: c1:9e:d0:f8:53:ea:99:4b:5e:fa:0a:c6:ea:61:a3:11:ab:df: ce:26:57:8a:10:22:6f:d5:9d:a4:e1:2c:65:ca:9a:b0:ed:e6: 39:bb:0f:eb:c2:78:f1:12:e1:f6:8f:b3:32:02:e0:6e:e0:3e: da:7d:85:57:c5:cd:7d:9c:7a:b6:0e:9c:b0:57:63:8a:85:4e: f7:a7:88:95:85:8b:53:22:d0:e7:f8:5a:5e:de:b4:da:f3:d3: 5a:db:20:9b:7e:c4:32:9c:e3:02:8a:37:99:ca:1e:80:bf:34: c4:93:71:61:06:0e:5b:0f:c9:8e:ec:8f:38:de:0e:fc:8b:21: 6b:cc:0b:fb:29:12:4a:76:d8:b6:43:9d:09:ca:21:ac:9e:7d: 4c:34:08:d1 -----BEGIN CERTIFICATE----- MIIF6TCCBNGgAwIBAgIUba5AFpAwlymiJ120i+AEkemmftcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDExOTEwMzYzNloX DTI3MDExODEwNDEzNlowMzExMC8GA1UEAxMoNzM4OUUxQjdERkI1MEZBRTZBNEYw Qzg4MDkxNjRBRDA3RkU5MTM0RDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALl6IBYx9/eAUxbB5Ba5XWf/cNqnp7GdbCleMUIU20n6Odb9keC7CD4TSQfW RXk1IgJyZ4Xk3FzICRkAY2HtBm93ed6XLNdaKq8wdFe/4exdlPXn7tsVSJOtSsUK llL07A9S0xQ6AyBrxjzfL44hEjRLSe+Hz09zMO/1KRq4LunSsNjg9zByCgv31MaF IfOUawWQNPefXJmJG4GKy1kcB9mryOt4872xapew+da5rGP5OHIHNckQYWMrslUM rI+rk3WiavMGFxhwv6CC8h+5bGjQbddAZztiaIQCITx+I1sQXHSRLGHi9cV2O3O1 Wrn2koBUD9igrTF2Uq4TGIXIGa0CAwEAAaOCAtwwggLYMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFHOJ4bfftQ+uak8MiAkWStB/6RNNMB8GA1UdIwQYMBaAFKVu hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTA2NTU3OTUzNDM5NDkxNjg2Ny8wLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDY1NTc5NTM0Mzk0OTE2ODY3 LzAvNzM4OUUxQjdERkI1MEZBRTZBNEYwQzg4MDkxNjRBRDA3RkU5MTM0RC5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwQAYIKwYBBQUH AQcBAf8EMTAvMB4EAgABMBgDBABnWjMDBAFnWjgDBAJnzEgDBALKoIwwDQQCAAIw BwMFACQCFEAwHwYIKwYBBQUHAQgBAf8EEDAOoAwwCgIDAOaZAgMA+MkwDQYJKoZI hvcNAQELBQADggEBACpYtL80uqeeWBzw9T66at3mxPPXxBcar3umVn5r4tVzp/zH Hj1s5V2gOyUKAjyRza/zy/vFv9KKMgal3abraajqzdFurO6wJ9V9KocFGbk+L9tY XqHNVCogfjp7AWr2TwEB5H1AE1NkktOB9cGe0PhT6plLXvoKxuphoxGr384mV4oQ Im/VnaThLGXKmrDt5jm7D+vCePES4faPszIC4G7gPtp9hVfFzX2cerYOnLBXY4qF TveniJWFi1Mi0Of4Wl7etNrz01rbIJt+xDKc4wKKN5nKHoC/NMSTcWEGDlsPyY7s jzjeDvyLIWvMC/spEkp22LZDnQnKIayefUw0CNE= -----END CERTIFICATE-----Generated at Sun Jan 25 11:11:33 2026 by rpki-client