This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/744217D6F74E3338C4A4476276CE6CE8E5575DCF.cer File: 744217D6F74E3338C4A4476276CE6CE8E5575DCF.cer (raw, json) Hash identifier: SVtLWsp4rlAr7YiwsxMEKrJNabf4rdMbRkh0zogrx94= Subject key identifier: 74:42:17:D6:F7:4E:33:38:C4:A4:47:62:76:CE:6C:E8:E5:57:5D:CF Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Certificate serial: 62A68B490E0B69440A4437E5A8A35F479E7A189C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1065588335524904961/0/744217D6F74E3338C4A4476276CE6CE8E5575DCF.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1065588335524904961/0/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Mon 19 Jan 2026 11:04:23 +0000 Certificate not after: Mon 18 Jan 2027 11:09:23 +0000 Subordinate resources: IP: 60.247.128.0/17 IP: 211.149.128.0/17 IP: 2403:db00::/32 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 19:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:a6:8b:49:0e:0b:69:44:0a:44:37:e5:a8:a3:5f:47:9e:7a:18:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Validity Not Before: Jan 19 11:04:23 2026 GMT Not After : Jan 18 11:09:23 2027 GMT Subject: CN=744217D6F74E3338C4A4476276CE6CE8E5575DCF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:06:b0:05:ab:83:a0:c7:d4:a7:ba:ac:8e:28: 9c:a8:1c:17:dc:4a:17:4d:29:95:17:a7:79:f8:d1: b8:cc:a8:fc:f5:4d:db:1d:d8:84:81:77:6c:fc:1d: 61:ed:3d:5f:1e:11:93:98:f0:34:62:3e:13:60:f2: aa:3c:9a:c0:1c:90:68:f9:66:de:75:1f:6a:12:95: 16:55:65:79:f2:aa:54:9e:c2:86:73:5c:85:44:39: 81:64:f7:d8:21:3f:34:41:cf:80:22:12:2d:bf:39: 28:ca:be:cb:92:42:cc:a5:32:94:3e:dc:80:da:fe: a4:6c:1d:70:89:3d:99:1a:c4:87:26:4d:f3:a7:af: 27:03:27:a2:99:21:47:3b:f0:af:98:37:20:35:c9: 0b:91:98:6d:c5:b4:69:9a:4c:8c:aa:33:cd:4e:2e: 43:21:cc:d5:68:fa:db:a9:44:ec:74:72:9e:02:07: b6:32:8d:1b:1b:22:9c:45:be:e0:df:17:71:da:e7: 94:58:3f:e6:da:c5:06:a7:69:c4:68:38:0d:39:1d: a7:b0:49:18:d5:8b:00:b9:f9:dc:67:7f:9e:39:30: 3d:c6:cc:84:68:57:bb:fb:6b:cc:81:b4:e4:69:db: 33:11:c2:33:17:4a:14:87:80:c6:45:8b:41:05:94: 5a:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 74:42:17:D6:F7:4E:33:38:C4:A4:47:62:76:CE:6C:E8:E5:57:5D:CF X509v3 Authority Key Identifier: keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335524904961/0/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335524904961/0/744217D6F74E3338C4A4476276CE6CE8E5575DCF.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 60.247.128.0/17 211.149.128.0/17 IPv6: 2403:db00::/32 Signature Algorithm: sha256WithRSAEncryption 5f:21:96:e6:d5:88:a0:e0:40:ff:2f:7f:40:b7:55:9e:09:92: f9:04:42:95:6d:ca:78:7f:da:01:b4:dc:98:15:ce:e7:9b:67: 99:d9:d2:2d:44:e6:85:c4:7e:6f:c6:92:53:9d:ee:8d:51:e1: 51:98:3c:4a:1f:bd:4c:4d:23:71:fd:01:db:a3:1a:d3:79:56: 13:09:fb:22:02:08:9c:cc:25:ab:69:74:f1:79:51:c9:c7:bf: 89:9d:d2:f6:e4:07:b7:27:95:98:39:7f:c4:de:cb:a2:b9:c5: af:b6:0c:32:b7:be:2d:8f:3e:52:ac:00:bd:9f:1d:15:23:82: 0a:df:c4:fb:1c:35:dd:25:79:5f:b3:50:30:27:10:59:6d:a4: 5a:84:d1:d2:4f:ce:a5:2c:4d:3f:33:8b:e1:ef:b7:ad:f4:52: 85:18:83:69:f6:6f:c1:46:aa:b0:93:44:29:be:3e:b2:a8:b1: 35:45:7a:cb:77:a0:f7:e2:33:77:cd:f8:31:b7:19:c8:6d:1e: ae:03:a7:46:4c:04:c8:41:ab:4d:db:63:4a:c5:1a:0f:a0:6c: 1d:6c:ab:19:dd:42:81:dd:71:53:8b:e8:58:0d:cb:78:58:c6: a6:f3:28:bf:6b:f1:8f:21:0f:89:56:bd:f6:20:b1:51:94:4c: 6f:8b:dd:87 -----BEGIN CERTIFICATE----- MIIFvDCCBKSgAwIBAgIUYqaLSQ4LaUQKRDflqKNfR556GJwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDExOTExMDQyM1oX DTI3MDExODExMDkyM1owMzExMC8GA1UEAxMoNzQ0MjE3RDZGNzRFMzMzOEM0QTQ0 NzYyNzZDRTZDRThFNTU3NURDRjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJ0GsAWrg6DH1Ke6rI4onKgcF9xKF00plRenefjRuMyo/PVN2x3YhIF3bPwd Ye09Xx4Rk5jwNGI+E2DyqjyawByQaPlm3nUfahKVFlVlefKqVJ7ChnNchUQ5gWT3 2CE/NEHPgCISLb85KMq+y5JCzKUylD7cgNr+pGwdcIk9mRrEhyZN86evJwMnopkh Rzvwr5g3IDXJC5GYbcW0aZpMjKozzU4uQyHM1Wj626lE7HRyngIHtjKNGxsinEW+ 4N8XcdrnlFg/5trFBqdpxGg4DTkdp7BJGNWLALn53Gd/njkwPcbMhGhXu/trzIG0 5GnbMxHCMxdKFIeAxkWLQQWUWnUCAwEAAaOCAq8wggKrMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFHRCF9b3TjM4xKRHYnbObOjlV13PMB8GA1UdIwQYMBaAFKVu hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTA2NTU4ODMzNTUyNDkwNDk2MS8wLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDY1NTg4MzM1NTI0OTA0OTYx LzAvNzQ0MjE3RDZGNzRFMzMzOEM0QTQ0NzYyNzZDRTZDRThFNTU3NURDRi5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwNAYIKwYBBQUH AQcBAf8EJTAjMBIEAgABMAwDBAc894ADBAfTlYAwDQQCAAIwBwMFACQD2wAwDQYJ KoZIhvcNAQELBQADggEBAF8hlubViKDgQP8vf0C3VZ4JkvkEQpVtynh/2gG03JgV zuebZ5nZ0i1E5oXEfm/GklOd7o1R4VGYPEofvUxNI3H9AdujGtN5VhMJ+yICCJzM JatpdPF5UcnHv4md0vbkB7cnlZg5f8Tey6K5xa+2DDK3vi2PPlKsAL2fHRUjggrf xPscNd0leV+zUDAnEFltpFqE0dJPzqUsTT8zi+Hvt630UoUYg2n2b8FGqrCTRCm+ PrKosTVFest3oPfiM3fN+DG3GchtHq4Dp0ZMBMhBq03bY0rFGg+gbB1sqxndQoHd cVOL6FgNy3hYxqbzKL9r8Y8hD4lWvfYgsVGUTG+L3Yc= -----END CERTIFICATE-----Generated at Sun Jan 25 12:34:17 2026 by rpki-client