This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/745EC59458DF98DC3674219750AB7E7BC251E62C.cer File: 745EC59458DF98DC3674219750AB7E7BC251E62C.cer (raw, json) Hash identifier: 5txLHjIFUdxi5lNapDVCSrysQOArdMCwbWbBKeyqzE4= Subject key identifier: 74:5E:C5:94:58:DF:98:DC:36:74:21:97:50:AB:7E:7B:C2:51:E6:2C Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Certificate serial: 6E87EBE3375925AFEE3ED5EF4A03BCC62CF303D6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1065576723371851778/0/745EC59458DF98DC3674219750AB7E7BC251E62C.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1065576723371851778/0/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Mon 19 Jan 2026 10:16:46 +0000 Certificate not after: Mon 18 Jan 2027 10:21:46 +0000 Subordinate resources: AS: 9391 IP: 203.118.192.0/19 IP: 210.77.96.0/19 IP: 210.78.64.0/19 IP: 211.156.224.0/20 IP: 218.97.224.0/20 IP: 2402:ae00::/32 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 19:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:87:eb:e3:37:59:25:af:ee:3e:d5:ef:4a:03:bc:c6:2c:f3:03:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Validity Not Before: Jan 19 10:16:46 2026 GMT Not After : Jan 18 10:21:46 2027 GMT Subject: CN=745EC59458DF98DC3674219750AB7E7BC251E62C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:a5:e6:53:8f:b7:fb:93:e4:d3:0f:6e:f3:b0: c5:bc:13:78:00:d3:f7:48:9c:6b:73:d6:65:09:5a: 8d:b4:66:2e:e4:92:37:c5:da:c4:10:cc:55:2a:40: 9b:c0:7f:78:81:31:5b:80:9e:5a:e1:0a:fb:6e:15: e3:63:9b:56:44:41:6e:b7:c8:67:f4:d0:dc:b1:55: ba:89:a2:bc:c4:3a:61:b1:7c:4e:85:f0:3d:c8:48: 6b:8b:58:8c:4c:3b:70:87:9e:04:b0:4d:34:18:06: fa:e9:e1:39:ef:e6:f6:43:ec:a5:e8:40:19:69:55: 4d:cc:74:9a:26:75:46:b6:5f:d3:35:72:bc:a0:b1: f0:4a:49:5e:9e:37:bf:c5:92:34:b3:72:ae:21:70: c4:7a:c6:f8:ef:45:45:38:94:25:db:fd:65:90:61: 19:3a:de:48:b5:7f:39:97:dd:fb:60:ed:85:a9:27: d9:69:bb:99:76:6f:a0:bd:08:a7:ac:4c:20:cf:d7: ff:45:5f:0a:df:c1:b4:3e:bc:76:d8:8c:77:49:8d: 15:96:66:a6:44:a3:b1:65:85:98:b4:c5:11:3f:7a: 17:92:f3:c2:a8:ab:de:a3:5f:42:f1:4e:40:56:1a: cf:3d:bb:d0:f8:19:7e:c1:7b:8c:48:ac:ff:c1:44: cc:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 74:5E:C5:94:58:DF:98:DC:36:74:21:97:50:AB:7E:7B:C2:51:E6:2C X509v3 Authority Key Identifier: keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723371851778/0/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723371851778/0/745EC59458DF98DC3674219750AB7E7BC251E62C.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 203.118.192.0/19 210.77.96.0/19 210.78.64.0/19 211.156.224.0/20 218.97.224.0/20 IPv6: 2402:ae00::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 9391 Signature Algorithm: sha256WithRSAEncryption 69:b3:11:67:03:3b:cf:9f:54:6b:c8:00:52:23:d5:22:e6:1b: 45:a6:71:84:23:28:7d:51:86:a8:ee:c3:cb:00:ec:62:b2:07: db:83:86:82:69:6d:de:bd:ce:33:3f:f7:ad:1c:c8:38:12:5a: b8:7e:da:8e:2e:56:c4:c7:89:8e:81:06:a7:e4:a7:5c:9d:07: 98:eb:f0:52:96:f9:7e:ce:c4:1e:0b:5f:ff:c6:c9:07:26:0d: fa:d6:ed:b2:5d:0b:8a:28:e5:95:50:a7:03:6d:e8:6f:36:51: e5:51:0d:31:48:0b:2b:6b:10:1e:f8:6e:ba:6b:76:77:48:53: f1:a9:41:b0:2e:3a:3c:e1:b8:cc:ac:b5:0f:5b:a2:8a:42:d1: 9c:0f:41:d5:07:62:1a:6d:af:9e:c2:a9:ee:a5:03:0e:17:22: ed:b1:05:1e:bc:75:2e:b6:aa:99:18:16:db:d5:de:22:71:43: fb:f1:80:bd:11:f3:c9:25:16:9f:17:df:a5:be:79:fd:c4:eb: 7d:2b:02:5e:90:f4:fa:15:9a:bb:27:4a:34:94:e1:54:84:d9: 12:5f:fe:b9:3b:72:4e:5c:9b:2f:6f:f0:d7:a2:ae:9e:cc:60: f6:ab:af:75:f5:16:2b:f5:9d:aa:43:9f:0c:2b:2a:56:0b:2b: 50:31:3e:5a -----BEGIN CERTIFICATE----- MIIF6TCCBNGgAwIBAgIUbofr4zdZJa/uPtXvSgO8xizzA9YwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDExOTEwMTY0NloX DTI3MDExODEwMjE0NlowMzExMC8GA1UEAxMoNzQ1RUM1OTQ1OERGOThEQzM2NzQy MTk3NTBBQjdFN0JDMjUxRTYyQzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOOl5lOPt/uT5NMPbvOwxbwTeADT90ica3PWZQlajbRmLuSSN8XaxBDMVSpA m8B/eIExW4CeWuEK+24V42ObVkRBbrfIZ/TQ3LFVuomivMQ6YbF8ToXwPchIa4tY jEw7cIeeBLBNNBgG+unhOe/m9kPspehAGWlVTcx0miZ1RrZf0zVyvKCx8EpJXp43 v8WSNLNyriFwxHrG+O9FRTiUJdv9ZZBhGTreSLV/OZfd+2Dthakn2Wm7mXZvoL0I p6xMIM/X/0VfCt/BtD68dtiMd0mNFZZmpkSjsWWFmLTFET96F5Lzwqir3qNfQvFO QFYazz270PgZfsF7jEis/8FEzDcCAwEAAaOCAtwwggLYMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFHRexZRY35jcNnQhl1CrfnvCUeYsMB8GA1UdIwQYMBaAFKVu hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTA2NTU3NjcyMzM3MTg1MTc3OC8wLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDY1NTc2NzIzMzcxODUxNzc4 LzAvNzQ1RUM1OTQ1OERGOThEQzM2NzQyMTk3NTBBQjdFN0JDMjUxRTYyQy5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwRgYIKwYBBQUH AQcBAf8ENzA1MCQEAgABMB4DBAXLdsADBAXSTWADBAXSTkADBATTnOADBATaYeAw DQQCAAIwBwMFACQCrgAwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAICJK8wDQYJKoZI hvcNAQELBQADggEBAGmzEWcDO8+fVGvIAFIj1SLmG0WmcYQjKH1Rhqjuw8sA7GKy B9uDhoJpbd69zjM/960cyDgSWrh+2o4uVsTHiY6BBqfkp1ydB5jr8FKW+X7OxB4L X//GyQcmDfrW7bJdC4oo5ZVQpwNt6G82UeVRDTFICytrEB74brprdndIU/GpQbAu OjzhuMystQ9boopC0ZwPQdUHYhptr57Cqe6lAw4XIu2xBR68dS62qpkYFtvV3iJx Q/vxgL0R88klFp8X36W+ef3E630rAl6Q9PoVmrsnSjSU4VSE2RJf/rk7ck5cmy9v 8Neirp7MYParr3X1Fiv1napDnwwrKlYLK1AxPlo= -----END CERTIFICATE-----Generated at Sun Jan 25 11:12:24 2026 by rpki-client