This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/79ACCAD4491529EDA38170F34A5884D2A0F432BF.cer File: 79ACCAD4491529EDA38170F34A5884D2A0F432BF.cer (raw, json) Hash identifier: sW5TlCEotVdDs+PeBNlXRbNKQJEQyuKQEPso7Umix4o= Subject key identifier: 79:AC:CA:D4:49:15:29:ED:A3:81:70:F3:4A:58:84:D2:A0:F4:32:BF Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Certificate serial: 47FE8EEA75216FABE951D250BE1F71EB61C1B28C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1065579796714881025/0/79ACCAD4491529EDA38170F34A5884D2A0F432BF.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1065579796714881025/0/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Mon 19 Jan 2026 10:38:29 +0000 Certificate not after: Mon 18 Jan 2027 10:43:29 +0000 Subordinate resources: AS: 151296 IP: 103.9.24.0/22 IP: 103.9.108.0/22 IP: 103.71.68.0/22 IP: 180.210.212.0/22 IP: 2406:8880::/32 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 19:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:fe:8e:ea:75:21:6f:ab:e9:51:d2:50:be:1f:71:eb:61:c1:b2:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Validity Not Before: Jan 19 10:38:29 2026 GMT Not After : Jan 18 10:43:29 2027 GMT Subject: CN=79ACCAD4491529EDA38170F34A5884D2A0F432BF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:ce:50:2c:27:23:23:f1:b1:89:73:fa:ed:34: 34:ae:66:8b:92:07:f1:0c:27:e3:fb:80:52:5a:54: 2e:20:05:5e:20:bf:20:92:97:83:7b:f6:fa:50:2e: 72:b2:15:8f:85:38:23:4c:b2:15:57:69:02:18:e2: 85:7f:0e:c7:0a:2f:ce:31:ea:48:08:c3:7d:4f:e6: 9f:fc:ad:cb:37:d2:d1:8e:f0:91:f7:cc:05:77:75: 83:2a:7d:cb:95:f8:f6:05:70:b6:cb:89:5b:6c:10: 2b:f7:68:59:32:fd:8c:12:10:95:7b:2a:ff:08:56: 41:58:01:9e:5f:a5:cd:f7:3b:0b:0d:d9:e9:62:8b: 99:2e:75:d7:b5:5d:1d:55:76:91:3b:9b:45:27:f5: 6a:f0:cb:60:d8:56:8c:f8:16:f5:54:35:f2:26:1f: 63:72:36:8c:70:ba:c9:0b:4b:01:3e:3d:59:f1:91: b7:6a:1e:7f:18:69:d8:32:3d:77:41:4f:42:dd:3a: 9f:f5:27:6b:bd:62:c8:f2:c8:6e:3b:02:a8:78:56: 97:99:ad:d9:eb:67:fe:0e:ac:95:d0:55:26:69:3e: ee:f9:e3:d1:84:c0:38:c8:89:4c:dc:d7:56:9e:f1: 3e:0d:63:a7:ac:2a:70:cd:43:0c:76:15:71:38:34: b5:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 79:AC:CA:D4:49:15:29:ED:A3:81:70:F3:4A:58:84:D2:A0:F4:32:BF X509v3 Authority Key Identifier: keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714881025/0/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714881025/0/79ACCAD4491529EDA38170F34A5884D2A0F432BF.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.9.24.0/22 103.9.108.0/22 103.71.68.0/22 180.210.212.0/22 IPv6: 2406:8880::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 151296 Signature Algorithm: sha256WithRSAEncryption 15:c8:9a:28:fa:9d:73:e4:5f:18:a4:38:6c:0c:b7:3d:a8:38: c1:f1:78:5f:42:e6:f7:5c:02:b6:bb:42:0e:06:f9:e1:85:7c: 7b:4a:2d:d5:a0:8d:4d:17:79:6d:a4:db:d6:d5:9b:9e:b4:b1: 0d:9a:ed:96:c1:85:75:40:53:f1:7a:16:2b:c2:f3:91:57:1b: 77:7e:d9:85:18:14:eb:9a:51:b8:61:6d:d6:8c:b2:d1:e2:2b: 13:a9:1e:ad:42:e6:44:09:41:0f:2e:fd:77:57:e8:33:3e:79: 37:9e:82:08:1d:41:01:0e:f8:40:aa:ad:8a:0a:43:a0:9d:ae: fd:0b:a5:28:6b:58:a9:85:f7:75:15:dd:16:74:cb:a3:18:18: 48:0f:a5:1a:f6:09:73:65:bf:0d:1a:36:f3:26:94:d4:eb:df: 10:6b:d7:81:90:20:3d:de:cc:87:e9:68:f3:fc:ff:1a:87:47: a8:1d:9b:db:ba:55:27:3f:10:18:9a:ca:13:6a:29:f1:71:c6: 5a:1d:b7:90:58:c8:09:0c:66:9d:9a:28:d8:cb:a5:d0:e5:8e: 04:29:a0:8a:81:d3:3b:56:16:b2:2d:0c:d1:3a:f9:2a:74:03: 29:ed:db:05:3d:28:7f:d8:ed:17:03:e2:6b:46:80:94:cc:af: 22:f7:54:58 -----BEGIN CERTIFICATE----- MIIF5DCCBMygAwIBAgIUR/6O6nUhb6vpUdJQvh9x62HBsowwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDExOTEwMzgyOVoX DTI3MDExODEwNDMyOVowMzExMC8GA1UEAxMoNzlBQ0NBRDQ0OTE1MjlFREEzODE3 MEYzNEE1ODg0RDJBMEY0MzJCRjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMjOUCwnIyPxsYlz+u00NK5mi5IH8Qwn4/uAUlpULiAFXiC/IJKXg3v2+lAu crIVj4U4I0yyFVdpAhjihX8OxwovzjHqSAjDfU/mn/ytyzfS0Y7wkffMBXd1gyp9 y5X49gVwtsuJW2wQK/doWTL9jBIQlXsq/whWQVgBnl+lzfc7Cw3Z6WKLmS5117Vd HVV2kTubRSf1avDLYNhWjPgW9VQ18iYfY3I2jHC6yQtLAT49WfGRt2oefxhp2DI9 d0FPQt06n/Una71iyPLIbjsCqHhWl5mt2etn/g6sldBVJmk+7vnj0YTAOMiJTNzX Vp7xPg1jp6wqcM1DDHYVcTg0tfcCAwEAAaOCAtcwggLTMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFHmsytRJFSnto4Fw80pYhNKg9DK/MB8GA1UdIwQYMBaAFKVu hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTA2NTU3OTc5NjcxNDg4MTAyNS8wLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDY1NTc5Nzk2NzE0ODgxMDI1 LzAvNzlBQ0NBRDQ0OTE1MjlFREEzODE3MEYzNEE1ODg0RDJBMEY0MzJCRi5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwQAYIKwYBBQUH AQcBAf8EMTAvMB4EAgABMBgDBAJnCRgDBAJnCWwDBAJnR0QDBAK00tQwDQQCAAIw BwMFACQGiIAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDAk8AMA0GCSqGSIb3DQEB CwUAA4IBAQAVyJoo+p1z5F8YpDhsDLc9qDjB8XhfQub3XAK2u0IOBvnhhXx7Si3V oI1NF3ltpNvW1ZuetLENmu2WwYV1QFPxehYrwvORVxt3ftmFGBTrmlG4YW3WjLLR 4isTqR6tQuZECUEPLv13V+gzPnk3noIIHUEBDvhAqq2KCkOgna79C6Uoa1iphfd1 Fd0WdMujGBhID6Ua9glzZb8NGjbzJpTU698Qa9eBkCA93syH6Wjz/P8ah0eoHZvb ulUnPxAYmsoTainxccZaHbeQWMgJDGadmijYy6XQ5Y4EKaCKgdM7VhayLQzROvkq dAMp7dsFPSh/2O0XA+JrRoCUzK8i91RY -----END CERTIFICATE-----Generated at Sun Jan 25 11:12:18 2026 by rpki-client