This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8421F0680EB1B3756485D0F7681F78067E9C172E.cer File: 8421F0680EB1B3756485D0F7681F78067E9C172E.cer (raw, json) Hash identifier: Zi/9xVZqw7iq42YZpcJ/8jIeYY6frpDMANXNS9cF650= Subject key identifier: 84:21:F0:68:0E:B1:B3:75:64:85:D0:F7:68:1F:78:06:7E:9C:17:2E Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Certificate serial: 2A9301DF421D5D55A450E812D584370F302EEB38 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1065577241947471873/0/8421F0680EB1B3756485D0F7681F78067E9C172E.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1065577241947471873/0/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Mon 19 Jan 2026 10:23:25 +0000 Certificate not after: Mon 18 Jan 2027 10:28:25 +0000 Subordinate resources: AS: 45061 AS: 63700 AS: 131532 IP: 45.115.44.0/22 IP: 45.116.52.0/22 IP: 45.254.184.0 -- 45.254.199.255 IP: 45.255.64.0/21 IP: 45.255.80.0 -- 45.255.119.255 IP: 45.255.136.0 -- 45.255.151.255 IP: 45.255.160.0/21 IP: 45.255.176.0/21 IP: 45.255.208.0/22 IP: 45.255.216.0 -- 45.255.251.255 IP: 103.13.244.0/22 IP: 103.80.44.0/22 IP: 103.98.228.0/22 IP: 103.251.84.0/22 IP: 114.28.68.0 -- 114.28.79.255 IP: 114.28.128.0/18 IP: 114.141.128.0/18 IP: 118.126.32.0/19 IP: 121.55.0.0/18 IP: 123.199.144.0/20 IP: 160.202.216.0/21 IP: 192.140.128.0/21 IP: 192.140.192.0/20 IP: 202.122.112.0/21 IP: 203.95.112.0/20 IP: 2400:8200::/31 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 19:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:93:01:df:42:1d:5d:55:a4:50:e8:12:d5:84:37:0f:30:2e:eb:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Validity Not Before: Jan 19 10:23:25 2026 GMT Not After : Jan 18 10:28:25 2027 GMT Subject: CN=8421F0680EB1B3756485D0F7681F78067E9C172E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:8d:eb:a8:9d:f9:8d:45:ac:5a:8c:00:5e:43: cb:29:c8:2c:20:14:bc:ab:64:10:1c:bf:37:37:85: 0b:42:9b:ba:3b:ad:b8:42:62:12:a9:39:d2:56:cd: 67:0c:37:66:c5:cd:b7:33:17:54:06:b8:5c:6e:91: 9e:83:a1:54:e3:ad:0b:9d:22:ab:af:58:75:e9:24: 01:aa:d6:69:77:71:92:f6:3b:a2:c8:01:d3:83:63: 0c:3c:7b:95:07:ec:d5:6f:2d:a2:99:00:09:ca:42: 21:82:f6:06:85:99:4c:5b:96:4d:15:08:00:b7:ae: ec:92:f5:2e:30:ae:6e:49:3f:1b:6b:94:b8:26:6d: 0d:da:03:3f:ae:29:64:d3:ea:ec:b5:0f:6d:c2:b6: fa:12:ff:66:8d:40:51:74:80:e3:2d:12:a0:8f:5b: ce:a9:9f:15:40:80:80:13:db:83:72:11:41:8e:1f: da:da:1f:04:90:d3:7d:e3:8c:1c:d9:dc:ea:44:90: fa:97:9b:32:45:c1:f2:83:80:8b:cb:4d:98:4d:6e: f2:95:d3:47:1d:1f:b8:7d:86:fc:d2:0c:c5:a5:b0: da:23:72:68:31:34:4f:a8:56:7e:79:da:f1:16:03: 90:12:80:78:21:ca:bb:0a:c3:07:ae:37:b4:3f:d6: 01:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 84:21:F0:68:0E:B1:B3:75:64:85:D0:F7:68:1F:78:06:7E:9C:17:2E X509v3 Authority Key Identifier: keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947471873/0/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947471873/0/8421F0680EB1B3756485D0F7681F78067E9C172E.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.115.44.0/22 45.116.52.0/22 45.254.184.0-45.254.199.255 45.255.64.0/21 45.255.80.0-45.255.119.255 45.255.136.0-45.255.151.255 45.255.160.0/21 45.255.176.0/21 45.255.208.0/22 45.255.216.0-45.255.251.255 103.13.244.0/22 103.80.44.0/22 103.98.228.0/22 103.251.84.0/22 114.28.68.0-114.28.79.255 114.28.128.0/18 114.141.128.0/18 118.126.32.0/19 121.55.0.0/18 123.199.144.0/20 160.202.216.0/21 192.140.128.0/21 192.140.192.0/20 202.122.112.0/21 203.95.112.0/20 IPv6: 2400:8200::/31 sbgp-autonomousSysNum: critical Autonomous System Numbers: 45061 63700 131532 Signature Algorithm: sha256WithRSAEncryption 02:ab:33:41:69:92:3e:d4:69:1c:79:8c:a0:1d:a4:21:72:a9: 8f:67:87:e8:6e:29:02:23:56:9c:27:a2:c6:1d:9e:16:17:a0: 00:d7:7b:25:6e:40:07:8b:9a:10:be:27:6e:3c:ef:0b:56:53: 71:a9:96:ce:db:bb:23:55:06:85:2a:2b:26:9f:d3:c8:4a:49: b3:05:b6:9d:4b:fc:a2:dc:cb:c9:6f:34:48:65:54:a6:11:1a: 14:8e:16:4e:ae:64:05:5a:6f:67:68:8b:de:f9:6e:ec:08:d8: cd:39:7e:92:bb:a6:78:07:aa:af:5d:f0:52:1d:70:fb:e1:64: b9:ef:42:ad:92:8a:72:1a:56:be:70:1a:73:9d:f9:d9:df:ef: a4:b2:e1:8d:71:c9:45:3d:76:73:88:7b:3f:98:a4:74:42:67: 83:94:d6:0d:f3:fd:3a:ab:d5:26:fe:de:7c:d5:3f:62:e3:80: 36:c6:38:c9:ca:fb:02:38:45:2e:fd:68:fc:fe:04:e0:cc:2f: e2:79:7e:d9:9e:a3:2b:e6:63:54:75:29:19:3a:54:67:15:d6: 54:d0:4f:4f:98:fe:c7:2c:64:b2:30:c9:5c:95:a2:16:6a:ba: db:ab:32:f6:d7:41:09:86:d5:4e:1f:d6:a9:47:5d:a3:24:02: e2:aa:80:0b -----BEGIN CERTIFICATE----- MIIGmTCCBYGgAwIBAgIUKpMB30IdXVWkUOgS1YQ3DzAu6zgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDExOTEwMjMyNVoX DTI3MDExODEwMjgyNVowMzExMC8GA1UEAxMoODQyMUYwNjgwRUIxQjM3NTY0ODVE MEY3NjgxRjc4MDY3RTlDMTcyRTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMyN66id+Y1FrFqMAF5DyynILCAUvKtkEBy/NzeFC0KbujutuEJiEqk50lbN Zww3ZsXNtzMXVAa4XG6RnoOhVOOtC50iq69YdekkAarWaXdxkvY7osgB04NjDDx7 lQfs1W8topkACcpCIYL2BoWZTFuWTRUIALeu7JL1LjCubkk/G2uUuCZtDdoDP64p ZNPq7LUPbcK2+hL/Zo1AUXSA4y0SoI9bzqmfFUCAgBPbg3IRQY4f2tofBJDTfeOM HNnc6kSQ+pebMkXB8oOAi8tNmE1u8pXTRx0fuH2G/NIMxaWw2iNyaDE0T6hWfnna 8RYDkBKAeCHKuwrDB643tD/WAfsCAwEAAaOCA4wwggOIMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFIQh8GgOsbN1ZIXQ92gfeAZ+nBcuMB8GA1UdIwQYMBaAFKVu hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTA2NTU3NzI0MTk0NzQ3MTg3My8wLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDY1NTc3MjQxOTQ3NDcxODcz LzAvODQyMUYwNjgwRUIxQjM3NTY0ODVEMEY3NjgxRjc4MDY3RTlDMTcyRS5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwgeoGCCsGAQUF BwEHAQH/BIHaMIHXMIHFBAIAATCBvgMEAi1zLAMEAi10NDAMAwQDLf64AwQDLf7A AwQDLf9AMAwDBAQt/1ADBAMt/3AwDAMEAy3/iAMEAy3/kAMEAy3/oAMEAy3/sAME Ai3/0DAMAwQDLf/YAwQCLf/4AwQCZw30AwQCZ1AsAwQCZ2LkAwQCZ/tUMAwDBAJy HEQDBARyHEADBAZyHIADBAZyjYADBAV2fiADBAZ5NwADBAR7x5ADBAOgytgDBAPA jIADBATAjMADBAPKenADBATLX3AwDQQCAAIwBwMFASQAggAwJAYIKwYBBQUHAQgB Af8EFTAToBEwDwIDALAFAgMA+NQCAwIBzDANBgkqhkiG9w0BAQsFAAOCAQEAAqsz QWmSPtRpHHmMoB2kIXKpj2eH6G4pAiNWnCeixh2eFhegANd7JW5AB4uaEL4nbjzv C1ZTcamWztu7I1UGhSorJp/TyEpJswW2nUv8otzLyW80SGVUphEaFI4WTq5kBVpv Z2iL3vlu7AjYzTl+krumeAeqr13wUh1w++Fkue9CrZKKchpWvnAac5352d/vpLLh jXHJRT12c4h7P5ikdEJng5TWDfP9OqvVJv7efNU/YuOANsY4ycr7AjhFLv1o/P4E 4Mwv4nl+2Z6jK+ZjVHUpGTpUZxXWVNBPT5j+xyxksjDJXJWiFmq626sy9tdBCYbV Th/WqUddoyQC4qqACw== -----END CERTIFICATE-----Generated at Sun Jan 25 05:55:38 2026 by rpki-client