This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/845BB307E2A1100E89FA0C939A9389686796F0F6.cer File: 845BB307E2A1100E89FA0C939A9389686796F0F6.cer (raw, json) Hash identifier: /Va10SYQS1Sc5Zu2YbZUMUMUSy+5ZpepCbwjPmPKXRc= Subject key identifier: 84:5B:B3:07:E2:A1:10:0E:89:FA:0C:93:9A:93:89:68:67:96:F0:F6 Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Certificate serial: 18723DE2F34808E4023F2A2AA8C1A73364AC3C5E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1065591195721793537/0/845BB307E2A1100E89FA0C939A9389686796F0F6.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1065591195721793537/0/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Mon 19 Jan 2026 11:20:07 +0000 Certificate not after: Mon 18 Jan 2027 11:25:07 +0000 Subordinate resources: IP: 240a:4000::/21 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 19:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:72:3d:e2:f3:48:08:e4:02:3f:2a:2a:a8:c1:a7:33:64:ac:3c:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Validity Not Before: Jan 19 11:20:07 2026 GMT Not After : Jan 18 11:25:07 2027 GMT Subject: CN=845BB307E2A1100E89FA0C939A9389686796F0F6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:73:9a:9e:b5:eb:93:49:86:3b:b5:4e:d0:da: d4:8f:f5:bf:40:b6:87:ad:66:71:8f:ef:ff:0d:a1: dc:f0:3a:d8:c7:eb:ac:54:27:a6:2c:fa:67:aa:95: 4b:65:6e:0c:29:a3:7d:7a:89:58:60:b9:ec:c7:c1: 9c:77:63:e7:34:3c:62:7d:97:7b:94:50:5e:a7:d1: 80:63:71:41:5b:c4:40:c5:eb:aa:00:3d:69:fc:9b: f5:07:ea:93:33:39:34:60:c3:c4:01:86:83:7f:3f: 1f:32:59:8b:c1:d9:1a:89:21:71:74:f0:aa:5e:e7: ad:43:ac:51:dc:56:8d:17:01:b2:a8:66:1c:63:e9: d7:14:7e:7f:e6:bb:90:a7:79:c3:0e:da:72:81:09: cc:a4:e1:de:49:a1:fd:e2:2f:08:50:9c:05:26:df: 9a:4a:0a:8c:d5:2f:65:7b:81:8c:80:73:b6:9d:25: 25:2b:e6:06:8e:be:b0:09:3e:10:c0:5e:f0:29:2a: 43:5a:c2:e7:58:cd:bd:91:7e:fc:f0:38:b8:df:c9: 7f:b4:09:c7:5f:d8:5d:e1:cf:b9:76:c6:57:c7:2c: bc:69:10:de:89:ce:fc:fd:15:27:98:1b:33:2d:6b: 99:4f:8b:d7:72:fa:d4:49:b6:25:b6:0d:c6:c6:11: 8c:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 84:5B:B3:07:E2:A1:10:0E:89:FA:0C:93:9A:93:89:68:67:96:F0:F6 X509v3 Authority Key Identifier: keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721793537/0/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721793537/0/845BB307E2A1100E89FA0C939A9389686796F0F6.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:4000::/21 Signature Algorithm: sha256WithRSAEncryption 11:80:dd:06:12:f2:56:05:df:ff:4c:57:7a:99:4b:72:38:70: 00:86:55:fe:42:f0:45:12:3b:77:0f:ae:80:87:44:73:44:43: bb:9f:7a:63:9d:07:62:d8:ae:43:8e:6f:27:eb:0b:1a:48:f7: 72:42:83:44:e3:0d:6a:1a:34:a0:99:c6:ff:32:1b:bb:c7:38: cd:f0:3a:06:4f:e3:b2:84:43:a6:db:cc:ad:ce:f3:ab:32:26: 12:24:b8:79:19:9b:4b:cc:4c:6e:42:6e:01:bc:b1:e1:fc:0e: fd:5f:f2:32:2a:a0:1a:cd:40:77:87:66:6e:a4:49:21:ae:29: bd:3a:57:c8:22:39:d6:d9:43:0a:85:0f:e5:34:be:42:bd:a8: 12:a4:42:b3:18:24:ae:dc:7d:31:23:c1:74:00:e5:45:2a:40: ea:39:9b:4c:d5:7f:eb:f3:7a:ee:67:85:b2:9e:35:a6:a9:af: 4c:fb:02:8b:f9:71:aa:db:c5:03:17:f7:32:9a:c1:3b:18:e0: 82:c9:75:36:cd:90:d2:20:96:5a:ba:ee:c9:c4:e1:17:4f:3e: b2:1c:04:db:12:b7:ce:c1:87:9e:ca:62:0a:77:2f:ca:eb:87: 0e:c6:d3:3a:6a:78:41:49:e4:a1:c1:1d:04:c6:6a:a1:f0:93: 32:b7:f9:15 -----BEGIN CERTIFICATE----- MIIFpzCCBI+gAwIBAgIUGHI94vNICOQCPyoqqMGnM2SsPF4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDExOTExMjAwN1oX DTI3MDExODExMjUwN1owMzExMC8GA1UEAxMoODQ1QkIzMDdFMkExMTAwRTg5RkEw QzkzOUE5Mzg5Njg2Nzk2RjBGNjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOhzmp6165NJhju1TtDa1I/1v0C2h61mcY/v/w2h3PA62MfrrFQnpiz6Z6qV S2VuDCmjfXqJWGC57MfBnHdj5zQ8Yn2Xe5RQXqfRgGNxQVvEQMXrqgA9afyb9Qfq kzM5NGDDxAGGg38/HzJZi8HZGokhcXTwql7nrUOsUdxWjRcBsqhmHGPp1xR+f+a7 kKd5ww7acoEJzKTh3kmh/eIvCFCcBSbfmkoKjNUvZXuBjIBztp0lJSvmBo6+sAk+ EMBe8CkqQ1rC51jNvZF+/PA4uN/Jf7QJx1/YXeHPuXbGV8csvGkQ3onO/P0VJ5gb My1rmU+L13L61Em2JbYNxsYRjA0CAwEAAaOCApowggKWMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFIRbswfioRAOifoMk5qTiWhnlvD2MB8GA1UdIwQYMBaAFKVu hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTA2NTU5MTE5NTcyMTc5MzUzNy8wLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDY1NTkxMTk1NzIxNzkzNTM3 LzAvODQ1QkIzMDdFMkExMTAwRTg5RkEwQzkzOUE5Mzg5Njg2Nzk2RjBGNi5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgACMAYDBAMkCkAwDQYJKoZIhvcNAQELBQADggEBABGA3QYS 8lYF3/9MV3qZS3I4cACGVf5C8EUSO3cProCHRHNEQ7ufemOdB2LYrkOObyfrCxpI 93JCg0TjDWoaNKCZxv8yG7vHOM3wOgZP47KEQ6bbzK3O86syJhIkuHkZm0vMTG5C bgG8seH8Dv1f8jIqoBrNQHeHZm6kSSGuKb06V8giOdbZQwqFD+U0vkK9qBKkQrMY JK7cfTEjwXQA5UUqQOo5m0zVf+vzeu5nhbKeNaapr0z7Aov5carbxQMX9zKawTsY 4ILJdTbNkNIgllq67snE4RdPPrIcBNsSt87Bh57KYgp3L8rrhw7G0zpqeEFJ5KHB HQTGaqHwkzK3+RU= -----END CERTIFICATE-----Generated at Sun Jan 25 06:01:22 2026 by rpki-client