This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8B75163A575523EE408D2A2F59F8DD509D80F164.cer File: 8B75163A575523EE408D2A2F59F8DD509D80F164.cer (raw, json) Hash identifier: P3Zr2SjC+0Tnx3G4wEoDo95gftqzlPDdmoE4NPPv930= Subject key identifier: 8B:75:16:3A:57:55:23:EE:40:8D:2A:2F:59:F8:DD:50:9D:80:F1:64 Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Certificate serial: 03B1973ABC5162EB8B1349FE55FABD5CA47A1A2A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1065582741577596930/0/8B75163A575523EE408D2A2F59F8DD509D80F164.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1065582741577596930/0/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Mon 19 Jan 2026 10:42:00 +0000 Certificate not after: Mon 18 Jan 2027 10:47:00 +0000 Subordinate resources: AS: 63603 IP: 103.102.196.0/22 IP: 163.53.44.0/22 IP: 2400:de80::/32 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 19:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:b1:97:3a:bc:51:62:eb:8b:13:49:fe:55:fa:bd:5c:a4:7a:1a:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Validity Not Before: Jan 19 10:42:00 2026 GMT Not After : Jan 18 10:47:00 2027 GMT Subject: CN=8B75163A575523EE408D2A2F59F8DD509D80F164 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:75:06:4f:4c:21:0d:28:d7:4f:fd:38:98:16: 89:04:c2:1d:0c:fe:dd:1b:d5:3d:f5:81:79:0d:df: 22:6e:9b:d3:12:69:2a:2f:64:bd:d6:d5:be:42:75: 4a:20:77:4a:0d:38:d7:3d:a5:03:3d:53:84:ca:6a: 3b:94:6b:c7:bb:3c:9d:f9:ac:11:04:30:a2:3d:1a: 2e:2f:90:37:f8:ac:7e:db:d2:59:4c:16:0f:9c:69: a7:70:32:57:be:84:b7:be:fd:06:ae:ec:70:6a:d3: 90:9a:af:25:0f:e0:5a:2c:81:62:7a:3c:77:57:6c: 14:a8:8d:57:57:50:76:ba:19:7e:52:58:ad:c0:e6: 48:e5:24:d9:8d:fc:82:3e:64:2b:fb:7a:0a:d3:44: f9:3b:74:c6:78:af:8c:f0:70:03:50:ca:2e:71:5e: f3:81:e7:29:4c:b1:82:c4:86:b7:4c:44:49:e4:ed: 36:d7:dc:ee:66:cc:0b:79:6c:5c:d9:b3:25:12:17: 2e:bd:f9:e1:9b:4c:c6:13:9b:75:c5:b2:aa:fb:78: e6:fb:3b:46:37:35:d0:49:fc:92:a5:76:f7:e3:35: 22:e7:e7:66:54:ec:ef:4c:3d:89:50:d3:f3:34:c9: a1:32:b3:74:96:2f:19:f8:e8:15:ee:dd:cb:63:f7: e1:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 8B:75:16:3A:57:55:23:EE:40:8D:2A:2F:59:F8:DD:50:9D:80:F1:64 X509v3 Authority Key Identifier: keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577596930/0/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577596930/0/8B75163A575523EE408D2A2F59F8DD509D80F164.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.102.196.0/22 163.53.44.0/22 IPv6: 2400:de80::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 63603 Signature Algorithm: sha256WithRSAEncryption 92:3f:70:07:bd:a6:a4:e3:78:86:73:77:31:ab:0b:5b:4a:cd: 56:ae:fd:05:2e:18:c7:36:00:8d:a9:99:e6:ac:c2:4f:77:f5: 23:9c:18:e2:59:73:93:76:13:7e:ce:26:03:a7:58:f7:b6:3a: 44:d2:88:de:0b:4a:31:a4:10:d5:33:c9:cf:58:f5:7f:62:91: 12:ed:cc:e1:bc:69:46:f3:52:78:95:82:7e:14:7e:bc:b4:bc: ce:4b:5e:c0:2b:c4:01:9c:05:2a:bd:75:5a:12:99:87:c2:b1: a5:5b:58:34:e1:88:63:f4:cb:6e:47:3a:3d:cd:5a:c0:1f:47: 28:d5:7d:73:97:b0:ae:fb:af:19:02:66:66:5d:a3:1d:3c:27: 91:ab:f9:81:5b:82:1f:0f:ca:74:bc:ff:c8:04:31:f2:ab:2b: e7:b3:38:04:ec:b7:16:bc:a0:cc:4b:93:82:26:8a:81:56:d7: c6:12:7f:49:37:37:0f:70:e9:c8:cf:cd:0e:25:f9:cb:77:fa: 17:ba:43:c8:7e:fd:2c:b4:c4:4c:ba:93:77:e3:2a:e0:15:23: 66:3c:61:73:6b:3d:63:bc:74:86:c0:32:dd:cf:fa:dc:81:70: 99:f0:2a:dd:87:75:e0:f4:eb:06:7a:c1:07:25:9a:96:4a:cf: c1:53:62:80 -----BEGIN CERTIFICATE----- MIIF2DCCBMCgAwIBAgIUA7GXOrxRYuuLE0n+Vfq9XKR6GiowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDExOTEwNDIwMFoX DTI3MDExODEwNDcwMFowMzExMC8GA1UEAxMoOEI3NTE2M0E1NzU1MjNFRTQwOEQy QTJGNTlGOERENTA5RDgwRjE2NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAL51Bk9MIQ0o10/9OJgWiQTCHQz+3RvVPfWBeQ3fIm6b0xJpKi9kvdbVvkJ1 SiB3Sg041z2lAz1ThMpqO5Rrx7s8nfmsEQQwoj0aLi+QN/isftvSWUwWD5xpp3Ay V76Et779Bq7scGrTkJqvJQ/gWiyBYno8d1dsFKiNV1dQdroZflJYrcDmSOUk2Y38 gj5kK/t6CtNE+Tt0xnivjPBwA1DKLnFe84HnKUyxgsSGt0xESeTtNtfc7mbMC3ls XNmzJRIXLr354ZtMxhObdcWyqvt45vs7Rjc10En8kqV29+M1IufnZlTs70w9iVDT 8zTJoTKzdJYvGfjoFe7dy2P34dsCAwEAAaOCAsswggLHMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFIt1FjpXVSPuQI0qL1n43VCdgPFkMB8GA1UdIwQYMBaAFKVu hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTA2NTU4Mjc0MTU3NzU5NjkzMC8wLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDY1NTgyNzQxNTc3NTk2OTMw LzAvOEI3NTE2M0E1NzU1MjNFRTQwOEQyQTJGNTlGOERENTA5RDgwRjE2NC5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwNAYIKwYBBQUH AQcBAf8EJTAjMBIEAgABMAwDBAJnZsQDBAKjNSwwDQQCAAIwBwMFACQA3oAwGgYI KwYBBQUHAQgBAf8ECzAJoAcwBQIDAPhzMA0GCSqGSIb3DQEBCwUAA4IBAQCSP3AH vaak43iGc3cxqwtbSs1Wrv0FLhjHNgCNqZnmrMJPd/UjnBjiWXOTdhN+ziYDp1j3 tjpE0ojeC0oxpBDVM8nPWPV/YpES7czhvGlG81J4lYJ+FH68tLzOS17AK8QBnAUq vXVaEpmHwrGlW1g04Yhj9MtuRzo9zVrAH0co1X1zl7Cu+68ZAmZmXaMdPCeRq/mB W4IfD8p0vP/IBDHyqyvnszgE7LcWvKDMS5OCJoqBVtfGEn9JNzcPcOnIz80OJfnL d/oXukPIfv0stMRMupN34yrgFSNmPGFzaz1jvHSGwDLdz/rcgXCZ8Crdh3Xg9OsG esEHJZqWSs/BU2KA -----END CERTIFICATE-----Generated at Sun Jan 25 11:12:36 2026 by rpki-client