This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8D406BEC452CB074D630ABDBD6275BC5445DC3A1.cer File: 8D406BEC452CB074D630ABDBD6275BC5445DC3A1.cer (raw, json) Hash identifier: DNBBQi1gdcybhX7Neer+N+w1oxQarodqFuyvwJwYAGA= Subject key identifier: 8D:40:6B:EC:45:2C:B0:74:D6:30:AB:DB:D6:27:5B:C5:44:5D:C3:A1 Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Certificate serial: 5F93E2D31BEF96C9C6BBA8B2DE4F9AFAAB1BC852 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1065585911217717251/0/8D406BEC452CB074D630ABDBD6275BC5445DC3A1.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1065585911217717251/0/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Mon 19 Jan 2026 11:02:19 +0000 Certificate not after: Mon 18 Jan 2027 11:07:19 +0000 Subordinate resources: AS: 151230 IP: 45.115.18.0/23 IP: 2402:20e0::/32 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 19:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:93:e2:d3:1b:ef:96:c9:c6:bb:a8:b2:de:4f:9a:fa:ab:1b:c8:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Validity Not Before: Jan 19 11:02:19 2026 GMT Not After : Jan 18 11:07:19 2027 GMT Subject: CN=8D406BEC452CB074D630ABDBD6275BC5445DC3A1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:34:27:80:41:11:83:47:90:57:80:36:a8:f8: 1d:35:5e:b5:31:b7:be:f7:b5:80:e0:49:c0:2a:c9: 72:65:61:1a:dc:77:a3:0f:e4:3a:17:2d:f7:67:56: bb:c9:70:2c:d6:20:d5:16:cb:b6:95:b3:35:dd:d4: ac:06:36:0c:e6:0d:78:fe:89:90:ae:ab:d1:5e:db: b0:61:00:26:d9:48:ad:23:0a:2b:73:ab:72:9b:2f: 6a:c0:da:f9:91:d7:25:4b:b6:56:c4:fb:b4:0a:35: 9f:2e:b6:73:59:1a:6d:70:ba:fd:3f:37:e2:1f:14: 4b:c4:74:dd:c7:24:c9:71:ec:3b:55:be:0d:21:a8: 7a:11:06:46:dc:5a:8c:d3:7e:cf:65:95:eb:e7:ba: f7:79:d0:dd:3c:37:72:28:b7:b6:8c:73:b0:e9:bd: 9a:8c:94:db:f5:ee:26:7e:91:e0:60:05:14:4e:70: e1:9b:f2:33:77:22:2e:d4:48:20:5e:31:55:f4:4d: ad:08:b1:04:80:2d:fd:2a:c0:04:b7:01:42:73:47: 23:b5:49:5a:b1:71:45:79:1f:15:54:51:91:9a:09: 3f:34:18:4e:6c:69:81:63:39:4d:90:62:17:69:89: 5c:14:76:6e:5f:b6:ee:57:12:99:ce:78:0a:09:89: a5:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 8D:40:6B:EC:45:2C:B0:74:D6:30:AB:DB:D6:27:5B:C5:44:5D:C3:A1 X509v3 Authority Key Identifier: keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217717251/0/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217717251/0/8D406BEC452CB074D630ABDBD6275BC5445DC3A1.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.115.18.0/23 IPv6: 2402:20e0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 151230 Signature Algorithm: sha256WithRSAEncryption 53:94:38:19:6e:5a:83:4f:4d:5d:59:bc:5c:ae:3b:b1:39:63: 5a:7e:ce:95:7f:13:f3:b6:8a:6d:a0:83:8b:74:7f:49:fa:0c: e6:f6:0e:a9:9c:50:03:ea:38:56:07:23:20:85:80:77:43:d7: f0:ac:e1:f3:19:f8:cf:cc:99:23:34:52:df:3c:41:07:65:e5: c8:fe:f2:09:36:24:e7:24:d4:cb:ba:01:40:cc:19:7a:fb:ce: dd:e4:e2:82:b2:56:81:b1:9a:12:9e:a7:63:e2:6b:73:73:0d: fb:0e:42:13:89:11:b1:7a:a2:d0:0a:fe:e5:13:f8:42:7f:2f: 2e:da:d5:01:17:4b:07:2d:a6:9d:e0:dd:d0:d9:ab:0a:9f:01: f0:12:c5:fa:8d:de:ac:b6:42:29:79:51:c8:b8:17:a2:85:bc: 6b:ed:50:d7:b1:c2:e4:57:ec:8b:fb:39:3a:ac:c8:90:31:51: d0:20:b8:de:c9:22:8f:da:5e:73:eb:04:06:fd:26:26:3b:76: a8:6a:6d:10:86:43:ac:28:55:a8:97:46:10:1c:45:27:5b:c2: 76:9a:e7:68:74:06:b4:ed:49:3c:ce:d0:cb:01:76:3f:8d:2f: 4a:89:3f:85:68:fd:fd:88:e4:1a:67:3d:ac:a9:c1:00:94:81: 7b:85:e9:73 -----BEGIN CERTIFICATE----- MIIF0jCCBLqgAwIBAgIUX5Pi0xvvlsnGu6iy3k+a+qsbyFIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDExOTExMDIxOVoX DTI3MDExODExMDcxOVowMzExMC8GA1UEAxMoOEQ0MDZCRUM0NTJDQjA3NEQ2MzBB QkRCRDYyNzVCQzU0NDVEQzNBMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMA0J4BBEYNHkFeANqj4HTVetTG3vve1gOBJwCrJcmVhGtx3ow/kOhct92dW u8lwLNYg1RbLtpWzNd3UrAY2DOYNeP6JkK6r0V7bsGEAJtlIrSMKK3OrcpsvasDa +ZHXJUu2VsT7tAo1ny62c1kabXC6/T834h8US8R03cckyXHsO1W+DSGoehEGRtxa jNN+z2WV6+e693nQ3Tw3cii3toxzsOm9moyU2/XuJn6R4GAFFE5w4ZvyM3ciLtRI IF4xVfRNrQixBIAt/SrABLcBQnNHI7VJWrFxRXkfFVRRkZoJPzQYTmxpgWM5TZBi F2mJXBR2bl+27lcSmc54CgmJpekCAwEAAaOCAsUwggLBMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFI1Aa+xFLLB01jCr29YnW8VEXcOhMB8GA1UdIwQYMBaAFKVu hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTA2NTU4NTkxMTIxNzcxNzI1MS8wLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDY1NTg1OTExMjE3NzE3MjUx LzAvOEQ0MDZCRUM0NTJDQjA3NEQ2MzBBQkRCRDYyNzVCQzU0NDVEQzNBMS5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUH AQcBAf8EHzAdMAwEAgABMAYDBAEtcxIwDQQCAAIwBwMFACQCIOAwGgYIKwYBBQUH AQgBAf8ECzAJoAcwBQIDAk6+MA0GCSqGSIb3DQEBCwUAA4IBAQBTlDgZblqDT01d WbxcrjuxOWNafs6VfxPztoptoIOLdH9J+gzm9g6pnFAD6jhWByMghYB3Q9fwrOHz GfjPzJkjNFLfPEEHZeXI/vIJNiTnJNTLugFAzBl6+87d5OKCslaBsZoSnqdj4mtz cw37DkITiRGxeqLQCv7lE/hCfy8u2tUBF0sHLaad4N3Q2asKnwHwEsX6jd6stkIp eVHIuBeihbxr7VDXscLkV+yL+zk6rMiQMVHQILjeySKP2l5z6wQG/SYmO3aoam0Q hkOsKFWol0YQHEUnW8J2mudodAa07Uk8ztDLAXY/jS9KiT+FaP39iOQaZz2sqcEA lIF7helz -----END CERTIFICATE-----Generated at Sun Jan 25 09:41:11 2026 by rpki-client