This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE.cer File: 8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE.cer (raw, json) Hash identifier: obVjiPZ+GCfC2LKgn54xolELOsO085Vcm3kRrIirW9U= Subject key identifier: 8D:47:3B:7B:41:E3:D6:22:DF:B3:B6:0D:5E:B9:46:99:8F:BE:7E:AE Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Certificate serial: 49BF9A0B3481CADD8E783D8CB2A0843F55478BC6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1065576723372179458/0/8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1065576723372179458/0/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Mon 19 Jan 2026 10:24:27 +0000 Certificate not after: Mon 18 Jan 2027 10:29:27 +0000 Subordinate resources: AS: 45110 IP: 43.254.228.0 -- 43.254.243.255 IP: 43.254.248.0/22 IP: 43.255.0.0/22 IP: 45.125.76.0/22 IP: 45.125.84.0 -- 45.125.103.255 IP: 103.23.160.0/22 IP: 103.103.188.0/22 IP: 103.193.212.0 -- 103.193.239.255 IP: 103.200.220.0 -- 103.201.3.255 IP: 103.201.192.0 -- 103.201.219.255 IP: 103.229.216.0/21 IP: 103.229.228.0/22 IP: 103.229.236.0 -- 103.229.243.255 IP: 111.118.200.0/21 IP: 113.21.232.0/21 IP: 114.31.64.0/21 IP: 114.141.80.0/21 IP: 116.66.120.0/24 IP: 116.66.123.0/24 IP: 119.18.224.0/24 IP: 119.18.226.0/24 IP: 119.18.234.0/24 IP: 119.18.236.0/23 IP: 119.18.239.0/24 IP: 119.161.120.0/21 IP: 120.136.16.0/21 IP: 202.47.104.0/21 IP: 202.57.192.0/20 IP: 202.65.96.0/22 IP: 203.114.244.0/22 IP: 2401:f7c0::/32 IP: 2403:9b00::/32 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 19:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:bf:9a:0b:34:81:ca:dd:8e:78:3d:8c:b2:a0:84:3f:55:47:8b:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Validity Not Before: Jan 19 10:24:27 2026 GMT Not After : Jan 18 10:29:27 2027 GMT Subject: CN=8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:02:3f:4d:67:1b:b3:fd:16:d5:2b:a9:bc:a7: 16:53:ae:1f:53:7c:7b:96:61:7a:00:d8:18:07:d5: a3:73:a5:19:8f:f5:a1:8f:73:9d:d8:d0:8c:88:bc: d6:ef:b2:6a:67:0a:26:d3:53:b8:e8:15:3f:51:33: 0b:f4:69:47:0f:ef:ad:25:62:c1:70:1e:08:10:73: 18:50:36:f1:d1:39:fe:1d:8c:91:6c:bf:ce:be:ef: 46:75:9c:a7:f8:be:1b:8d:cc:5c:43:94:51:9e:d5: 0d:ba:43:09:08:34:48:ae:b1:bf:c3:21:88:14:ff: 1d:32:ea:da:92:4a:9b:82:f4:25:f1:37:9d:4c:18: 73:07:7f:52:be:ed:97:e6:e2:57:30:ab:fc:19:78: a0:3c:dc:41:18:9e:e8:8a:54:68:65:ce:16:24:9c: a1:b9:75:15:8f:f6:a5:4b:a9:40:a3:0b:7a:56:21: 22:4f:37:aa:fd:d7:f0:54:6d:14:a4:b1:2d:23:b8: 31:2e:de:8c:db:32:39:4a:26:78:4e:98:7c:2e:ad: eb:92:c1:ab:1c:d7:62:97:27:56:92:76:eb:3b:23: 67:3b:f6:95:46:8d:0a:91:49:66:66:ef:b9:e0:d8: 61:78:53:1f:32:eb:a3:3d:79:8b:9d:87:89:0e:5a: dd:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 8D:47:3B:7B:41:E3:D6:22:DF:B3:B6:0D:5E:B9:46:99:8F:BE:7E:AE X509v3 Authority Key Identifier: keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372179458/0/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372179458/0/8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.254.228.0-43.254.243.255 43.254.248.0/22 43.255.0.0/22 45.125.76.0/22 45.125.84.0-45.125.103.255 103.23.160.0/22 103.103.188.0/22 103.193.212.0-103.193.239.255 103.200.220.0-103.201.3.255 103.201.192.0-103.201.219.255 103.229.216.0/21 103.229.228.0/22 103.229.236.0-103.229.243.255 111.118.200.0/21 113.21.232.0/21 114.31.64.0/21 114.141.80.0/21 116.66.120.0/24 116.66.123.0/24 119.18.224.0/24 119.18.226.0/24 119.18.234.0/24 119.18.236.0/23 119.18.239.0/24 119.161.120.0/21 120.136.16.0/21 202.47.104.0/21 202.57.192.0/20 202.65.96.0/22 203.114.244.0/22 IPv6: 2401:f7c0::/32 2403:9b00::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 45110 Signature Algorithm: sha256WithRSAEncryption 85:56:57:d6:4d:99:26:56:b6:cf:c5:dd:a3:f5:d8:17:16:ea: b3:4a:49:13:67:57:d9:80:ba:3d:b7:97:ec:53:e0:eb:26:f9: ed:74:ad:85:e9:62:c4:e6:01:d5:20:9d:89:fb:95:da:70:0f: 91:63:88:66:9e:f2:ff:71:3d:b2:22:df:ee:83:12:15:cd:c3: ae:d2:5a:2e:71:c2:66:50:e1:83:d1:62:67:12:b5:fc:28:91: ea:3c:da:e0:2a:26:c0:2d:e2:a1:3d:6f:c6:d4:a3:95:7f:ad: f3:2c:55:d7:b7:6d:34:26:79:28:96:c1:f8:52:4f:b8:a3:0a: 11:8c:d0:78:2d:5e:d8:1c:46:ab:f7:66:82:71:83:a8:ff:6f: 1f:30:07:80:0e:76:fc:90:30:fb:07:70:34:a5:7b:8c:e6:b2: b4:ba:02:4b:4a:36:64:0a:7e:b8:e0:1d:43:be:f8:c0:e8:f7: 33:f7:d9:0d:5c:4d:06:4b:a4:49:1e:d9:50:45:07:fd:f2:f5: 63:7a:e8:7c:b9:dd:75:e6:91:84:d6:86:55:c0:1b:23:3a:3a: 75:54:a2:c2:6a:00:fe:24:3d:c8:e6:1a:a4:ce:66:59:ab:32: 43:e1:f8:ff:b6:c3:b3:bd:5c:6a:84:08:e4:3d:5b:3a:b0:6e: c3:64:6c:b3 -----BEGIN CERTIFICATE----- MIIGvzCCBaegAwIBAgIUSb+aCzSByt2OeD2MsqCEP1VHi8YwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDExOTEwMjQyN1oX DTI3MDExODEwMjkyN1owMzExMC8GA1UEAxMoOEQ0NzNCN0I0MUUzRDYyMkRGQjNC NjBENUVCOTQ2OTk4RkJFN0VBRTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAM8CP01nG7P9FtUrqbynFlOuH1N8e5ZhegDYGAfVo3OlGY/1oY9zndjQjIi8 1u+yamcKJtNTuOgVP1EzC/RpRw/vrSViwXAeCBBzGFA28dE5/h2MkWy/zr7vRnWc p/i+G43MXEOUUZ7VDbpDCQg0SK6xv8MhiBT/HTLq2pJKm4L0JfE3nUwYcwd/Ur7t l+biVzCr/Bl4oDzcQRie6IpUaGXOFiScobl1FY/2pUupQKMLelYhIk83qv3X8FRt FKSxLSO4MS7ejNsyOUomeE6YfC6t65LBqxzXYpcnVpJ26zsjZzv2lUaNCpFJZmbv ueDYYXhTHzLroz15i52HiQ5a3X8CAwEAAaOCA7IwggOuMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFI1HO3tB49Yi37O2DV65RpmPvn6uMB8GA1UdIwQYMBaAFKVu hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTA2NTU3NjcyMzM3MjE3OTQ1OC8wLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDY1NTc2NzIzMzcyMTc5NDU4 LzAvOEQ0NzNCN0I0MUUzRDYyMkRGQjNCNjBENUVCOTQ2OTk4RkJFN0VBRS5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwggEZBggrBgEF BQcBBwEB/wSCAQgwggEEMIHrBAIAATCB5DAMAwQCK/7kAwQCK/7wAwQCK/74AwQC K/8AAwQCLX1MMAwDBAItfVQDBAMtfWADBAJnF6ADBAJnZ7wwDAMEAmfB1AMEBGfB 4DAMAwQCZ8jcAwQCZ8kAMAwDBAZnycADBAJnydgDBANn5dgDBAJn5eQwDAMEAmfl 7AMEAmfl8AMEA292yAMEA3EV6AMEA3IfQAMEA3KNUAMEAHRCeAMEAHRCewMEAHcS 4AMEAHcS4gMEAHcS6gMEAXcS7AMEAHcS7wMEA3eheAMEA3iIEAMEA8ovaAMEBMo5 wAMEAspBYAMEAsty9DAUBAIAAjAOAwUAJAH3wAMFACQDmwAwGgYIKwYBBQUHAQgB Af8ECzAJoAcwBQIDALA2MA0GCSqGSIb3DQEBCwUAA4IBAQCFVlfWTZkmVrbPxd2j 9dgXFuqzSkkTZ1fZgLo9t5fsU+DrJvntdK2F6WLE5gHVIJ2J+5XacA+RY4hmnvL/ cT2yIt/ugxIVzcOu0louccJmUOGD0WJnErX8KJHqPNrgKibALeKhPW/G1KOVf63z LFXXt200JnkolsH4Uk+4owoRjNB4LV7YHEar92aCcYOo/28fMAeADnb8kDD7B3A0 pXuM5rK0ugJLSjZkCn644B1DvvjA6Pcz99kNXE0GS6RJHtlQRQf98vVjeuh8ud11 5pGE1oZVwBsjOjp1VKLCagD+JD3I5hqkzmZZqzJD4fj/tsOzvVxqhAjkPVs6sG7D ZGyz -----END CERTIFICATE-----Generated at Sun Jan 25 06:01:40 2026 by rpki-client