This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8E80FA24E5DFF3073621050FF18487025A2A5198.cer File: 8E80FA24E5DFF3073621050FF18487025A2A5198.cer (raw, json) Hash identifier: ZC6TFSQLxlbv7OdiJbf5c3OYEJ8abaOqG66d+dV2e3U= Subject key identifier: 8E:80:FA:24:E5:DF:F3:07:36:21:05:0F:F1:84:87:02:5A:2A:51:98 Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Certificate serial: 7C908EE0C9AD825ED1D0A0E979CCC1400B794E21 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1065582741577334786/0/8E80FA24E5DFF3073621050FF18487025A2A5198.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1065582741577334786/0/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Mon 19 Jan 2026 10:40:42 +0000 Certificate not after: Mon 18 Jan 2027 10:45:42 +0000 Subordinate resources: AS: 139180 IP: 43.240.216.0/22 IP: 43.249.192.0/22 IP: 45.125.44.0/22 IP: 103.91.208.0/22 IP: 202.189.4.0 -- 202.189.63.255 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 19:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:90:8e:e0:c9:ad:82:5e:d1:d0:a0:e9:79:cc:c1:40:0b:79:4e:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Validity Not Before: Jan 19 10:40:42 2026 GMT Not After : Jan 18 10:45:42 2027 GMT Subject: CN=8E80FA24E5DFF3073621050FF18487025A2A5198 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:4b:5c:76:19:5a:64:2f:68:e1:48:de:71:6d: 70:f3:73:0e:ba:cf:46:bb:45:a2:ed:d7:29:4a:48: b7:d4:b3:06:35:8c:5a:ca:ca:35:de:91:7a:63:b4: 1b:bd:c0:e2:de:34:22:24:eb:22:d1:ab:47:5b:74: 84:17:2c:b0:a3:de:67:b1:c5:af:be:fe:4f:3b:3d: 95:14:4d:5d:77:31:82:6c:56:c7:4a:cd:c1:b4:e3: a5:8a:cc:57:e4:5a:d1:4d:98:76:fc:2e:c7:c2:12: 1f:1f:df:48:45:a2:c2:d7:68:85:ae:6e:2f:95:34: 98:b6:7a:13:ae:8d:7b:04:b7:6b:c9:e4:6b:ad:d7: ae:25:db:c3:50:14:48:6f:a9:ec:24:c1:d3:dd:f7: db:8d:e3:b1:13:ec:43:d7:45:97:10:28:c5:76:be: ea:a3:68:b5:7a:cd:57:b3:10:80:6f:a4:53:e7:d2: 53:b0:b2:9f:33:78:91:13:24:53:0b:9e:2e:95:3a: bb:70:00:1a:38:08:b0:69:e0:89:c9:40:f1:45:96: 41:f1:ff:fc:e4:80:9f:3c:22:29:45:39:f7:fa:f3: ea:2e:ac:dc:15:67:54:3f:47:be:18:37:78:dd:ae: f2:75:59:32:80:1c:3f:a7:4b:24:42:9c:40:2b:43: 3c:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 8E:80:FA:24:E5:DF:F3:07:36:21:05:0F:F1:84:87:02:5A:2A:51:98 X509v3 Authority Key Identifier: keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577334786/0/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577334786/0/8E80FA24E5DFF3073621050FF18487025A2A5198.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.240.216.0/22 43.249.192.0/22 45.125.44.0/22 103.91.208.0/22 202.189.4.0-202.189.63.255 sbgp-autonomousSysNum: critical Autonomous System Numbers: 139180 Signature Algorithm: sha256WithRSAEncryption 08:12:4e:77:03:e3:33:84:30:86:75:82:17:4a:e0:89:35:5d: ab:5b:7c:98:77:47:05:21:ee:ab:49:ba:15:eb:f6:68:82:26: 1a:75:b0:88:34:d0:20:79:2f:8b:0a:7f:e9:7e:46:dc:b6:e3: 54:0d:e1:03:98:17:f3:82:4d:32:75:53:79:d7:30:17:fb:86: db:59:06:bf:eb:2c:33:4a:07:81:6b:6b:79:8d:c3:10:3d:c1: c2:0f:de:6c:32:5e:50:94:a6:9a:25:1d:7e:6c:23:e9:00:4f: 7c:bd:a6:16:11:c9:d7:09:d0:a4:34:f8:c5:c7:83:c1:cd:7e: 2b:9c:5b:8d:bf:4f:c6:73:e2:ab:31:d9:d6:fd:4f:29:9e:3e: db:60:b7:15:86:eb:9e:3d:40:9b:6c:2e:37:8b:3a:b8:58:0f: 6b:02:f9:27:c8:a5:f3:7d:39:20:24:3b:66:0d:fe:cb:8c:9f: d0:40:77:47:64:cc:c2:cf:2f:6d:80:2d:46:ea:99:9f:ce:da: c5:20:42:c3:bb:9b:83:3b:61:5f:27:1b:a2:62:81:40:b3:dd: 0f:10:4f:b7:5a:b1:ef:cb:df:63:56:a9:30:ed:5d:71:1d:54: 33:71:62:40:bc:b2:bb:d3:0c:c9:48:51:8e:c3:a0:c5:44:05: 7a:3e:be:42 -----BEGIN CERTIFICATE----- MIIF4zCCBMugAwIBAgIUfJCO4Mmtgl7R0KDpeczBQAt5TiEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDExOTEwNDA0MloX DTI3MDExODEwNDU0MlowMzExMC8GA1UEAxMoOEU4MEZBMjRFNURGRjMwNzM2MjEw NTBGRjE4NDg3MDI1QTJBNTE5ODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANFLXHYZWmQvaOFI3nFtcPNzDrrPRrtFou3XKUpIt9SzBjWMWsrKNd6RemO0 G73A4t40IiTrItGrR1t0hBcssKPeZ7HFr77+Tzs9lRRNXXcxgmxWx0rNwbTjpYrM V+Ra0U2Ydvwux8ISHx/fSEWiwtdoha5uL5U0mLZ6E66NewS3a8nka63XriXbw1AU SG+p7CTB0933243jsRPsQ9dFlxAoxXa+6qNotXrNV7MQgG+kU+fSU7CynzN4kRMk UwueLpU6u3AAGjgIsGngiclA8UWWQfH//OSAnzwiKUU59/rz6i6s3BVnVD9Hvhg3 eN2u8nVZMoAcP6dLJEKcQCtDPCkCAwEAAaOCAtYwggLSMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFI6A+iTl3/MHNiEFD/GEhwJaKlGYMB8GA1UdIwQYMBaAFKVu hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTA2NTU4Mjc0MTU3NzMzNDc4Ni8wLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDY1NTgyNzQxNTc3MzM0Nzg2 LzAvOEU4MEZBMjRFNURGRjMwNzM2MjEwNTBGRjE4NDg3MDI1QTJBNTE5OC5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwPwYIKwYBBQUH AQcBAf8EMDAuMCwEAgABMCYDBAIr8NgDBAIr+cADBAItfSwDBAJnW9AwDAMEAsq9 BAMEBsq9ADAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMCH6wwDQYJKoZIhvcNAQEL BQADggEBAAgSTncD4zOEMIZ1ghdK4Ik1XatbfJh3RwUh7qtJuhXr9miCJhp1sIg0 0CB5L4sKf+l+Rty241QN4QOYF/OCTTJ1U3nXMBf7httZBr/rLDNKB4Fra3mNwxA9 wcIP3mwyXlCUppolHX5sI+kAT3y9phYRydcJ0KQ0+MXHg8HNfiucW42/T8Zz4qsx 2db9TymePttgtxWG6549QJtsLjeLOrhYD2sC+SfIpfN9OSAkO2YN/suMn9BAd0dk zMLPL22ALUbqmZ/O2sUgQsO7m4M7YV8nG6JigUCz3Q8QT7dase/L32NWqTDtXXEd VDNxYkC8srvTDMlIUY7DoMVEBXo+vkI= -----END CERTIFICATE-----Generated at Sun Jan 25 06:01:32 2026 by rpki-client