This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8FAB27452D80D270582E88C3F77F13734A31720D.cer File: 8FAB27452D80D270582E88C3F77F13734A31720D.cer (raw, json) Hash identifier: LYO0RIEER4OIuLx4qwu/i6980WITAh8+Dl3FMEaRxM4= Subject key identifier: 8F:AB:27:45:2D:80:D2:70:58:2E:88:C3:F7:7F:13:73:4A:31:72:0D Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Certificate serial: 70563C9215D36CD913F7D35B2F24707F23985574 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1065583221972271107/0/8FAB27452D80D270582E88C3F77F13734A31720D.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1065583221972271107/0/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Mon 19 Jan 2026 10:49:54 +0000 Certificate not after: Mon 18 Jan 2027 10:54:54 +0000 Subordinate resources: AS: 139148 IP: 103.145.42.0/23 IP: 115.172.32.0/19 IP: 115.174.0.0/18 IP: 115.174.96.0 -- 115.174.255.255 IP: 2405:78c0::/32 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 19:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:56:3c:92:15:d3:6c:d9:13:f7:d3:5b:2f:24:70:7f:23:98:55:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Validity Not Before: Jan 19 10:49:54 2026 GMT Not After : Jan 18 10:54:54 2027 GMT Subject: CN=8FAB27452D80D270582E88C3F77F13734A31720D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:85:74:ad:d8:13:c5:14:c7:56:79:00:f3:d7: f8:8e:0d:5f:a8:d8:f9:e9:05:75:c1:8d:93:1e:39: dd:ea:fc:f5:72:99:0a:57:cc:7f:0f:f1:87:a6:2a: 38:68:3c:3a:11:98:ec:11:98:50:9a:e8:3d:1c:d2: 58:e0:d9:c5:17:4f:22:63:59:09:44:ed:ca:90:e8: f3:e0:31:6f:64:aa:3e:a7:84:05:43:5a:5d:8c:e3: 2d:80:51:91:6d:99:2b:11:93:f6:c5:a4:b5:39:30: 4a:13:fd:03:e7:bc:aa:96:fd:84:f8:46:ab:17:1e: f6:73:6c:32:1f:b0:9e:73:c3:8b:95:b4:40:4a:44: 25:f0:f8:c4:cc:9f:b9:3a:dc:78:7e:05:dd:b6:f6: 59:8f:70:73:e5:9b:a9:19:2f:97:16:db:02:c7:c5: 06:e9:9d:de:c4:e3:1c:76:40:a2:48:19:cd:3f:34: 8c:ae:75:ac:e6:af:a1:e9:90:a7:5a:48:08:8d:e4: 10:3c:dc:23:71:ac:34:47:17:8d:68:90:38:ba:be: 0a:39:9a:54:08:a2:d4:77:ab:bc:a8:02:c9:0a:5d: 75:04:49:f0:e9:48:89:a6:72:8a:e4:10:6f:1d:76: 03:9f:bc:e2:0a:24:f6:c2:51:a5:74:c5:26:20:49: 42:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 8F:AB:27:45:2D:80:D2:70:58:2E:88:C3:F7:7F:13:73:4A:31:72:0D X509v3 Authority Key Identifier: keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1065583221972271107/0/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1065583221972271107/0/8FAB27452D80D270582E88C3F77F13734A31720D.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.145.42.0/23 115.172.32.0/19 115.174.0.0/18 115.174.96.0-115.174.255.255 IPv6: 2405:78c0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 139148 Signature Algorithm: sha256WithRSAEncryption 22:ff:8e:63:0f:8e:93:60:3f:ec:64:e5:e9:fd:d4:3b:db:8c: 45:39:0a:59:39:8a:db:f1:f1:72:a5:1d:47:c9:2c:c2:e0:c0: 0d:32:a4:78:72:47:04:68:d6:c5:90:54:d3:bd:cc:bf:ea:59: 2b:3a:b4:43:1f:90:1e:20:0f:9a:77:07:ef:b6:eb:1a:f0:86: 46:67:68:fd:de:f1:03:70:9d:07:ee:16:b7:03:f2:e6:7d:2f: 87:37:6d:c4:c7:91:2a:96:d6:6b:53:47:31:fb:c0:99:0b:dd: f3:6a:e0:f1:bc:30:7e:5a:b8:18:d3:15:97:8a:87:91:d8:f4: 0c:3a:c8:3e:bb:3e:d4:43:25:03:a9:5e:a1:15:2e:0b:bf:7c: 0c:25:ef:c3:30:d3:30:74:42:09:21:f4:07:9b:7e:58:59:b8: af:4d:17:b2:66:2b:b7:a6:b6:6f:0e:b5:cb:5f:29:88:66:54: 5e:84:6b:60:c1:ce:8e:15:c7:aa:1c:d2:a0:8d:7b:c0:22:7c: 3e:cc:ad:37:d7:44:7d:ad:3c:9e:ee:2f:a6:4a:df:78:60:27: 76:3c:bd:7f:51:ca:ac:ff:c7:64:7c:3a:9f:3e:b8:d5:8f:f4: 4d:b6:14:60:cb:6f:80:86:8e:69:6d:4f:8b:13:ab:1e:3a:7b: 7d:cd:7f:2f -----BEGIN CERTIFICATE----- MIIF6zCCBNOgAwIBAgIUcFY8khXTbNkT99NbLyRwfyOYVXQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDExOTEwNDk1NFoX DTI3MDExODEwNTQ1NFowMzExMC8GA1UEAxMoOEZBQjI3NDUyRDgwRDI3MDU4MkU4 OEMzRjc3RjEzNzM0QTMxNzIwRDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMmFdK3YE8UUx1Z5APPX+I4NX6jY+ekFdcGNkx453er89XKZClfMfw/xh6Yq OGg8OhGY7BGYUJroPRzSWODZxRdPImNZCUTtypDo8+Axb2SqPqeEBUNaXYzjLYBR kW2ZKxGT9sWktTkwShP9A+e8qpb9hPhGqxce9nNsMh+wnnPDi5W0QEpEJfD4xMyf uTrceH4F3bb2WY9wc+WbqRkvlxbbAsfFBumd3sTjHHZAokgZzT80jK51rOavoemQ p1pICI3kEDzcI3GsNEcXjWiQOLq+CjmaVAii1HervKgCyQpddQRJ8OlIiaZyiuQQ bx12A5+84gok9sJRpXTFJiBJQlMCAwEAAaOCAt4wggLaMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFI+rJ0UtgNJwWC6Iw/d/E3NKMXINMB8GA1UdIwQYMBaAFKVu hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTA2NTU4MzIyMTk3MjI3MTEwNy8wLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDY1NTgzMjIxOTcyMjcxMTA3 LzAvOEZBQjI3NDUyRDgwRDI3MDU4MkU4OEMzRjc3RjEzNzM0QTMxNzIwRC5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwRwYIKwYBBQUH AQcBAf8EODA2MCUEAgABMB8DBAFnkSoDBAVzrCADBAZzrgAwCwMEBXOuYAMDAHOu MA0EAgACMAcDBQAkBXjAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwIfjDANBgkq hkiG9w0BAQsFAAOCAQEAIv+OYw+Ok2A/7GTl6f3UO9uMRTkKWTmK2/HxcqUdR8ks wuDADTKkeHJHBGjWxZBU073Mv+pZKzq0Qx+QHiAPmncH77brGvCGRmdo/d7xA3Cd B+4WtwPy5n0vhzdtxMeRKpbWa1NHMfvAmQvd82rg8bwwflq4GNMVl4qHkdj0DDrI Prs+1EMlA6leoRUuC798DCXvwzDTMHRCCSH0B5t+WFm4r00XsmYrt6a2bw61y18p iGZUXoRrYMHOjhXHqhzSoI17wCJ8PsytN9dEfa08nu4vpkrfeGAndjy9f1HKrP/H ZHw6nz641Y/0TbYUYMtvgIaOaW1PixOrHjp7fc1/Lw== -----END CERTIFICATE-----Generated at Sun Jan 25 06:01:39 2026 by rpki-client