This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A14C5431A0072F5BD88242DAA57169EE3163CFC1.cer File: A14C5431A0072F5BD88242DAA57169EE3163CFC1.cer (raw, json) Hash identifier: gM2LjJsk5avUxqudLgR40EAxAeZaJ4AcmSnHc0lZXTQ= Subject key identifier: A1:4C:54:31:A0:07:2F:5B:D8:82:42:DA:A5:71:69:EE:31:63:CF:C1 Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Certificate serial: 69746C234810DE8C16411C76E4934606F9621BB3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1065576199948075011/0/A14C5431A0072F5BD88242DAA57169EE3163CFC1.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1065576199948075011/0/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Mon 19 Jan 2026 10:17:38 +0000 Certificate not after: Mon 18 Jan 2027 10:22:38 +0000 Subordinate resources: AS: 24147 IP: 103.235.80.0/22 IP: 113.208.96.0 -- 113.208.255.255 IP: 113.212.0.0/18 IP: 150.242.92.0/22 IP: 203.86.32.0/19 IP: 211.102.240.0/20 IP: 219.235.192.0/20 IP: 2401:18e0::/28 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 19:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:74:6c:23:48:10:de:8c:16:41:1c:76:e4:93:46:06:f9:62:1b:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Validity Not Before: Jan 19 10:17:38 2026 GMT Not After : Jan 18 10:22:38 2027 GMT Subject: CN=A14C5431A0072F5BD88242DAA57169EE3163CFC1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:23:fd:0c:6e:a2:ff:e2:04:01:a3:92:3b:20: 5b:4a:45:d5:e5:a5:c7:6d:ec:8d:5d:1b:57:df:b8: ff:b8:ca:6f:ba:20:7a:80:bd:49:e9:1f:37:9b:5a: cb:cc:7d:dd:9f:5f:b1:dc:e7:c5:8f:50:54:9e:95: 6c:a7:ba:fe:b1:11:cc:c5:42:30:c6:ae:bf:c7:83: d1:7f:11:61:3b:af:29:d5:b4:00:9b:e4:7b:74:d6: f7:7e:62:e5:74:f7:11:20:50:30:0c:58:a6:27:a8: 1a:af:23:1f:38:bf:12:2a:be:e5:ac:3a:4a:21:d9: 38:c7:df:75:b4:17:c7:e8:c3:b5:bc:ff:31:87:19: 99:49:2c:e6:f7:d9:85:ae:7e:a9:73:51:dd:74:4e: 3f:d1:86:10:ac:9c:1d:ca:a0:ff:96:8d:1c:65:c3: e3:0e:66:51:b0:2c:1d:60:2c:31:3f:a9:eb:1a:c7: 8d:d8:04:7d:bc:c0:46:c8:a3:75:61:81:c2:1f:75: b7:13:52:29:b3:b5:b5:b5:5c:97:8b:ab:9f:9f:4c: 84:1a:c2:0a:e9:9d:93:93:8d:2c:a1:66:93:1b:86: b2:b5:7a:dd:14:22:d7:ca:37:c6:d1:89:2e:c9:61: d3:73:48:e9:0e:cb:72:97:ef:df:3f:88:a1:78:ac: 09:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: A1:4C:54:31:A0:07:2F:5B:D8:82:42:DA:A5:71:69:EE:31:63:CF:C1 X509v3 Authority Key Identifier: keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948075011/0/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948075011/0/A14C5431A0072F5BD88242DAA57169EE3163CFC1.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.235.80.0/22 113.208.96.0-113.208.255.255 113.212.0.0/18 150.242.92.0/22 203.86.32.0/19 211.102.240.0/20 219.235.192.0/20 IPv6: 2401:18e0::/28 sbgp-autonomousSysNum: critical Autonomous System Numbers: 24147 Signature Algorithm: sha256WithRSAEncryption 39:eb:df:cf:b5:2c:e3:b5:b3:bc:f4:e6:d1:92:0a:63:7d:b1: a6:86:85:dd:46:9d:de:3e:dd:3e:94:39:fd:05:5e:6b:ab:64: b7:b3:08:f4:29:1a:e7:4c:c0:26:c6:19:d5:53:cf:85:a1:4c: 16:fa:db:70:0e:2f:6d:ac:be:74:02:ec:27:85:c9:85:9f:d6: 69:19:01:23:84:26:b1:2e:e9:a9:6f:be:38:c3:38:00:a4:85: ff:a3:24:c6:28:d4:8b:3f:50:c6:07:e3:32:3e:d1:d0:e8:8a: 5e:54:86:b4:2b:47:8c:d9:36:b3:08:cd:f0:f4:be:4f:8d:eb: fa:01:c9:76:bb:9c:be:e4:ec:51:7b:d7:59:ac:16:19:c8:8b: 24:b5:57:d8:0d:50:0f:36:91:2d:b5:a1:80:48:cc:00:fa:e7: 10:d5:e7:23:df:8b:5c:45:a6:33:42:fe:cb:9f:1a:72:9f:6e: 0b:90:4c:eb:69:d1:26:a7:75:c8:ce:a3:2b:1f:61:d5:e4:fc: 37:69:e2:f6:6d:8e:2c:cc:29:f4:fd:22:dc:99:b6:28:9a:59: 28:f9:61:72:e6:96:2b:fb:58:45:85:dd:7d:b4:46:21:81:0b: 1a:44:40:55:bc:52:c2:55:27:5b:74:0b:d4:52:e7:77:41:30: 4b:d8:ba:fb -----BEGIN CERTIFICATE----- MIIF/DCCBOSgAwIBAgIUaXRsI0gQ3owWQRx25JNGBvliG7MwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDExOTEwMTczOFoX DTI3MDExODEwMjIzOFowMzExMC8GA1UEAxMoQTE0QzU0MzFBMDA3MkY1QkQ4ODI0 MkRBQTU3MTY5RUUzMTYzQ0ZDMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOMj/Qxuov/iBAGjkjsgW0pF1eWlx23sjV0bV9+4/7jKb7ogeoC9SekfN5ta y8x93Z9fsdznxY9QVJ6VbKe6/rERzMVCMMauv8eD0X8RYTuvKdW0AJvke3TW935i 5XT3ESBQMAxYpieoGq8jHzi/Eiq+5aw6SiHZOMffdbQXx+jDtbz/MYcZmUks5vfZ ha5+qXNR3XROP9GGEKycHcqg/5aNHGXD4w5mUbAsHWAsMT+p6xrHjdgEfbzARsij dWGBwh91txNSKbO1tbVcl4urn59MhBrCCumdk5ONLKFmkxuGsrV63RQi18o3xtGJ Lslh03NI6Q7Lcpfv3z+IoXisCV0CAwEAAaOCAu8wggLrMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFKFMVDGgBy9b2IJC2qVxae4xY8/BMB8GA1UdIwQYMBaAFKVu hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTA2NTU3NjE5OTk0ODA3NTAxMS8wLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDY1NTc2MTk5OTQ4MDc1MDEx LzAvQTE0QzU0MzFBMDA3MkY1QkQ4ODI0MkRBQTU3MTY5RUUzMTYzQ0ZDMS5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwWQYIKwYBBQUH AQcBAf8ESjBIMDcEAgABMDEDBAJn61AwCwMEBXHQYAMDAHHQAwQGcdQAAwQClvJc AwQFy1YgAwQE02bwAwQE2+vAMA0EAgACMAcDBQQkARjgMBkGCCsGAQUFBwEIAQH/ BAowCKAGMAQCAl5TMA0GCSqGSIb3DQEBCwUAA4IBAQA569/PtSzjtbO89ObRkgpj fbGmhoXdRp3ePt0+lDn9BV5rq2S3swj0KRrnTMAmxhnVU8+FoUwW+ttwDi9trL50 AuwnhcmFn9ZpGQEjhCaxLumpb744wzgApIX/oyTGKNSLP1DGB+MyPtHQ6IpeVIa0 K0eM2TazCM3w9L5Pjev6Acl2u5y+5OxRe9dZrBYZyIsktVfYDVAPNpEttaGASMwA +ucQ1ecj34tcRaYzQv7Lnxpyn24LkEzradEmp3XIzqMrH2HV5Pw3aeL2bY4szCn0 /SLcmbYomlko+WFy5pYr+1hFhd19tEYhgQsaREBVvFLCVSdbdAvUUud3QTBL2Lr7 -----END CERTIFICATE-----Generated at Sun Jan 25 06:01:36 2026 by rpki-client