This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A162689F28161D4D4C3DF339D95097D5EF647370.cer File: A162689F28161D4D4C3DF339D95097D5EF647370.cer (raw, json) Hash identifier: 6wb/dd1/DL7x3vBY3aL4nXPRG8pvcxgVHOFMwOkYnns= Subject key identifier: A1:62:68:9F:28:16:1D:4D:4C:3D:F3:39:D9:50:97:D5:EF:64:73:70 Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Certificate serial: 2303D9A332D86F9A7BFF8F9AD62BE78E232D8817 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1065582330346930177/0/A162689F28161D4D4C3DF339D95097D5EF647370.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1065582330346930177/0/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Mon 19 Jan 2026 10:39:49 +0000 Certificate not after: Mon 18 Jan 2027 10:44:49 +0000 Subordinate resources: AS: 131536 IP: 124.14.0.0 -- 124.14.23.255 IP: 124.14.52.0 -- 124.14.63.255 IP: 211.161.96.0 -- 211.161.107.255 IP: 211.161.192.0/18 IP: 220.115.248.0/21 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 19:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:03:d9:a3:32:d8:6f:9a:7b:ff:8f:9a:d6:2b:e7:8e:23:2d:88:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Validity Not Before: Jan 19 10:39:49 2026 GMT Not After : Jan 18 10:44:49 2027 GMT Subject: CN=A162689F28161D4D4C3DF339D95097D5EF647370 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:23:67:98:a8:66:8a:7a:34:25:fb:f6:e3:c1: a3:88:67:36:f8:2b:07:3b:97:95:e6:7a:20:0b:21: 7e:07:5d:9d:60:c0:eb:27:29:1a:a7:5d:b9:16:28: 43:6f:ea:17:5e:e1:42:61:02:3b:20:7a:5f:5a:1b: bf:45:67:ad:d3:2a:5c:dc:d2:18:51:26:60:ff:23: eb:a5:3d:51:7f:93:b6:1a:cd:82:18:0e:57:3e:54: 82:9e:f8:f4:39:af:fe:c9:73:43:92:da:1a:ac:25: 84:08:f7:45:7e:dc:fe:a3:1a:5d:ee:7f:11:58:b0: 20:c2:4e:79:d1:3a:f9:0a:e7:bf:96:b4:41:bf:99: f8:27:3e:ff:f3:1a:c8:25:ea:07:1a:b7:66:f8:a7: 7c:e4:43:88:03:6a:55:32:75:eb:ab:31:9a:f9:03: 04:9a:f8:73:7f:dd:77:cf:12:e5:52:a2:e4:4e:28: f1:ba:e3:ad:4c:99:23:3e:26:fb:8f:02:b5:fd:e0: 05:41:4b:9a:25:57:43:a0:2f:24:7b:98:cf:8e:a2: 56:f9:f4:c8:63:00:2e:c1:6c:0f:f7:a4:cd:aa:b6: b3:81:6b:f9:52:d3:aa:f6:41:5d:17:a5:1f:c9:d6: ff:23:ed:6d:e1:da:37:9b:b5:d6:b5:7e:df:45:ab: b9:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: A1:62:68:9F:28:16:1D:4D:4C:3D:F3:39:D9:50:97:D5:EF:64:73:70 X509v3 Authority Key Identifier: keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330346930177/0/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330346930177/0/A162689F28161D4D4C3DF339D95097D5EF647370.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 124.14.0.0-124.14.23.255 124.14.52.0-124.14.63.255 211.161.96.0-211.161.107.255 211.161.192.0/18 220.115.248.0/21 sbgp-autonomousSysNum: critical Autonomous System Numbers: 131536 Signature Algorithm: sha256WithRSAEncryption 62:c8:4b:6e:be:b2:38:31:da:af:42:34:bb:b0:0e:53:f3:b2: f4:68:db:b6:db:e9:0f:eb:31:af:e2:db:ec:8a:b8:04:32:cc: af:9b:15:b1:ca:80:c2:9f:59:18:5d:6c:c2:0f:ba:f9:20:c2: 5b:19:ff:84:0f:c9:69:23:5a:94:76:4f:72:49:b0:f1:00:d9: e5:e8:e6:cf:ca:6f:96:2f:ac:66:a3:de:62:69:30:5c:47:44: 99:bd:3f:3d:1f:24:b8:eb:d3:91:cb:ab:9e:2d:07:5d:33:b5: e3:83:08:45:e5:0e:8c:5c:17:7e:e2:15:99:97:30:69:a8:6e: d2:cb:d5:27:d4:a8:39:1d:07:e2:e3:60:ae:fb:38:78:fd:f6: d9:2c:35:d4:df:a1:bc:e9:dc:b4:5d:e3:61:d9:d3:80:98:13: 45:94:f1:78:a3:3b:53:86:9a:3a:30:34:e8:df:56:04:ad:0a: f6:91:5e:79:6f:7b:c8:69:e2:3a:e1:e1:8d:b8:5a:4a:83:a9: 1a:62:ec:4a:62:e6:13:aa:c6:d1:55:ae:8b:6f:7c:fe:c8:bd: f2:c3:76:ac:d9:8e:6f:9e:5f:3b:3a:7b:fc:1d:ae:47:82:b7: a6:66:79:ba:63:ef:f8:01:c0:a9:e6:8f:3d:b8:36:b2:84:40: ef:71:5e:20 -----BEGIN CERTIFICATE----- MIIF8jCCBNqgAwIBAgIUIwPZozLYb5p7/4+a1ivnjiMtiBcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDExOTEwMzk0OVoX DTI3MDExODEwNDQ0OVowMzExMC8GA1UEAxMoQTE2MjY4OUYyODE2MUQ0RDRDM0RG MzM5RDk1MDk3RDVFRjY0NzM3MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJUjZ5ioZop6NCX79uPBo4hnNvgrBzuXleZ6IAshfgddnWDA6ycpGqdduRYo Q2/qF17hQmECOyB6X1obv0VnrdMqXNzSGFEmYP8j66U9UX+TthrNghgOVz5Ugp74 9Dmv/slzQ5LaGqwlhAj3RX7c/qMaXe5/EViwIMJOedE6+Qrnv5a0Qb+Z+Cc+//Ma yCXqBxq3ZvinfORDiANqVTJ166sxmvkDBJr4c3/dd88S5VKi5E4o8brjrUyZIz4m +48Ctf3gBUFLmiVXQ6AvJHuYz46iVvn0yGMALsFsD/ekzaq2s4Fr+VLTqvZBXRel H8nW/yPtbeHaN5u11rV+30WrubcCAwEAAaOCAuUwggLhMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFKFiaJ8oFh1NTD3zOdlQl9XvZHNwMB8GA1UdIwQYMBaAFKVu hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTA2NTU4MjMzMDM0NjkzMDE3Ny8wLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDY1NTgyMzMwMzQ2OTMwMTc3 LzAvQTE2MjY4OUYyODE2MUQ0RDRDM0RGMzM5RDk1MDk3RDVFRjY0NzM3MC5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwTgYIKwYBBQUH AQcBAf8EPzA9MDsEAgABMDUwCwMDAXwOAwQDfA4QMAwDBAJ8DjQDBAZ8DgAwDAME BdOhYAMEAtOhaAMEBtOhwAMEA9xz+DAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMC AdAwDQYJKoZIhvcNAQELBQADggEBAGLIS26+sjgx2q9CNLuwDlPzsvRo27bb6Q/r Ma/i2+yKuAQyzK+bFbHKgMKfWRhdbMIPuvkgwlsZ/4QPyWkjWpR2T3JJsPEA2eXo 5s/Kb5YvrGaj3mJpMFxHRJm9Pz0fJLjr05HLq54tB10zteODCEXlDoxcF37iFZmX MGmobtLL1SfUqDkdB+LjYK77OHj99tksNdTfobzp3LRd42HZ04CYE0WU8XijO1OG mjowNOjfVgStCvaRXnlve8hp4jrh4Y24WkqDqRpi7Epi5hOqxtFVrotvfP7IvfLD dqzZjm+eXzs6e/wdrkeCt6Zmebpj7/gBwKnmjz24NrKEQO9xXiA= -----END CERTIFICATE-----Generated at Sun Jan 25 06:01:45 2026 by rpki-client