This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A487EFD8173F6507202F8FDAB24DA77DB8429DAB.cer File: A487EFD8173F6507202F8FDAB24DA77DB8429DAB.cer (raw, json) Hash identifier: riCXnulDPgtvkw8Zaf1rbT2Mgzr7YET4w8Xyemtbbto= Subject key identifier: A4:87:EF:D8:17:3F:65:07:20:2F:8F:DA:B2:4D:A7:7D:B8:42:9D:AB Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Certificate serial: 54FA4950791C2C4728199FD41E3A83325F4458ED Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1065588553129656323/0/A487EFD8173F6507202F8FDAB24DA77DB8429DAB.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1065588553129656323/0/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Mon 19 Jan 2026 11:08:26 +0000 Certificate not after: Mon 18 Jan 2027 11:13:26 +0000 Subordinate resources: IP: 103.203.212.0/22 IP: 2404:280::/32 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 19:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:fa:49:50:79:1c:2c:47:28:19:9f:d4:1e:3a:83:32:5f:44:58:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Validity Not Before: Jan 19 11:08:26 2026 GMT Not After : Jan 18 11:13:26 2027 GMT Subject: CN=A487EFD8173F6507202F8FDAB24DA77DB8429DAB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:a9:f7:5d:7d:7c:d3:0a:4c:a1:89:3f:ab:93: db:26:de:a4:e8:0e:21:e1:56:cc:ee:da:1b:49:df: d0:a0:36:b5:47:2a:b9:60:c2:31:08:95:e6:85:4d: f2:94:51:85:d4:49:b9:cc:85:24:49:26:3c:f8:cc: b4:bd:91:e1:19:36:01:59:d3:e8:36:8a:d5:04:ff: cd:4a:5f:06:7d:4e:83:7f:a8:6d:c3:b3:54:ec:46: be:ca:dc:3d:84:45:55:5e:11:6e:79:8f:18:c7:56: 17:02:ed:71:2b:7a:ea:f0:21:bb:0a:d1:46:b5:b4: 16:a6:28:c2:15:c4:35:dd:53:5f:7c:ba:8a:a1:52: d9:50:98:f6:a9:22:9c:5a:93:cd:97:89:7e:5b:12: c2:28:f0:01:16:95:aa:58:f1:72:92:57:b5:ed:0e: 3e:32:15:11:3b:cd:28:8d:e3:35:b6:1a:88:c0:8e: 56:7a:fc:1d:4a:1c:e9:76:62:9f:a9:67:71:e7:28: f2:5d:77:79:bf:d8:47:75:9e:aa:0d:0f:a9:2d:85: d9:2d:44:e5:63:9d:0f:df:50:70:51:9e:35:53:88: 1b:68:1f:b9:b2:b7:6b:e0:18:cd:2a:97:89:32:9c: ce:e6:14:dd:93:dd:4d:f4:55:a9:c8:de:81:43:f0: c6:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: A4:87:EF:D8:17:3F:65:07:20:2F:8F:DA:B2:4D:A7:7D:B8:42:9D:AB X509v3 Authority Key Identifier: keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129656323/0/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129656323/0/A487EFD8173F6507202F8FDAB24DA77DB8429DAB.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.203.212.0/22 IPv6: 2404:280::/32 Signature Algorithm: sha256WithRSAEncryption 99:b1:01:2c:85:5c:f4:81:4e:fb:ab:c8:69:3d:58:00:5e:17: 15:61:02:cd:28:6a:d6:e0:6b:3c:04:d9:95:ba:c9:70:33:ed: 57:a3:55:ac:9e:78:8b:eb:26:0a:57:29:26:10:fd:3b:2b:fa: 10:b9:00:05:2e:93:8f:97:61:1f:15:1f:78:18:33:2f:f6:08: 11:74:af:44:a0:3d:73:58:8e:ff:8c:bb:d9:a7:75:8d:d6:3c: 6b:cd:d0:10:29:00:72:9a:c1:9b:fb:03:4e:80:97:d6:a2:2f: bf:18:39:e7:c3:0a:71:19:83:9d:1d:05:7f:53:db:ee:46:2e: 04:78:9f:6e:7f:41:8c:24:6d:b8:88:63:e9:48:04:bc:2d:6f: 38:65:d5:ff:c9:56:60:bd:d0:4f:21:2b:40:fa:78:47:24:b2: 9b:73:0f:26:39:f2:d0:d4:7e:f5:a6:c2:08:61:56:d9:e5:4b: f3:dd:2c:e1:92:75:05:d2:7a:ae:1a:48:a5:f1:b5:76:68:58: 10:2f:2e:f8:e3:ef:a1:84:93:76:70:54:d3:da:22:21:a4:87: 2c:e7:cf:b7:47:55:9d:1e:60:22:80:e9:26:aa:df:8b:4a:0a: 3f:21:1a:ea:d2:40:83:8a:be:e0:2b:c9:e4:13:b9:f0:77:32: 85:31:51:fa -----BEGIN CERTIFICATE----- MIIFtjCCBJ6gAwIBAgIUVPpJUHkcLEcoGZ/UHjqDMl9EWO0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDExOTExMDgyNloX DTI3MDExODExMTMyNlowMzExMC8GA1UEAxMoQTQ4N0VGRDgxNzNGNjUwNzIwMkY4 RkRBQjI0REE3N0RCODQyOURBQjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMap9119fNMKTKGJP6uT2ybepOgOIeFWzO7aG0nf0KA2tUcquWDCMQiV5oVN 8pRRhdRJucyFJEkmPPjMtL2R4Rk2AVnT6DaK1QT/zUpfBn1Og3+obcOzVOxGvsrc PYRFVV4RbnmPGMdWFwLtcSt66vAhuwrRRrW0FqYowhXENd1TX3y6iqFS2VCY9qki nFqTzZeJflsSwijwARaVqljxcpJXte0OPjIVETvNKI3jNbYaiMCOVnr8HUoc6XZi n6lnceco8l13eb/YR3Weqg0PqS2F2S1E5WOdD99QcFGeNVOIG2gfubK3a+AYzSqX iTKczuYU3ZPdTfRVqcjegUPwxucCAwEAAaOCAqkwggKlMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFKSH79gXP2UHIC+P2rJNp324Qp2rMB8GA1UdIwQYMBaAFKVu hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTA2NTU4ODU1MzEyOTY1NjMyMy8wLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDY1NTg4NTUzMTI5NjU2MzIz LzAvQTQ4N0VGRDgxNzNGNjUwNzIwMkY4RkRBQjI0REE3N0RCODQyOURBQi5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUH AQcBAf8EHzAdMAwEAgABMAYDBAJny9QwDQQCAAIwBwMFACQEAoAwDQYJKoZIhvcN AQELBQADggEBAJmxASyFXPSBTvuryGk9WABeFxVhAs0oatbgazwE2ZW6yXAz7Vej VayeeIvrJgpXKSYQ/Tsr+hC5AAUuk4+XYR8VH3gYMy/2CBF0r0SgPXNYjv+Mu9mn dY3WPGvN0BApAHKawZv7A06Al9aiL78YOefDCnEZg50dBX9T2+5GLgR4n25/QYwk bbiIY+lIBLwtbzhl1f/JVmC90E8hK0D6eEcksptzDyY58tDUfvWmwghhVtnlS/Pd LOGSdQXSeq4aSKXxtXZoWBAvLvjj76GEk3ZwVNPaIiGkhyznz7dHVZ0eYCKA6Saq 34tKCj8hGurSQIOKvuAryeQTufB3MoUxUfo= -----END CERTIFICATE-----Generated at Sun Jan 25 05:57:52 2026 by rpki-client