This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A51408E97010BDB44146281B8A78BCFA4E0E4C5E.cer File: A51408E97010BDB44146281B8A78BCFA4E0E4C5E.cer (raw, json) Hash identifier: pQ8VQ4qCCTd2zER7dF/W8Uj3EuqwvUo+NeN2LMDwGsI= Subject key identifier: A5:14:08:E9:70:10:BD:B4:41:46:28:1B:8A:78:BC:FA:4E:0E:4C:5E Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Certificate serial: 2F97F25B2E7F12C9270E28C468598459CED2216B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/0/A51408E97010BDB44146281B8A78BCFA4E0E4C5E.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/0/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Mon 19 Jan 2026 10:20:42 +0000 Certificate not after: Mon 18 Jan 2027 10:25:42 +0000 Subordinate resources: AS: 37965 AS: 55988 AS: 58857 IP: 43.247.44.0 -- 43.247.51.255 IP: 103.13.124.0/22 IP: 103.26.240.0/22 IP: 222.126.128.0/17 IP: 2401:2a00::/32 IP: 2407:5500::/32 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 19:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:97:f2:5b:2e:7f:12:c9:27:0e:28:c4:68:59:84:59:ce:d2:21:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Validity Not Before: Jan 19 10:20:42 2026 GMT Not After : Jan 18 10:25:42 2027 GMT Subject: CN=A51408E97010BDB44146281B8A78BCFA4E0E4C5E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:86:21:bd:e9:63:0a:c4:d4:80:60:32:f3:70: 00:3e:0d:7a:7b:80:a1:03:5a:1d:3e:76:29:3d:43: 22:e3:8a:42:85:97:d8:0f:2e:ca:81:c5:99:bb:c8: 14:6a:60:43:52:f6:64:02:8b:c2:87:a7:45:b2:6c: af:9a:b6:33:93:60:eb:fe:02:74:15:a1:11:80:e5: e5:fd:ac:07:ad:b5:fe:67:88:81:c2:3d:93:13:08: 0b:66:1c:80:ff:60:a9:74:59:49:6d:77:96:fe:5d: 6c:56:dd:19:5b:a0:b0:dc:5a:ca:09:8f:d9:2c:31: d1:61:a8:ee:0b:2a:c9:4c:ee:8b:50:23:84:28:98: 10:30:7e:27:85:da:22:5a:9c:b0:b8:9d:75:da:c5: 27:18:e9:cd:3e:a3:d1:f6:ef:0a:91:4d:d0:2f:8a: 66:1f:c0:59:b7:88:47:57:3f:f8:a8:31:fe:4f:95: d9:27:28:9e:58:4d:3a:9d:5c:83:40:ba:e7:82:83: 3f:4d:8d:75:da:11:c6:94:14:ca:06:20:df:c1:24: 80:f7:b2:c9:cc:82:bd:ee:ed:a5:61:f9:0a:ea:2b: a7:e6:e8:3d:2a:6e:ce:76:97:51:fe:f2:63:10:8e: 94:dc:86:5d:b8:10:7e:e8:ea:af:8b:55:70:e1:cb: 1b:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: A5:14:08:E9:70:10:BD:B4:41:46:28:1B:8A:78:BC:FA:4E:0E:4C:5E X509v3 Authority Key Identifier: keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/0/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/0/A51408E97010BDB44146281B8A78BCFA4E0E4C5E.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.247.44.0-43.247.51.255 103.13.124.0/22 103.26.240.0/22 222.126.128.0/17 IPv6: 2401:2a00::/32 2407:5500::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 37965 55988 58857 Signature Algorithm: sha256WithRSAEncryption 7e:88:5f:8c:d7:be:f6:52:ca:51:bc:97:82:11:7b:ed:b7:37: af:d3:a4:28:51:3f:87:1d:d8:c8:41:25:bf:e2:aa:4c:39:66: 2a:e5:15:9d:83:29:42:f8:a1:ca:78:70:18:c7:e0:47:f9:4a: b7:67:1b:31:0c:4f:48:ac:d4:fa:cf:7c:01:39:aa:0f:c7:f1: b0:f1:89:bb:07:48:fc:e0:1e:6d:63:a9:07:05:c5:61:3e:4e: f1:d4:29:fe:69:3f:27:64:16:58:29:dc:2c:4b:60:4f:be:c5: f3:20:02:96:a0:77:43:be:b3:51:8d:23:f9:b1:b2:f5:fa:0b: 57:3e:46:99:d1:77:7f:5d:26:a8:ae:f8:0f:9d:71:a4:f7:d2: bf:aa:ad:97:92:95:7d:10:6c:ad:c0:20:b5:5a:1e:01:77:97: 0d:12:dc:e7:b5:72:ad:a4:75:36:91:1c:1b:3a:aa:65:70:d2: 09:a3:cb:6f:5a:a1:4b:91:b3:9c:22:38:0b:d5:6e:ac:da:bb: 0b:80:0a:9b:48:fa:4e:96:a4:27:34:ad:68:32:d7:93:b1:64: e9:08:09:95:82:0a:d2:6d:96:d0:a4:89:02:55:af:0b:da:89: 74:01:ff:b6:51:07:69:3b:02:23:9b:df:cd:ac:83:91:4a:7b: 73:09:47:97 -----BEGIN CERTIFICATE----- MIIF/TCCBOWgAwIBAgIUL5fyWy5/EsknDijEaFmEWc7SIWswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDExOTEwMjA0MloX DTI3MDExODEwMjU0MlowMzExMC8GA1UEAxMoQTUxNDA4RTk3MDEwQkRCNDQxNDYy ODFCOEE3OEJDRkE0RTBFNEM1RTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMOGIb3pYwrE1IBgMvNwAD4NenuAoQNaHT52KT1DIuOKQoWX2A8uyoHFmbvI FGpgQ1L2ZAKLwoenRbJsr5q2M5Ng6/4CdBWhEYDl5f2sB621/meIgcI9kxMIC2Yc gP9gqXRZSW13lv5dbFbdGVugsNxaygmP2Swx0WGo7gsqyUzui1AjhCiYEDB+J4Xa IlqcsLidddrFJxjpzT6j0fbvCpFN0C+KZh/AWbeIR1c/+Kgx/k+V2SconlhNOp1c g0C654KDP02NddoRxpQUygYg38EkgPeyycyCve7tpWH5Cuorp+boPSpuznaXUf7y YxCOlNyGXbgQfujqr4tVcOHLG+cCAwEAAaOCAvAwggLsMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFKUUCOlwEL20QUYoG4p4vPpODkxeMB8GA1UdIwQYMBaAFKVu hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTA2NTU3NjE5OTk0ODI3MTYxOS8wLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDY1NTc2MTk5OTQ4MjcxNjE5 LzAvQTUxNDA4RTk3MDEwQkRCNDQxNDYyODFCOEE3OEJDRkE0RTBFNEM1RS5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwTwYIKwYBBQUH AQcBAf8EQDA+MCYEAgABMCAwDAMEAiv3LAMEAiv3MAMEAmcNfAMEAmca8AMEB95+ gDAUBAIAAjAOAwUAJAEqAAMFACQHVQAwJAYIKwYBBQUHAQgBAf8EFTAToBEwDwID AJRNAgMA2rQCAwDl6TANBgkqhkiG9w0BAQsFAAOCAQEAfohfjNe+9lLKUbyXghF7 7bc3r9OkKFE/hx3YyEElv+KqTDlmKuUVnYMpQvihynhwGMfgR/lKt2cbMQxPSKzU +s98ATmqD8fxsPGJuwdI/OAebWOpBwXFYT5O8dQp/mk/J2QWWCncLEtgT77F8yAC lqB3Q76zUY0j+bGy9foLVz5GmdF3f10mqK74D51xpPfSv6qtl5KVfRBsrcAgtVoe AXeXDRLc57VyraR1NpEcGzqqZXDSCaPLb1qhS5GznCI4C9VurNq7C4AKm0j6Tpak JzStaDLXk7Fk6QgJlYIK0m2W0KSJAlWvC9qJdAH/tlEHaTsCI5vfzayDkUp7cwlH lw== -----END CERTIFICATE-----Generated at Sun Jan 25 06:01:35 2026 by rpki-client