This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AF78431646A0FABBD8F081F9FF34BCAE995EB126.cer File: AF78431646A0FABBD8F081F9FF34BCAE995EB126.cer (raw, json) Hash identifier: Z7iTsHRXQAB8JtoolBI00EuEgUMBbSxPvCxS52lPGgw= Subject key identifier: AF:78:43:16:46:A0:FA:BB:D8:F0:81:F9:FF:34:BC:AE:99:5E:B1:26 Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Certificate serial: 0B19203A03675E8D42377AA6FB38914FD9DC586C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1065579534394392579/0/AF78431646A0FABBD8F081F9FF34BCAE995EB126.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1065579534394392579/0/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Mon 19 Jan 2026 10:28:08 +0000 Certificate not after: Mon 18 Jan 2027 10:33:08 +0000 Subordinate resources: AS: 58862 IP: 103.25.157.0 -- 103.25.159.255 IP: 150.242.48.0/22 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 19:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:19:20:3a:03:67:5e:8d:42:37:7a:a6:fb:38:91:4f:d9:dc:58:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Validity Not Before: Jan 19 10:28:08 2026 GMT Not After : Jan 18 10:33:08 2027 GMT Subject: CN=AF78431646A0FABBD8F081F9FF34BCAE995EB126 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:8d:d8:0b:0c:45:7b:34:cd:84:d2:7a:77:22: dc:10:3b:d3:b5:3c:0d:4e:43:fb:54:b8:32:66:e9: 7c:d6:df:a8:8c:b3:ea:ed:9f:ba:61:7e:75:65:6b: 57:6e:8d:98:99:99:6b:50:3c:d6:e0:55:19:c4:f6: 07:aa:3c:03:12:f8:e1:60:08:00:00:8b:9a:bb:9f: ad:e8:a3:ca:ae:51:a9:c7:f8:c5:a6:bf:fc:e9:5b: cc:f4:1d:55:f7:3d:28:bc:e0:d1:95:a7:d1:19:56: 58:e2:1f:6d:da:4a:13:5e:69:63:62:fb:56:40:3b: 00:89:99:b7:2c:b4:8b:12:ad:b2:5d:9a:0d:d1:8d: a2:a6:49:7d:d3:b4:1d:a6:a0:bd:9b:6c:38:78:f2: 14:eb:2e:93:39:15:d8:90:94:68:89:ef:9e:77:77: 66:c0:80:5e:43:72:b4:cf:52:d9:69:cc:d2:70:af: 87:26:8e:98:c3:21:c6:c9:45:d1:20:95:cf:66:71: 2b:c6:d2:52:87:93:a8:83:a1:ce:3b:e5:2d:f4:09: 43:8c:5d:81:95:49:fb:9d:f8:9e:41:b7:17:7b:d7: ff:7f:b6:f9:a3:56:5e:7b:17:97:2b:56:6f:a8:8c: ae:d5:98:e7:9e:91:67:17:f0:6d:39:3d:52:c8:3a: 6e:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: AF:78:43:16:46:A0:FA:BB:D8:F0:81:F9:FF:34:BC:AE:99:5E:B1:26 X509v3 Authority Key Identifier: keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394392579/0/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394392579/0/AF78431646A0FABBD8F081F9FF34BCAE995EB126.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.25.157.0-103.25.159.255 150.242.48.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 58862 Signature Algorithm: sha256WithRSAEncryption 35:d3:09:91:00:5e:25:5a:f2:e1:85:23:d4:6e:17:7b:ec:fa: a6:1a:c9:20:7f:ba:50:9d:4d:74:f0:f1:4b:b5:b3:34:1d:df: 02:75:d5:3c:34:ca:d0:ed:2a:c3:b2:0f:9e:b4:77:43:a4:ea: 8f:be:1d:b1:a1:25:2a:ff:71:39:47:1f:5c:4d:bb:bf:37:4f: 4e:ad:aa:62:35:ec:47:74:a4:fa:66:47:28:26:92:c9:05:12: fb:ad:2e:3b:94:d4:75:40:7c:09:42:80:e0:ca:3e:a9:f4:44: 94:3b:cd:37:d4:8b:0e:6f:95:8d:fc:e4:84:77:de:df:0a:b2: 09:96:5a:d5:cd:10:1e:4b:d6:9e:18:c9:18:12:99:b5:8d:b1: fe:08:0d:63:08:a8:77:07:58:ac:2a:54:39:49:3b:f0:46:c1: ab:b6:33:f6:b8:72:24:6a:7a:2d:ed:8f:f9:fd:89:ce:ca:d3: 85:49:86:86:04:9f:8a:94:1a:11:84:5e:58:04:4d:69:98:50: 84:bd:e6:f8:30:79:13:b7:f6:6f:d1:ff:77:8a:13:5f:a6:31: f1:99:6e:7b:3e:a6:70:71:94:e6:6a:f4:ce:13:d0:67:1a:2a: 74:e9:31:e3:31:45:49:a4:53:6d:d9:da:a4:12:da:cd:b1:31: 2a:d7:b2:91 -----BEGIN CERTIFICATE----- MIIF0TCCBLmgAwIBAgIUCxkgOgNnXo1CN3qm+ziRT9ncWGwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDExOTEwMjgwOFoX DTI3MDExODEwMzMwOFowMzExMC8GA1UEAxMoQUY3ODQzMTY0NkEwRkFCQkQ4RjA4 MUY5RkYzNEJDQUU5OTVFQjEyNjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAM+N2AsMRXs0zYTSenci3BA707U8DU5D+1S4MmbpfNbfqIyz6u2fumF+dWVr V26NmJmZa1A81uBVGcT2B6o8AxL44WAIAACLmrufreijyq5Rqcf4xaa//OlbzPQd Vfc9KLzg0ZWn0RlWWOIfbdpKE15pY2L7VkA7AImZtyy0ixKtsl2aDdGNoqZJfdO0 HaagvZtsOHjyFOsukzkV2JCUaInvnnd3ZsCAXkNytM9S2WnM0nCvhyaOmMMhxslF 0SCVz2ZxK8bSUoeTqIOhzjvlLfQJQ4xdgZVJ+534nkG3F3vX/3+2+aNWXnsXlytW b6iMrtWY556RZxfwbTk9Usg6bs8CAwEAAaOCAsQwggLAMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFK94QxZGoPq72PCB+f80vK6ZXrEmMB8GA1UdIwQYMBaAFKVu hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTA2NTU3OTUzNDM5NDM5MjU3OS8wLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDY1NTc5NTM0Mzk0MzkyNTc5 LzAvQUY3ODQzMTY0NkEwRkFCQkQ4RjA4MUY5RkYzNEJDQUU5OTVFQjEyNi5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwLQYIKwYBBQUH AQcBAf8EHjAcMBoEAgABMBQwDAMEAGcZnQMEBWcZgAMEApbyMDAaBggrBgEFBQcB CAEB/wQLMAmgBzAFAgMA5e4wDQYJKoZIhvcNAQELBQADggEBADXTCZEAXiVa8uGF I9RuF3vs+qYaySB/ulCdTXTw8Uu1szQd3wJ11Tw0ytDtKsOyD560d0Ok6o++HbGh JSr/cTlHH1xNu783T06tqmI17Ed0pPpmRygmkskFEvutLjuU1HVAfAlCgODKPqn0 RJQ7zTfUiw5vlY385IR33t8KsgmWWtXNEB5L1p4YyRgSmbWNsf4IDWMIqHcHWKwq VDlJO/BGwau2M/a4ciRqei3tj/n9ic7K04VJhoYEn4qUGhGEXlgETWmYUIS95vgw eRO39m/R/3eKE1+mMfGZbns+pnBxlOZq9M4T0GcaKnTpMeMxRUmkU23Z2qQS2s2x MSrXspE= -----END CERTIFICATE-----Generated at Sun Jan 25 12:46:19 2026 by rpki-client