This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B7CD3069B4897C94D73E4A5156A5BB580263686D.cer File: B7CD3069B4897C94D73E4A5156A5BB580263686D.cer (raw, json) Hash identifier: XU6SlPkbSOj+RboKJmbCf8GjLx3Xps4oAZgdDp0QXgc= Subject key identifier: B7:CD:30:69:B4:89:7C:94:D7:3E:4A:51:56:A5:BB:58:02:63:68:6D Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Certificate serial: 0882082F615AFC985A39EA89D1DD3837E83A5433 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1065588335524839425/0/B7CD3069B4897C94D73E4A5156A5BB580263686D.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1065588335524839425/0/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Mon 19 Jan 2026 11:03:13 +0000 Certificate not after: Mon 18 Jan 2027 11:08:13 +0000 Subordinate resources: AS: 137731 IP: 103.62.88.0/23 IP: 2402:34e0::/32 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 19:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:82:08:2f:61:5a:fc:98:5a:39:ea:89:d1:dd:38:37:e8:3a:54:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Validity Not Before: Jan 19 11:03:13 2026 GMT Not After : Jan 18 11:08:13 2027 GMT Subject: CN=B7CD3069B4897C94D73E4A5156A5BB580263686D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:e7:c0:63:72:32:42:5e:53:c4:b5:cc:80:1e: 0f:73:12:77:e9:f0:94:b5:73:4f:de:f9:6f:7a:9b: 4d:e6:1b:7f:27:30:76:de:cd:a1:f7:3a:2d:28:90: d8:7c:9a:a4:d5:61:0c:a7:dd:dc:37:58:58:23:30: 90:66:dc:f9:32:e9:6a:ef:aa:70:1c:c7:dd:e1:18: 19:07:5f:73:d2:86:73:0e:bf:52:86:52:0c:b2:e7: 83:19:a2:4b:d1:ce:68:b9:41:94:a2:89:27:87:4c: 92:9a:c2:9b:2e:7d:da:65:92:83:18:2e:2a:a2:80: d5:b2:d6:5e:b6:35:3a:b4:dd:34:19:19:8b:f4:b1: 32:99:71:a1:a6:ab:50:fa:e9:33:53:4e:05:a9:05: 2f:00:35:89:c8:72:4b:1b:8c:76:e0:5a:b4:a1:fd: 44:e8:85:28:bb:b0:d1:05:02:d5:cf:8d:e1:ff:da: 45:7b:1c:4b:8f:09:f7:5a:6b:83:99:34:32:87:93: 38:ca:83:33:5b:5f:80:7e:d7:7f:17:a7:7d:c6:d5: c8:e6:70:b4:2f:15:5c:78:6b:61:bb:2b:13:89:69: 13:03:64:a6:05:b9:0b:24:cb:6f:48:9f:d9:32:81: 8f:54:d2:79:24:96:49:cf:a2:2c:e6:67:7d:a4:88: 45:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: B7:CD:30:69:B4:89:7C:94:D7:3E:4A:51:56:A5:BB:58:02:63:68:6D X509v3 Authority Key Identifier: keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335524839425/0/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335524839425/0/B7CD3069B4897C94D73E4A5156A5BB580263686D.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.62.88.0/23 IPv6: 2402:34e0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 137731 Signature Algorithm: sha256WithRSAEncryption 07:1b:c9:4d:5e:ac:e5:07:e2:3f:3b:69:a1:73:a7:66:e9:3f: cd:2d:c2:c2:c3:da:06:e8:2b:f0:1c:4e:72:85:a4:32:2d:e4: de:03:11:a0:ae:ed:20:9e:ee:33:96:c2:c1:65:dc:80:27:13: 14:89:58:89:64:5b:e4:7d:c5:d5:51:a0:ae:7a:cc:28:cc:7e: d4:38:49:a4:2f:02:a3:44:cf:92:af:a7:33:4e:ec:87:82:f8: e5:36:6e:5c:09:e3:35:d5:af:14:d9:a6:58:da:13:7d:4b:ea: 6b:3a:4f:3f:d4:9e:9f:f8:e1:89:3d:df:83:49:e8:a1:dd:f1: 12:84:25:4c:1e:36:b2:1c:7f:04:51:e2:3b:bb:09:28:f9:cd: f3:37:0a:4d:45:ab:a3:02:9b:cb:e2:fb:01:78:80:f6:88:fb: 54:af:06:33:f4:3a:b7:0b:f3:2e:e9:e9:62:7c:69:8f:a3:55: fe:a0:32:e7:3c:fa:a0:88:55:12:72:23:03:1e:16:41:59:f0: 0d:96:77:ca:cd:6b:22:b9:fe:e3:e3:e8:cb:11:ba:37:8e:f7: 2c:94:ba:b9:d3:49:08:53:9c:ae:b3:f4:ae:8e:c3:bb:06:e3: 77:7d:51:20:b1:10:83:d1:e5:77:37:be:cd:44:ff:c4:b6:e9: 7d:4b:a2:84 -----BEGIN CERTIFICATE----- MIIF0jCCBLqgAwIBAgIUCIIIL2Fa/JhaOeqJ0d04N+g6VDMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDExOTExMDMxM1oX DTI3MDExODExMDgxM1owMzExMC8GA1UEAxMoQjdDRDMwNjlCNDg5N0M5NEQ3M0U0 QTUxNTZBNUJCNTgwMjYzNjg2RDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANrnwGNyMkJeU8S1zIAeD3MSd+nwlLVzT975b3qbTeYbfycwdt7Nofc6LSiQ 2HyapNVhDKfd3DdYWCMwkGbc+TLpau+qcBzH3eEYGQdfc9KGcw6/UoZSDLLngxmi S9HOaLlBlKKJJ4dMkprCmy592mWSgxguKqKA1bLWXrY1OrTdNBkZi/SxMplxoaar UPrpM1NOBakFLwA1ichySxuMduBatKH9ROiFKLuw0QUC1c+N4f/aRXscS48J91pr g5k0MoeTOMqDM1tfgH7XfxenfcbVyOZwtC8VXHhrYbsrE4lpEwNkpgW5CyTLb0if 2TKBj1TSeSSWSc+iLOZnfaSIRY0CAwEAAaOCAsUwggLBMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFLfNMGm0iXyU1z5KUValu1gCY2htMB8GA1UdIwQYMBaAFKVu hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTA2NTU4ODMzNTUyNDgzOTQyNS8wLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDY1NTg4MzM1NTI0ODM5NDI1 LzAvQjdDRDMwNjlCNDg5N0M5NEQ3M0U0QTUxNTZBNUJCNTgwMjYzNjg2RC5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUH AQcBAf8EHzAdMAwEAgABMAYDBAFnPlgwDQQCAAIwBwMFACQCNOAwGgYIKwYBBQUH AQgBAf8ECzAJoAcwBQIDAhoDMA0GCSqGSIb3DQEBCwUAA4IBAQAHG8lNXqzlB+I/ O2mhc6dm6T/NLcLCw9oG6CvwHE5yhaQyLeTeAxGgru0gnu4zlsLBZdyAJxMUiViJ ZFvkfcXVUaCueswozH7UOEmkLwKjRM+Sr6czTuyHgvjlNm5cCeM11a8U2aZY2hN9 S+prOk8/1J6f+OGJPd+DSeih3fEShCVMHjayHH8EUeI7uwko+c3zNwpNRaujApvL 4vsBeID2iPtUrwYz9Dq3C/Mu6elifGmPo1X+oDLnPPqgiFUSciMDHhZBWfANlnfK zWsiuf7j4+jLEbo3jvcslLq500kIU5yus/SujsO7BuN3fVEgsRCD0eV3N77NRP/E tul9S6KE -----END CERTIFICATE-----Generated at Sun Jan 25 06:01:33 2026 by rpki-client