This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BCA8E26E86DC27A410DDA53B0DAAD21CDD9ADB13.cer File: BCA8E26E86DC27A410DDA53B0DAAD21CDD9ADB13.cer (raw, json) Hash identifier: rfv1hACU2yI4CSREOLRvGCWYK46Cz8Qmz2Ij6bbKoR8= Subject key identifier: BC:A8:E2:6E:86:DC:27:A4:10:DD:A5:3B:0D:AA:D2:1C:DD:9A:DB:13 Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Certificate serial: 62D70C969C332FB53AE3A1A28B3D7F9DC97D6015 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1065582330347192321/0/BCA8E26E86DC27A410DDA53B0DAAD21CDD9ADB13.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1065582330347192321/0/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Mon 19 Jan 2026 10:45:38 +0000 Certificate not after: Mon 18 Jan 2027 10:50:38 +0000 Subordinate resources: AS: 56005 IP: 103.22.188.0/22 IP: 163.53.56.0/22 IP: 2404:f00::/32 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 19:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:d7:0c:96:9c:33:2f:b5:3a:e3:a1:a2:8b:3d:7f:9d:c9:7d:60:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Validity Not Before: Jan 19 10:45:38 2026 GMT Not After : Jan 18 10:50:38 2027 GMT Subject: CN=BCA8E26E86DC27A410DDA53B0DAAD21CDD9ADB13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:db:db:5e:67:d9:87:29:f1:32:a8:87:07:cf: da:e4:f8:fe:7a:13:c1:46:61:46:e5:05:87:cb:22: 48:8b:e6:c5:9c:49:10:bc:26:26:96:0c:ee:2e:88: cb:66:df:f6:79:ac:5d:dd:b3:01:6d:cc:fc:ca:01: ef:a6:7d:2d:e4:47:da:9b:78:c9:e5:91:14:e8:eb: e4:37:43:8f:68:6a:58:a4:13:9e:45:49:ea:89:c2: c0:fe:1e:ff:5e:73:35:68:c5:ad:f5:9a:d8:10:88: a4:a2:88:bd:ec:20:0f:b6:2e:c3:ac:95:3c:99:f6: 15:2e:d5:61:a1:c8:6f:4f:22:de:3d:46:8f:2a:79: 90:27:16:a8:9d:9f:97:b6:31:31:f6:62:ea:03:c3: df:e0:00:a3:32:6a:1b:ac:80:ca:a8:e7:3d:35:f6: 2f:18:62:01:b2:ff:ac:db:60:40:37:ba:e6:c9:e8: 12:b3:37:6c:fb:09:9d:cd:1d:91:6e:fb:0a:6f:54: 2b:3d:38:f9:a1:11:99:20:38:ba:ca:0a:52:df:48: 8c:5a:4d:52:bd:5b:4d:e3:02:fa:7e:4f:93:e7:5b: 9b:91:4c:10:71:5d:88:a1:3c:1c:6a:20:12:39:87: cc:48:9d:20:88:ad:5e:01:df:01:67:16:cb:9c:d2: 65:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: BC:A8:E2:6E:86:DC:27:A4:10:DD:A5:3B:0D:AA:D2:1C:DD:9A:DB:13 X509v3 Authority Key Identifier: keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330347192321/0/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330347192321/0/BCA8E26E86DC27A410DDA53B0DAAD21CDD9ADB13.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.22.188.0/22 163.53.56.0/22 IPv6: 2404:f00::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 56005 Signature Algorithm: sha256WithRSAEncryption 71:36:84:41:1f:d0:05:74:75:69:ce:ba:39:70:77:d0:6e:12: 3f:ce:db:52:e0:c3:cc:e7:3d:89:75:00:e1:f9:f9:b1:f3:8f: 84:3f:5e:e2:99:f0:4d:fe:07:9c:01:02:79:49:f7:a6:26:ca: 77:f1:90:be:a6:e3:fb:09:6b:49:17:56:0d:d6:de:c5:0b:42: 9b:2a:74:8a:26:64:74:6b:1d:eb:b8:d7:67:f8:23:bd:f4:3e: a0:8e:bb:f8:e2:23:03:2c:32:bf:72:97:09:dd:b3:68:65:b4: 45:2b:4b:d8:c5:5b:49:29:38:87:e3:34:ad:25:83:83:59:86: 15:fa:68:f0:6e:b8:90:6f:e4:14:ea:d2:4f:75:d5:4d:c5:a8: 4a:6d:6a:32:32:5d:01:e9:e7:c5:14:d8:0d:20:d4:29:3c:f9: 61:18:4f:37:8f:83:7b:52:c9:95:37:10:01:8e:c7:46:52:5f: 8e:61:96:39:42:f9:49:45:d3:eb:50:f2:ee:16:71:4a:bb:f3: e2:dd:b5:3d:72:ba:eb:b5:df:01:fb:bb:70:75:22:1a:dc:ed: 34:34:1e:7b:38:65:94:83:c7:6c:49:b3:98:47:4f:8d:37:e9: c8:98:63:f5:7b:ff:d8:3d:07:73:74:b8:9a:f9:92:a5:09:f1: 2f:c9:92:f9 -----BEGIN CERTIFICATE----- MIIF2DCCBMCgAwIBAgIUYtcMlpwzL7U646Giiz1/ncl9YBUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDExOTEwNDUzOFoX DTI3MDExODEwNTAzOFowMzExMC8GA1UEAxMoQkNBOEUyNkU4NkRDMjdBNDEwRERB NTNCMERBQUQyMUNERDlBREIxMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAL/b215n2Ycp8TKohwfP2uT4/noTwUZhRuUFh8siSIvmxZxJELwmJpYM7i6I y2bf9nmsXd2zAW3M/MoB76Z9LeRH2pt4yeWRFOjr5DdDj2hqWKQTnkVJ6onCwP4e /15zNWjFrfWa2BCIpKKIvewgD7Yuw6yVPJn2FS7VYaHIb08i3j1Gjyp5kCcWqJ2f l7YxMfZi6gPD3+AAozJqG6yAyqjnPTX2LxhiAbL/rNtgQDe65snoErM3bPsJnc0d kW77Cm9UKz04+aERmSA4usoKUt9IjFpNUr1bTeMC+n5Pk+dbm5FMEHFdiKE8HGog EjmHzEidIIitXgHfAWcWy5zSZZMCAwEAAaOCAsswggLHMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFLyo4m6G3CekEN2lOw2q0hzdmtsTMB8GA1UdIwQYMBaAFKVu hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTA2NTU4MjMzMDM0NzE5MjMyMS8wLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDY1NTgyMzMwMzQ3MTkyMzIx LzAvQkNBOEUyNkU4NkRDMjdBNDEwRERBNTNCMERBQUQyMUNERDlBREIxMy5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwNAYIKwYBBQUH AQcBAf8EJTAjMBIEAgABMAwDBAJnFrwDBAKjNTgwDQQCAAIwBwMFACQEDwAwGgYI KwYBBQUHAQgBAf8ECzAJoAcwBQIDANrFMA0GCSqGSIb3DQEBCwUAA4IBAQBxNoRB H9AFdHVpzro5cHfQbhI/zttS4MPM5z2JdQDh+fmx84+EP17imfBN/gecAQJ5Sfem Jsp38ZC+puP7CWtJF1YN1t7FC0KbKnSKJmR0ax3ruNdn+CO99D6gjrv44iMDLDK/ cpcJ3bNoZbRFK0vYxVtJKTiH4zStJYODWYYV+mjwbriQb+QU6tJPddVNxahKbWoy Ml0B6efFFNgNINQpPPlhGE83j4N7UsmVNxABjsdGUl+OYZY5QvlJRdPrUPLuFnFK u/Pi3bU9crrrtd8B+7twdSIa3O00NB57OGWUg8dsSbOYR0+NN+nImGP1e//YPQdz dLia+ZKlCfEvyZL5 -----END CERTIFICATE-----Generated at Sun Jan 25 05:57:26 2026 by rpki-client