This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BCAF99574819590D7B82611FFD862F69D879E4F4.cer File: BCAF99574819590D7B82611FFD862F69D879E4F4.cer (raw, json) Hash identifier: 3EScJmORMNTbg81hM3NOpeF5QIWVSNkjyemg90cgLsM= Subject key identifier: BC:AF:99:57:48:19:59:0D:7B:82:61:1F:FD:86:2F:69:D8:79:E4:F4 Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Certificate serial: 6246CE8125043055E057984D92C7D9EE52F307A2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1065583221972336643/0/BCAF99574819590D7B82611FFD862F69D879E4F4.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1065583221972336643/0/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Mon 19 Jan 2026 10:50:21 +0000 Certificate not after: Mon 18 Jan 2027 10:55:21 +0000 Subordinate resources: AS: 139138 IP: 103.150.164.0/23 IP: 2406:b640::/32 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 19:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:46:ce:81:25:04:30:55:e0:57:98:4d:92:c7:d9:ee:52:f3:07:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Validity Not Before: Jan 19 10:50:21 2026 GMT Not After : Jan 18 10:55:21 2027 GMT Subject: CN=BCAF99574819590D7B82611FFD862F69D879E4F4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:2e:8b:f4:f0:f1:5b:f2:41:f4:98:b9:f3:8b: 48:8a:14:d7:ba:97:98:8d:47:51:64:c7:91:16:ed: bd:02:9b:21:fd:f4:6f:64:e4:3c:33:d1:e4:44:26: f8:98:00:c9:bb:3d:13:2f:bf:8f:d1:38:15:2f:bd: e5:f3:c2:9b:58:d3:cd:20:5a:c0:f3:1a:34:29:95: ef:18:36:3e:91:7d:98:f6:43:1f:29:5b:7b:e3:dd: 1d:08:ef:9d:6f:82:50:11:68:de:5e:63:a9:49:f5: f8:db:b4:6d:33:03:b1:d0:79:3e:19:32:f3:21:de: 82:60:ed:7c:44:27:a1:48:87:0f:ca:c6:eb:42:80: a8:2d:57:77:07:9c:d4:65:17:18:be:41:41:25:d8: 6f:2f:2d:f0:8c:24:dd:4e:fb:85:af:47:46:16:4b: c3:f7:e4:ce:16:1d:2d:ad:f0:23:51:cf:ed:9a:cb: 48:2f:41:02:2e:35:89:68:ad:bb:24:e1:af:72:14: 74:a9:87:df:43:4b:98:d8:93:0b:89:a7:a3:01:85: f4:d7:81:69:dc:d3:a7:37:b2:75:fa:87:de:e4:39: 5e:1e:3b:dc:86:79:fb:4f:c0:d3:01:7c:54:f7:8a: 3c:8f:60:06:12:f9:fb:c8:3d:cf:89:c9:2b:bb:f8: 46:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: BC:AF:99:57:48:19:59:0D:7B:82:61:1F:FD:86:2F:69:D8:79:E4:F4 X509v3 Authority Key Identifier: keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1065583221972336643/0/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1065583221972336643/0/BCAF99574819590D7B82611FFD862F69D879E4F4.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.150.164.0/23 IPv6: 2406:b640::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 139138 Signature Algorithm: sha256WithRSAEncryption 90:52:d2:13:76:24:e2:16:1b:25:59:03:d2:a1:45:34:f9:ad: 21:3d:39:7b:9a:46:b0:13:5c:3b:bd:92:7f:05:79:15:93:b7: a8:49:95:df:64:b8:64:e3:33:93:4e:8a:29:0b:bd:a4:e7:99: 88:98:a5:bd:a2:f7:2f:72:e2:c1:54:ab:2d:48:37:f2:63:65: 00:db:f4:d7:1b:06:cf:d9:4b:d1:a8:e2:08:8c:ba:bf:10:65: 8f:99:ab:44:ef:02:f7:ed:89:63:90:48:2a:6f:13:06:f4:46: 82:b6:ef:a7:76:fd:c1:40:0f:d1:3c:e1:2f:2d:3e:b2:88:1e: 86:a4:28:40:a0:3b:fa:ed:8d:ad:3a:cd:bd:64:cc:2c:c5:0c: df:1d:22:7e:92:a0:bc:d8:a1:04:73:1c:fe:8e:3b:bd:b4:be: 72:f8:65:f2:8b:da:e0:d9:44:55:e5:5a:ad:9f:13:8f:d1:84: 65:cd:5a:93:ef:31:d4:b8:1c:0e:7d:d1:ff:13:08:16:58:7d: 08:92:1a:3d:b1:93:14:fe:01:70:de:53:e6:b6:00:3b:96:6d: a3:29:13:04:3e:66:b5:61:77:41:58:1f:1c:e2:81:fd:87:36: f8:be:0f:09:7e:df:6b:ce:40:f1:c8:91:48:26:bc:a8:74:a3: 50:96:41:b3 -----BEGIN CERTIFICATE----- MIIF0jCCBLqgAwIBAgIUYkbOgSUEMFXgV5hNksfZ7lLzB6IwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDExOTEwNTAyMVoX DTI3MDExODEwNTUyMVowMzExMC8GA1UEAxMoQkNBRjk5NTc0ODE5NTkwRDdCODI2 MTFGRkQ4NjJGNjlEODc5RTRGNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMwui/Tw8VvyQfSYufOLSIoU17qXmI1HUWTHkRbtvQKbIf30b2TkPDPR5EQm +JgAybs9Ey+/j9E4FS+95fPCm1jTzSBawPMaNCmV7xg2PpF9mPZDHylbe+PdHQjv nW+CUBFo3l5jqUn1+Nu0bTMDsdB5Phky8yHegmDtfEQnoUiHD8rG60KAqC1Xdwec 1GUXGL5BQSXYby8t8Iwk3U77ha9HRhZLw/fkzhYdLa3wI1HP7ZrLSC9BAi41iWit uyThr3IUdKmH30NLmNiTC4mnowGF9NeBadzTpzeydfqH3uQ5Xh473IZ5+0/A0wF8 VPeKPI9gBhL5+8g9z4nJK7v4RlsCAwEAAaOCAsUwggLBMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFLyvmVdIGVkNe4JhH/2GL2nYeeT0MB8GA1UdIwQYMBaAFKVu hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTA2NTU4MzIyMTk3MjMzNjY0My8wLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDY1NTgzMjIxOTcyMzM2NjQz LzAvQkNBRjk5NTc0ODE5NTkwRDdCODI2MTFGRkQ4NjJGNjlEODc5RTRGNC5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUH AQcBAf8EHzAdMAwEAgABMAYDBAFnlqQwDQQCAAIwBwMFACQGtkAwGgYIKwYBBQUH AQgBAf8ECzAJoAcwBQIDAh+CMA0GCSqGSIb3DQEBCwUAA4IBAQCQUtITdiTiFhsl WQPSoUU0+a0hPTl7mkawE1w7vZJ/BXkVk7eoSZXfZLhk4zOTToopC72k55mImKW9 ovcvcuLBVKstSDfyY2UA2/TXGwbP2UvRqOIIjLq/EGWPmatE7wL37YljkEgqbxMG 9EaCtu+ndv3BQA/RPOEvLT6yiB6GpChAoDv67Y2tOs29ZMwsxQzfHSJ+kqC82KEE cxz+jju9tL5y+GXyi9rg2URV5VqtnxOP0YRlzVqT7zHUuBwOfdH/EwgWWH0Ikho9 sZMU/gFw3lPmtgA7lm2jKRMEPma1YXdBWB8c4oH9hzb4vg8Jft9rzkDxyJFIJryo dKNQlkGz -----END CERTIFICATE-----Generated at Sun Jan 25 05:57:21 2026 by rpki-client