This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.cer File: CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.cer (raw, json) Hash identifier: WgUdaWFn11ACEqMO64CFgmogF7mc8dKNuvD3So5au8A= Subject key identifier: CD:D5:5F:3D:78:FC:75:75:3F:F9:C6:C8:26:A7:D8:1A:A5:EB:EE:B7 Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Certificate serial: 5F4CCDB913E0BB6956EB09D82F01D10288931EF6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Mon 19 Jan 2026 10:15:38 +0000 Certificate not after: Mon 18 Jan 2027 10:20:38 +0000 Subordinate resources: AS: 7641 AS: 146821 AS: 146838 IP: 42.204.0.0/14 IP: 103.8.204.0/22 IP: 112.128.0.0/14 IP: 117.124.0.0/14 IP: 150.242.52.0/22 IP: 211.89.0.0/16 IP: 211.146.0.0/16 IP: 211.156.128.0/19 IP: 223.160.0.0/14 IP: 2403:600::/32 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 19:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:4c:cd:b9:13:e0:bb:69:56:eb:09:d8:2f:01:d1:02:88:93:1e:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Validity Not Before: Jan 19 10:15:38 2026 GMT Not After : Jan 18 10:20:38 2027 GMT Subject: CN=CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:66:2f:e5:16:83:65:fd:dd:4b:c6:c9:a8:a2: 2b:26:db:dc:1f:fe:74:ad:49:05:42:fe:2e:a1:de: 00:4f:37:cd:8e:33:ef:40:0d:29:72:5c:0c:09:7d: 72:6d:b8:d1:20:f1:21:e0:62:5b:0c:17:b1:8f:4b: c0:46:9c:e0:e9:a9:6c:56:5c:97:0e:5b:78:41:a3: 09:76:6b:2a:e2:55:f3:ee:cd:59:08:85:5b:35:80: a7:8f:3a:7e:69:93:fd:25:2a:3e:d1:fd:93:e7:93: 91:9f:db:0e:ca:1f:fc:df:ab:f6:32:7b:50:28:bb: 8c:42:23:a6:1d:72:3e:79:a2:77:d6:be:50:b1:5f: d2:b9:77:b5:69:db:a5:75:7e:de:0a:40:c7:69:ea: b9:41:e0:45:20:8a:41:9b:eb:3c:45:4a:ff:48:1f: 6e:5b:ab:dc:49:b5:4d:54:23:c2:11:d6:ec:0a:af: 30:a4:97:9f:4b:34:5f:0e:d9:65:d2:96:82:e6:da: 51:a2:17:89:bf:7a:a6:bd:b7:b2:8a:54:33:d1:ce: 6e:5d:5e:89:4c:06:51:4d:55:52:df:37:71:ef:5e: b7:75:e9:1f:c3:62:d8:0b:79:96:a7:fb:a4:e4:54: fa:7d:5b:b2:4d:0f:c9:2d:f2:82:7a:5f:0b:2f:63: 03:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: CD:D5:5F:3D:78:FC:75:75:3F:F9:C6:C8:26:A7:D8:1A:A5:EB:EE:B7 X509v3 Authority Key Identifier: keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 42.204.0.0/14 103.8.204.0/22 112.128.0.0/14 117.124.0.0/14 150.242.52.0/22 211.89.0.0/16 211.146.0.0/16 211.156.128.0/19 223.160.0.0/14 IPv6: 2403:600::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 7641 146821 146838 Signature Algorithm: sha256WithRSAEncryption 6d:8f:c9:a3:ae:fe:83:a5:48:91:67:21:bc:f5:54:19:c7:c8: c3:d4:f0:62:54:e5:45:4f:6d:3d:17:b2:77:b3:33:ba:0c:39: 72:6a:b3:26:f0:36:9e:81:62:98:5e:d3:db:2f:a9:72:b0:28: 12:9d:64:7b:6e:77:67:f7:27:60:bc:9f:75:8f:36:f5:c2:e3: 9e:02:80:87:ce:67:cd:d1:b5:5f:d9:17:18:95:26:18:16:68: cd:a1:56:6b:4b:65:c5:39:cf:e5:8b:4c:60:41:36:4f:a2:9b: 10:d5:21:4f:da:21:0d:2c:f0:0a:b5:85:27:b9:09:e1:79:14: 31:ef:fe:e4:0e:94:3c:ab:db:a6:4a:de:52:83:fe:1b:f7:ec: 47:ee:b2:29:82:70:03:d7:49:8b:ba:d8:f6:6a:35:c6:bb:bb: 26:56:5e:89:d4:3a:d5:fc:73:c5:a7:0e:b3:17:22:85:33:bb: a9:75:d0:73:5b:27:48:80:fd:fa:95:79:03:33:e5:1e:84:6e: 08:95:fe:c9:be:8e:79:e8:c7:f0:07:95:9d:ee:40:fb:8e:4a: 3d:da:aa:61:5f:6a:d9:67:f4:ad:68:30:a3:63:fb:27:c4:3e: 47:93:f2:00:be:3f:75:af:1e:20:ee:8e:02:e7:a8:27:64:b6: 8c:e8:36:4d -----BEGIN CERTIFICATE----- MIIGBTCCBO2gAwIBAgIUX0zNuRPgu2lW6wnYLwHRAoiTHvYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDExOTEwMTUzOFoX DTI3MDExODEwMjAzOFowMzExMC8GA1UEAxMoQ0RENTVGM0Q3OEZDNzU3NTNGRjlD NkM4MjZBN0Q4MUFBNUVCRUVCNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALlmL+UWg2X93UvGyaiiKybb3B/+dK1JBUL+LqHeAE83zY4z70ANKXJcDAl9 cm240SDxIeBiWwwXsY9LwEac4OmpbFZclw5beEGjCXZrKuJV8+7NWQiFWzWAp486 fmmT/SUqPtH9k+eTkZ/bDsof/N+r9jJ7UCi7jEIjph1yPnmid9a+ULFf0rl3tWnb pXV+3gpAx2nquUHgRSCKQZvrPEVK/0gfblur3Em1TVQjwhHW7AqvMKSXn0s0Xw7Z ZdKWgubaUaIXib96pr23sopUM9HObl1eiUwGUU1VUt83ce9et3XpH8Ni2At5lqf7 pORU+n1bsk0PyS3ygnpfCy9jA9sCAwEAAaOCAvgwggL0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFM3VXz14/HV1P/nGyCan2Bql6+63MB8GA1UdIwQYMBaAFKVu hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTA2NTU3NDU2MDE0Mjc4NjU2MS8wLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDY1NTc0NTYwMTQyNzg2NTYx LzAvQ0RENTVGM0Q3OEZDNzU3NTNGRjlDNkM4MjZBN0Q4MUFBNUVCRUVCNy5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwWAYIKwYBBQUH AQcBAf8ESTBHMDYEAgABMDADAwIqzAMEAmcIzAMDAnCAAwMCdXwDBAKW8jQDAwDT WQMDANOSAwQF05yAAwMC36AwDQQCAAIwBwMFACQDBgAwIwYIKwYBBQUHAQgBAf8E FDASoBAwDgICHdkCAwI9hQIDAj2WMA0GCSqGSIb3DQEBCwUAA4IBAQBtj8mjrv6D pUiRZyG89VQZx8jD1PBiVOVFT209F7J3szO6DDlyarMm8DaegWKYXtPbL6lysCgS nWR7bndn9ydgvJ91jzb1wuOeAoCHzmfN0bVf2RcYlSYYFmjNoVZrS2XFOc/li0xg QTZPopsQ1SFP2iENLPAKtYUnuQnheRQx7/7kDpQ8q9umSt5Sg/4b9+xH7rIpgnAD 10mLutj2ajXGu7smVl6J1DrV/HPFpw6zFyKFM7upddBzWydIgP36lXkDM+UehG4I lf7Jvo556MfwB5Wd7kD7jko92qphX2rZZ/StaDCjY/snxD5Hk/IAvj91rx4g7o4C 56gnZLaM6DZN -----END CERTIFICATE-----Generated at Sun Jan 25 05:57:21 2026 by rpki-client