This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.cer File: CF214CDEDC584B3B010FC3A6D0D3DB897219B594.cer (raw, json) Hash identifier: DHJF1mTbH0AnzIPEwQINGIqGU2cj2ZJYvLWz90LnL+Q= Subject key identifier: CF:21:4C:DE:DC:58:4B:3B:01:0F:C3:A6:D0:D3:DB:89:72:19:B5:94 Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Certificate serial: 34F250E32262AC9812D7D3E0176660CC01780940 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1065574560142852097/0/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1065574560142852097/0/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Mon 19 Jan 2026 10:15:54 +0000 Certificate not after: Mon 18 Jan 2027 10:20:54 +0000 Subordinate resources: AS: 17429 IP: 1.88.0.0/14 IP: 43.247.236.0/22 IP: 58.30.0.0/15 IP: 101.240.0.0/14 IP: 103.238.48.0/22 IP: 180.77.0.0 -- 180.79.255.255 IP: 211.99.128.0/19 IP: 218.246.96.0/19 IP: 219.236.0.0/15 IP: 2403:4300::/32 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 19:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:f2:50:e3:22:62:ac:98:12:d7:d3:e0:17:66:60:cc:01:78:09:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Validity Not Before: Jan 19 10:15:54 2026 GMT Not After : Jan 18 10:20:54 2027 GMT Subject: CN=CF214CDEDC584B3B010FC3A6D0D3DB897219B594 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:3c:a2:9b:d7:db:c1:bf:31:8d:ab:66:a1:81: 03:fc:04:51:ec:c6:b1:be:17:53:c1:fb:78:bb:b7: bf:16:05:fc:9e:42:20:6e:a2:cf:ec:99:1b:1e:39: 34:d9:d4:cc:f3:8f:5a:64:73:b6:53:e9:4b:61:14: f1:a6:95:10:2a:e4:90:3e:1c:e9:32:a8:d5:d3:59: bf:60:05:15:79:96:7e:cf:ed:46:d1:a4:25:f8:58: 57:bd:14:57:97:59:a8:81:d7:42:c6:8e:13:c4:79: b7:1e:3d:6a:d6:8e:52:25:77:38:8b:60:a3:77:f3: 8a:f0:99:86:82:6e:de:e3:18:91:cd:39:7c:54:9c: d4:1b:42:d9:f8:89:25:45:c5:1d:09:67:7c:d7:3f: 67:46:c4:53:77:62:fc:02:a6:2f:d9:d6:29:23:9a: 05:63:56:af:aa:64:ab:c4:cf:08:20:66:c3:96:79: b0:b1:f0:f6:04:2f:f1:82:d8:4b:2d:14:82:d2:9f: 3c:56:5d:b6:a2:59:3a:43:eb:ea:46:a8:8d:1b:50: d4:f7:20:71:34:b6:e1:cb:ac:e8:75:a5:bf:42:0d: 71:ea:4f:67:f9:2e:f8:3a:1f:34:9f:88:f1:6e:07: 2f:bf:bb:28:cc:d2:df:cf:78:46:15:c2:19:f7:70: 67:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: CF:21:4C:DE:DC:58:4B:3B:01:0F:C3:A6:D0:D3:DB:89:72:19:B5:94 X509v3 Authority Key Identifier: keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1065574560142852097/0/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1065574560142852097/0/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 1.88.0.0/14 43.247.236.0/22 58.30.0.0/15 101.240.0.0/14 103.238.48.0/22 180.77.0.0-180.79.255.255 211.99.128.0/19 218.246.96.0/19 219.236.0.0/15 IPv6: 2403:4300::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 17429 Signature Algorithm: sha256WithRSAEncryption 8c:86:7c:42:86:8d:df:e0:a3:bf:55:a4:f6:c5:cc:b2:69:54: 78:d9:dc:ff:9d:85:e0:52:9d:44:0f:3d:6d:ce:c6:08:34:61: 60:98:8a:11:f3:fa:2c:77:52:96:03:35:ab:4a:bb:51:fc:b5: 1a:81:a1:4f:1f:6e:e4:39:c3:e8:9e:34:f4:e4:4f:ff:9b:27: e3:cf:37:89:c1:79:04:37:a5:bc:55:00:b5:d5:c7:c4:7a:a7: 90:1e:71:db:32:6f:b6:bd:a7:7f:a1:e6:39:7e:d5:7c:7e:f2: 87:c9:17:c0:4f:f7:02:a0:30:4d:f8:cf:95:58:e3:3b:dc:b8: aa:00:f4:2d:7f:31:f9:1c:11:e8:d6:ea:e2:47:cb:22:f8:9c: 35:fd:12:d1:b7:a2:99:84:74:e8:f8:cb:ed:a5:d0:bd:9a:3c: b8:09:b2:5a:b0:3c:3f:45:47:b6:1c:c2:90:35:d7:c0:3e:70: 11:a5:ef:0f:5a:58:47:19:97:04:a2:c8:51:2d:31:12:f8:e5: c8:e3:44:c3:d7:fe:63:0d:fa:60:b6:e8:e6:78:cf:18:a2:5d: 16:bf:7b:ac:c6:c4:14:4a:25:3b:48:7c:f7:6f:17:7d:c9:4c: 06:e7:19:5c:33:39:09:b2:07:f9:08:1c:16:86:34:fd:55:f4: 2e:8b:63:04 -----BEGIN CERTIFICATE----- MIIGAzCCBOugAwIBAgIUNPJQ4yJirJgS19PgF2ZgzAF4CUAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDExOTEwMTU1NFoX DTI3MDExODEwMjA1NFowMzExMC8GA1UEAxMoQ0YyMTRDREVEQzU4NEIzQjAxMEZD M0E2RDBEM0RCODk3MjE5QjU5NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMI8opvX28G/MY2rZqGBA/wEUezGsb4XU8H7eLu3vxYF/J5CIG6iz+yZGx45 NNnUzPOPWmRztlPpS2EU8aaVECrkkD4c6TKo1dNZv2AFFXmWfs/tRtGkJfhYV70U V5dZqIHXQsaOE8R5tx49ataOUiV3OItgo3fzivCZhoJu3uMYkc05fFSc1BtC2fiJ JUXFHQlnfNc/Z0bEU3di/AKmL9nWKSOaBWNWr6pkq8TPCCBmw5Z5sLHw9gQv8YLY Sy0UgtKfPFZdtqJZOkPr6kaojRtQ1PcgcTS24cus6HWlv0INcepPZ/ku+DofNJ+I 8W4HL7+7KMzS3894RhXCGfdwZ+8CAwEAAaOCAvYwggLyMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFM8hTN7cWEs7AQ/DptDT24lyGbWUMB8GA1UdIwQYMBaAFKVu hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTA2NTU3NDU2MDE0Mjg1MjA5Ny8wLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDY1NTc0NTYwMTQyODUyMDk3 LzAvQ0YyMTRDREVEQzU4NEIzQjAxMEZDM0E2RDBEM0RCODk3MjE5QjU5NC5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwYAYIKwYBBQUH AQcBAf8EUTBPMD4EAgABMDgDAwIBWAMEAiv37AMDAToeAwMCZfADBAJn7jAwCgMD ALRNAwMEtEADBAXTY4ADBAXa9mADAwHb7DANBAIAAjAHAwUAJANDADAZBggrBgEF BQcBCAEB/wQKMAigBjAEAgJEFTANBgkqhkiG9w0BAQsFAAOCAQEAjIZ8QoaN3+Cj v1Wk9sXMsmlUeNnc/52F4FKdRA89bc7GCDRhYJiKEfP6LHdSlgM1q0q7Ufy1GoGh Tx9u5DnD6J409ORP/5sn4883icF5BDelvFUAtdXHxHqnkB5x2zJvtr2nf6HmOX7V fH7yh8kXwE/3AqAwTfjPlVjjO9y4qgD0LX8x+RwR6Nbq4kfLIvicNf0S0beimYR0 6PjL7aXQvZo8uAmyWrA8P0VHthzCkDXXwD5wEaXvD1pYRxmXBKLIUS0xEvjlyONE w9f+Yw36YLbo5njPGKJdFr97rMbEFEolO0h8928XfclMBucZXDM5CbIH+QgcFoY0 /VX0LotjBA== -----END CERTIFICATE-----Generated at Sun Jan 25 05:56:57 2026 by rpki-client