This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D35F90D8A73FFC160A310A96BC00BEAB7DA2911D.cer File: D35F90D8A73FFC160A310A96BC00BEAB7DA2911D.cer (raw, json) Hash identifier: K0Z8OU1ju/uYShh/ZWJQhrCntklKmdIkAgpKbygOXw8= Subject key identifier: D3:5F:90:D8:A7:3F:FC:16:0A:31:0A:96:BC:00:BE:AB:7D:A2:91:1D Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Certificate serial: 74D2A70C173D913E7B372269E54E3F2397D5DDA5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1065585911217324035/0/D35F90D8A73FFC160A310A96BC00BEAB7DA2911D.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1065585911217324035/0/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Mon 19 Jan 2026 10:54:26 +0000 Certificate not after: Mon 18 Jan 2027 10:59:26 +0000 Subordinate resources: AS: 146761 -- 146762 IP: 103.2.156.0/22 IP: 103.183.26.0/23 IP: 114.111.176.0/20 IP: 2400:5f60::/32 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 19:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:d2:a7:0c:17:3d:91:3e:7b:37:22:69:e5:4e:3f:23:97:d5:dd:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Validity Not Before: Jan 19 10:54:26 2026 GMT Not After : Jan 18 10:59:26 2027 GMT Subject: CN=D35F90D8A73FFC160A310A96BC00BEAB7DA2911D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:23:39:46:2f:73:80:f6:45:45:d9:76:56:7c: 5f:e3:4b:ac:43:3c:a2:85:15:03:f3:c7:c0:73:cd: bf:08:95:17:91:cf:bb:a3:84:b7:69:e2:67:39:a0: 47:71:43:e7:c4:f5:ae:ab:e1:a2:09:07:83:50:be: ce:3b:a3:6c:3b:a1:41:f2:d3:4e:2b:05:80:52:36: 70:91:cd:b0:82:7d:2b:fb:9d:e0:6b:25:9e:63:65: de:da:d3:18:13:ba:88:f1:21:9e:60:85:c8:6a:d5: 7b:0b:5f:5d:8a:dc:c0:c7:fe:95:71:a1:a0:2a:72: b3:49:f9:4b:47:97:77:1c:fe:92:a7:ce:5a:1c:fb: 5d:36:20:83:0e:45:c7:c5:ac:07:49:81:fe:5d:8d: 56:cf:81:fc:ce:30:73:b1:f5:6f:e0:0d:47:05:3b: af:43:90:7d:7c:95:92:6f:9a:4d:67:ed:e6:eb:08: 65:1c:e6:19:50:cd:b5:8c:66:c2:2d:63:e0:2d:d4: 10:b8:a5:2d:88:1d:bb:0f:64:13:f0:a7:d7:1c:19: f1:f4:48:d6:1e:26:01:c6:83:24:f9:50:95:f3:2d: 3c:24:e3:3f:8f:d2:ca:b9:31:40:6c:c0:42:40:b2: 23:10:4f:1c:ac:95:f2:da:4a:e4:4f:e2:56:d7:a8: 26:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: D3:5F:90:D8:A7:3F:FC:16:0A:31:0A:96:BC:00:BE:AB:7D:A2:91:1D X509v3 Authority Key Identifier: keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217324035/0/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217324035/0/D35F90D8A73FFC160A310A96BC00BEAB7DA2911D.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.2.156.0/22 103.183.26.0/23 114.111.176.0/20 IPv6: 2400:5f60::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 146761-146762 Signature Algorithm: sha256WithRSAEncryption 22:58:d5:70:86:f6:c6:03:37:ac:b1:e7:52:c1:17:98:81:19: f0:8e:05:1e:a1:97:69:57:9e:66:3c:1d:f3:e2:a9:5b:bc:1e: 11:76:15:91:2d:9a:c9:b1:1e:43:e2:0b:2a:c3:da:12:d5:1b: 13:50:0c:d5:39:eb:14:6b:69:28:89:f2:4e:b2:d5:84:ed:97: ff:ea:6a:c2:90:ab:88:13:6f:12:8e:71:cc:56:ff:a1:25:f7: 14:62:f0:69:81:9e:34:16:c3:78:bd:02:83:af:fd:9a:96:ea: fd:7e:d0:6f:38:cf:16:9e:4d:ba:4e:2c:88:8d:62:f6:c6:2e: 27:bf:44:99:89:0a:17:96:86:7d:d5:13:94:86:fa:43:b9:38: a6:34:c9:32:4b:f0:33:30:7b:4a:79:ac:ea:6a:e1:8b:31:24: 4c:e1:92:1a:84:dc:5e:1a:da:d3:42:ef:c5:ac:ab:7d:94:10: e4:f5:f9:f4:16:58:bb:b7:4b:74:18:e9:79:d8:6a:d8:0f:7e: 1c:f4:04:ae:54:62:8c:63:e5:43:b2:b7:9b:d8:7f:79:79:31: 76:4b:59:fe:33:b1:88:38:0c:f1:3c:21:44:b1:50:04:87:f0: 98:38:ff:57:1f:e5:ee:fc:75:3f:d0:75:fd:30:b3:d8:c5:98: 4c:d8:97:39 -----BEGIN CERTIFICATE----- MIIF5TCCBM2gAwIBAgIUdNKnDBc9kT57NyJp5U4/I5fV3aUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDExOTEwNTQyNloX DTI3MDExODEwNTkyNlowMzExMC8GA1UEAxMoRDM1RjkwRDhBNzNGRkMxNjBBMzEw QTk2QkMwMEJFQUI3REEyOTExRDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALgjOUYvc4D2RUXZdlZ8X+NLrEM8ooUVA/PHwHPNvwiVF5HPu6OEt2niZzmg R3FD58T1rqvhogkHg1C+zjujbDuhQfLTTisFgFI2cJHNsIJ9K/ud4GslnmNl3trT GBO6iPEhnmCFyGrVewtfXYrcwMf+lXGhoCpys0n5S0eXdxz+kqfOWhz7XTYggw5F x8WsB0mB/l2NVs+B/M4wc7H1b+ANRwU7r0OQfXyVkm+aTWft5usIZRzmGVDNtYxm wi1j4C3UELilLYgduw9kE/Cn1xwZ8fRI1h4mAcaDJPlQlfMtPCTjP4/SyrkxQGzA QkCyIxBPHKyV8tpK5E/iVteoJjECAwEAAaOCAtgwggLUMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFNNfkNinP/wWCjEKlrwAvqt9opEdMB8GA1UdIwQYMBaAFKVu hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTA2NTU4NTkxMTIxNzMyNDAzNS8wLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDY1NTg1OTExMjE3MzI0MDM1 LzAvRDM1RjkwRDhBNzNGRkMxNjBBMzEwQTk2QkMwMEJFQUI3REEyOTExRC5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwOgYIKwYBBQUH AQcBAf8EKzApMBgEAgABMBIDBAJnApwDBAFntxoDBARyb7AwDQQCAAIwBwMFACQA X2AwIQYIKwYBBQUHAQgBAf8EEjAQoA4wDDAKAgMCPUkCAwI9SjANBgkqhkiG9w0B AQsFAAOCAQEAIljVcIb2xgM3rLHnUsEXmIEZ8I4FHqGXaVeeZjwd8+KpW7weEXYV kS2aybEeQ+ILKsPaEtUbE1AM1TnrFGtpKInyTrLVhO2X/+pqwpCriBNvEo5xzFb/ oSX3FGLwaYGeNBbDeL0Cg6/9mpbq/X7QbzjPFp5Nuk4siI1i9sYuJ79EmYkKF5aG fdUTlIb6Q7k4pjTJMkvwMzB7Snms6mrhizEkTOGSGoTcXhra00LvxayrfZQQ5PX5 9BZYu7dLdBjpedhq2A9+HPQErlRijGPlQ7K3m9h/eXkxdktZ/jOxiDgM8TwhRLFQ BIfwmDj/Vx/l7vx1P9B1/TCz2MWYTNiXOQ== -----END CERTIFICATE-----Generated at Sun Jan 25 05:57:00 2026 by rpki-client