This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.cer File: DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.cer (raw, json) Hash identifier: ARNzlyS4kyVGKrTqm8uK+CD7wftkx1vHObuAtIxUrFM= Subject key identifier: DD:BA:61:6F:96:D9:C2:CD:7F:7C:AB:69:2F:9E:FE:76:66:68:01:38 Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Certificate serial: 4CD2A023657509FE3D2599EFEE7D341857942B22 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1065585649345822722/0/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1065585649345822722/0/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Mon 19 Jan 2026 10:56:47 +0000 Certificate not after: Mon 18 Jan 2027 11:01:47 +0000 Subordinate resources: AS: 151263 IP: 43.226.49.0/24 IP: 43.226.72.0/22 IP: 43.227.68.0/24 IP: 43.227.80.0/20 IP: 103.20.128.0/22 IP: 103.45.128.0/19 IP: 103.65.224.0/23 IP: 103.255.68.0/22 IP: 2401:5c20::/32 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 19:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:d2:a0:23:65:75:09:fe:3d:25:99:ef:ee:7d:34:18:57:94:2b:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Validity Not Before: Jan 19 10:56:47 2026 GMT Not After : Jan 18 11:01:47 2027 GMT Subject: CN=DDBA616F96D9C2CD7F7CAB692F9EFE7666680138 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:c0:ed:3b:17:27:1b:0f:de:ae:43:fb:8d:c5: 5a:1f:1d:5e:3b:5f:dc:0b:7c:dc:6e:1d:c6:d1:bf: 29:0f:14:fa:5b:6e:62:cc:bc:54:b8:61:7f:34:38: ac:52:ea:18:ef:d8:14:54:09:5c:30:96:36:f9:d7: 3c:c2:a4:5e:5c:de:41:7f:f0:34:40:ba:0d:d1:ca: 12:ab:ee:21:e1:ba:d3:dc:40:e9:e4:62:07:e4:41: 39:b7:70:69:8f:4a:dc:9e:d3:89:c0:e7:17:30:56: 1a:71:dc:a1:8f:c9:34:96:e0:b5:27:06:f2:1c:d3: 12:bd:94:40:12:52:b1:92:d3:90:8a:b7:a6:69:97: 12:b5:b1:5d:38:64:1f:49:3c:db:ee:32:c1:5a:8c: 8c:fa:e2:f6:b9:2f:a5:4c:99:2d:43:cf:73:42:f5: 8b:71:98:0f:14:f4:04:dc:8c:00:82:d9:1a:85:5c: cf:30:26:2a:e8:1d:56:29:67:79:ee:9d:c9:b5:5f: e8:57:29:b3:05:da:65:21:2b:88:a8:20:5e:e7:5d: e7:73:ef:37:44:14:80:63:ad:35:ef:31:88:69:ad: b8:62:b1:cd:20:17:82:32:94:40:f9:33:0a:c0:63: 0f:a1:41:02:00:91:ba:55:16:31:06:f1:56:08:06: 5f:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: DD:BA:61:6F:96:D9:C2:CD:7F:7C:AB:69:2F:9E:FE:76:66:68:01:38 X509v3 Authority Key Identifier: keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345822722/0/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345822722/0/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.226.49.0/24 43.226.72.0/22 43.227.68.0/24 43.227.80.0/20 103.20.128.0/22 103.45.128.0/19 103.65.224.0/23 103.255.68.0/22 IPv6: 2401:5c20::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 151263 Signature Algorithm: sha256WithRSAEncryption 87:1d:db:d3:84:2e:1b:0c:d6:7b:c7:42:61:f6:b2:57:2f:18: ce:55:bb:c2:2b:44:7a:f1:9c:54:bd:8d:4a:fb:d4:c0:ba:77: 3a:79:79:ae:12:5d:3a:5b:5b:2e:e0:7e:ff:9f:a0:04:10:9a: 17:b6:80:a3:a0:7d:5b:8f:34:dd:48:fc:2e:ba:34:10:bf:40: e9:8f:39:03:ba:33:5a:b4:5f:d0:6a:c8:ea:16:a9:e3:8b:3c: 97:14:cb:27:00:bd:4f:36:c3:3a:f6:8f:6c:90:ee:30:3e:d4: 6c:be:cf:0a:35:19:d2:30:bc:04:af:c8:fe:fe:e4:08:39:22: 44:91:a5:42:56:8c:e1:bb:9a:e2:7f:2e:01:b5:25:5b:55:88: 8b:7d:ed:4e:a2:53:19:bb:63:5e:c3:48:ec:91:af:82:d4:48: d1:56:e0:25:2c:31:c1:ae:fd:74:55:d0:1d:b9:3e:a0:d3:16: 1a:53:56:bc:88:2d:ab:dc:93:b5:0e:0b:52:7f:db:b5:0c:8b: 56:5e:6f:73:c9:b3:81:41:57:ad:38:67:2e:ae:15:8e:f2:56: 6e:52:21:53:85:ff:79:3f:dc:70:67:82:66:2f:70:15:60:d8: 08:2f:07:3f:b3:5f:bc:ba:15:12:a7:14:18:8c:1b:fd:43:75: d2:38:da:38 -----BEGIN CERTIFICATE----- MIIF/DCCBOSgAwIBAgIUTNKgI2V1Cf49JZnv7n00GFeUKyIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDExOTEwNTY0N1oX DTI3MDExODExMDE0N1owMzExMC8GA1UEAxMoRERCQTYxNkY5NkQ5QzJDRDdGN0NB QjY5MkY5RUZFNzY2NjY4MDEzODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAPTA7TsXJxsP3q5D+43FWh8dXjtf3At83G4dxtG/KQ8U+ltuYsy8VLhhfzQ4 rFLqGO/YFFQJXDCWNvnXPMKkXlzeQX/wNEC6DdHKEqvuIeG609xA6eRiB+RBObdw aY9K3J7TicDnFzBWGnHcoY/JNJbgtScG8hzTEr2UQBJSsZLTkIq3pmmXErWxXThk H0k82+4ywVqMjPri9rkvpUyZLUPPc0L1i3GYDxT0BNyMAILZGoVczzAmKugdViln ee6dybVf6FcpswXaZSEriKggXudd53PvN0QUgGOtNe8xiGmtuGKxzSAXgjKUQPkz CsBjD6FBAgCRulUWMQbxVggGXxUCAwEAAaOCAu8wggLrMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFN26YW+W2cLNf3yraS+e/nZmaAE4MB8GA1UdIwQYMBaAFKVu hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTA2NTU4NTY0OTM0NTgyMjcyMi8wLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDY1NTg1NjQ5MzQ1ODIyNzIy LzAvRERCQTYxNkY5NkQ5QzJDRDdGN0NBQjY5MkY5RUZFNzY2NjY4MDEzOC5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwWAYIKwYBBQUH AQcBAf8ESTBHMDYEAgABMDADBAAr4jEDBAIr4kgDBAAr40QDBAQr41ADBAJnFIAD BAVnLYADBAFnQeADBAJn/0QwDQQCAAIwBwMFACQBXCAwGgYIKwYBBQUHAQgBAf8E CzAJoAcwBQIDAk7fMA0GCSqGSIb3DQEBCwUAA4IBAQCHHdvThC4bDNZ7x0Jh9rJX LxjOVbvCK0R68ZxUvY1K+9TAunc6eXmuEl06W1su4H7/n6AEEJoXtoCjoH1bjzTd SPwuujQQv0DpjzkDujNatF/QasjqFqnjizyXFMsnAL1PNsM69o9skO4wPtRsvs8K NRnSMLwEr8j+/uQIOSJEkaVCVozhu5rify4BtSVbVYiLfe1OolMZu2New0jska+C 1EjRVuAlLDHBrv10VdAduT6g0xYaU1a8iC2r3JO1DgtSf9u1DItWXm9zybOBQVet OGcurhWO8lZuUiFThf95P9xwZ4JmL3AVYNgILwc/s1+8uhUSpxQYjBv9Q3XSONo4 -----END CERTIFICATE-----Generated at Sun Jan 25 05:57:31 2026 by rpki-client