This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DE4AF5E551F820212884173F2ABBB1665D92F03C.cer File: DE4AF5E551F820212884173F2ABBB1665D92F03C.cer (raw, json) Hash identifier: 7bjmel3klL+Z+12yh5FYKmBKSRkRpMDgrsaLnBSNnHw= Subject key identifier: DE:4A:F5:E5:51:F8:20:21:28:84:17:3F:2A:BB:B1:66:5D:92:F0:3C Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Certificate serial: 082885E4954B523B19C90FCA125E48E92BB09303 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1065585911217127427/0/DE4AF5E551F820212884173F2ABBB1665D92F03C.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1065585911217127427/0/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Mon 19 Jan 2026 10:53:34 +0000 Certificate not after: Mon 18 Jan 2027 10:58:34 +0000 Subordinate resources: AS: 63666 IP: 103.164.76.0/23 IP: 103.228.12.0/22 IP: 110.40.17.0 -- 110.40.127.255 IP: 2407:3740::/32 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 19:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:28:85:e4:95:4b:52:3b:19:c9:0f:ca:12:5e:48:e9:2b:b0:93:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Validity Not Before: Jan 19 10:53:34 2026 GMT Not After : Jan 18 10:58:34 2027 GMT Subject: CN=DE4AF5E551F820212884173F2ABBB1665D92F03C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:05:1d:8f:5c:f6:7d:f5:f2:1f:c7:e8:12:ba: c1:87:b7:14:24:8f:12:f1:b7:b0:f4:73:75:5e:e5: 22:43:8b:5d:8c:9a:95:96:1b:55:62:c0:f0:da:94: 95:51:3e:d1:7d:45:b1:94:97:f0:0a:44:a8:29:e7: 32:cc:40:6e:78:9c:16:ab:f1:89:ea:7f:64:fa:9d: 1f:91:41:fd:f4:62:6e:db:b6:90:8e:86:f1:bb:6a: 60:cc:c9:18:db:9e:40:cd:be:22:e1:ad:29:53:ca: 7f:12:15:8e:e8:a3:2b:59:5a:a1:cc:4f:61:0a:ae: 9f:29:22:68:99:64:bc:37:3d:ba:14:b9:17:e7:5e: 85:66:93:46:2d:63:68:fb:93:c2:3c:ce:91:40:70: 47:1b:e5:e6:70:5d:95:56:e4:e9:96:e4:05:41:6d: 72:0d:c1:6f:55:e6:03:a6:ff:22:a3:8e:a8:d5:ba: 60:e7:b7:3b:16:42:eb:1f:0b:1e:2a:bb:6c:76:fe: 5b:13:9a:0d:7b:fc:c3:3a:22:3f:71:c7:d3:3e:71: a3:9a:0f:e9:29:d8:9d:36:83:ab:09:6c:af:79:37: db:0d:d8:11:e8:4e:fb:3e:a6:5c:68:1c:d1:09:58: 0a:86:51:de:d8:36:6b:b6:f1:13:4c:a9:0a:a3:52: 67:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: DE:4A:F5:E5:51:F8:20:21:28:84:17:3F:2A:BB:B1:66:5D:92:F0:3C X509v3 Authority Key Identifier: keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217127427/0/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217127427/0/DE4AF5E551F820212884173F2ABBB1665D92F03C.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.164.76.0/23 103.228.12.0/22 110.40.17.0-110.40.127.255 IPv6: 2407:3740::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 63666 Signature Algorithm: sha256WithRSAEncryption 3e:6b:11:29:68:bf:a1:19:03:98:e3:09:79:43:17:ca:75:97: 93:6b:9a:d7:cd:a8:79:6d:af:56:3b:10:d2:04:75:0b:c2:e5: 1c:09:81:74:8d:f8:7d:1f:f3:0e:bb:a0:21:8c:21:95:e2:6a: 69:23:47:ee:b5:57:bb:2b:a6:8a:d0:b2:d0:2c:63:b7:bc:7f: bd:98:e4:7b:8b:c7:c4:15:22:ef:dd:da:49:35:87:a8:58:33: 7f:d5:57:99:dc:3c:79:23:ba:bb:b8:ae:54:c4:ae:61:84:73: b8:b1:28:0c:dc:15:06:78:98:64:b4:3c:ea:c1:4e:72:30:b9: 0a:b7:07:60:f7:19:ca:b7:75:7a:77:36:22:61:11:a4:16:d9: cb:68:3c:d1:5f:7e:93:b8:e0:88:85:67:37:c2:03:91:6a:7e: f2:30:d5:41:a7:d8:2f:5d:af:32:db:32:12:33:af:5b:b5:52: 3c:68:2a:ac:1c:2c:7e:ab:0f:b9:c2:89:73:c5:74:24:6a:c6: 8d:bd:c8:4a:bd:7e:6d:b1:fd:60:4b:59:1f:13:74:91:69:7a: 69:70:ee:bf:7f:d3:74:60:d1:e8:77:53:0d:ae:d0:f0:2a:21: be:50:ad:10:43:36:db:12:24:4d:0d:06:44:4f:1d:b7:0b:64: fc:5c:63:7d -----BEGIN CERTIFICATE----- MIIF5jCCBM6gAwIBAgIUCCiF5JVLUjsZyQ/KEl5I6SuwkwMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDExOTEwNTMzNFoX DTI3MDExODEwNTgzNFowMzExMC8GA1UEAxMoREU0QUY1RTU1MUY4MjAyMTI4ODQx NzNGMkFCQkIxNjY1RDkyRjAzQzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKsFHY9c9n318h/H6BK6wYe3FCSPEvG3sPRzdV7lIkOLXYyalZYbVWLA8NqU lVE+0X1FsZSX8ApEqCnnMsxAbnicFqvxiep/ZPqdH5FB/fRibtu2kI6G8btqYMzJ GNueQM2+IuGtKVPKfxIVjuijK1laocxPYQqunykiaJlkvDc9uhS5F+dehWaTRi1j aPuTwjzOkUBwRxvl5nBdlVbk6ZbkBUFtcg3Bb1XmA6b/IqOOqNW6YOe3OxZC6x8L Hiq7bHb+WxOaDXv8wzoiP3HH0z5xo5oP6SnYnTaDqwlsr3k32w3YEehO+z6mXGgc 0QlYCoZR3tg2a7bxE0ypCqNSZ3cCAwEAAaOCAtkwggLVMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFN5K9eVR+CAhKIQXPyq7sWZdkvA8MB8GA1UdIwQYMBaAFKVu hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTA2NTU4NTkxMTIxNzEyNzQyNy8wLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDY1NTg1OTExMjE3MTI3NDI3 LzAvREU0QUY1RTU1MUY4MjAyMTI4ODQxNzNGMkFCQkIxNjY1RDkyRjAzQy5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwQgYIKwYBBQUH AQcBAf8EMzAxMCAEAgABMBoDBAFnpEwDBAJn5AwwDAMEAG4oEQMEB24oADANBAIA AjAHAwUAJAc3QDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMA+LIwDQYJKoZIhvcN AQELBQADggEBAD5rESlov6EZA5jjCXlDF8p1l5NrmtfNqHltr1Y7ENIEdQvC5RwJ gXSN+H0f8w67oCGMIZXiamkjR+61V7srporQstAsY7e8f72Y5HuLx8QVIu/d2kk1 h6hYM3/VV5ncPHkjuru4rlTErmGEc7ixKAzcFQZ4mGS0POrBTnIwuQq3B2D3Gcq3 dXp3NiJhEaQW2ctoPNFffpO44IiFZzfCA5FqfvIw1UGn2C9drzLbMhIzr1u1Ujxo KqwcLH6rD7nCiXPFdCRqxo29yEq9fm2x/WBLWR8TdJFpemlw7r9/03Rg0eh3Uw2u 0PAqIb5QrRBDNtsSJE0NBkRPHbcLZPxcY30= -----END CERTIFICATE-----Generated at Sun Jan 25 11:11:42 2026 by rpki-client