This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FB7B794F123725FE800A647F3F7E8BE99B1F5B2C.cer File: FB7B794F123725FE800A647F3F7E8BE99B1F5B2C.cer (raw, json) Hash identifier: 5T9bEu4XFzl05FtaJbrjSjURINz/Ci6rtTtnLi0vVzw= Subject key identifier: FB:7B:79:4F:12:37:25:FE:80:0A:64:7F:3F:7E:8B:E9:9B:1F:5B:2C Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Certificate serial: 6FCA8F4E4E16207C43D6197DDD6FDA9BC1A29ED9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1065576723372048386/0/FB7B794F123725FE800A647F3F7E8BE99B1F5B2C.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1065576723372048386/0/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Mon 19 Jan 2026 10:22:06 +0000 Certificate not after: Mon 18 Jan 2027 10:27:06 +0000 Subordinate resources: AS: 23771 AS: 45078 IP: 59.153.4.0/22 IP: 103.197.228.0/22 IP: 124.22.0.0/15 IP: 124.47.0.0/18 IP: 182.80.0.0/14 IP: 202.150.16.0/20 IP: 203.152.64.0/19 IP: 210.87.128.0/18 IP: 2405:e600::/32 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 19:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:ca:8f:4e:4e:16:20:7c:43:d6:19:7d:dd:6f:da:9b:c1:a2:9e:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Validity Not Before: Jan 19 10:22:06 2026 GMT Not After : Jan 18 10:27:06 2027 GMT Subject: CN=FB7B794F123725FE800A647F3F7E8BE99B1F5B2C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:d6:ad:ee:ff:fd:2f:ce:ca:4a:1a:b9:a1:33: cc:28:68:ef:1c:31:e3:91:5b:be:0e:9f:b5:55:5e: b9:bf:99:44:fc:0b:47:76:47:06:b3:aa:d5:c9:d3: 83:d5:65:32:c3:32:cc:64:75:22:25:1e:c1:7f:de: 74:9f:b9:91:b8:b4:0d:b4:94:82:5c:56:51:c1:98: dc:ba:f5:7d:41:bc:02:f0:22:67:b4:95:0e:b9:34: 4a:c6:7f:5c:7e:81:0a:0f:f3:48:84:fa:b7:92:3a: 3d:2a:f8:73:f9:cf:db:63:06:13:2d:aa:33:7e:e2: 4d:be:07:d5:3b:3e:34:ff:39:00:e5:bc:ff:a5:ed: 7e:cd:c4:b0:ad:f4:ea:9a:2b:c1:5e:71:d7:24:5c: 9a:36:fc:f4:23:f8:83:24:96:6c:35:6c:7a:ac:12: 71:c4:b9:a9:82:08:48:b5:c8:c1:ad:e4:ce:6f:7a: 0c:75:31:84:84:b7:93:16:91:f8:28:3b:e1:ef:32: 68:15:99:c5:a7:a4:37:9b:0b:36:d8:78:0b:7a:dd: 1d:35:04:0d:b5:58:56:8d:38:84:80:db:47:c5:9a: 1b:9b:d7:3c:60:d4:fa:d3:e3:1c:e1:ad:33:39:06: 3f:fa:eb:0c:b5:c1:32:8f:bd:84:e3:dd:8e:ae:d5: 2f:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: FB:7B:79:4F:12:37:25:FE:80:0A:64:7F:3F:7E:8B:E9:9B:1F:5B:2C X509v3 Authority Key Identifier: keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372048386/0/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372048386/0/FB7B794F123725FE800A647F3F7E8BE99B1F5B2C.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 59.153.4.0/22 103.197.228.0/22 124.22.0.0/15 124.47.0.0/18 182.80.0.0/14 202.150.16.0/20 203.152.64.0/19 210.87.128.0/18 IPv6: 2405:e600::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 23771 45078 Signature Algorithm: sha256WithRSAEncryption 83:93:2c:e2:1e:bb:5d:61:7c:08:52:3e:c1:1b:9b:89:88:b2: 15:58:0b:6c:12:68:50:3b:87:e7:e4:3d:f8:a5:9a:34:a2:19: c5:b8:e3:bd:f9:49:93:39:98:14:03:b4:a7:b7:e7:3f:9b:8e: e1:b9:eb:89:2e:ea:1c:a6:d6:ae:b4:ae:3f:3b:3b:ae:64:1c: d0:64:cf:57:2e:f2:47:8c:63:04:d8:99:5c:64:2f:79:34:6c: 67:be:b9:9f:c5:ae:40:18:b7:08:90:ff:44:6a:ce:a4:e8:a9: aa:82:84:3c:ce:2f:97:09:c1:3c:4e:ce:c8:cd:2a:65:37:fc: c2:a1:ee:c0:1d:0e:03:4c:df:4a:5b:bf:e7:2f:2b:68:e6:b5: 2c:98:20:db:6b:4a:8e:a5:71:62:37:0d:71:98:a2:54:64:ac: 83:6c:7c:a4:a2:58:dd:ae:3c:46:1c:cf:c7:12:56:ff:cc:2f: 8f:39:0b:0a:e8:09:ee:d4:73:ee:95:78:55:16:75:4f:73:13: f1:f6:eb:b6:f8:66:05:85:39:43:f8:98:17:95:3a:4e:ef:56: 13:85:ad:a8:62:3c:e3:6b:b6:ee:19:36:bd:2b:b3:83:f2:75: 57:e6:7a:3f:0a:8d:22:19:7c:db:e4:80:a4:0b:dc:7e:fe:01: 99:b1:66:59 -----BEGIN CERTIFICATE----- MIIF/jCCBOagAwIBAgIUb8qPTk4WIHxD1hl93W/am8GintkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDExOTEwMjIwNloX DTI3MDExODEwMjcwNlowMzExMC8GA1UEAxMoRkI3Qjc5NEYxMjM3MjVGRTgwMEE2 NDdGM0Y3RThCRTk5QjFGNUIyQzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAK7Wre7//S/OykoauaEzzCho7xwx45Fbvg6ftVVeub+ZRPwLR3ZHBrOq1cnT g9VlMsMyzGR1IiUewX/edJ+5kbi0DbSUglxWUcGY3Lr1fUG8AvAiZ7SVDrk0SsZ/ XH6BCg/zSIT6t5I6PSr4c/nP22MGEy2qM37iTb4H1Ts+NP85AOW8/6Xtfs3EsK30 6porwV5x1yRcmjb89CP4gySWbDVseqwSccS5qYIISLXIwa3kzm96DHUxhIS3kxaR +Cg74e8yaBWZxaekN5sLNth4C3rdHTUEDbVYVo04hIDbR8WaG5vXPGDU+tPjHOGt MzkGP/rrDLXBMo+9hOPdjq7VLxMCAwEAAaOCAvEwggLtMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFPt7eU8SNyX+gApkfz9+i+mbH1ssMB8GA1UdIwQYMBaAFKVu hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTA2NTU3NjcyMzM3MjA0ODM4Ni8wLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDY1NTc2NzIzMzcyMDQ4Mzg2 LzAvRkI3Qjc5NEYxMjM3MjVGRTgwMEE2NDdGM0Y3RThCRTk5QjFGNUIyQy5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwVgYIKwYBBQUH AQcBAf8ERzBFMDQEAgABMC4DBAI7mQQDBAJnxeQDAwF8FgMEBnwvAAMDArZQAwQE ypYQAwQFy5hAAwQG0leAMA0EAgACMAcDBQAkBeYAMB4GCCsGAQUFBwEIAQH/BA8w DaALMAkCAlzbAgMAsBYwDQYJKoZIhvcNAQELBQADggEBAIOTLOIeu11hfAhSPsEb m4mIshVYC2wSaFA7h+fkPfilmjSiGcW44735SZM5mBQDtKe35z+bjuG564ku6hym 1q60rj87O65kHNBkz1cu8keMYwTYmVxkL3k0bGe+uZ/FrkAYtwiQ/0RqzqToqaqC hDzOL5cJwTxOzsjNKmU3/MKh7sAdDgNM30pbv+cvK2jmtSyYINtrSo6lcWI3DXGY olRkrINsfKSiWN2uPEYcz8cSVv/ML485CwroCe7Uc+6VeFUWdU9zE/H267b4ZgWF OUP4mBeVOk7vVhOFrahiPONrtu4ZNr0rs4PydVfmej8KjSIZfNvkgKQL3H7+AZmx Zlk= -----END CERTIFICATE-----Generated at Sun Jan 25 05:57:53 2026 by rpki-client