This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FF4E68ED10AAB07D8F4EEC05FD03457953F937E1.cer File: FF4E68ED10AAB07D8F4EEC05FD03457953F937E1.cer (raw, json) Hash identifier: Z/xwzOiWkk4C2Sajg8rS4k+gwkTT0fBy394xfVvidnQ= Subject key identifier: FF:4E:68:ED:10:AA:B0:7D:8F:4E:EC:05:FD:03:45:79:53:F9:37:E1 Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Certificate serial: 60FF3F9060D28282DA63DFBFC33ACC2AB3710815 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1065588553129590787/0/FF4E68ED10AAB07D8F4EEC05FD03457953F937E1.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1065588553129590787/0/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Mon 19 Jan 2026 11:08:09 +0000 Certificate not after: Mon 18 Jan 2027 11:13:09 +0000 Subordinate resources: IP: 103.20.44.0/22 IP: 114.112.0.0/22 IP: 114.112.14.0/23 IP: 116.196.14.0/23 IP: 182.50.4.0/22 IP: 183.81.172.0/22 IP: 202.69.6.0/23 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 19:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:ff:3f:90:60:d2:82:82:da:63:df:bf:c3:3a:cc:2a:b3:71:08:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Validity Not Before: Jan 19 11:08:09 2026 GMT Not After : Jan 18 11:13:09 2027 GMT Subject: CN=FF4E68ED10AAB07D8F4EEC05FD03457953F937E1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:7d:0d:b9:85:9e:af:81:f3:c0:e6:7f:ec:25: fc:d4:35:59:5f:ec:e5:98:b1:c1:03:b6:46:ba:3c: 18:62:f1:bb:29:57:6a:99:c5:de:f8:d1:bd:e3:74: 64:d4:5b:14:29:bd:f1:12:17:b3:0c:4c:3e:bf:f9: 1f:7b:35:7a:f9:58:39:5d:da:29:67:90:0f:b1:01: d0:5a:b4:41:fe:2d:7d:d7:d2:36:a2:35:89:48:d0: fb:5e:9e:9d:4c:be:0d:a3:1e:a8:f2:96:b0:9b:e1: 3a:b2:f5:e8:4b:be:4a:dd:78:3f:67:08:1d:b4:fe: 1b:ca:85:6d:55:a7:4a:13:8b:a0:e6:bf:fd:53:19: 02:ff:7e:60:c7:57:54:ac:82:c1:e2:d8:30:5d:26: d6:bc:4b:1e:2b:c2:75:a1:0e:3e:7d:73:26:f6:7c: 3a:65:74:92:cc:55:69:29:ae:03:00:d6:c2:de:5e: 6c:f1:b7:8a:ea:2e:b6:27:02:c0:15:f4:03:ad:e4: b2:f1:cd:0e:cd:20:c0:39:d3:f6:cf:01:36:e9:c0: 58:62:77:72:14:b8:8b:db:c1:a8:47:25:2f:93:c2: 4d:70:a9:4d:6d:a0:fb:c7:cd:7e:be:ee:df:b4:6d: fc:53:10:d2:13:c1:01:d8:91:74:34:58:2d:0e:c5: 7a:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: FF:4E:68:ED:10:AA:B0:7D:8F:4E:EC:05:FD:03:45:79:53:F9:37:E1 X509v3 Authority Key Identifier: keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129590787/0/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129590787/0/FF4E68ED10AAB07D8F4EEC05FD03457953F937E1.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.20.44.0/22 114.112.0.0/22 114.112.14.0/23 116.196.14.0/23 182.50.4.0/22 183.81.172.0/22 202.69.6.0/23 Signature Algorithm: sha256WithRSAEncryption 33:36:70:f8:d8:2e:70:6f:df:31:a8:f6:95:38:d4:96:b5:04: 2f:30:9e:28:d4:7f:9f:34:ce:db:77:cb:54:e3:ac:68:80:d4: 66:22:0a:84:1f:ee:3e:3f:eb:a0:1e:09:67:04:9e:67:dc:e9: fd:a1:50:52:fb:23:57:ba:19:15:09:4d:e6:4d:01:b7:49:63: 80:f7:8c:45:fa:c5:83:e6:6e:4f:ff:a2:d0:b9:2a:d7:69:9f: 46:e6:98:dc:c2:6c:ee:bc:bf:e8:06:67:40:e5:a1:fe:86:d1: f3:3c:7a:6c:45:da:92:22:3a:d9:6b:7c:11:54:9f:33:77:e9: 38:38:fc:3e:52:f5:e4:47:cf:4e:a5:12:75:b2:e9:6a:f7:49: 94:d8:bf:29:53:8b:cd:13:ab:d2:91:ae:06:19:f5:1d:04:94: b6:89:6a:98:5e:2b:aa:5c:98:e9:a8:64:6d:bd:95:62:6b:69: 39:2f:46:92:d3:67:47:09:48:36:8f:9e:3e:be:c1:3b:41:9f: dc:e8:75:43:4b:dd:b1:5d:ea:d7:fb:8a:15:da:96:b0:d4:1b: ff:0a:31:ef:aa:32:c2:aa:2b:b8:92:12:a5:57:70:21:05:cf: 80:f9:22:58:95:71:d3:90:09:1e:e6:6e:8c:86:b9:0f:d6:2a: a7:0f:48:3e -----BEGIN CERTIFICATE----- MIIFyzCCBLOgAwIBAgIUYP8/kGDSgoLaY9+/wzrMKrNxCBUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDExOTExMDgwOVoX DTI3MDExODExMTMwOVowMzExMC8GA1UEAxMoRkY0RTY4RUQxMEFBQjA3RDhGNEVF QzA1RkQwMzQ1Nzk1M0Y5MzdFMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAN19DbmFnq+B88Dmf+wl/NQ1WV/s5ZixwQO2Rro8GGLxuylXapnF3vjRveN0 ZNRbFCm98RIXswxMPr/5H3s1evlYOV3aKWeQD7EB0Fq0Qf4tfdfSNqI1iUjQ+16e nUy+DaMeqPKWsJvhOrL16Eu+St14P2cIHbT+G8qFbVWnShOLoOa//VMZAv9+YMdX VKyCweLYMF0m1rxLHivCdaEOPn1zJvZ8OmV0ksxVaSmuAwDWwt5ebPG3iuouticC wBX0A63ksvHNDs0gwDnT9s8BNunAWGJ3chS4i9vBqEclL5PCTXCpTW2g+8fNfr7u 37Rt/FMQ0hPBAdiRdDRYLQ7Fej0CAwEAAaOCAr4wggK6MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFP9OaO0QqrB9j07sBf0DRXlT+TfhMB8GA1UdIwQYMBaAFKVu hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTA2NTU4ODU1MzEyOTU5MDc4Ny8wLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDY1NTg4NTUzMTI5NTkwNzg3 LzAvRkY0RTY4RUQxMEFBQjA3RDhGNEVFQzA1RkQwMzQ1Nzk1M0Y5MzdFMS5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwQwYIKwYBBQUH AQcBAf8ENDAyMDAEAgABMCoDBAJnFCwDBAJycAADBAFycA4DBAF0xA4DBAK2MgQD BAK3UawDBAHKRQYwDQYJKoZIhvcNAQELBQADggEBADM2cPjYLnBv3zGo9pU41Ja1 BC8wnijUf580ztt3y1TjrGiA1GYiCoQf7j4/66AeCWcEnmfc6f2hUFL7I1e6GRUJ TeZNAbdJY4D3jEX6xYPmbk//otC5Ktdpn0bmmNzCbO68v+gGZ0Dlof6G0fM8emxF 2pIiOtlrfBFUnzN36Tg4/D5S9eRHz06lEnWy6Wr3SZTYvylTi80Tq9KRrgYZ9R0E lLaJapheK6pcmOmoZG29lWJraTkvRpLTZ0cJSDaPnj6+wTtBn9zodUNL3bFd6tf7 ihXalrDUG/8KMe+qMsKqK7iSEqVXcCEFz4D5IliVcdOQCR7mboyGuQ/WKqcPSD4= -----END CERTIFICATE-----Generated at Sun Jan 25 05:57:23 2026 by rpki-client