This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/h7UUZ1Sf_FoCJgnbq5YZddH7pLM.cer File: h7UUZ1Sf_FoCJgnbq5YZddH7pLM.cer (raw, json) Hash identifier: LngnLWv3YChY3MHxqy84YpYTb0R22XJoe8pI39H6YW0= Subject key identifier: 87:B5:14:67:54:9F:FC:5A:02:26:09:DB:AB:96:19:75:D1:FB:A4:B3 Authority key identifier: 0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8 Certificate issuer: /CN=A90DC5BE/serialNumber=0CFCE77857FCF01F39D99A62B4AA62E6159E76F8 Certificate serial: 4EFA Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/2/87B51467549FFC5A022609DBAB961975D1FBA4B3.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/2/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Thu 25 Dec 2025 05:26:57 +0000 Certificate not after: Thu 30 Sep 2027 00:00:00 +0000 Subordinate resources: IP: 57.176.0.0/15 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 06 Jan 2026 14:50:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20218 (0x4efa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0CFCE77857FCF01F39D99A62B4AA62E6159E76F8 Validity Not Before: Dec 25 05:26:57 2025 GMT Not After : Sep 30 00:00:00 2027 GMT Subject: CN=A9162E3D0001, serialNumber=87B51467549FFC5A022609DBAB961975D1FBA4B3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:3f:f0:52:f1:cb:fe:fc:5c:68:d4:5d:59:52: ab:0b:e1:d0:b2:f3:19:a3:f9:5e:73:e0:50:9c:05: ba:81:32:79:83:55:2d:f0:34:3e:7a:84:52:c3:25: be:75:dd:eb:69:3d:31:ef:6c:56:04:16:9c:a1:d7: 0d:6b:27:97:89:4c:90:55:1d:50:ec:55:7d:26:c8: 72:58:5b:53:4a:84:1f:fc:6c:d2:11:00:e3:04:a1: af:49:0f:fe:31:0c:60:02:4d:ec:33:1e:69:5b:fb: 2c:80:a2:53:8e:1f:28:35:fb:84:5f:d5:22:1c:fc: 9d:94:9e:b8:25:46:c4:d0:7e:bc:ef:e0:81:d9:51: 5c:66:23:2b:5c:a6:d7:2c:74:f7:0b:4f:a2:b1:60: 81:80:2c:2e:57:2b:bd:a3:f6:6d:a7:71:27:88:dc: 54:6c:b7:04:bc:e8:3f:a2:be:73:e1:e1:1c:e5:af: 1e:be:d5:a8:f0:20:0c:3f:b9:93:37:3b:4b:19:d7: 8d:fb:b9:7e:20:bf:24:78:94:ed:36:4d:ac:ef:f6: 45:e3:88:f9:e3:6f:ef:87:f1:cb:44:34:f8:c6:55: 27:74:bb:b1:a3:a8:d5:00:cc:d6:d3:fe:7d:8d:7e: 0a:71:69:62:84:4d:d0:cd:25:3d:1b:ed:c1:90:02: 18:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:B5:14:67:54:9F:FC:5A:02:26:09:DB:AB:96:19:75:D1:FB:A4:B3 X509v3 Authority Key Identifier: keyid:0C:FC:E7:78:57:FC:F0:1F:39:D9:9A:62:B4:AA:62:E6:15:9E:76:F8 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/2/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/2/87B51467549FFC5A022609DBAB961975D1FBA4B3.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml sbgp-ipAddrBlock: critical IPv4: 57.176.0.0/15 Signature Algorithm: sha256WithRSAEncryption 6d:42:1b:35:d0:5e:a6:d3:68:31:06:2d:d8:60:13:d7:4a:7c: 42:36:55:f8:8b:fd:77:a1:c8:b5:25:24:09:86:83:50:b4:f0: 8f:7c:ca:ac:af:bc:a1:5d:99:a8:99:ba:3d:62:84:59:6e:a3: e9:67:cb:33:4d:3f:80:38:af:72:69:75:71:9b:95:30:c3:0a: 1f:7e:71:34:d9:ff:05:9e:5c:9d:98:72:07:c7:38:43:4c:76: f4:97:43:a9:88:7f:57:b5:dd:6c:55:73:02:9a:d0:78:8b:e3: da:0c:4d:ea:a7:9c:65:87:31:6a:ad:f9:5a:0e:5f:92:5a:a5: 0c:02:21:e5:31:36:10:eb:37:2d:c4:7b:78:e7:7c:04:8b:61: 8f:bc:0c:ae:09:e5:d5:76:5f:c5:ff:c0:87:c9:71:ca:b7:d6: 0a:cc:96:ba:c1:0a:06:cb:91:b4:64:9f:9d:25:52:77:a4:a3: 89:f5:9e:1c:41:ae:5c:f4:58:a1:a0:fc:1b:36:f1:4e:4c:58: 2b:7a:4f:1b:bc:23:e3:a4:a3:cf:f9:2e:f7:2c:c3:4c:92:ea: 7a:86:6d:00:12:33:0d:77:47:5f:f2:1c:ba:1d:36:dc:59:38: df:17:64:a1:b1:34:db:9e:9b:a1:35:33:e5:16:67:27:1c:1c: 1b:65:50:a9 -----BEGIN CERTIFICATE----- MIIF2TCCBMGgAwIBAgICTvowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkw REM1QkUxMTAvBgNVBAUTKDBDRkNFNzc4NTdGQ0YwMUYzOUQ5OUE2MkI0QUE2MkU2 MTU5RTc2RjgwHhcNMjUxMjI1MDUyNjU3WhcNMjcwOTMwMDAwMDAwWjBKMRUwEwYD VQQDDAxBOTE2MkUzRDAwMDExMTAvBgNVBAUTKDg3QjUxNDY3NTQ5RkZDNUEwMjI2 MDlEQkFCOTYxOTc1RDFGQkE0QjMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQCyP/BS8cv+/Fxo1F1ZUqsL4dCy8xmj+V5z4FCcBbqBMnmDVS3wND56hFLD Jb513etpPTHvbFYEFpyh1w1rJ5eJTJBVHVDsVX0myHJYW1NKhB/8bNIRAOMEoa9J D/4xDGACTewzHmlb+yyAolOOHyg1+4Rf1SIc/J2UnrglRsTQfrzv4IHZUVxmIytc ptcsdPcLT6KxYIGALC5XK72j9m2ncSeI3FRstwS86D+ivnPh4Rzlrx6+1ajwIAw/ uZM3O0sZ1437uX4gvyR4lO02Tazv9kXjiPnjb++H8ctENPjGVSd0u7GjqNUAzNbT /n2NfgpxaWKETdDNJT0b7cGQAhg3AgMBAAGjggLLMIICxzAdBgNVHQ4EFgQUh7UU Z1Sf/FoCJgnbq5YZddH7pLMwHwYDVR0jBBgwFoAUDPzneFf88B852ZpitKpi5hWe dvgwDgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBo oGagZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0 MUQ2NjExRTJBM0YyN0Y3QzcyRkQxRkYyL0RQem5lRmY4OEI4NTJacGl0S3BpNWhX ZWR2Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jw a2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUy MUE0RjRGQjQvRFB6bmVGZjg4Qjg1MlpwaXRLcGk1aFdlZHZnLmNlcjBKBgNVHSAB Af8EQDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFw bmljLm5ldC9SUEtJL0NQUy5wZGYwggEBBggrBgEFBQcBCwSB9DCB8TBCBggrBgEF BQcwBYY2cnN5bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1 MDkwNjc1NzE1LzIvMG4GCCsGAQUFBzAKhmJyc3luYzovL3Jwa2ktcnBzLmNubmlj LmNuL3JlcG8vQTEwNTUzOTA3NzUwOTA2NzU3MTUvMi84N0I1MTQ2NzU0OUZGQzVB MDIyNjA5REJBQjk2MTk3NUQxRkJBNEIzLm1mdDA7BggrBgEFBQcwDYYvaHR0cHM6 Ly9ycmRwLXJwcy5jbm5pYy5jbi9ycmRwL25vdGlmaWNhdGlvbi54bWwwHgYIKwYB BQUHAQcBAf8EDzANMAsEAgABMAUDAwE5sDANBgkqhkiG9w0BAQsFAAOCAQEAbUIb NdBeptNoMQYt2GAT10p8QjZV+Iv9d6HItSUkCYaDULTwj3zKrK+8oV2ZqJm6PWKE WW6j6WfLM00/gDivcml1cZuVMMMKH35xNNn/BZ5cnZhyB8c4Q0x29JdDqYh/V7Xd bFVzAprQeIvj2gxN6qecZYcxaq35Wg5fklqlDAIh5TE2EOs3LcR7eOd8BIthj7wM rgnl1XZfxf/Ah8lxyrfWCsyWusEKBsuRtGSfnSVSd6SjifWeHEGuXPRYoaD8Gzbx TkxYK3pPG7wj46Sjz/ku9yzDTJLqeoZtABIzDXdHX/Icuh023Fk43xdkobE0256b oTUz5RZnJxwcG2VQqQ== -----END CERTIFICATE-----Generated at Wed Dec 31 03:39:54 2025 by rpki-client