This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/09F7B3237C248B53A3ADBB771E63C783610963AB.cer File: 09F7B3237C248B53A3ADBB771E63C783610963AB.cer (raw, json) Hash identifier: +yLILvW5wwrLFuwXjhhRCQoHtPi74yhVJXUPEMdzCmo= Subject key identifier: 09:F7:B3:23:7C:24:8B:53:A3:AD:BB:77:1E:63:C7:83:61:09:63:AB Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Certificate serial: 3D3FF1FD1693478AA06867CA78B496FC878065D0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1065591683061776386/0/09F7B3237C248B53A3ADBB771E63C783610963AB.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1065591683061776386/0/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Mon 19 Jan 2026 11:16:30 +0000 Certificate not after: Mon 18 Jan 2027 11:21:30 +0000 Subordinate resources: IP: 103.139.92.0/23 IP: 103.197.180.0/22 IP: 103.218.92.0/22 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 19:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:3f:f1:fd:16:93:47:8a:a0:68:67:ca:78:b4:96:fc:87:80:65:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Validity Not Before: Jan 19 11:16:30 2026 GMT Not After : Jan 18 11:21:30 2027 GMT Subject: CN=09F7B3237C248B53A3ADBB771E63C783610963AB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:73:45:d5:06:5f:7f:ab:c1:a6:e4:3e:7f:44: 7b:b7:57:9f:f3:a0:a7:6f:14:e2:86:2f:3f:60:62: 2e:d9:e5:e4:ae:d8:8f:24:78:af:0c:1f:8c:73:60: 58:08:4a:57:3a:ce:9d:69:4c:66:3a:3c:18:98:3e: 9a:ed:1c:7b:e2:26:bd:fc:54:6c:df:61:51:2b:a0: 99:98:64:20:3f:01:43:bf:09:bc:54:72:0e:c1:31: 39:d1:28:6e:56:10:17:20:27:d6:8d:73:82:9e:5e: 2b:3e:bb:f8:90:5e:d5:d2:9b:db:81:3f:77:f8:ad: c6:55:d2:84:5a:86:c4:79:5e:26:3b:e4:41:22:f8: 1c:5f:67:c2:fd:be:54:93:9e:2d:a9:35:b8:2c:34: 30:96:04:9b:69:b8:34:d2:b5:8a:1c:bc:b5:1c:e9: f4:b4:fc:44:0a:29:e6:92:a6:18:7c:f0:a8:2c:bb: ab:19:67:b5:5f:a6:a9:7c:09:06:c1:01:7b:6c:60: 0c:3c:01:ee:0b:9a:53:d3:1b:3d:00:ce:74:d9:38: ce:44:5e:eb:36:e6:1e:c5:1b:29:0a:db:e1:4c:13: c8:51:05:e1:d3:e5:71:74:52:ce:5c:af:24:cc:be: e9:06:72:8f:85:ac:c2:b7:05:d8:df:26:e4:62:10: 1a:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 09:F7:B3:23:7C:24:8B:53:A3:AD:BB:77:1E:63:C7:83:61:09:63:AB X509v3 Authority Key Identifier: keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591683061776386/0/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591683061776386/0/09F7B3237C248B53A3ADBB771E63C783610963AB.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.139.92.0/23 103.197.180.0/22 103.218.92.0/22 Signature Algorithm: sha256WithRSAEncryption 45:b8:75:12:3a:a5:f2:50:9d:d1:33:ba:8d:ae:dc:39:55:f9: 7d:e6:48:65:b8:9a:02:9b:e7:58:41:f4:5f:4b:8e:af:d0:ba: b0:2e:81:fb:43:24:a1:b7:ca:50:a3:a0:df:c1:d5:61:0f:d7: af:e2:0f:34:ed:a8:36:08:32:66:bb:91:7d:a5:33:6e:d2:ce: c4:d5:2c:c3:d8:3a:96:68:7b:d4:a4:38:79:eb:b9:b0:76:19: 78:9d:28:26:f9:e9:17:31:b2:62:45:50:2a:6b:95:d5:79:fd: a4:ab:6d:bd:bd:71:06:4a:9a:4d:85:df:dc:b0:d3:9c:ab:39: d8:df:f0:82:6e:37:28:93:4c:2e:14:f7:5c:b3:17:6c:33:ab: 7c:44:ee:08:f0:a2:6e:66:70:d5:e2:22:03:a4:c6:4c:42:bb: 9c:cf:3e:9f:32:33:65:f3:2f:c7:39:4a:9e:61:bc:93:fb:02: 61:b8:96:88:2e:b2:37:e4:bc:67:07:f4:0a:0a:b7:69:47:a9: 73:75:db:a0:6e:17:fa:50:da:15:a2:c6:d3:41:eb:10:47:d2: 72:52:75:8f:d5:e3:27:30:7f:96:6d:1b:de:3b:a6:31:77:3f: 42:68:d2:ec:e6:09:77:f6:31:7d:1a:5d:57:40:9e:33:39:a5: 6a:57:e4:fe -----BEGIN CERTIFICATE----- MIIFszCCBJugAwIBAgIUPT/x/RaTR4qgaGfKeLSW/IeAZdAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDExOTExMTYzMFoX DTI3MDExODExMjEzMFowMzExMC8GA1UEAxMoMDlGN0IzMjM3QzI0OEI1M0EzQURC Qjc3MUU2M0M3ODM2MTA5NjNBQjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMtzRdUGX3+rwabkPn9Ee7dXn/Ogp28U4oYvP2BiLtnl5K7YjyR4rwwfjHNg WAhKVzrOnWlMZjo8GJg+mu0ce+ImvfxUbN9hUSugmZhkID8BQ78JvFRyDsExOdEo blYQFyAn1o1zgp5eKz67+JBe1dKb24E/d/itxlXShFqGxHleJjvkQSL4HF9nwv2+ VJOeLak1uCw0MJYEm2m4NNK1ihy8tRzp9LT8RAop5pKmGHzwqCy7qxlntV+mqXwJ BsEBe2xgDDwB7guaU9MbPQDOdNk4zkRe6zbmHsUbKQrb4UwTyFEF4dPlcXRSzlyv JMy+6QZyj4WswrcF2N8m5GIQGjUCAwEAAaOCAqYwggKiMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFAn3syN8JItTo627dx5jx4NhCWOrMB8GA1UdIwQYMBaAFKVu hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTA2NTU5MTY4MzA2MTc3NjM4Ni8wLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDY1NTkxNjgzMDYxNzc2Mzg2 LzAvMDlGN0IzMjM3QzI0OEI1M0EzQURCQjc3MUU2M0M3ODM2MTA5NjNBQi5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwKwYIKwYBBQUH AQcBAf8EHDAaMBgEAgABMBIDBAFni1wDBAJnxbQDBAJn2lwwDQYJKoZIhvcNAQEL BQADggEBAEW4dRI6pfJQndEzuo2u3DlV+X3mSGW4mgKb51hB9F9Ljq/QurAugftD JKG3ylCjoN/B1WEP16/iDzTtqDYIMma7kX2lM27SzsTVLMPYOpZoe9SkOHnrubB2 GXidKCb56RcxsmJFUCprldV5/aSrbb29cQZKmk2F39yw05yrOdjf8IJuNyiTTC4U 91yzF2wzq3xE7gjwom5mcNXiIgOkxkxCu5zPPp8yM2XzL8c5Sp5hvJP7AmG4logu sjfkvGcH9AoKt2lHqXN126BuF/pQ2hWixtNB6xBH0nJSdY/V4ycwf5ZtG947pjF3 P0Jo0uzmCXf2MX0aXVdAnjM5pWpX5P4= -----END CERTIFICATE-----Generated at Sun Jan 25 09:40:13 2026 by rpki-client