This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/509BC9E75E44DB40D6912BC3F75971CFDCB96357.cer File: 509BC9E75E44DB40D6912BC3F75971CFDCB96357.cer (raw, json) Hash identifier: xV5zRqEuCRIw6o5NzCxdqSC+cfixY1SvTtGNuoV6YKs= Subject key identifier: 50:9B:C9:E7:5E:44:DB:40:D6:91:2B:C3:F7:59:71:CF:DC:B9:63:57 Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Certificate serial: 18DB67742C72311842ADA15EF2D61F943D6D763E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1065579796714684417/0/509BC9E75E44DB40D6912BC3F75971CFDCB96357.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1065579796714684417/0/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Mon 19 Jan 2026 10:34:41 +0000 Certificate not after: Mon 18 Jan 2027 10:39:41 +0000 Subordinate resources: AS: 59057 AS: 63701 IP: 45.116.208.0/22 IP: 45.123.128.0/22 IP: 103.57.12.0/22 IP: 103.63.244.0/22 IP: 103.75.104.0/22 IP: 103.88.96.0/22 IP: 103.125.236.0/22 IP: 103.152.208.0/23 IP: 218.246.48.0/22 IP: 2402:9a80::/32 IP: 2407:37c0::/32 IP: 2407:4980::/32 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 19:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:db:67:74:2c:72:31:18:42:ad:a1:5e:f2:d6:1f:94:3d:6d:76:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Validity Not Before: Jan 19 10:34:41 2026 GMT Not After : Jan 18 10:39:41 2027 GMT Subject: CN=509BC9E75E44DB40D6912BC3F75971CFDCB96357 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:7c:14:61:ae:24:60:0e:b5:9e:9e:d4:e8:aa: 99:99:9f:a2:fa:b8:96:29:0b:57:ad:02:04:e4:a3: 87:fa:aa:93:aa:e2:e1:9b:65:ff:f2:44:e9:10:c0: f5:f0:28:06:5f:3f:cd:e7:2e:42:14:0b:13:8d:4c: 78:e2:8f:2a:52:e1:f5:3a:0b:d7:08:ab:6f:c2:c4: 0a:42:67:93:33:2a:46:58:a1:4a:c7:4b:b8:2c:63: 44:d4:c9:86:1e:0f:fc:bb:9d:92:28:75:65:97:3c: 5d:f9:4c:96:41:c2:99:92:db:16:21:6a:f1:79:9b: 74:ec:17:5d:6b:08:f0:33:77:c2:aa:0d:86:32:97: 57:75:a4:bc:79:f9:ce:3a:2a:0c:87:64:ae:b1:35: 7a:b8:73:29:55:ea:36:cb:89:c6:f9:26:ed:9e:4b: a1:b8:bd:40:fe:94:23:b0:03:47:e4:b5:71:93:5c: 1d:49:91:fb:fb:20:ea:e0:70:04:23:98:5e:08:cb: af:4d:aa:a5:6d:7b:32:ea:97:14:8b:b8:17:63:68: a9:77:08:70:1e:bc:ad:2c:62:f2:f2:bc:21:b9:14: 6f:35:0b:11:ad:4e:1c:ea:6b:80:25:af:a2:ae:f5: 9b:b5:ab:27:29:31:f5:55:d2:2b:7a:7b:02:a5:d3: fa:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 50:9B:C9:E7:5E:44:DB:40:D6:91:2B:C3:F7:59:71:CF:DC:B9:63:57 X509v3 Authority Key Identifier: keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714684417/0/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714684417/0/509BC9E75E44DB40D6912BC3F75971CFDCB96357.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.116.208.0/22 45.123.128.0/22 103.57.12.0/22 103.63.244.0/22 103.75.104.0/22 103.88.96.0/22 103.125.236.0/22 103.152.208.0/23 218.246.48.0/22 IPv6: 2402:9a80::/32 2407:37c0::/32 2407:4980::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 59057 63701 Signature Algorithm: sha256WithRSAEncryption 63:d4:ab:32:80:74:d5:0d:2c:60:03:b9:c2:4a:c6:c4:48:7b: c5:d9:94:eb:e3:eb:cc:47:c2:76:3b:8e:66:2c:ad:a0:d7:a8: 1b:f5:a4:cc:9d:40:db:8e:b5:b3:0f:70:d5:7b:e2:98:a4:87: 33:ea:ba:11:3d:fa:a9:b2:60:37:51:49:f8:19:fe:40:4c:96: 36:e3:05:03:47:0e:4e:c8:67:15:c8:37:bc:f7:fd:18:9c:41: 9b:63:97:03:7d:a1:1c:37:b2:13:7f:7d:d8:6c:05:47:b4:e2: 11:eb:99:00:a2:0a:8c:b8:da:fe:8f:2b:5a:75:97:70:ac:6c: 88:e1:62:ab:e9:31:09:79:18:b3:19:ea:25:47:c5:38:9d:55: 50:e4:e5:3c:ef:57:1c:ca:f8:67:fc:41:65:65:0d:81:d8:db: aa:bf:7f:ee:e1:76:e0:04:40:c0:5e:6b:72:b3:c3:71:2c:66: 93:f6:c5:c2:50:1f:dc:16:19:65:68:ba:85:cb:9a:77:80:36: 54:c2:e3:ab:21:1e:e3:65:19:90:f0:77:d6:10:6c:8f:d9:a6: ed:53:e5:71:a4:3e:b5:d5:94:64:9f:19:2f:2a:94:94:ea:b2: e6:22:ab:f3:3e:67:b1:76:0c:65:72:07:6d:96:e4:1e:78:28: e4:7e:fd:5c -----BEGIN CERTIFICATE----- MIIGFTCCBP2gAwIBAgIUGNtndCxyMRhCraFe8tYflD1tdj4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDExOTEwMzQ0MVoX DTI3MDExODEwMzk0MVowMzExMC8GA1UEAxMoNTA5QkM5RTc1RTQ0REI0MEQ2OTEy QkMzRjc1OTcxQ0ZEQ0I5NjM1NzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJV8FGGuJGAOtZ6e1OiqmZmfovq4likLV60CBOSjh/qqk6ri4Ztl//JE6RDA 9fAoBl8/zecuQhQLE41MeOKPKlLh9ToL1wirb8LECkJnkzMqRlihSsdLuCxjRNTJ hh4P/Ludkih1ZZc8XflMlkHCmZLbFiFq8XmbdOwXXWsI8DN3wqoNhjKXV3WkvHn5 zjoqDIdkrrE1erhzKVXqNsuJxvkm7Z5Lobi9QP6UI7ADR+S1cZNcHUmR+/sg6uBw BCOYXgjLr02qpW17MuqXFIu4F2NoqXcIcB68rSxi8vK8IbkUbzULEa1OHOprgCWv oq71m7WrJykx9VXSK3p7AqXT+lkCAwEAAaOCAwgwggMEMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFFCbyedeRNtA1pErw/dZcc/cuWNXMB8GA1UdIwQYMBaAFKVu hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTA2NTU3OTc5NjcxNDY4NDQxNy8wLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDY1NTc5Nzk2NzE0Njg0NDE3 LzAvNTA5QkM5RTc1RTQ0REI0MEQ2OTEyQkMzRjc1OTcxQ0ZEQ0I5NjM1Ny5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwbAYIKwYBBQUH AQcBAf8EXTBbMDwEAgABMDYDBAItdNADBAIte4ADBAJnOQwDBAJnP/QDBAJnS2gD BAJnWGADBAJnfewDBAFnmNADBALa9jAwGwQCAAIwFQMFACQCmoADBQAkBzfAAwUA JAdJgDAfBggrBgEFBQcBCAEB/wQQMA6gDDAKAgMA5rECAwD41TANBgkqhkiG9w0B AQsFAAOCAQEAY9SrMoB01Q0sYAO5wkrGxEh7xdmU6+PrzEfCdjuOZiytoNeoG/Wk zJ1A2461sw9w1XvimKSHM+q6ET36qbJgN1FJ+Bn+QEyWNuMFA0cOTshnFcg3vPf9 GJxBm2OXA32hHDeyE3992GwFR7TiEeuZAKIKjLja/o8rWnWXcKxsiOFiq+kxCXkY sxnqJUfFOJ1VUOTlPO9XHMr4Z/xBZWUNgdjbqr9/7uF24ARAwF5rcrPDcSxmk/bF wlAf3BYZZWi6hcuad4A2VMLjqyEe42UZkPB31hBsj9mm7VPlcaQ+tdWUZJ8ZLyqU lOqy5iKr8z5nsXYMZXIHbZbkHngo5H79XA== -----END CERTIFICATE-----Generated at Sun Jan 25 05:57:08 2026 by rpki-client