This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer File: 71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer (raw, json) Hash identifier: 7e8eEVnrQCcRei6Xw9TxeXjhM9SsPfw3JuNEDx4iRao= Subject key identifier: 71:C9:BF:E4:C8:FD:7E:77:7A:1C:9E:55:DF:A6:0A:3A:C2:9A:25:4E Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Certificate serial: 1942B122F7926482E64759AF22DBEC293EEE650E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Mon 19 Jan 2026 10:34:06 +0000 Certificate not after: Mon 18 Jan 2027 10:39:06 +0000 Subordinate resources: AS: 63567 IP: 43.226.96.0/20 IP: 43.240.0.0/22 IP: 43.241.48.0/22 IP: 43.247.92.0/22 IP: 43.248.80.0/20 IP: 43.248.176.0 -- 43.248.207.255 IP: 103.37.44.0/22 IP: 103.40.12.0/22 IP: 103.45.160.0/22 IP: 103.83.72.0/22 IP: 103.87.180.0/22 IP: 103.98.140.0 -- 103.98.147.255 IP: 103.205.252.0/22 IP: 103.239.244.0/22 IP: 111.223.12.0/22 IP: 2403:3380::/32 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 19:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:42:b1:22:f7:92:64:82:e6:47:59:af:22:db:ec:29:3e:ee:65:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Validity Not Before: Jan 19 10:34:06 2026 GMT Not After : Jan 18 10:39:06 2027 GMT Subject: CN=71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:ae:d1:9a:06:98:32:16:37:12:ff:14:df:fc: e9:2d:ae:e7:d9:dd:0b:54:51:b1:d7:2a:64:4e:09: e3:ba:b0:a8:a9:ef:20:5a:dd:56:4f:77:b2:91:b7: 1d:40:d3:72:7c:1a:4f:d6:e7:a0:0c:6e:28:17:bd: 7f:58:e4:36:28:da:fe:00:58:03:08:41:ca:20:2b: eb:25:ce:7a:62:de:16:b4:42:74:9e:ea:d6:1c:43: 73:db:65:27:a0:17:f6:be:4e:f6:98:f3:fa:d1:8e: 2c:0f:9c:b4:e8:41:b4:d6:44:0b:cf:65:cb:e0:c3: 7e:67:69:4d:94:ed:bd:6b:58:9c:ca:35:22:fe:5a: ed:86:da:0d:20:d5:fd:8c:8e:91:b0:8d:7a:21:1e: 9e:a6:61:28:17:72:8f:7d:ce:1a:2f:a4:b4:59:9c: d2:4c:a3:f0:81:ae:e9:ad:8a:46:aa:b5:bc:f9:10: 9c:7a:6b:ef:25:13:27:a1:2e:a3:48:e1:94:52:fa: 9f:b1:a1:45:9c:31:d9:41:3c:c1:7c:cb:7a:0b:7d: a9:e1:76:03:c5:b9:8e:5c:04:a2:3b:05:a2:68:78: 8e:45:20:10:f3:c0:52:0b:22:bb:db:24:4a:b7:c2: 59:dd:8d:dd:5a:08:c0:f1:e6:3b:c5:45:9e:77:b9: 3a:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 71:C9:BF:E4:C8:FD:7E:77:7A:1C:9E:55:DF:A6:0A:3A:C2:9A:25:4E X509v3 Authority Key Identifier: keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.226.96.0/20 43.240.0.0/22 43.241.48.0/22 43.247.92.0/22 43.248.80.0/20 43.248.176.0-43.248.207.255 103.37.44.0/22 103.40.12.0/22 103.45.160.0/22 103.83.72.0/22 103.87.180.0/22 103.98.140.0-103.98.147.255 103.205.252.0/22 103.239.244.0/22 111.223.12.0/22 IPv6: 2403:3380::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 63567 Signature Algorithm: sha256WithRSAEncryption 23:66:07:4e:4c:29:09:a9:e2:a0:55:17:f6:8f:b2:64:7a:d1: 7d:17:4a:e1:87:a0:62:91:d0:bc:eb:fa:c2:8b:59:7b:f0:29: b9:73:df:64:38:78:43:73:f6:77:6e:8a:58:4e:4a:a0:66:07: a5:87:bb:1f:bd:9c:c1:14:9d:56:18:48:25:6e:b4:45:4c:e8: e7:e7:fd:a4:aa:a8:a5:14:43:aa:0f:11:18:9b:83:a2:11:1e: 09:5f:04:67:0c:c7:d7:74:8d:9e:90:8a:a8:8b:12:cd:36:d6: a0:a0:07:63:90:fc:1b:fe:cc:8e:ab:73:0b:d4:cd:5d:4a:df: 20:ff:e5:82:3f:5b:ac:95:95:4a:69:c3:67:64:cb:10:2b:60: 3c:c4:19:f4:aa:6c:44:ef:3b:ce:1e:1f:df:41:a2:51:66:fb: 48:29:be:0b:62:c4:6d:52:df:e9:ae:ed:48:73:d4:8b:39:2d: 31:0f:3a:81:b6:6a:78:f5:53:00:39:02:7b:1d:4f:58:1c:26: 04:8b:06:fb:00:54:30:b3:d2:b0:39:dc:62:b1:3e:e6:b6:de: 13:9b:50:1a:8f:ff:e3:db:c1:c1:58:84:a3:4a:f9:a2:34:a6: b5:66:81:4e:87:a7:b4:6c:50:26:bc:c1:4d:73:9b:4a:82:35: 82:66:b7:14 -----BEGIN CERTIFICATE----- MIIGOTCCBSGgAwIBAgIUGUKxIveSZILmR1mvItvsKT7uZQ4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDExOTEwMzQwNloX DTI3MDExODEwMzkwNlowMzExMC8GA1UEAxMoNzFDOUJGRTRDOEZEN0U3NzdBMUM5 RTU1REZBNjBBM0FDMjlBMjU0RTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALqu0ZoGmDIWNxL/FN/86S2u59ndC1RRsdcqZE4J47qwqKnvIFrdVk93spG3 HUDTcnwaT9bnoAxuKBe9f1jkNija/gBYAwhByiAr6yXOemLeFrRCdJ7q1hxDc9tl J6AX9r5O9pjz+tGOLA+ctOhBtNZEC89ly+DDfmdpTZTtvWtYnMo1Iv5a7YbaDSDV /YyOkbCNeiEenqZhKBdyj33OGi+ktFmc0kyj8IGu6a2KRqq1vPkQnHpr7yUTJ6Eu o0jhlFL6n7GhRZwx2UE8wXzLegt9qeF2A8W5jlwEojsFomh4jkUgEPPAUgsiu9sk SrfCWd2N3VoIwPHmO8VFnne5Oq0CAwEAAaOCAywwggMoMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFHHJv+TI/X53ehyeVd+mCjrCmiVOMB8GA1UdIwQYMBaAFKVu hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTA2NTU3OTUzNDM5NDc4NTc5NS8wLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDY1NTc5NTM0Mzk0Nzg1Nzk1 LzAvNzFDOUJGRTRDOEZEN0U3NzdBMUM5RTU1REZBNjBBM0FDMjlBMjU0RS5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwgZQGCCsGAQUF BwEHAQH/BIGEMIGBMHAEAgABMGoDBAQr4mADBAIr8AADBAIr8TADBAIr91wDBAQr +FAwDAMEBCv4sAMEBCv4wAMEAmclLAMEAmcoDAMEAmctoAMEAmdTSAMEAmdXtDAM AwQCZ2KMAwQCZ2KQAwQCZ838AwQCZ+/0AwQCb98MMA0EAgACMAcDBQAkAzOAMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwD4TzANBgkqhkiG9w0BAQsFAAOCAQEAI2YH TkwpCanioFUX9o+yZHrRfRdK4YegYpHQvOv6wotZe/ApuXPfZDh4Q3P2d26KWE5K oGYHpYe7H72cwRSdVhhIJW60RUzo5+f9pKqopRRDqg8RGJuDohEeCV8EZwzH13SN npCKqIsSzTbWoKAHY5D8G/7MjqtzC9TNXUrfIP/lgj9brJWVSmnDZ2TLECtgPMQZ 9KpsRO87zh4f30GiUWb7SCm+C2LEbVLf6a7tSHPUizktMQ86gbZqePVTADkCex1P WBwmBIsG+wBUMLPSsDncYrE+5rbeE5tQGo//49vBwViEo0r5ojSmtWaBToentGxQ JrzBTXObSoI1gma3FA== -----END CERTIFICATE-----Generated at Sun Jan 25 06:01:45 2026 by rpki-client