This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/909D556251A0BE5F9234514028EBD37CE8E1280A.cer File: 909D556251A0BE5F9234514028EBD37CE8E1280A.cer (raw, json) Hash identifier: tArg/q5+dFz7+JHOLpuh5AwNODyyMnx62P1WhqaJL5c= Subject key identifier: 90:9D:55:62:51:A0:BE:5F:92:34:51:40:28:EB:D3:7C:E8:E1:28:0A Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Certificate serial: 0B71581E6D20588402061228A99EA691000249CE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/909D556251A0BE5F9234514028EBD37CE8E1280A.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Mon 19 Jan 2026 10:39:03 +0000 Certificate not after: Mon 18 Jan 2027 10:44:03 +0000 Subordinate resources: AS: 63641 IP: 103.74.124.0/22 IP: 120.137.0.0/17 IP: 123.49.128.0 -- 123.49.247.255 IP: 2405:6c0::/32 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 19:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:71:58:1e:6d:20:58:84:02:06:12:28:a9:9e:a6:91:00:02:49:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Validity Not Before: Jan 19 10:39:03 2026 GMT Not After : Jan 18 10:44:03 2027 GMT Subject: CN=909D556251A0BE5F9234514028EBD37CE8E1280A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:c5:c7:76:7b:0f:15:5d:f3:03:c5:cd:4b:a2: 98:52:ce:8e:f3:c6:f1:ee:bf:66:4f:ff:8d:a5:1f: 24:ff:75:e5:48:67:83:1f:1e:e3:15:b8:ce:94:36: 15:50:f9:84:c2:43:fc:13:a8:17:93:b6:fe:62:f5: 56:06:c1:9e:47:ce:b1:a8:5d:df:2b:a2:a4:bf:b2: 6f:c6:cb:18:41:75:03:db:fb:7b:9c:ae:dd:79:35: eb:b6:1a:83:50:04:06:86:ff:86:59:f7:c5:c2:c1: f3:46:e6:35:f4:6c:b9:eb:fb:9e:79:b6:ba:00:d8: 0f:23:28:92:f0:18:22:73:06:39:15:7a:47:1c:2a: 99:94:00:5b:79:b5:9a:25:1b:0e:a4:ad:f7:8a:fc: a1:df:66:aa:16:ea:1c:c9:79:44:43:2f:af:cd:de: 3f:59:9e:e1:6c:7f:cb:f8:59:bb:cf:d6:8c:8b:16: 59:37:d2:8a:87:b2:04:3a:2e:86:f4:8f:d2:da:30: cd:6c:97:5f:8d:b8:4a:95:e7:5c:bf:81:9e:ed:8a: 48:cf:04:9a:0f:ba:f2:19:99:33:7a:9f:63:f2:3b: 5b:ee:aa:83:7c:8c:c2:61:21:7c:2b:8d:f7:3d:cf: 49:b0:6a:3e:42:dd:c7:75:42:c2:2f:03:98:a3:63: 5e:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 90:9D:55:62:51:A0:BE:5F:92:34:51:40:28:EB:D3:7C:E8:E1:28:0A X509v3 Authority Key Identifier: keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/909D556251A0BE5F9234514028EBD37CE8E1280A.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.74.124.0/22 120.137.0.0/17 123.49.128.0-123.49.247.255 IPv6: 2405:6c0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 63641 Signature Algorithm: sha256WithRSAEncryption 30:6d:b7:5f:7c:bd:d6:43:c7:ca:1f:76:32:a2:82:5e:5c:70: 00:26:92:29:68:60:2b:00:79:ba:13:46:1f:c0:60:94:d1:3a: b5:dd:d6:fc:5f:27:f9:1a:18:77:19:d0:db:c4:df:e5:2a:1a: 31:12:cc:82:ef:6d:02:e4:52:31:a9:82:cb:cf:c1:0c:e5:ac: 8f:76:c8:42:03:9c:b6:16:3e:a9:06:2f:8a:c4:45:a1:5c:d5: 6a:1b:b4:89:bb:b2:a1:33:03:26:55:69:dd:3c:73:1d:55:af: f9:47:f4:14:98:8e:cc:82:95:e5:50:d2:5f:13:63:8e:66:0e: f3:32:45:aa:af:9d:b8:23:16:84:b0:f1:c4:af:55:f9:c2:c4: c2:25:aa:76:f1:ef:c0:1b:fc:bf:91:86:97:8f:a0:b1:f6:32: 0e:dd:f1:88:d2:09:55:3c:de:da:87:f2:da:b6:22:04:7b:9e: 69:50:37:f9:09:ca:2c:4c:b9:2c:84:f4:b8:db:29:d1:ca:6a: e6:50:ac:e8:57:2b:d5:da:82:0e:9c:7d:22:44:4c:d5:1a:aa: be:49:11:2a:a9:55:68:99:c6:cc:91:7b:d8:bd:62:6a:e9:03: 37:7f:86:c7:b8:21:5c:51:62:db:81:24:6a:35:ca:1c:94:72: f4:38:4f:46 -----BEGIN CERTIFICATE----- MIIF5jCCBM6gAwIBAgIUC3FYHm0gWIQCBhIoqZ6mkQACSc4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDExOTEwMzkwM1oX DTI3MDExODEwNDQwM1owMzExMC8GA1UEAxMoOTA5RDU1NjI1MUEwQkU1RjkyMzQ1 MTQwMjhFQkQzN0NFOEUxMjgwQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAO/Fx3Z7DxVd8wPFzUuimFLOjvPG8e6/Zk//jaUfJP915Uhngx8e4xW4zpQ2 FVD5hMJD/BOoF5O2/mL1VgbBnkfOsahd3yuipL+yb8bLGEF1A9v7e5yu3Xk167Ya g1AEBob/hln3xcLB80bmNfRsuev7nnm2ugDYDyMokvAYInMGORV6RxwqmZQAW3m1 miUbDqSt94r8od9mqhbqHMl5REMvr83eP1me4Wx/y/hZu8/WjIsWWTfSioeyBDou hvSP0towzWyXX424SpXnXL+Bnu2KSM8Emg+68hmZM3qfY/I7W+6qg3yMwmEhfCuN 9z3PSbBqPkLdx3VCwi8DmKNjXsECAwEAAaOCAtkwggLVMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFJCdVWJRoL5fkjRRQCjr03zo4SgKMB8GA1UdIwQYMBaAFKVu hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTA2NTU4MjMzMDM0Njc5OTEwNS8wLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDY1NTgyMzMwMzQ2Nzk5MTA1 LzAvOTA5RDU1NjI1MUEwQkU1RjkyMzQ1MTQwMjhFQkQzN0NFOEUxMjgwQS5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwQgYIKwYBBQUH AQcBAf8EMzAxMCAEAgABMBoDBAJnSnwDBAd4iQAwDAMEB3sxgAMEA3sx8DANBAIA AjAHAwUAJAUGwDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMA+JkwDQYJKoZIhvcN AQELBQADggEBADBtt198vdZDx8ofdjKigl5ccAAmkiloYCsAeboTRh/AYJTROrXd 1vxfJ/kaGHcZ0NvE3+UqGjESzILvbQLkUjGpgsvPwQzlrI92yEIDnLYWPqkGL4rE RaFc1WobtIm7sqEzAyZVad08cx1Vr/lH9BSYjsyCleVQ0l8TY45mDvMyRaqvnbgj FoSw8cSvVfnCxMIlqnbx78Ab/L+RhpePoLH2Mg7d8YjSCVU83tqH8tq2IgR7nmlQ N/kJyixMuSyE9LjbKdHKauZQrOhXK9Xagg6cfSJETNUaqr5JESqpVWiZxsyRe9i9 YmrpAzd/hse4IVxRYtuBJGo1yhyUcvQ4T0Y= -----END CERTIFICATE-----Generated at Sun Jan 25 06:01:08 2026 by rpki-client