This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9684E4B95F47A986892F9930EF9D9E453227439F.cer File: 9684E4B95F47A986892F9930EF9D9E453227439F.cer (raw, json) Hash identifier: ZQaV9XrfdbOrqC/KDKWdQ1YlUJBccSVFO9qEnbOnysw= Subject key identifier: 96:84:E4:B9:5F:47:A9:86:89:2F:99:30:EF:9D:9E:45:32:27:43:9F Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Certificate serial: 2D69C7331C260355136972D42CB5DC1FD1A50404 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1065582741577990146/0/9684E4B95F47A986892F9930EF9D9E453227439F.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1065582741577990146/0/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Mon 19 Jan 2026 10:48:24 +0000 Certificate not after: Mon 18 Jan 2027 10:53:24 +0000 Subordinate resources: AS: 59040 AS: 131574 AS: 151302 IP: 43.227.8.0/22 IP: 43.249.168.0/22 IP: 43.250.32.0/22 IP: 103.39.200.0/22 IP: 103.41.0.0/22 IP: 103.41.164.0/22 IP: 103.143.16.0/22 IP: 211.101.208.0/20 IP: 2400:9620::/32 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 19:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:69:c7:33:1c:26:03:55:13:69:72:d4:2c:b5:dc:1f:d1:a5:04:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Validity Not Before: Jan 19 10:48:24 2026 GMT Not After : Jan 18 10:53:24 2027 GMT Subject: CN=9684E4B95F47A986892F9930EF9D9E453227439F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:4f:19:3c:91:db:1a:11:5f:1e:8d:68:b4:50: f3:4a:b5:e0:22:54:68:5d:28:b0:eb:16:59:66:61: e4:d4:18:18:3b:1b:72:1b:59:a7:3a:53:07:47:fc: ea:ae:84:89:19:9c:b8:39:d1:36:dd:70:89:f7:80: 5e:5f:bd:ea:a4:ec:53:75:0d:ff:8c:37:e4:e3:a8: 86:b3:04:36:87:30:4f:0b:54:66:fa:57:9a:94:85: 66:c8:a6:a1:03:7a:de:42:3a:aa:d9:c8:f1:86:af: 37:ca:fb:a2:29:e3:90:93:26:18:23:3e:a6:c9:23: 82:3c:82:35:b4:b4:74:39:f2:b4:a3:42:49:7f:e6: 12:f4:12:ed:b4:d5:05:35:d4:75:d3:1f:30:05:1e: 17:3b:b5:fe:c2:5d:4a:5f:f5:90:ab:8e:b4:da:06: 90:59:04:ea:c2:52:c3:1e:04:8e:73:6b:cd:a8:9d: 25:10:ce:7a:06:6c:04:40:02:d2:a2:78:00:46:f1: 50:af:23:e5:f3:12:06:f4:aa:c2:ab:a2:04:3f:ed: e8:d5:b7:aa:c3:54:a1:ee:cc:4f:59:39:ea:e6:e2: e8:b9:b6:08:d4:06:34:11:cb:38:f5:9d:47:b3:55: 15:7f:39:e4:c8:47:36:a9:06:76:49:72:5f:6a:35: 9a:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 96:84:E4:B9:5F:47:A9:86:89:2F:99:30:EF:9D:9E:45:32:27:43:9F X509v3 Authority Key Identifier: keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577990146/0/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577990146/0/9684E4B95F47A986892F9930EF9D9E453227439F.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.227.8.0/22 43.249.168.0/22 43.250.32.0/22 103.39.200.0/22 103.41.0.0/22 103.41.164.0/22 103.143.16.0/22 211.101.208.0/20 IPv6: 2400:9620::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 59040 131574 151302 Signature Algorithm: sha256WithRSAEncryption 49:a2:1d:1a:85:56:40:83:b6:9e:cf:de:9a:e3:83:ba:49:c3: 3b:59:56:af:8d:f6:19:66:25:bf:fe:fa:08:5f:6e:01:f8:2e: 52:82:c4:39:f5:62:eb:5a:11:83:a4:fc:fa:c7:65:ff:85:54: 2d:b5:be:f0:01:a9:80:d5:99:18:d0:1c:0d:7e:6d:f6:bb:b7: 6b:06:cf:4a:31:4a:1d:6f:e8:61:85:b3:31:f0:3a:19:b5:2b: 0a:28:4f:7a:28:e2:b9:f5:ab:7b:83:fd:3f:c7:23:13:7d:2e: 11:04:b9:b5:7c:f9:30:3f:17:c7:06:b5:f8:c6:fe:21:42:17: 5b:69:4c:b5:89:04:a8:ef:b4:c5:e5:b4:06:47:33:d0:67:4f: 87:12:7c:15:ca:e9:57:e2:d5:9b:4b:f9:91:ad:66:68:94:4f: 5d:b0:5c:ef:b5:d0:50:44:c0:92:62:33:eb:5c:7a:35:db:ae: 95:b6:b8:f7:46:a1:a1:7c:8a:ce:3e:2e:5f:6b:0e:f5:6d:65: bc:79:28:bb:e9:3e:0e:0f:f9:30:53:90:41:70:83:fd:ef:70: 67:8d:88:4c:bf:28:50:a0:ef:29:04:d1:bb:e5:26:a7:13:b2: 57:b7:5b:cf:21:1b:75:bb:e5:12:d5:17:17:69:5f:a8:c0:f9: 6c:4d:4d:5b -----BEGIN CERTIFICATE----- MIIGBjCCBO6gAwIBAgIULWnHMxwmA1UTaXLULLXcH9GlBAQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDExOTEwNDgyNFoX DTI3MDExODEwNTMyNFowMzExMC8GA1UEAxMoOTY4NEU0Qjk1RjQ3QTk4Njg5MkY5 OTMwRUY5RDlFNDUzMjI3NDM5RjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALxPGTyR2xoRXx6NaLRQ80q14CJUaF0osOsWWWZh5NQYGDsbchtZpzpTB0f8 6q6EiRmcuDnRNt1wifeAXl+96qTsU3UN/4w35OOohrMENocwTwtUZvpXmpSFZsim oQN63kI6qtnI8YavN8r7oinjkJMmGCM+pskjgjyCNbS0dDnytKNCSX/mEvQS7bTV BTXUddMfMAUeFzu1/sJdSl/1kKuOtNoGkFkE6sJSwx4EjnNrzaidJRDOegZsBEAC 0qJ4AEbxUK8j5fMSBvSqwquiBD/t6NW3qsNUoe7MT1k56ubi6Lm2CNQGNBHLOPWd R7NVFX855MhHNqkGdklyX2o1musCAwEAAaOCAvkwggL1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFJaE5LlfR6mGiS+ZMO+dnkUyJ0OfMB8GA1UdIwQYMBaAFKVu hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTA2NTU4Mjc0MTU3Nzk5MDE0Ni8wLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDY1NTgyNzQxNTc3OTkwMTQ2 LzAvOTY4NEU0Qjk1RjQ3QTk4Njg5MkY5OTMwRUY5RDlFNDUzMjI3NDM5Ri5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwWAYIKwYBBQUH AQcBAf8ESTBHMDYEAgABMDADBAIr4wgDBAIr+agDBAIr+iADBAJnJ8gDBAJnKQAD BAJnKaQDBAJnjxADBATTZdAwDQQCAAIwBwMFACQAliAwJAYIKwYBBQUHAQgBAf8E FTAToBEwDwIDAOagAgMCAfYCAwJPBjANBgkqhkiG9w0BAQsFAAOCAQEASaIdGoVW QIO2ns/emuODuknDO1lWr432GWYlv/76CF9uAfguUoLEOfVi61oRg6T8+sdl/4VU LbW+8AGpgNWZGNAcDX5t9ru3awbPSjFKHW/oYYWzMfA6GbUrCihPeijiufWre4P9 P8cjE30uEQS5tXz5MD8Xxwa1+Mb+IUIXW2lMtYkEqO+0xeW0Bkcz0GdPhxJ8Fcrp V+LVm0v5ka1maJRPXbBc77XQUETAkmIz61x6Nduulba490ahoXyKzj4uX2sO9W1l vHkou+k+Dg/5MFOQQXCD/e9wZ42ITL8oUKDvKQTRu+UmpxOyV7dbzyEbdbvlEtUX F2lfqMD5bE1NWw== -----END CERTIFICATE-----Generated at Sun Jan 25 06:01:42 2026 by rpki-client