This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9B22C19D842E45AA84439366694E4C828C309CEE.cer File: 9B22C19D842E45AA84439366694E4C828C309CEE.cer (raw, json) Hash identifier: 4PVxhChYpsms2mHFRJwyksJ8pxByCGLetwdqt/6qFL0= Subject key identifier: 9B:22:C1:9D:84:2E:45:AA:84:43:93:66:69:4E:4C:82:8C:30:9C:EE Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Certificate serial: 58FBB6AFCB0B86F2107BD01F443C4D14D2045E3D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1065588553129721859/0/9B22C19D842E45AA84439366694E4C828C309CEE.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1065588553129721859/0/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Mon 19 Jan 2026 11:08:43 +0000 Certificate not after: Mon 18 Jan 2027 11:13:43 +0000 Subordinate resources: IP: 27.0.204.0 -- 27.0.215.255 IP: 103.208.48.0/22 IP: 2406:e780::/32 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 19:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:fb:b6:af:cb:0b:86:f2:10:7b:d0:1f:44:3c:4d:14:d2:04:5e:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Validity Not Before: Jan 19 11:08:43 2026 GMT Not After : Jan 18 11:13:43 2027 GMT Subject: CN=9B22C19D842E45AA84439366694E4C828C309CEE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:54:3e:63:2a:13:80:f4:f6:3c:45:6d:3a:86: b3:4e:b3:d9:35:e0:35:f1:9f:42:67:55:68:6b:6a: ac:a0:ca:a9:48:05:df:8c:01:76:44:59:f3:63:fc: 4a:59:0c:c1:84:5c:c9:80:80:a7:8a:8f:ba:71:22: 29:ab:75:36:8a:28:d5:c1:5e:b3:83:d5:1c:15:a3: 5f:a2:54:bd:cb:bd:9c:b6:08:cc:19:19:fc:ea:13: 2e:a3:c5:1c:3f:8a:53:15:c6:a0:1b:69:99:67:0f: e8:3d:7a:56:cb:65:31:7f:62:d5:81:13:de:27:26: 2a:36:f0:16:86:e2:b0:7f:a6:cb:c3:cf:b6:48:8b: c8:2b:c3:48:c1:87:06:0c:94:15:18:d3:1b:35:59: 53:d3:c7:a0:1a:e4:3b:85:cb:54:ac:a4:a5:9f:88: f0:2d:82:40:35:14:d0:52:3a:82:17:d3:dd:b5:87: d2:4c:67:ea:c6:bd:11:0d:c7:14:a6:9d:c0:e1:26: 4d:21:10:91:48:f3:df:fb:b2:30:9e:6c:65:e9:0a: 45:d0:6a:83:11:1e:ef:b9:ba:85:6e:ad:96:92:bf: 23:00:5b:8c:bf:ad:3f:c1:1e:fc:4f:60:da:75:4c: 6d:09:3c:6d:49:f0:88:ab:55:52:31:f7:9a:58:ef: 55:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 9B:22:C1:9D:84:2E:45:AA:84:43:93:66:69:4E:4C:82:8C:30:9C:EE X509v3 Authority Key Identifier: keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129721859/0/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129721859/0/9B22C19D842E45AA84439366694E4C828C309CEE.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 27.0.204.0-27.0.215.255 103.208.48.0/22 IPv6: 2406:e780::/32 Signature Algorithm: sha256WithRSAEncryption 0e:26:3d:a4:fd:f5:03:38:48:2a:04:ed:7e:d1:47:c5:35:0b: e9:ab:eb:d2:7e:f6:98:e3:30:3a:10:7a:f5:99:b5:d8:93:52: 6e:b3:d3:93:2e:b2:26:db:a5:63:9c:84:96:07:64:ed:40:b5: a8:ac:47:b3:5a:4f:0f:ad:78:00:dd:4c:7d:26:cb:a0:1e:d1: 6f:97:5a:c7:96:18:b2:3e:c4:20:f0:0f:69:1b:1c:86:c3:e2: a5:29:26:10:2b:a5:a4:7b:b3:39:18:9c:96:12:25:4e:79:b5: a0:02:c3:d5:bf:ea:a5:94:37:e7:34:ed:6e:a5:5b:91:ef:86: 21:d6:8f:73:51:a6:ad:bd:00:70:2f:f7:65:9f:16:49:a4:d9: 63:54:c7:34:0b:1c:1c:25:1c:6d:c4:31:90:c8:a8:ed:61:b3: af:1b:3b:63:26:c4:10:84:7e:4a:62:69:5f:04:5f:5d:f7:3a: 5a:c6:bc:d8:dc:fe:07:68:a8:52:1a:7e:c9:93:2f:05:b2:61: d6:b1:bc:7f:4c:10:71:4c:5b:6f:96:e2:ca:63:ee:b8:1d:b2: a7:a5:dc:ca:f0:a3:4a:79:f2:c1:08:15:5f:c7:25:bf:42:aa: 12:ee:1c:ca:75:30:44:43:4d:72:6c:56:d3:bf:91:a9:32:20: dc:0e:a2:28 -----BEGIN CERTIFICATE----- MIIFxDCCBKygAwIBAgIUWPu2r8sLhvIQe9AfRDxNFNIEXj0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDExOTExMDg0M1oX DTI3MDExODExMTM0M1owMzExMC8GA1UEAxMoOUIyMkMxOUQ4NDJFNDVBQTg0NDM5 MzY2Njk0RTRDODI4QzMwOUNFRTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJ1UPmMqE4D09jxFbTqGs06z2TXgNfGfQmdVaGtqrKDKqUgF34wBdkRZ82P8 SlkMwYRcyYCAp4qPunEiKat1Nooo1cFes4PVHBWjX6JUvcu9nLYIzBkZ/OoTLqPF HD+KUxXGoBtpmWcP6D16VstlMX9i1YET3icmKjbwFobisH+my8PPtkiLyCvDSMGH BgyUFRjTGzVZU9PHoBrkO4XLVKykpZ+I8C2CQDUU0FI6ghfT3bWH0kxn6sa9EQ3H FKadwOEmTSEQkUjz3/uyMJ5sZekKRdBqgxEe77m6hW6tlpK/IwBbjL+tP8Ee/E9g 2nVMbQk8bUnwiKtVUjH3mljvVc8CAwEAAaOCArcwggKzMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFJsiwZ2ELkWqhEOTZmlOTIKMMJzuMB8GA1UdIwQYMBaAFKVu hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTA2NTU4ODU1MzEyOTcyMTg1OS8wLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDY1NTg4NTUzMTI5NzIxODU5 LzAvOUIyMkMxOUQ4NDJFNDVBQTg0NDM5MzY2Njk0RTRDODI4QzMwOUNFRS5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwPAYIKwYBBQUH AQcBAf8ELTArMBoEAgABMBQwDAMEAhsAzAMEAxsA0AMEAmfQMDANBAIAAjAHAwUA JAbngDANBgkqhkiG9w0BAQsFAAOCAQEADiY9pP31AzhIKgTtftFHxTUL6avr0n72 mOMwOhB69Zm12JNSbrPTky6yJtulY5yElgdk7UC1qKxHs1pPD614AN1MfSbLoB7R b5dax5YYsj7EIPAPaRschsPipSkmECulpHuzORiclhIlTnm1oALD1b/qpZQ35zTt bqVbke+GIdaPc1Gmrb0AcC/3ZZ8WSaTZY1THNAscHCUcbcQxkMio7WGzrxs7YybE EIR+SmJpXwRfXfc6Wsa82Nz+B2ioUhp+yZMvBbJh1rG8f0wQcUxbb5biymPuuB2y p6XcyvCjSnnywQgVX8clv0KqEu4cynUwRENNcmxW07+RqTIg3A6iKA== -----END CERTIFICATE-----Generated at Sun Jan 25 06:01:17 2026 by rpki-client