This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9B87DFEBDCCDA813116988D4421B088404578168.cer File: 9B87DFEBDCCDA813116988D4421B088404578168.cer (raw, json) Hash identifier: B1gN7/rwrZ114jn2v39Y6NOD8wpjkcKaDJ7v8g1TEhE= Subject key identifier: 9B:87:DF:EB:DC:CD:A8:13:11:69:88:D4:42:1B:08:84:04:57:81:68 Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Certificate serial: 6E732813697D15692B90F8E295A473E387679E82 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1065579796714749953/0/9B87DFEBDCCDA813116988D4421B088404578168.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1065579796714749953/0/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Mon 19 Jan 2026 10:34:58 +0000 Certificate not after: Mon 18 Jan 2027 10:39:58 +0000 Subordinate resources: AS: 9307 IP: 45.116.96.0/22 IP: 103.23.164.0/22 IP: 103.56.140.0/22 IP: 203.86.0.0/19 IP: 211.154.128.0/19 IP: 220.231.128.0/17 IP: 2400:d200::/32 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 19:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:73:28:13:69:7d:15:69:2b:90:f8:e2:95:a4:73:e3:87:67:9e:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Validity Not Before: Jan 19 10:34:58 2026 GMT Not After : Jan 18 10:39:58 2027 GMT Subject: CN=9B87DFEBDCCDA813116988D4421B088404578168 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:53:63:92:0a:82:26:9e:89:4e:60:e6:77:1c: 99:5b:19:23:d2:72:1d:ae:44:46:8c:6a:d6:ab:01: 09:40:45:32:72:78:df:b2:45:ba:da:55:00:d0:db: e8:31:ca:60:cf:97:f9:51:cc:99:59:0b:05:8a:99: 84:97:ca:2a:fa:c8:fa:78:59:da:57:57:b5:14:b2: a5:03:e2:1d:7a:d5:cf:28:18:1b:15:fb:f3:cf:01: 82:d6:a2:bb:e6:a3:d1:70:41:f2:4d:a4:2d:c4:2e: 66:b2:1e:af:06:27:f9:cf:0a:fe:33:45:d9:5e:1b: bc:14:4b:a8:50:d6:ce:2d:5e:57:ce:6f:81:a2:ab: f6:00:d3:a2:8c:e5:34:53:17:b3:89:b4:7d:a1:57: 63:b9:ea:82:0a:3f:4d:ab:0a:7d:a0:2f:af:a1:07: e4:35:d7:dd:50:8e:96:0d:12:eb:5b:fe:a2:3e:c2: 4e:d3:f7:33:e6:4d:20:c9:a6:ee:bd:b1:d0:8e:76: 37:a8:bf:69:34:2a:86:93:b6:2c:66:8c:12:da:97: 9d:57:3e:56:6f:de:b7:57:03:fe:c3:a2:e1:65:ea: 9c:4b:50:4b:96:3e:4f:3b:b8:31:74:fb:f6:3e:c8: fc:c9:d8:cc:2a:80:61:b9:59:8e:da:f0:bf:31:bf: e4:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 9B:87:DF:EB:DC:CD:A8:13:11:69:88:D4:42:1B:08:84:04:57:81:68 X509v3 Authority Key Identifier: keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714749953/0/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714749953/0/9B87DFEBDCCDA813116988D4421B088404578168.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.116.96.0/22 103.23.164.0/22 103.56.140.0/22 203.86.0.0/19 211.154.128.0/19 220.231.128.0/17 IPv6: 2400:d200::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 9307 Signature Algorithm: sha256WithRSAEncryption 0e:05:ed:69:7c:0c:40:f9:8b:21:bc:c9:ee:78:d3:31:6a:6a: 0b:76:78:27:cb:e3:76:cf:93:e7:13:2b:a8:c6:e9:26:28:54: 86:85:ef:fb:2b:d7:6c:26:3b:08:90:2c:0b:29:ee:5c:c7:33: b0:37:67:9f:02:f9:6d:0b:2d:6d:44:c7:52:0f:8c:a2:5b:30: b1:d0:01:d6:e5:7c:87:d1:1a:e0:19:42:85:01:b7:77:5a:f9: 9b:b2:31:dc:23:3a:e5:22:a6:e4:19:39:fb:b3:e6:7c:9b:5c: 9b:e5:4b:17:55:38:e9:38:08:e7:1b:20:96:49:0b:bb:cc:bc: c8:f0:31:e5:19:79:0a:2e:62:bc:8f:b3:7a:5a:2a:f6:b1:c7: 71:ca:00:ec:2b:a1:89:47:1e:13:ee:06:ae:20:74:e3:1e:16: e5:1d:42:18:66:f6:d7:1f:af:7d:a6:c6:a7:63:7b:ad:e4:0d: f8:0e:8e:88:c8:bd:4c:cb:66:2e:89:73:29:11:10:e8:3c:9f: b6:ed:10:6f:f8:3e:09:1d:67:1b:62:d1:62:da:e3:e8:0a:1a: 9f:d8:91:db:01:16:48:58:a1:3e:5a:a5:f8:e8:ae:17:4b:3d: a4:ed:20:42:96:fd:f4:a0:0a:6c:e6:5c:7b:0e:a5:81:93:b9: 42:d8:94:35 -----BEGIN CERTIFICATE----- MIIF7zCCBNegAwIBAgIUbnMoE2l9FWkrkPjilaRz44dnnoIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDExOTEwMzQ1OFoX DTI3MDExODEwMzk1OFowMzExMC8GA1UEAxMoOUI4N0RGRUJEQ0NEQTgxMzExNjk4 OEQ0NDIxQjA4ODQwNDU3ODE2ODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKdTY5IKgiaeiU5g5nccmVsZI9JyHa5ERoxq1qsBCUBFMnJ437JFutpVANDb 6DHKYM+X+VHMmVkLBYqZhJfKKvrI+nhZ2ldXtRSypQPiHXrVzygYGxX7888Bgtai u+aj0XBB8k2kLcQuZrIerwYn+c8K/jNF2V4bvBRLqFDWzi1eV85vgaKr9gDToozl NFMXs4m0faFXY7nqggo/TasKfaAvr6EH5DXX3VCOlg0S61v+oj7CTtP3M+ZNIMmm 7r2x0I52N6i/aTQqhpO2LGaMEtqXnVc+Vm/et1cD/sOi4WXqnEtQS5Y+Tzu4MXT7 9j7I/MnYzCqAYblZjtrwvzG/5HECAwEAAaOCAuIwggLeMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFJuH3+vczagTEWmI1EIbCIQEV4FoMB8GA1UdIwQYMBaAFKVu hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTA2NTU3OTc5NjcxNDc0OTk1My8wLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDY1NTc5Nzk2NzE0NzQ5OTUz LzAvOUI4N0RGRUJEQ0NEQTgxMzExNjk4OEQ0NDIxQjA4ODQwNDU3ODE2OC5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwTAYIKwYBBQUH AQcBAf8EPTA7MCoEAgABMCQDBAItdGADBAJnF6QDBAJnOIwDBAXLVgADBAXTmoAD BAfc54AwDQQCAAIwBwMFACQA0gAwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAICJFsw DQYJKoZIhvcNAQELBQADggEBAA4F7Wl8DED5iyG8ye540zFqagt2eCfL43bPk+cT K6jG6SYoVIaF7/sr12wmOwiQLAsp7lzHM7A3Z58C+W0LLW1Ex1IPjKJbMLHQAdbl fIfRGuAZQoUBt3da+ZuyMdwjOuUipuQZOfuz5nybXJvlSxdVOOk4COcbIJZJC7vM vMjwMeUZeQouYryPs3paKvaxx3HKAOwroYlHHhPuBq4gdOMeFuUdQhhm9tcfr32m xqdje63kDfgOjojIvUzLZi6JcykREOg8n7btEG/4PgkdZxti0WLa4+gKGp/YkdsB FkhYoT5apfjorhdLPaTtIEKW/fSgCmzmXHsOpYGTuULYlDU= -----END CERTIFICATE-----Generated at Sun Jan 25 06:00:58 2026 by rpki-client