This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9D10FC6E391587CB1F78E8B63FED0E5B46DC8D66.cer File: 9D10FC6E391587CB1F78E8B63FED0E5B46DC8D66.cer (raw, json) Hash identifier: rodN5XCQBJnYZJ/bR9v2IVZ9Dw/8BJtncUSeRc17HNQ= Subject key identifier: 9D:10:FC:6E:39:15:87:CB:1F:78:E8:B6:3F:ED:0E:5B:46:DC:8D:66 Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Certificate serial: 5915DEB28B702565813C58DB28A7B0D5BD20B5B8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1065588335524970497/0/9D10FC6E391587CB1F78E8B63FED0E5B46DC8D66.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1065588335524970497/0/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Mon 19 Jan 2026 11:04:40 +0000 Certificate not after: Mon 18 Jan 2027 11:09:40 +0000 Subordinate resources: IP: 103.15.4.0/22 IP: 2404:c300::/32 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 19:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:15:de:b2:8b:70:25:65:81:3c:58:db:28:a7:b0:d5:bd:20:b5:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Validity Not Before: Jan 19 11:04:40 2026 GMT Not After : Jan 18 11:09:40 2027 GMT Subject: CN=9D10FC6E391587CB1F78E8B63FED0E5B46DC8D66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:8d:99:c1:6f:c2:45:30:09:eb:99:d9:cc:d2: f7:0b:19:3d:68:f5:b8:fb:77:94:23:9a:78:f5:29: 8c:10:8b:0c:91:c7:d1:56:34:d7:65:37:05:f0:c1: 21:c2:24:da:f8:e2:cd:8d:83:f5:3f:fb:65:81:ee: cd:d3:fd:c7:b3:d3:9e:99:21:65:22:c6:36:26:03: 03:d2:bd:bf:bd:19:df:cc:19:42:a5:c9:8c:40:83: e5:92:9e:41:2e:10:49:5e:5a:c4:f7:8b:bc:cc:86: 2c:81:27:a2:2c:ba:e2:cd:0b:37:50:42:28:d2:ce: cc:15:14:64:ae:97:c1:4e:43:5a:cd:56:8f:1f:c5: 74:c6:e8:2e:0f:28:9c:a9:20:2f:99:30:90:36:eb: dc:78:09:bf:d4:04:c8:49:8e:51:5c:6f:d8:f5:de: 0a:c0:9e:c3:c7:0a:44:74:8b:26:0f:21:49:ed:30: f8:11:9d:45:2a:26:c9:cb:62:c3:19:4b:5c:57:a1: 4c:97:d4:21:46:2d:86:eb:91:23:63:83:fd:cf:f7: 6c:25:bb:61:cf:db:0e:e7:70:fc:22:b3:e7:3e:a2: 7d:d1:75:30:ca:25:20:1d:70:0c:c8:09:8f:06:f8: c2:85:ad:55:7e:47:fa:21:0d:af:6b:eb:61:77:a7: d3:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 9D:10:FC:6E:39:15:87:CB:1F:78:E8:B6:3F:ED:0E:5B:46:DC:8D:66 X509v3 Authority Key Identifier: keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335524970497/0/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335524970497/0/9D10FC6E391587CB1F78E8B63FED0E5B46DC8D66.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.15.4.0/22 IPv6: 2404:c300::/32 Signature Algorithm: sha256WithRSAEncryption 55:a1:2e:01:46:33:c1:1e:11:d8:cf:ab:7f:53:f3:d7:a7:4e: 29:5f:38:27:16:7e:8b:fd:4b:e6:28:89:e5:78:42:6d:6d:36: 4e:b4:95:49:f6:a8:de:64:69:c2:d0:22:8f:d8:cc:86:f1:6c: 8f:7b:19:c0:32:bc:49:30:66:c8:a5:e5:49:4b:d5:fb:01:c2: 6f:b7:1a:3d:9b:61:30:5b:73:9f:1d:88:0d:d2:5a:14:b0:46: 8f:e4:12:d5:8c:4f:84:8a:00:d5:2d:b7:c6:7b:1c:fd:2d:f2: 08:f9:6e:7b:d6:79:14:61:65:1b:80:a6:d7:e3:51:1b:65:2a: b6:68:d5:a0:09:bd:47:3f:71:65:57:45:e2:ae:d6:1f:48:b3: ba:62:f1:72:ee:d6:53:d4:68:6a:b9:86:9a:05:ec:55:71:8d: ea:49:fe:e0:f2:90:bc:c9:a7:a3:33:a6:45:19:0a:c3:be:02: 04:8c:59:8f:21:2f:c3:4d:a0:ab:76:e6:45:58:4e:34:d3:a8: 8e:3d:47:94:e9:6c:db:a6:35:74:d3:bc:bf:21:11:5e:b4:6c: d8:1c:0d:8d:d1:ae:2c:32:e9:29:92:6c:cb:6a:a7:55:2f:c0: d2:c7:eb:e9:ad:3c:07:03:eb:b9:9b:d2:83:47:9c:18:c6:78: a9:46:8f:a8 -----BEGIN CERTIFICATE----- MIIFtjCCBJ6gAwIBAgIUWRXesotwJWWBPFjbKKew1b0gtbgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDExOTExMDQ0MFoX DTI3MDExODExMDk0MFowMzExMC8GA1UEAxMoOUQxMEZDNkUzOTE1ODdDQjFGNzhF OEI2M0ZFRDBFNUI0NkRDOEQ2NjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJuNmcFvwkUwCeuZ2czS9wsZPWj1uPt3lCOaePUpjBCLDJHH0VY012U3BfDB IcIk2vjizY2D9T/7ZYHuzdP9x7PTnpkhZSLGNiYDA9K9v70Z38wZQqXJjECD5ZKe QS4QSV5axPeLvMyGLIEnoiy64s0LN1BCKNLOzBUUZK6XwU5DWs1Wjx/FdMboLg8o nKkgL5kwkDbr3HgJv9QEyEmOUVxv2PXeCsCew8cKRHSLJg8hSe0w+BGdRSomycti wxlLXFehTJfUIUYthuuRI2OD/c/3bCW7Yc/bDudw/CKz5z6ifdF1MMolIB1wDMgJ jwb4woWtVX5H+iENr2vrYXen0xMCAwEAAaOCAqkwggKlMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFJ0Q/G45FYfLH3jotj/tDltG3I1mMB8GA1UdIwQYMBaAFKVu hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTA2NTU4ODMzNTUyNDk3MDQ5Ny8wLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDY1NTg4MzM1NTI0OTcwNDk3 LzAvOUQxMEZDNkUzOTE1ODdDQjFGNzhFOEI2M0ZFRDBFNUI0NkRDOEQ2Ni5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUH AQcBAf8EHzAdMAwEAgABMAYDBAJnDwQwDQQCAAIwBwMFACQEwwAwDQYJKoZIhvcN AQELBQADggEBAFWhLgFGM8EeEdjPq39T89enTilfOCcWfov9S+YoieV4Qm1tNk60 lUn2qN5kacLQIo/YzIbxbI97GcAyvEkwZsil5UlL1fsBwm+3Gj2bYTBbc58diA3S WhSwRo/kEtWMT4SKANUtt8Z7HP0t8gj5bnvWeRRhZRuAptfjURtlKrZo1aAJvUc/ cWVXReKu1h9Is7pi8XLu1lPUaGq5hpoF7FVxjepJ/uDykLzJp6MzpkUZCsO+AgSM WY8hL8NNoKt25kVYTjTTqI49R5TpbNumNXTTvL8hEV60bNgcDY3Rriwy6SmSbMtq p1UvwNLH6+mtPAcD67mb0oNHnBjGeKlGj6g= -----END CERTIFICATE-----Generated at Sun Jan 25 05:55:42 2026 by rpki-client