This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9E07B02EF274E339B3C4B2259855E52AFD2C0115.cer File: 9E07B02EF274E339B3C4B2259855E52AFD2C0115.cer (raw, json) Hash identifier: NZSwJ5I3iCelbF2mZ6ZGjxy9bqjOHcT4Xz1v4nU6NzU= Subject key identifier: 9E:07:B0:2E:F2:74:E3:39:B3:C4:B2:25:98:55:E5:2A:FD:2C:01:15 Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Certificate serial: 68391E37308FAC2FEFF78397452ABACB598C2120 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1065588993548156930/0/9E07B02EF274E339B3C4B2259855E52AFD2C0115.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1065588993548156930/0/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Mon 19 Jan 2026 11:05:34 +0000 Certificate not after: Mon 18 Jan 2027 11:10:34 +0000 Subordinate resources: IP: 101.251.192.0/18 IP: 103.244.232.0/22 IP: 103.252.36.0/22 IP: 106.2.128.0/19 IP: 106.3.128.0/19 IP: 119.61.160.0 -- 119.61.255.255 IP: 210.73.208.0/20 IP: 218.244.96.0/20 IP: 2400:5280::/32 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 19:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:39:1e:37:30:8f:ac:2f:ef:f7:83:97:45:2a:ba:cb:59:8c:21:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Validity Not Before: Jan 19 11:05:34 2026 GMT Not After : Jan 18 11:10:34 2027 GMT Subject: CN=9E07B02EF274E339B3C4B2259855E52AFD2C0115 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:ee:80:28:7d:05:a2:08:46:fc:f3:57:75:34: e8:9f:5f:31:7c:ff:78:92:4d:63:77:8f:09:a5:3e: 36:f0:57:aa:72:09:fc:c4:ab:28:10:2a:44:e5:88: 28:0b:67:53:84:cc:06:9b:77:8d:d6:89:c2:72:60: 05:5a:e6:5a:bd:97:45:c7:c2:9e:79:84:c5:89:3a: aa:5a:74:3e:be:25:9c:f1:8a:ae:51:39:71:dc:48: 5d:ff:3f:45:b9:1f:e6:53:7b:6a:46:5b:7e:c8:44: 67:f2:4b:24:10:6b:ce:fc:fc:4e:28:99:72:5e:af: 41:c7:59:20:86:56:7f:a7:3b:23:c6:a2:c6:9a:16: a9:21:12:b2:6e:88:c4:e2:01:6a:78:64:41:4d:0d: ab:07:4e:37:66:16:fb:4f:1e:a8:c9:48:61:8c:91: 1a:7a:fe:62:bf:e7:45:91:ed:9e:c1:12:eb:32:e6: 56:a2:f6:dc:50:b8:3e:c5:cc:e5:24:ab:bb:0a:dd: ca:97:de:d3:76:23:79:70:80:4d:5f:5b:0f:c0:e1: 44:9d:78:c3:b0:9b:63:2a:70:15:d8:6e:e0:32:e7: 98:d3:88:57:57:0e:63:c7:ad:6c:a5:29:d5:bb:88: ce:a6:82:3f:d5:d3:47:6b:ce:56:de:6d:fa:65:36: 0c:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 9E:07:B0:2E:F2:74:E3:39:B3:C4:B2:25:98:55:E5:2A:FD:2C:01:15 X509v3 Authority Key Identifier: keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548156930/0/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548156930/0/9E07B02EF274E339B3C4B2259855E52AFD2C0115.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 101.251.192.0/18 103.244.232.0/22 103.252.36.0/22 106.2.128.0/19 106.3.128.0/19 119.61.160.0-119.61.255.255 210.73.208.0/20 218.244.96.0/20 IPv6: 2400:5280::/32 Signature Algorithm: sha256WithRSAEncryption 61:0c:59:b6:e5:ce:b3:5d:04:9f:f7:c9:3e:69:08:0d:83:ee: f2:50:0f:f2:ef:fa:a0:9b:62:50:3e:be:8f:c9:a3:14:78:17: 8c:34:88:ca:64:3f:c0:cb:93:7d:af:2c:b3:ab:55:0e:8e:39: 0e:4d:20:cd:5c:53:e3:ee:3a:22:ac:f7:26:0c:07:d3:96:8c: 39:53:11:d6:2f:ba:eb:c6:e5:fc:21:97:48:50:c2:b6:a9:b8: 2a:ec:81:6d:eb:ba:ba:eb:67:77:3c:51:bd:3e:50:3a:b9:95: 15:20:22:d2:62:9e:f2:ec:2b:f6:e4:26:88:bf:50:ef:60:86: 15:c5:58:84:ab:d5:a6:3f:69:3b:6f:d3:38:dd:9e:33:0a:a0: 0d:71:23:d3:17:06:b8:7c:14:6c:5e:e6:cc:d2:eb:aa:52:48: 83:3f:49:91:b0:e9:9e:6f:d2:06:d9:c7:78:a6:5c:d4:07:a6: 33:55:eb:27:a1:a5:1a:0e:b4:39:50:f6:b2:43:2f:e0:1c:90: c6:e8:57:37:81:94:4b:c6:c3:54:ee:63:69:4d:fb:dc:a5:c2: 69:ca:79:a4:6b:53:38:a0:f8:8c:d4:67:b8:9b:03:8c:c9:7a: 09:10:30:9e:85:5b:3e:2c:93:9c:76:aa:9f:94:c2:f6:d0:2c: c5:87:b7:b0 -----BEGIN CERTIFICATE----- MIIF5zCCBM+gAwIBAgIUaDkeNzCPrC/v94OXRSq6y1mMISAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDExOTExMDUzNFoX DTI3MDExODExMTAzNFowMzExMC8GA1UEAxMoOUUwN0IwMkVGMjc0RTMzOUIzQzRC MjI1OTg1NUU1MkFGRDJDMDExNTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALLugCh9BaIIRvzzV3U06J9fMXz/eJJNY3ePCaU+NvBXqnIJ/MSrKBAqROWI KAtnU4TMBpt3jdaJwnJgBVrmWr2XRcfCnnmExYk6qlp0Pr4lnPGKrlE5cdxIXf8/ Rbkf5lN7akZbfshEZ/JLJBBrzvz8TiiZcl6vQcdZIIZWf6c7I8aixpoWqSESsm6I xOIBanhkQU0NqwdON2YW+08eqMlIYYyRGnr+Yr/nRZHtnsES6zLmVqL23FC4PsXM 5SSruwrdypfe03YjeXCATV9bD8DhRJ14w7CbYypwFdhu4DLnmNOIV1cOY8etbKUp 1buIzqaCP9XTR2vOVt5t+mU2DGsCAwEAAaOCAtowggLWMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFJ4HsC7ydOM5s8SyJZhV5Sr9LAEVMB8GA1UdIwQYMBaAFKVu hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTA2NTU4ODk5MzU0ODE1NjkzMC8wLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDY1NTg4OTkzNTQ4MTU2OTMw LzAvOUUwN0IwMkVGMjc0RTMzOUIzQzRCMjI1OTg1NUU1MkFGRDJDMDExNS5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwXwYIKwYBBQUH AQcBAf8EUDBOMD0EAgABMDcDBAZl+8ADBAJn9OgDBAJn/CQDBAVqAoADBAVqA4Aw CwMEBXc9oAMDAXc8AwQE0knQAwQE2vRgMA0EAgACMAcDBQAkAFKAMA0GCSqGSIb3 DQEBCwUAA4IBAQBhDFm25c6zXQSf98k+aQgNg+7yUA/y7/qgm2JQPr6PyaMUeBeM NIjKZD/Ay5N9ryyzq1UOjjkOTSDNXFPj7joirPcmDAfTlow5UxHWL7rrxuX8IZdI UMK2qbgq7IFt67q662d3PFG9PlA6uZUVICLSYp7y7Cv25CaIv1DvYIYVxViEq9Wm P2k7b9M43Z4zCqANcSPTFwa4fBRsXubM0uuqUkiDP0mRsOmeb9IG2cd4plzUB6Yz VesnoaUaDrQ5UPayQy/gHJDG6Fc3gZRLxsNU7mNpTfvcpcJpynmka1M4oPiM1Ge4 mwOMyXoJEDCehVs+LJOcdqqflML20CzFh7ew -----END CERTIFICATE-----Generated at Sun Jan 25 06:01:38 2026 by rpki-client