This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9E09269F04335C992685B10E8709F2C95DC5E8DE.cer File: 9E09269F04335C992685B10E8709F2C95DC5E8DE.cer (raw, json) Hash identifier: 4o5p5FvIRUKEXzvBSAW2cFmuuaE8D195B7EyokmmSeM= Subject key identifier: 9E:09:26:9F:04:33:5C:99:26:85:B1:0E:87:09:F2:C9:5D:C5:E8:DE Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Certificate serial: 55873AB3500DB6F98694D578FF7522F05B6FD1BD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/0/9E09269F04335C992685B10E8709F2C95DC5E8DE.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/0/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Mon 19 Jan 2026 10:50:57 +0000 Certificate not after: Mon 18 Jan 2027 10:55:57 +0000 Subordinate resources: AS: 55990 AS: 63727 AS: 139124 AS: 139144 IP: 1.92.0.0/16 IP: 1.94.0.0/15 IP: 14.130.0.0/15 IP: 42.196.0.0 -- 42.198.255.255 IP: 43.226.168.0 -- 43.226.215.255 IP: 43.226.240.0 -- 43.227.7.255 IP: 43.227.36.0 -- 43.227.51.255 IP: 43.227.96.0/21 IP: 43.249.152.0 -- 43.249.167.255 IP: 43.254.0.0/22 IP: 49.4.0.0/17 IP: 49.220.0.0/16 IP: 49.222.0.0/16 IP: 60.201.0.0 -- 60.204.255.255 IP: 101.54.0.0/16 IP: 101.104.0.0/17 IP: 101.105.0.0 -- 101.107.255.255 IP: 101.245.0.0/16 IP: 103.31.200.0/22 IP: 103.39.160.0/19 IP: 103.40.16.0 -- 103.40.47.255 IP: 103.45.80.0/20 IP: 103.45.192.0/19 IP: 103.46.0.0/22 IP: 103.46.152.0 -- 103.46.167.255 IP: 103.46.172.0 -- 103.46.183.255 IP: 103.161.220.0/23 IP: 110.41.0.0/16 IP: 113.44.0.0/14 IP: 114.115.128.0 -- 114.116.255.255 IP: 115.32.0.0/14 IP: 115.120.0.0/16 IP: 115.173.0.0/17 IP: 115.175.0.0/16 IP: 116.61.0.0/16 IP: 116.63.0.0/16 IP: 116.196.192.0/18 IP: 116.204.0.0/17 IP: 116.205.0.0/16 IP: 116.216.0.0/16 IP: 116.218.0.0/16 IP: 116.243.0.0/16 IP: 117.78.0.0/18 IP: 117.100.0.0/17 IP: 117.101.0.0/16 IP: 118.198.0.0/16 IP: 118.207.0.0/16 IP: 118.244.0.0/17 IP: 118.246.0.0/16 IP: 119.3.0.0/16 IP: 120.46.0.0/16 IP: 121.36.0.0/15 IP: 121.71.0.0/16 IP: 122.9.0.0/16 IP: 122.112.128.0/17 IP: 123.60.0.0/16 IP: 123.196.128.0 -- 123.197.127.255 IP: 123.249.0.0/17 IP: 124.15.0.0/17 IP: 124.70.0.0/15 IP: 124.203.0.0/17 IP: 175.189.0.0/16 IP: 175.190.128.0 -- 175.191.255.255 IP: 180.86.0.0/16 IP: 180.89.128.0 -- 180.90.255.255 IP: 218.245.64.0/18 IP: 220.114.0.0/16 IP: 223.20.0.0/15 IP: 223.201.0.0/16 IP: 223.208.0.0/15 IP: 2407:c080::/32 IP: 2409:1000:: -- 2409:27ff:ffff:ffff:ffff:ffff:ffff:ffff Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 19:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:87:3a:b3:50:0d:b6:f9:86:94:d5:78:ff:75:22:f0:5b:6f:d1:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Validity Not Before: Jan 19 10:50:57 2026 GMT Not After : Jan 18 10:55:57 2027 GMT Subject: CN=9E09269F04335C992685B10E8709F2C95DC5E8DE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:7d:d8:85:48:ed:4c:67:56:8f:ef:30:c5:ae: 0f:ae:95:42:0b:af:08:19:03:7d:99:49:a0:2b:ea: 32:6e:36:48:a3:ec:8a:4b:3a:ab:26:1b:56:cd:63: 65:f1:16:09:c9:2a:a6:58:40:b6:4a:5c:55:ba:a7: 44:33:ad:58:10:15:de:6a:b7:91:db:19:38:da:61: 2d:16:26:fb:5c:e7:cf:d1:81:44:f7:15:58:2d:cb: e4:0b:52:e1:e7:8f:a5:7b:cb:61:01:7d:5e:96:69: ff:7e:fa:32:f6:d4:d8:81:4d:6b:4a:7d:34:15:e3: 84:ff:2e:bf:44:cf:4c:1e:fa:d6:8a:ff:6e:9d:2b: 49:5a:cd:7d:3f:ef:2d:03:e0:a3:b8:f3:86:be:d2: 92:c8:36:27:3d:90:00:da:21:9b:88:55:80:6e:f3: e9:92:19:0b:03:7f:db:b6:9e:68:13:d4:a3:7f:23: da:19:46:c6:07:64:1d:44:da:e2:fd:ee:d6:9c:bc: 3a:3d:22:ef:ea:c6:ab:42:bf:31:76:10:b0:c2:83: a9:bf:d1:bf:e1:97:77:0f:9d:4e:40:2d:d3:7a:4e: 86:50:60:d4:52:a9:7b:e4:e1:c7:4c:c6:c2:ea:e9: ea:fa:da:d4:24:c6:b2:04:19:9d:d6:fe:68:f0:8a: 71:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 9E:09:26:9F:04:33:5C:99:26:85:B1:0E:87:09:F2:C9:5D:C5:E8:DE X509v3 Authority Key Identifier: keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/0/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/0/9E09269F04335C992685B10E8709F2C95DC5E8DE.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 1.92.0.0/16 1.94.0.0/15 14.130.0.0/15 42.196.0.0-42.198.255.255 43.226.168.0-43.226.215.255 43.226.240.0-43.227.7.255 43.227.36.0-43.227.51.255 43.227.96.0/21 43.249.152.0-43.249.167.255 43.254.0.0/22 49.4.0.0/17 49.220.0.0/16 49.222.0.0/16 60.201.0.0-60.204.255.255 101.54.0.0/16 101.104.0.0/17 101.105.0.0-101.107.255.255 101.245.0.0/16 103.31.200.0/22 103.39.160.0/19 103.40.16.0-103.40.47.255 103.45.80.0/20 103.45.192.0/19 103.46.0.0/22 103.46.152.0-103.46.167.255 103.46.172.0-103.46.183.255 103.161.220.0/23 110.41.0.0/16 113.44.0.0/14 114.115.128.0-114.116.255.255 115.32.0.0/14 115.120.0.0/16 115.173.0.0/17 115.175.0.0/16 116.61.0.0/16 116.63.0.0/16 116.196.192.0/18 116.204.0.0/17 116.205.0.0/16 116.216.0.0/16 116.218.0.0/16 116.243.0.0/16 117.78.0.0/18 117.100.0.0/17 117.101.0.0/16 118.198.0.0/16 118.207.0.0/16 118.244.0.0/17 118.246.0.0/16 119.3.0.0/16 120.46.0.0/16 121.36.0.0/15 121.71.0.0/16 122.9.0.0/16 122.112.128.0/17 123.60.0.0/16 123.196.128.0-123.197.127.255 123.249.0.0/17 124.15.0.0/17 124.70.0.0/15 124.203.0.0/17 175.189.0.0/16 175.190.128.0-175.191.255.255 180.86.0.0/16 180.89.128.0-180.90.255.255 218.245.64.0/18 220.114.0.0/16 223.20.0.0/15 223.201.0.0/16 223.208.0.0/15 IPv6: 2407:c080::/32 2409:1000::-2409:27ff:ffff:ffff:ffff:ffff:ffff:ffff sbgp-autonomousSysNum: critical Autonomous System Numbers: 55990 63727 139124 139144 Signature Algorithm: sha256WithRSAEncryption 95:e7:19:b7:f6:f8:71:6c:b4:50:ed:63:4e:57:f5:4c:d8:6d: f6:c6:0c:32:36:a4:31:ab:ac:5b:bc:bd:5f:8e:fd:ad:d1:a1: 12:3e:b8:fa:51:2a:b6:3e:b4:84:f6:8f:de:9e:66:bc:04:49: ac:c9:93:ca:64:9b:d2:2c:16:b6:75:67:54:d6:de:32:d1:15: fc:65:be:36:85:6c:9e:f1:32:46:82:9f:f0:9c:4c:9a:31:89: b0:85:86:8f:2b:6d:b3:fd:0b:48:62:0d:05:f7:be:37:45:be: 98:ab:83:6c:ec:c5:29:eb:55:99:6a:fa:14:58:b6:eb:af:b4: 1a:ac:92:d2:31:73:7f:de:4c:d1:18:c1:b0:02:83:f3:47:da: 75:05:5a:c8:a1:da:f2:f9:14:c4:0c:80:1c:a1:f5:1b:02:bb: ab:ce:36:3a:a3:c9:76:e5:55:34:00:d3:fb:40:15:91:5f:88: 61:8e:a1:21:9c:2e:09:c0:8c:dd:fe:6b:49:53:d4:a2:69:c5: b1:73:62:60:27:95:c9:3f:b9:01:42:3a:e8:7d:53:8a:17:d3: 01:4b:2c:33:c5:68:f0:18:ae:c9:7c:42:c3:35:0b:b5:cc:dc: a9:ef:fb:9b:18:70:f0:c9:ce:35:f8:ed:38:aa:b2:ec:23:b0: a2:8a:06:58 -----BEGIN CERTIFICATE----- MIIH2zCCBsOgAwIBAgIUVYc6s1ANtvmGlNV4/3Ui8Ftv0b0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDExOTEwNTA1N1oX DTI3MDExODEwNTU1N1owMzExMC8GA1UEAxMoOUUwOTI2OUYwNDMzNUM5OTI2ODVC MTBFODcwOUYyQzk1REM1RThERTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAL192IVI7UxnVo/vMMWuD66VQguvCBkDfZlJoCvqMm42SKPsiks6qyYbVs1j ZfEWCckqplhAtkpcVbqnRDOtWBAV3mq3kdsZONphLRYm+1znz9GBRPcVWC3L5AtS 4eePpXvLYQF9XpZp/376MvbU2IFNa0p9NBXjhP8uv0TPTB761or/bp0rSVrNfT/v LQPgo7jzhr7Sksg2Jz2QANohm4hVgG7z6ZIZCwN/27aeaBPUo38j2hlGxgdkHUTa 4v3u1py8Oj0i7+rGq0K/MXYQsMKDqb/Rv+GXdw+dTkAt03pOhlBg1FKpe+Thx0zG wurp6vra1CTGsgQZndb+aPCKcaMCAwEAAaOCBM4wggTKMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFJ4JJp8EM1yZJoWxDocJ8sldxejeMB8GA1UdIwQYMBaAFKVu hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTA2NTU4NTM4OTI2NTIyMzY4MS8wLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDY1NTg1Mzg5MjY1MjIzNjgx LzAvOUUwOTI2OUYwNDMzNUM5OTI2ODVCMTBFODcwOUYyQzk1REM1RThERS5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwggImBggrBgEF BQcBBwEB/wSCAhUwggIRMIIB8AQCAAEwggHoAwMAAVwDAwEBXgMDAQ6CMAoDAwIq xAMDACrGMAwDBAMr4qgDBAMr4tAwDAMEBCvi8AMEAyvjADAMAwQCK+MkAwQCK+Mw AwQDK+NgMAwDBAMr+ZgDBAMr+aADBAIr/gADBAcxBAADAwAx3AMDADHeMAoDAwA8 yQMDADzMAwMAZTYDBAdlaAAwCgMDAGVpAwMCZWgDAwBl9QMEAmcfyAMEBWcnoDAM AwQEZygQAwQEZyggAwQEZy1QAwQFZy3AAwQCZy4AMAwDBANnLpgDBANnLqAwDAME AmcurAMEA2cusAMEAWeh3AMDAG4pAwMCcSwwCwMEB3JzgAMDAHJ0AwMCcyADAwBz eAMEB3OtAAMDAHOvAwMAdD0DAwB0PwMEBnTEwAMEB3TMAAMDAHTNAwMAdNgDAwB0 2gMDAHTzAwQGdU4AAwQHdWQAAwMAdWUDAwB2xgMDAHbPAwQHdvQAAwMAdvYDAwB3 AwMDAHguAwMBeSQDAwB5RwMDAHoJAwQHenCAAwMAezwwDAMEB3vEgAMEB3vFAAME B3v5AAMEB3wPAAMDAXxGAwQHfMsAAwMAr70wCwMEB6++gAMDBq+AAwMAtFYwCwME B7RZgAMDALRaAwQG2vVAAwMA3HIDAwHfFAMDAN/JAwMB39AwGwQCAAIwFQMFACQH wIAwDAMEBCQJEAMEAyQJIDApBggrBgEFBQcBCAEB/wQaMBigFjAUAgMA2rYCAwD4 7wIDAh90AgMCH4gwDQYJKoZIhvcNAQELBQADggEBAJXnGbf2+HFstFDtY05X9UzY bfbGDDI2pDGrrFu8vV+O/a3RoRI+uPpRKrY+tIT2j96eZrwESazJk8pkm9IsFrZ1 Z1TW3jLRFfxlvjaFbJ7xMkaCn/CcTJoxibCFho8rbbP9C0hiDQX3vjdFvpirg2zs xSnrVZlq+hRYtuuvtBqsktIxc3/eTNEYwbACg/NH2nUFWsih2vL5FMQMgByh9RsC u6vONjqjyXblVTQA0/tAFZFfiGGOoSGcLgnAjN3+a0lT1KJpxbFzYmAnlck/uQFC Ouh9U4oX0wFLLDPFaPAYrsl8QsM1C7XM3Knv+5sYcPDJzjX47TiqsuwjsKKKBlg= -----END CERTIFICATE-----Generated at Sun Jan 25 06:01:40 2026 by rpki-client