This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.cer File: A19672206A9DA7DF429536C9BFFADA94A8EBA70E.cer (raw, json) Hash identifier: sNRj00wnU9rXiijLyEk2NfkSFqQ1lbVRIrpnhNGa6+M= Subject key identifier: A1:96:72:20:6A:9D:A7:DF:42:95:36:C9:BF:FA:DA:94:A8:EB:A7:0E Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Certificate serial: 4E2D1CBA7FD134A7D8428959AB5AFD20D5D41C2A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Mon 19 Jan 2026 10:22:22 +0000 Certificate not after: Mon 18 Jan 2027 10:27:22 +0000 Subordinate resources: AS: 38365 AS: 45076 AS: 45085 AS: 55967 AS: 63728 -- 63729 AS: 131138 -- 131141 IP: 42.199.0.0/16 IP: 101.247.0.0/17 IP: 103.6.76.0/22 IP: 106.12.0.0/15 IP: 114.110.64.0/18 IP: 114.111.0.0/19 IP: 117.58.0.0/17 IP: 119.75.208.0/20 IP: 120.48.0.0/15 IP: 122.248.48.0/20 IP: 150.242.120.0/22 IP: 180.76.0.0/16 IP: 182.61.0.0/16 IP: 202.181.112.0/20 IP: 2400:da00::/32 IP: 240c:4000::/22 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 19:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:2d:1c:ba:7f:d1:34:a7:d8:42:89:59:ab:5a:fd:20:d5:d4:1c:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Validity Not Before: Jan 19 10:22:22 2026 GMT Not After : Jan 18 10:27:22 2027 GMT Subject: CN=A19672206A9DA7DF429536C9BFFADA94A8EBA70E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:1d:55:65:ed:08:c1:dc:8d:e3:d4:80:09:c6: c1:38:ca:a9:cd:99:73:40:fd:2a:bf:7d:ee:80:ae: eb:eb:53:54:00:e3:b8:dc:9d:09:85:0e:2b:6b:92: 27:7b:47:8d:ca:01:14:9b:f3:8d:cd:5c:80:4a:d8: f0:e7:70:3e:c2:b8:93:49:71:16:69:1c:f5:0c:a0: a5:0a:46:90:5a:10:53:c4:b5:91:f5:30:56:8c:24: 31:ae:99:17:f9:ce:84:91:b9:43:37:be:59:0f:d3: 05:53:cc:52:dd:b9:50:a0:e3:b4:31:6f:61:cd:f3: cc:92:10:54:85:be:d5:80:49:f2:72:e6:14:c6:68: 78:e3:d0:e5:06:3e:95:ec:79:3c:45:0f:f3:fd:c0: a6:b9:ef:c1:4c:98:14:00:30:e2:a5:4d:f4:b8:d6: 51:97:3e:8a:1b:f4:60:5b:50:d8:2a:24:2b:3e:4f: 3f:d2:52:33:a3:c4:fa:4d:aa:d9:e4:3a:a9:7b:61: d9:5a:89:46:4e:18:18:39:7b:81:3c:69:ee:ee:81: 20:39:96:40:c9:29:aa:62:a5:4d:7b:d2:f1:2c:3e: 09:de:65:33:de:43:05:dd:dc:7d:41:bb:0a:58:56: 3e:cd:0d:52:b7:d8:ee:18:3d:3c:13:99:30:25:0f: f1:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: A1:96:72:20:6A:9D:A7:DF:42:95:36:C9:BF:FA:DA:94:A8:EB:A7:0E X509v3 Authority Key Identifier: keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 42.199.0.0/16 101.247.0.0/17 103.6.76.0/22 106.12.0.0/15 114.110.64.0/18 114.111.0.0/19 117.58.0.0/17 119.75.208.0/20 120.48.0.0/15 122.248.48.0/20 150.242.120.0/22 180.76.0.0/16 182.61.0.0/16 202.181.112.0/20 IPv6: 2400:da00::/32 240c:4000::/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 38365 45076 45085 55967 63728-63729 131138-131141 Signature Algorithm: sha256WithRSAEncryption 3d:73:33:99:cc:0e:08:e6:ae:d0:a9:3d:cb:7d:3a:1e:11:ad: 97:9b:9e:75:9c:ae:f3:74:ef:84:bd:b9:7a:93:9e:3a:00:5c: 91:21:a1:24:1e:bd:cd:66:0d:7f:65:dc:8a:c0:17:00:ce:ea: f2:f5:dd:b4:e4:00:e0:27:a4:36:06:5f:00:83:c9:73:76:23: 3d:96:f4:ae:b7:90:8d:e2:5f:a4:06:f0:1b:1c:ba:b7:cf:a6: 27:cf:64:12:73:1d:a3:e9:ae:b4:5c:49:ae:43:ff:74:f1:9c: f1:d0:8e:25:4f:6b:07:c3:d5:35:c1:f5:93:c8:7e:4a:50:2f: 40:68:d0:89:ad:ed:2f:96:c5:42:75:c8:0e:8f:fc:57:b8:12: 47:a7:d5:66:5b:33:3d:f5:ac:3a:89:35:a3:7d:11:f4:04:aa: 45:84:90:d2:7f:4d:5b:96:5e:71:1d:8d:a5:9b:25:e0:a2:03: 32:a2:17:49:7e:58:cd:f5:91:e4:57:20:66:d9:70:53:08:61: 9d:41:76:30:ea:97:ed:8b:b1:32:20:6b:8b:f1:a7:7c:e2:5a: 65:51:23:43:47:15:60:f0:33:6b:14:1f:ff:3f:fd:67:e5:a2: 34:17:4a:45:c1:7b:ce:ce:9f:c2:1b:25:13:89:63:f5:6b:68: b5:ba:ea:f5 -----BEGIN CERTIFICATE----- MIIGSDCCBTCgAwIBAgIUTi0cun/RNKfYQolZq1r9INXUHCowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDExOTEwMjIyMloX DTI3MDExODEwMjcyMlowMzExMC8GA1UEAxMoQTE5NjcyMjA2QTlEQTdERjQyOTUz NkM5QkZGQURBOTRBOEVCQTcwRTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKcdVWXtCMHcjePUgAnGwTjKqc2Zc0D9Kr997oCu6+tTVADjuNydCYUOK2uS J3tHjcoBFJvzjc1cgErY8OdwPsK4k0lxFmkc9QygpQpGkFoQU8S1kfUwVowkMa6Z F/nOhJG5Qze+WQ/TBVPMUt25UKDjtDFvYc3zzJIQVIW+1YBJ8nLmFMZoeOPQ5QY+ lex5PEUP8/3AprnvwUyYFAAw4qVN9LjWUZc+ihv0YFtQ2CokKz5PP9JSM6PE+k2q 2eQ6qXth2VqJRk4YGDl7gTxp7u6BIDmWQMkpqmKlTXvS8Sw+Cd5lM95DBd3cfUG7 ClhWPs0NUrfY7hg9PBOZMCUP8VcCAwEAAaOCAzswggM3MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFKGWciBqnaffQpU2yb/62pSo66cOMB8GA1UdIwQYMBaAFKVu hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTA2NTU3NjcyMzM3MjExMzkyMi8wLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDY1NTc2NzIzMzcyMTEzOTIy LzAvQTE5NjcyMjA2QTlEQTdERjQyOTUzNkM5QkZGQURBOTRBOEVCQTcwRS5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwfQYIKwYBBQUH AQcBAf8EbjBsMFUEAgABME8DAwAqxwMEB2X3AAMEAmcGTAMDAWoMAwQGcm5AAwQF cm8AAwQHdToAAwQEd0vQAwMBeDADBAR6+DADBAKW8ngDAwC0TAMDALY9AwQEyrVw MBMEAgACMA0DBQAkANoAAwQCJAxAMEEGCCsGAQUFBwEIAQH/BDIwMKAuMCwCAwCV 3QIDALAUAgMAsB0CAwDanzAKAgMA+PACAwD48TAKAgMCAEICAwIARTANBgkqhkiG 9w0BAQsFAAOCAQEAPXMzmcwOCOau0Kk9y306HhGtl5uedZyu83TvhL25epOeOgBc kSGhJB69zWYNf2XcisAXAM7q8vXdtOQA4CekNgZfAIPJc3YjPZb0rreQjeJfpAbw Gxy6t8+mJ89kEnMdo+mutFxJrkP/dPGc8dCOJU9rB8PVNcH1k8h+SlAvQGjQia3t L5bFQnXIDo/8V7gSR6fVZlszPfWsOok1o30R9ASqRYSQ0n9NW5ZecR2NpZsl4KID MqIXSX5YzfWR5FcgZtlwUwhhnUF2MOqX7YuxMiBri/GnfOJaZVEjQ0cVYPAzaxQf /z/9Z+WiNBdKRcF7zs6fwhslE4lj9Wtotbrq9Q== -----END CERTIFICATE-----Generated at Sun Jan 25 06:01:09 2026 by rpki-client