This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D96931B6DFA45C70AE4FA57DE6DD96DCD91B93E5.cer File: D96931B6DFA45C70AE4FA57DE6DD96DCD91B93E5.cer (raw, json) Hash identifier: RAvjeEnCE9S2Fh5H5blVB0nZ67Fjts7jpoVsXKRh81M= Subject key identifier: D9:69:31:B6:DF:A4:5C:70:AE:4F:A5:7D:E6:DD:96:DC:D9:1B:93:E5 Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Certificate serial: 6CE2E83BDD1A18BC7EEDCB9AEFF64AE549932F30 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1065588553130049539/0/D96931B6DFA45C70AE4FA57DE6DD96DCD91B93E5.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1065588553130049539/0/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Mon 19 Jan 2026 11:13:24 +0000 Certificate not after: Mon 18 Jan 2027 11:18:24 +0000 Subordinate resources: IP: 103.120.96.0/22 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 19:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:e2:e8:3b:dd:1a:18:bc:7e:ed:cb:9a:ef:f6:4a:e5:49:93:2f:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Validity Not Before: Jan 19 11:13:24 2026 GMT Not After : Jan 18 11:18:24 2027 GMT Subject: CN=D96931B6DFA45C70AE4FA57DE6DD96DCD91B93E5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:13:fe:0f:b9:c1:45:ce:ed:d1:61:3d:83:ff: d2:c1:64:02:33:6e:dd:77:69:11:5f:49:55:ec:d6: 38:c6:85:58:aa:75:23:8f:d2:c3:05:3d:b3:6f:b4: 15:c5:20:d9:8d:b3:b1:71:55:cb:65:3a:cb:a5:ce: fe:66:4d:de:18:0e:21:78:01:ef:11:cd:07:ed:90: 45:a6:db:ec:3f:e1:f7:73:0b:54:1e:55:05:e0:50: 95:7a:44:17:ab:80:78:ce:89:75:0c:12:b8:4c:73: 6d:a0:de:6b:ab:86:50:2f:b2:20:95:1d:bd:2b:6d: ef:14:f8:eb:a7:b7:de:c0:ca:28:79:03:c5:64:30: 7a:92:a6:da:4f:61:83:93:8a:3a:ed:97:f8:3a:d6: 96:2e:30:3f:dc:b5:fa:7b:97:25:f7:9c:c4:19:e0: 3e:a6:78:91:94:6a:d1:e1:02:96:58:f0:04:37:32: 97:90:2a:2f:c9:37:97:8e:78:14:ab:8e:b9:95:89: 9b:f2:a4:c3:fb:6e:98:d5:75:c9:cc:fb:a5:2f:7e: e4:bb:7f:5f:0a:08:e0:14:62:fe:c6:07:20:ae:bf: f0:78:d7:82:39:4a:25:d9:c6:f3:b0:ce:56:52:72: 43:af:83:e7:ab:5c:ab:1c:95:93:4e:76:aa:c3:b3: e3:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: D9:69:31:B6:DF:A4:5C:70:AE:4F:A5:7D:E6:DD:96:DC:D9:1B:93:E5 X509v3 Authority Key Identifier: keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553130049539/0/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553130049539/0/D96931B6DFA45C70AE4FA57DE6DD96DCD91B93E5.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.120.96.0/22 Signature Algorithm: sha256WithRSAEncryption 06:b5:ae:f3:06:57:1e:2b:ae:57:9d:63:be:4e:08:de:31:71: 19:5d:0a:10:28:f2:e0:ec:fe:fb:29:bf:e4:a9:62:84:bf:a9: d2:fa:73:59:e6:ee:30:f7:af:29:58:b8:00:be:af:57:ea:4e: b1:9c:2f:cd:65:dc:87:80:43:c8:af:0d:4b:34:90:6e:21:65: dc:2b:78:41:ee:e9:80:72:6d:25:7b:20:a7:cd:bb:3c:5a:45: b7:b8:c0:96:46:04:c8:1b:ce:16:81:c1:36:af:4e:04:64:61: aa:af:0f:7d:42:16:51:35:27:41:2c:98:b1:d1:ef:dd:3a:92: 0e:60:ae:93:0f:55:7d:b2:78:11:90:90:6b:d8:08:85:67:39: e0:83:40:62:d4:1e:20:a6:b8:4c:c1:d7:6f:73:af:7c:61:0a: c4:e4:23:5e:58:cc:5a:42:c5:c3:5d:db:fb:f8:04:f0:4e:82: ee:10:82:04:b8:af:cb:1f:65:24:67:dc:10:56:e5:22:c8:20: 07:fd:dc:d5:0c:e0:f2:16:15:58:22:71:ad:2e:b9:fa:4f:91: 60:20:ad:d5:24:a1:8d:0b:b5:34:78:6a:b9:e7:68:59:2f:b0: 05:a3:3f:ad:3a:9e:6b:26:e9:52:2c:d7:0e:1a:3a:a4:52:4e: d1:3a:52:6a -----BEGIN CERTIFICATE----- MIIFpzCCBI+gAwIBAgIUbOLoO90aGLx+7cua7/ZK5UmTLzAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDExOTExMTMyNFoX DTI3MDExODExMTgyNFowMzExMC8GA1UEAxMoRDk2OTMxQjZERkE0NUM3MEFFNEZB NTdERTZERDk2RENEOTFCOTNFNTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOcT/g+5wUXO7dFhPYP/0sFkAjNu3XdpEV9JVezWOMaFWKp1I4/SwwU9s2+0 FcUg2Y2zsXFVy2U6y6XO/mZN3hgOIXgB7xHNB+2QRabb7D/h93MLVB5VBeBQlXpE F6uAeM6JdQwSuExzbaDea6uGUC+yIJUdvStt7xT466e33sDKKHkDxWQwepKm2k9h g5OKOu2X+DrWli4wP9y1+nuXJfecxBngPqZ4kZRq0eEClljwBDcyl5AqL8k3l454 FKuOuZWJm/Kkw/tumNV1ycz7pS9+5Lt/XwoI4BRi/sYHIK6/8HjXgjlKJdnG87DO VlJyQ6+D56tcqxyVk052qsOz4xcCAwEAAaOCApowggKWMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFNlpMbbfpFxwrk+lfebdltzZG5PlMB8GA1UdIwQYMBaAFKVu hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTA2NTU4ODU1MzEzMDA0OTUzOS8wLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDY1NTg4NTUzMTMwMDQ5NTM5 LzAvRDk2OTMxQjZERkE0NUM3MEFFNEZBNTdERTZERDk2RENEOTFCOTNFNS5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAJneGAwDQYJKoZIhvcNAQELBQADggEBAAa1rvMG Vx4rrledY75OCN4xcRldChAo8uDs/vspv+SpYoS/qdL6c1nm7jD3rylYuAC+r1fq TrGcL81l3IeAQ8ivDUs0kG4hZdwreEHu6YBybSV7IKfNuzxaRbe4wJZGBMgbzhaB wTavTgRkYaqvD31CFlE1J0EsmLHR7906kg5grpMPVX2yeBGQkGvYCIVnOeCDQGLU HiCmuEzB129zr3xhCsTkI15YzFpCxcNd2/v4BPBOgu4QggS4r8sfZSRn3BBW5SLI IAf93NUM4PIWFVgica0uufpPkWAgrdUkoY0LtTR4arnnaFkvsAWjP606nmsm6VIs 1w4aOqRSTtE6Umo= -----END CERTIFICATE-----Generated at Sun Jan 25 06:01:34 2026 by rpki-client