This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D9EB5C6DC17682949F5243587DA38740C3EEA953.cer File: D9EB5C6DC17682949F5243587DA38740C3EEA953.cer (raw, json) Hash identifier: /FA7jRK3TFVIZmzcVaowfTajG/XuhwTMlrG8lF4bsFg= Subject key identifier: D9:EB:5C:6D:C1:76:82:94:9F:52:43:58:7D:A3:87:40:C3:EE:A9:53 Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Certificate serial: 1D0DA4B35C6286FF6EF3858B75C23C1CF37C4C55 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1065582330346864641/0/D9EB5C6DC17682949F5243587DA38740C3EEA953.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1065582330346864641/0/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Mon 19 Jan 2026 10:39:21 +0000 Certificate not after: Mon 18 Jan 2027 10:44:21 +0000 Subordinate resources: AS: 63631 -- 63632 IP: 103.77.72.0/22 IP: 103.77.88.0/22 IP: 110.172.224.0/22 IP: 119.161.136.0 -- 119.161.167.255 IP: 2407:8b80::/32 IP: 2407:9080::/32 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 19:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:0d:a4:b3:5c:62:86:ff:6e:f3:85:8b:75:c2:3c:1c:f3:7c:4c:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Validity Not Before: Jan 19 10:39:21 2026 GMT Not After : Jan 18 10:44:21 2027 GMT Subject: CN=D9EB5C6DC17682949F5243587DA38740C3EEA953 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:9a:84:c9:a6:8d:62:35:9c:0a:29:33:44:26: 91:8d:0c:e3:43:f5:cd:19:5c:23:3b:82:19:76:98: 3c:95:76:09:0c:08:45:b9:f3:a3:1c:e9:d5:6a:48: 6d:7a:86:63:e7:9f:59:17:7f:b8:4b:45:35:d2:63: 28:6c:93:a5:77:05:fa:55:42:90:bc:8d:39:e5:7a: 73:63:aa:1c:cc:b2:2f:88:34:f0:0e:1c:ad:78:08: fc:6f:5b:d9:9f:d3:5a:6f:9c:cb:de:9a:65:8a:bd: 2b:55:f9:a6:31:87:6c:73:9d:08:c3:42:19:3d:72: 2e:d3:0d:c9:83:10:fa:29:06:63:0c:ec:0e:5a:79: a8:62:e1:e8:4a:cc:92:11:9a:8b:c5:48:9e:5e:63: ed:1b:bc:23:32:c9:ba:54:02:0f:76:43:ab:4e:6a: df:83:24:5a:ac:5a:4b:90:d9:07:36:52:06:b0:fb: 26:74:f3:58:f6:61:2a:06:aa:8c:ca:c2:c0:11:67: c8:66:de:9b:ba:12:53:0b:71:89:68:8f:1b:ab:8f: 69:4b:84:16:57:a5:ae:31:66:f0:b7:6a:b1:f6:53: 92:af:fc:2e:28:18:1d:19:d7:cf:ee:f8:5c:b3:c6: 6b:1d:da:60:b3:35:55:21:11:1c:3d:ce:d1:f7:0b: 09:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: D9:EB:5C:6D:C1:76:82:94:9F:52:43:58:7D:A3:87:40:C3:EE:A9:53 X509v3 Authority Key Identifier: keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330346864641/0/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330346864641/0/D9EB5C6DC17682949F5243587DA38740C3EEA953.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.77.72.0/22 103.77.88.0/22 110.172.224.0/22 119.161.136.0-119.161.167.255 IPv6: 2407:8b80::/32 2407:9080::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 63631-63632 Signature Algorithm: sha256WithRSAEncryption 6a:75:63:d6:20:f8:0f:1a:09:17:12:49:d6:13:40:fb:49:a7: 79:f6:ed:4d:1f:25:18:92:c3:34:b7:33:01:0a:f2:cb:dc:38: 37:d4:c9:6e:19:d8:b6:10:a2:32:15:a3:c3:f1:a7:cd:ff:0b: 92:c2:98:21:c3:46:3e:31:3e:ec:5e:c7:87:d7:a1:6d:30:b4: 51:f9:65:b6:64:7c:9a:68:f1:a4:51:b8:ec:a2:e8:09:d6:b3: 5f:2c:0b:e3:63:36:19:9b:7c:71:1a:01:ce:e0:81:17:b0:4c: bf:2b:f5:87:2f:f2:71:18:78:85:77:d7:e4:26:b1:a5:7c:61: c1:7c:fd:76:76:53:4d:48:4e:70:4a:b2:c8:31:8a:36:e2:dd: 2d:8e:a9:11:60:4b:20:75:7d:0b:f0:73:22:0f:24:dc:c1:96: 44:c5:6f:dc:df:21:19:44:43:ce:9c:c0:95:4c:10:bb:39:a1: e8:81:e4:d3:a5:1c:ad:6e:24:b5:ef:fc:bf:32:76:d5:aa:aa: 66:8f:02:b6:a1:75:bc:6e:43:e3:c3:6b:e2:f5:2f:15:30:7d: fb:52:b8:34:a0:ba:cc:b5:cb:39:f4:75:54:96:1e:c5:a4:e9: ae:be:34:fe:9f:60:27:9a:a9:53:02:62:3a:94:02:8a:85:c9: 93:2c:ec:c8 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUHQ2ks1xihv9u84WLdcI8HPN8TFUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDExOTEwMzkyMVoX DTI3MDExODEwNDQyMVowMzExMC8GA1UEAxMoRDlFQjVDNkRDMTc2ODI5NDlGNTI0 MzU4N0RBMzg3NDBDM0VFQTk1MzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALaahMmmjWI1nAopM0QmkY0M40P1zRlcIzuCGXaYPJV2CQwIRbnzoxzp1WpI bXqGY+efWRd/uEtFNdJjKGyTpXcF+lVCkLyNOeV6c2OqHMyyL4g08A4crXgI/G9b 2Z/TWm+cy96aZYq9K1X5pjGHbHOdCMNCGT1yLtMNyYMQ+ikGYwzsDlp5qGLh6ErM khGai8VInl5j7Ru8IzLJulQCD3ZDq05q34MkWqxaS5DZBzZSBrD7JnTzWPZhKgaq jMrCwBFnyGbem7oSUwtxiWiPG6uPaUuEFlelrjFm8LdqsfZTkq/8LigYHRnXz+74 XLPGax3aYLM1VSERHD3O0fcLCf0CAwEAAaOCAu0wggLpMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFNnrXG3BdoKUn1JDWH2jh0DD7qlTMB8GA1UdIwQYMBaAFKVu hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTA2NTU4MjMzMDM0Njg2NDY0MS8wLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDY1NTgyMzMwMzQ2ODY0NjQx LzAvRDlFQjVDNkRDMTc2ODI5NDlGNTI0MzU4N0RBMzg3NDBDM0VFQTk1My5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwTwYIKwYBBQUH AQcBAf8EQDA+MCYEAgABMCADBAJnTUgDBAJnTVgDBAJurOAwDAMEA3ehiAMEA3eh oDAUBAIAAjAOAwUAJAeLgAMFACQHkIAwIQYIKwYBBQUHAQgBAf8EEjAQoA4wDDAK AgMA+I8CAwD4kDANBgkqhkiG9w0BAQsFAAOCAQEAanVj1iD4DxoJFxJJ1hNA+0mn efbtTR8lGJLDNLczAQryy9w4N9TJbhnYthCiMhWjw/Gnzf8LksKYIcNGPjE+7F7H h9ehbTC0UflltmR8mmjxpFG47KLoCdazXywL42M2GZt8cRoBzuCBF7BMvyv1hy/y cRh4hXfX5CaxpXxhwXz9dnZTTUhOcEqyyDGKNuLdLY6pEWBLIHV9C/BzIg8k3MGW RMVv3N8hGURDzpzAlUwQuzmh6IHk06UcrW4kte/8vzJ21aqqZo8CtqF1vG5D48Nr 4vUvFTB9+1K4NKC6zLXLOfR1VJYexaTprr40/p9gJ5qpUwJiOpQCioXJkyzsyA== -----END CERTIFICATE-----Generated at Sun Jan 25 05:57:22 2026 by rpki-client