This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EC9E1C840C8705E754C2E3FF32A44FB9D78101D4.cer File: EC9E1C840C8705E754C2E3FF32A44FB9D78101D4.cer (raw, json) Hash identifier: ezVTA/nlfREpbkG/ZqcomLpofOyd+uODmdVKnfZn+nQ= Subject key identifier: EC:9E:1C:84:0C:87:05:E7:54:C2:E3:FF:32:A4:4F:B9:D7:81:01:D4 Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Certificate serial: 241C72CF4CCA148DEB269EF62088ECF846D783B9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1065579796714487809/0/EC9E1C840C8705E754C2E3FF32A44FB9D78101D4.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1065579796714487809/0/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Mon 19 Jan 2026 10:28:42 +0000 Certificate not after: Mon 18 Jan 2027 10:33:42 +0000 Subordinate resources: AS: 58854 IP: 27.0.132.0/22 IP: 43.242.72.0/22 IP: 45.119.60.0/22 IP: 45.126.120.0/22 IP: 103.27.4.0/22 IP: 103.59.112.0/22 IP: 103.64.156.0/22 IP: 103.64.212.0/22 IP: 103.73.136.0/21 IP: 103.81.8.0/22 IP: 103.81.16.0/21 IP: 103.105.60.0/22 IP: 103.236.252.0/22 IP: 150.242.96.0/22 IP: 211.155.96.0/19 IP: 2400:60c0::/32 IP: 2400:73c0::/32 IP: 2400:74c0::/32 IP: 2402:2bc0::/32 IP: 2402:d980::/32 IP: 2407:7d00::/32 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 19:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:1c:72:cf:4c:ca:14:8d:eb:26:9e:f6:20:88:ec:f8:46:d7:83:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Validity Not Before: Jan 19 10:28:42 2026 GMT Not After : Jan 18 10:33:42 2027 GMT Subject: CN=EC9E1C840C8705E754C2E3FF32A44FB9D78101D4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:04:64:62:37:b1:a2:7d:4a:93:80:b9:58:b7: a9:1e:0d:03:06:37:32:86:16:d0:61:f4:90:e2:f3: 02:94:c2:77:a5:bb:f4:d4:d5:8c:f0:d3:2b:ac:df: 40:fa:1d:80:0a:f1:34:3c:27:21:42:2f:f8:bc:e5: 58:cc:b1:b2:ad:0b:74:67:b1:45:fd:ff:08:a0:e8: 44:71:2b:49:97:82:01:17:7c:24:2e:c4:7d:ba:25: 61:2b:54:37:82:1d:9c:11:c4:76:b2:d5:7f:77:a7: ab:e0:8f:4b:23:0d:72:e1:44:3b:0a:75:98:7d:e2: 0a:9c:77:0d:23:b3:91:03:4d:89:ba:b2:14:e6:6e: 7d:ea:f6:48:12:e6:9c:25:99:01:0f:bd:3d:1d:7c: 67:15:2e:a8:af:9a:fd:f8:8f:69:e9:36:a5:b0:ca: 6d:d3:74:ef:39:86:d8:64:a9:c6:36:b1:89:47:6e: fd:fa:f1:b5:0e:1d:f7:a0:92:46:c9:3e:49:67:2f: d4:98:39:39:da:fb:28:3a:0c:8e:da:c2:bc:42:cd: 9a:4c:be:46:97:52:e7:27:5c:ab:c5:d9:73:a4:7c: 07:3d:91:2c:a7:44:7d:dd:0b:21:1f:14:59:ee:b1: a4:f9:2e:bc:36:41:9d:4c:45:46:ff:d9:09:9e:23: a6:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: EC:9E:1C:84:0C:87:05:E7:54:C2:E3:FF:32:A4:4F:B9:D7:81:01:D4 X509v3 Authority Key Identifier: keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714487809/0/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714487809/0/EC9E1C840C8705E754C2E3FF32A44FB9D78101D4.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 27.0.132.0/22 43.242.72.0/22 45.119.60.0/22 45.126.120.0/22 103.27.4.0/22 103.59.112.0/22 103.64.156.0/22 103.64.212.0/22 103.73.136.0/21 103.81.8.0/22 103.81.16.0/21 103.105.60.0/22 103.236.252.0/22 150.242.96.0/22 211.155.96.0/19 IPv6: 2400:60c0::/32 2400:73c0::/32 2400:74c0::/32 2402:2bc0::/32 2402:d980::/32 2407:7d00::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 58854 Signature Algorithm: sha256WithRSAEncryption 4d:71:30:57:63:21:a6:01:d2:8e:21:50:8e:f9:77:6c:ac:41: 09:87:c8:5d:40:4e:fe:8c:48:10:59:b9:59:db:63:51:65:b7: 7c:80:24:e7:b8:47:1b:e8:2d:da:65:12:90:0b:18:32:2a:8a: 34:c0:cc:fb:4c:cf:3b:2f:3b:32:32:83:31:14:04:d7:f7:51: 68:23:0f:75:5d:b5:1d:af:56:a9:45:76:7c:98:86:d5:73:34: 78:e6:b6:28:15:68:1f:9d:25:f1:28:12:dd:3a:f3:4e:ae:d6: f7:79:fc:34:1e:fb:11:84:bd:94:f2:58:08:8b:95:a1:43:55: ff:5f:b0:56:2b:36:53:e6:12:ea:4d:fa:8a:76:c0:72:a3:7f: 1a:e9:a8:45:a7:ad:a1:a4:fb:a4:b7:38:1f:89:28:3c:e4:2d: 08:62:15:b7:93:8d:13:86:1b:5b:64:8b:fe:f1:6b:2f:1f:16: 5a:e8:a6:5a:76:0f:1b:86:44:35:0b:7a:2b:0f:b8:bf:15:42: 92:66:01:0a:ab:5d:f2:27:a6:bc:e2:77:41:9e:28:52:68:48: b5:f2:9f:6f:0f:1c:46:00:1a:83:30:f4:5b:f5:ea:7f:fc:16: 06:e2:58:40:71:b7:a9:d1:07:d1:60:c4:e1:c0:86:81:91:53: 07:94:65:d3 -----BEGIN CERTIFICATE----- MIIGTDCCBTSgAwIBAgIUJBxyz0zKFI3rJp72IIjs+EbXg7kwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDExOTEwMjg0MloX DTI3MDExODEwMzM0MlowMzExMC8GA1UEAxMoRUM5RTFDODQwQzg3MDVFNzU0QzJF M0ZGMzJBNDRGQjlENzgxMDFENDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMAEZGI3saJ9SpOAuVi3qR4NAwY3MoYW0GH0kOLzApTCd6W79NTVjPDTK6zf QPodgArxNDwnIUIv+LzlWMyxsq0LdGexRf3/CKDoRHErSZeCARd8JC7EfbolYStU N4IdnBHEdrLVf3enq+CPSyMNcuFEOwp1mH3iCpx3DSOzkQNNibqyFOZufer2SBLm nCWZAQ+9PR18ZxUuqK+a/fiPaek2pbDKbdN07zmG2GSpxjaxiUdu/frxtQ4d96CS Rsk+SWcv1Jg5Odr7KDoMjtrCvELNmky+RpdS5ydcq8XZc6R8Bz2RLKdEfd0LIR8U We6xpPkuvDZBnUxFRv/ZCZ4jprMCAwEAAaOCAz8wggM7MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFOyeHIQMhwXnVMLj/zKkT7nXgQHUMB8GA1UdIwQYMBaAFKVu hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTA2NTU3OTc5NjcxNDQ4NzgwOS8wLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDY1NTc5Nzk2NzE0NDg3ODA5 LzAvRUM5RTFDODQwQzg3MDVFNzU0QzJFM0ZGMzJBNDRGQjlENzgxMDFENC5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwgacGCCsGAQUF BwEHAQH/BIGXMIGUMGAEAgABMFoDBAIbAIQDBAIr8kgDBAItdzwDBAItfngDBAJn GwQDBAJnO3ADBAJnQJwDBAJnQNQDBANnSYgDBAJnUQgDBANnURADBAJnaTwDBAJn 7PwDBAKW8mADBAXTm2AwMAQCAAIwKgMFACQAYMADBQAkAHPAAwUAJAB0wAMFACQC K8ADBQAkAtmAAwUAJAd9ADAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMA5eYwDQYJ KoZIhvcNAQELBQADggEBAE1xMFdjIaYB0o4hUI75d2ysQQmHyF1ATv6MSBBZuVnb Y1Flt3yAJOe4RxvoLdplEpALGDIqijTAzPtMzzsvOzIygzEUBNf3UWgjD3VdtR2v VqlFdnyYhtVzNHjmtigVaB+dJfEoEt06806u1vd5/DQe+xGEvZTyWAiLlaFDVf9f sFYrNlPmEupN+op2wHKjfxrpqEWnraGk+6S3OB+JKDzkLQhiFbeTjROGG1tki/7x ay8fFlroplp2DxuGRDULeisPuL8VQpJmAQqrXfInprzid0GeKFJoSLXyn28PHEYA GoMw9Fv16n/8FgbiWEBxt6nRB9FgxOHAhoGRUweUZdM= -----END CERTIFICATE-----Generated at Sun Jan 25 06:01:41 2026 by rpki-client