This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.cer File: 9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.cer (raw, json) Hash identifier: iF4HYCxHAZ8LZnvERxCcsRpRrd//AossF049Wwz+Aus= Subject key identifier: 9B:F3:4B:38:17:74:8D:3E:69:CC:38:80:F1:3A:83:83:A9:AA:3C:2C Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Certificate serial: 252D1DDBA3823EB02B7582BF6456DBCEB2827DBC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Mon 19 Jan 2026 10:33:14 +0000 Certificate not after: Mon 18 Jan 2027 10:38:14 +0000 Subordinate resources: AS: 59077 IP: 42.240.128.0/17 IP: 101.237.0.0/16 IP: 103.237.28.0/22 IP: 106.75.0.0/16 IP: 113.31.96.0/19 IP: 113.31.144.0 -- 113.31.255.255 IP: 117.50.0.0/16 IP: 163.53.164.0/22 IP: 2401:3480::/32 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 Jan 2026 02:23:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:2d:1d:db:a3:82:3e:b0:2b:75:82:bf:64:56:db:ce:b2:82:7d:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Validity Not Before: Jan 19 10:33:14 2026 GMT Not After : Jan 18 10:38:14 2027 GMT Subject: CN=9BF34B3817748D3E69CC3880F13A8383A9AA3C2C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:da:50:16:24:05:13:73:38:46:f4:79:ea:2b: ba:79:fe:c1:fa:7b:77:10:fa:2f:a6:fb:62:1f:04: ea:7e:cf:9a:50:56:c0:2e:d0:45:2e:84:04:d1:1e: 65:11:44:29:0a:da:f9:e8:0e:8a:c0:85:df:57:75: 84:a5:6a:8a:24:be:0b:ab:9c:24:1f:6d:b4:40:ce: 5a:45:2b:a0:de:50:62:81:48:27:93:cd:7e:b8:5a: df:76:13:f8:12:d0:4d:a4:e9:44:93:0d:3a:36:98: b6:d6:d9:2b:81:77:2f:29:56:76:90:65:75:e9:38: 91:dd:19:22:e9:15:28:d6:dc:90:06:f0:fe:73:65: 86:87:c0:d4:68:3e:2a:52:b4:1c:93:fa:80:82:a4: 86:60:74:e6:e3:df:c5:c1:31:2a:c0:04:dd:92:7d: 24:e5:33:33:47:6c:05:e8:c1:ef:45:3d:61:4d:6e: f6:a1:be:a7:dd:05:01:6a:cf:d2:6a:33:a7:fb:b9: 9e:f6:b6:7b:55:68:b2:76:b9:b7:23:d3:31:63:18: 50:0b:52:0a:e9:2e:4e:b7:aa:33:bd:7b:57:c3:9e: 12:0d:91:63:25:88:27:33:7c:8d:ba:7f:d5:61:52: 7e:71:6b:0a:c5:86:76:c5:b2:74:37:20:42:5e:8e: 9a:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 9B:F3:4B:38:17:74:8D:3E:69:CC:38:80:F1:3A:83:83:A9:AA:3C:2C X509v3 Authority Key Identifier: keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 42.240.128.0/17 101.237.0.0/16 103.237.28.0/22 106.75.0.0/16 113.31.96.0/19 113.31.144.0-113.31.255.255 117.50.0.0/16 163.53.164.0/22 IPv6: 2401:3480::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 59077 Signature Algorithm: sha256WithRSAEncryption 27:d4:33:69:41:6a:3e:d9:c4:fe:25:03:92:a6:fe:2e:38:2a: 9c:1f:1c:31:ec:f6:a6:79:5a:22:29:ee:eb:df:47:9a:c9:2f: c7:4d:02:a5:fc:bd:a3:f4:1b:ff:7e:26:c1:ab:80:6a:3d:c7: 82:27:d0:37:e1:d0:73:d2:a0:21:1d:41:9c:8b:84:b2:2b:a5: 32:1d:ee:c8:da:cd:a8:46:d6:f8:d9:03:a7:49:7a:2e:33:a7: 8e:a0:c9:07:56:94:44:2c:ed:fe:c1:3d:b6:50:9a:c7:e2:fb: a9:4e:41:91:40:fc:61:62:37:40:52:97:b6:6e:c8:ac:6e:44: ed:ec:ec:c1:3c:be:96:cd:bc:88:e4:36:de:21:1f:1c:7e:52: ab:52:ea:84:b8:19:db:f4:bc:a2:7b:d5:d0:5d:cd:de:03:21: aa:e4:03:2e:72:b5:37:b6:4e:38:0f:f2:ed:c2:a5:3a:29:31: 76:5b:e8:fb:0e:b8:22:aa:30:7d:7f:3a:da:4a:4e:8a:4e:66: 0f:f2:ec:d6:95:c2:c0:a6:0c:bc:48:b4:49:43:42:14:3c:aa: de:79:bf:d8:4f:0b:2d:f0:07:d6:7e:87:24:31:6e:b2:0e:b1: 02:e2:2a:8d:ee:61:d8:d0:3b:96:f3:fb:a6:dd:6c:42:a0:b7: 0a:13:d1:3d -----BEGIN CERTIFICATE----- MIIGADCCBOigAwIBAgIUJS0d26OCPrArdYK/ZFbbzrKCfbwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDExOTEwMzMxNFoX DTI3MDExODEwMzgxNFowMzExMC8GA1UEAxMoOUJGMzRCMzgxNzc0OEQzRTY5Q0Mz ODgwRjEzQTgzODNBOUFBM0MyQzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOXaUBYkBRNzOEb0eeorunn+wfp7dxD6L6b7Yh8E6n7PmlBWwC7QRS6EBNEe ZRFEKQra+egOisCF31d1hKVqiiS+C6ucJB9ttEDOWkUroN5QYoFIJ5PNfrha33YT +BLQTaTpRJMNOjaYttbZK4F3LylWdpBldek4kd0ZIukVKNbckAbw/nNlhofA1Gg+ KlK0HJP6gIKkhmB05uPfxcExKsAE3ZJ9JOUzM0dsBejB70U9YU1u9qG+p90FAWrP 0mozp/u5nva2e1Vosna5tyPTMWMYUAtSCukuTreqM717V8OeEg2RYyWIJzN8jbp/ 1WFSfnFrCsWGdsWydDcgQl6OmskCAwEAAaOCAvMwggLvMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFJvzSzgXdI0+acw4gPE6g4OpqjwsMB8GA1UdIwQYMBaAFKVu hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTA2NTU3OTUzNDM5NDU4OTE4Ny8wLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDY1NTc5NTM0Mzk0NTg5MTg3 LzAvOUJGMzRCMzgxNzc0OEQzRTY5Q0MzODgwRjEzQTgzODNBOUFBM0MyQy5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwXAYIKwYBBQUH AQcBAf8ETTBLMDoEAgABMDQDBAcq8IADAwBl7QMEAmftHAMDAGpLAwQFcR9gMAsD BARxH5ADAwVxAAMDAHUyAwQCozWkMA0EAgACMAcDBQAkATSAMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwDmxTANBgkqhkiG9w0BAQsFAAOCAQEAJ9QzaUFqPtnE/iUD kqb+LjgqnB8cMez2pnlaIinu699Hmskvx00Cpfy9o/Qb/34mwauAaj3HgifQN+HQ c9KgIR1BnIuEsiulMh3uyNrNqEbW+NkDp0l6LjOnjqDJB1aURCzt/sE9tlCax+L7 qU5BkUD8YWI3QFKXtm7IrG5E7ezswTy+ls28iOQ23iEfHH5Sq1LqhLgZ2/S8onvV 0F3N3gMhquQDLnK1N7ZOOA/y7cKlOikxdlvo+w64IqowfX862kpOik5mD/Ls1pXC wKYMvEi0SUNCFDyq3nm/2E8LLfAH1n6HJDFusg6xAuIqje5h2NA7lvP7pt1sQqC3 ChPRPQ== -----END CERTIFICATE-----Generated at Wed Jan 21 02:51:07 2026 by rpki-client