This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A92B819A2CD5CB1359B70776B58E2CFDEE46AF64.cer File: A92B819A2CD5CB1359B70776B58E2CFDEE46AF64.cer (raw, json) Hash identifier: A4dangzqiaWGBjhgxLrmJVr+MWlOnRyyfMMegQaBNFA= Subject key identifier: A9:2B:81:9A:2C:D5:CB:13:59:B7:07:76:B5:8E:2C:FD:EE:46:AF:64 Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Certificate serial: 1AD77839675474D55483D9FD06973874003E98F2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1065576723372310530/0/A92B819A2CD5CB1359B70776B58E2CFDEE46AF64.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1065576723372310530/0/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Mon 19 Jan 2026 10:25:11 +0000 Certificate not after: Mon 18 Jan 2027 10:30:11 +0000 Subordinate resources: AS: 9390 AS: 45090 IP: 43.247.196.0/22 IP: 103.18.208.0/21 IP: 103.238.16.0/22 IP: 121.51.0.0/16 IP: 182.254.0.0/17 IP: 203.205.128.0/17 IP: 210.74.32.0/21 IP: 211.152.128.0/19 IP: 211.159.96.0/19 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 Jan 2026 07:51:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:d7:78:39:67:54:74:d5:54:83:d9:fd:06:97:38:74:00:3e:98:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Validity Not Before: Jan 19 10:25:11 2026 GMT Not After : Jan 18 10:30:11 2027 GMT Subject: CN=A92B819A2CD5CB1359B70776B58E2CFDEE46AF64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:0e:74:a8:89:fe:f4:5b:4c:38:d6:96:f4:18: 82:3c:be:ec:d3:e1:23:96:96:4e:8b:90:ea:5d:b6: 2a:e1:b1:4c:1b:6f:bf:22:6c:1a:0e:04:12:93:18: a0:72:40:80:37:2d:fd:e9:41:2b:23:30:69:83:85: b4:3a:50:7a:02:41:82:2b:ad:b3:4f:19:9b:8b:49: d7:de:dc:f8:3e:5a:6d:d6:13:45:4c:7a:78:17:41: 01:34:10:cd:ba:c4:59:2d:1d:25:41:0f:65:ad:e3: d0:3f:16:20:c8:cf:a7:37:4a:fc:af:7b:be:1b:b3: ae:10:aa:11:20:d4:ba:ff:89:e0:6a:3f:02:d7:fb: 7b:71:b9:2b:38:5e:82:74:34:dc:f3:51:7d:94:cd: b7:37:ce:e5:24:9d:53:eb:25:89:a5:b5:59:f8:3f: 33:28:ef:24:16:a6:5f:6e:2f:5a:56:b0:6d:3b:0f: 2e:37:7c:d6:3f:14:69:89:fc:bd:d8:01:ec:8e:db: b7:af:f3:50:9c:ea:d2:66:88:02:a6:c1:11:cc:06: 19:02:eb:2c:d0:b2:b3:1e:4d:10:f7:84:50:2b:b8: ad:28:e3:6c:78:e3:51:b4:f1:9f:b2:37:5b:2d:11: 2e:1c:bb:eb:38:df:0f:c4:48:50:52:81:cf:c9:86: 6a:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: A9:2B:81:9A:2C:D5:CB:13:59:B7:07:76:B5:8E:2C:FD:EE:46:AF:64 X509v3 Authority Key Identifier: keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372310530/0/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372310530/0/A92B819A2CD5CB1359B70776B58E2CFDEE46AF64.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.247.196.0/22 103.18.208.0/21 103.238.16.0/22 121.51.0.0/16 182.254.0.0/17 203.205.128.0/17 210.74.32.0/21 211.152.128.0/19 211.159.96.0/19 sbgp-autonomousSysNum: critical Autonomous System Numbers: 9390 45090 Signature Algorithm: sha256WithRSAEncryption 82:c1:34:cb:c6:dc:20:11:b0:4a:b2:10:4b:05:b9:b4:b8:f0: 76:8d:3b:33:fb:64:07:f2:20:55:86:98:1d:7b:81:95:7b:80: 44:0c:8f:f0:95:6e:28:ea:12:9e:92:f3:16:6a:3f:a5:38:86: 04:5c:f8:64:cc:1c:74:02:36:c2:c1:ee:7e:8a:2a:40:69:29: a9:16:1b:72:5b:c7:55:bd:09:45:4c:70:f3:eb:c8:4c:e9:84: ad:a1:5f:d3:8d:93:bb:f4:9e:91:0f:2b:4c:0e:a4:8c:07:c3: 35:b8:25:51:f5:5f:97:2a:56:4f:53:d1:fc:f5:fe:8d:e7:98: 38:75:c9:e7:31:3b:c0:b2:d8:fb:e5:02:74:30:02:84:42:cf: 01:be:b6:01:8f:df:3f:27:f7:19:8e:1e:ff:21:f8:e1:7e:72: 88:44:86:58:46:4d:77:e4:88:a7:98:ae:f3:0e:03:8c:ff:80: 8c:41:01:ff:c7:ae:5c:dc:ad:29:4e:bb:46:26:f0:28:dd:b1: 98:2b:20:6e:ee:60:30:64:9a:98:45:3d:d4:c7:00:b3:e5:08: ec:00:91:3c:a8:fb:3e:58:fe:d3:48:f6:90:04:69:34:c0:ce: 8f:ce:f1:68:71:ea:d2:eb:18:05:16:ae:57:65:d4:fd:22:50: 7d:ad:8d:56 -----BEGIN CERTIFICATE----- MIIF9jCCBN6gAwIBAgIUGtd4OWdUdNVUg9n9Bpc4dAA+mPIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDExOTEwMjUxMVoX DTI3MDExODEwMzAxMVowMzExMC8GA1UEAxMoQTkyQjgxOUEyQ0Q1Q0IxMzU5Qjcw Nzc2QjU4RTJDRkRFRTQ2QUY2NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANYOdKiJ/vRbTDjWlvQYgjy+7NPhI5aWTouQ6l22KuGxTBtvvyJsGg4EEpMY oHJAgDct/elBKyMwaYOFtDpQegJBgiuts08Zm4tJ197c+D5abdYTRUx6eBdBATQQ zbrEWS0dJUEPZa3j0D8WIMjPpzdK/K97vhuzrhCqESDUuv+J4Go/Atf7e3G5Kzhe gnQ03PNRfZTNtzfO5SSdU+sliaW1Wfg/MyjvJBamX24vWlawbTsPLjd81j8UaYn8 vdgB7I7bt6/zUJzq0maIAqbBEcwGGQLrLNCysx5NEPeEUCu4rSjjbHjjUbTxn7I3 Wy0RLhy76zjfD8RIUFKBz8mGasUCAwEAAaOCAukwggLlMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFKkrgZos1csTWbcHdrWOLP3uRq9kMB8GA1UdIwQYMBaAFKVu hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTA2NTU3NjcyMzM3MjMxMDUzMC8wLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDY1NTc2NzIzMzcyMzEwNTMw LzAvQTkyQjgxOUEyQ0Q1Q0IxMzU5QjcwNzc2QjU4RTJDRkRFRTQ2QUY2NC5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwTgYIKwYBBQUH AQcBAf8EPzA9MDsEAgABMDUDBAIr98QDBANnEtADBAJn7hADAwB5MwMEB7b+AAME B8vNgAMEA9JKIAMEBdOYgAMEBdOfYDAeBggrBgEFBQcBCAEB/wQPMA2gCzAJAgIk rgIDALAiMA0GCSqGSIb3DQEBCwUAA4IBAQCCwTTLxtwgEbBKshBLBbm0uPB2jTsz +2QH8iBVhpgde4GVe4BEDI/wlW4o6hKekvMWaj+lOIYEXPhkzBx0AjbCwe5+iipA aSmpFhtyW8dVvQlFTHDz68hM6YStoV/TjZO79J6RDytMDqSMB8M1uCVR9V+XKlZP U9H89f6N55g4dcnnMTvAstj75QJ0MAKEQs8BvrYBj98/J/cZjh7/IfjhfnKIRIZY Rk135IinmK7zDgOM/4CMQQH/x65c3K0pTrtGJvAo3bGYKyBu7mAwZJqYRT3UxwCz 5QjsAJE8qPs+WP7TSPaQBGk0wM6PzvFocerS6xgFFq5XZdT9IlB9rY1W -----END CERTIFICATE-----Generated at Tue Jan 20 16:19:12 2026 by rpki-client