This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/0/12292A8CE4276ED3C82E79BA376F7A0363A06716.cer
File:                     12292A8CE4276ED3C82E79BA376F7A0363A06716.cer (raw, json)
Hash identifier:          Y45dw+Ui4l9/riPoo4kYKLvAXGqwM0C0pdrhrzW25PA=
Subject key identifier:   12:29:2A:8C:E4:27:6E:D3:C8:2E:79:BA:37:6F:7A:03:63:A0:67:16
Authority key identifier: CB:02:14:A5:C4:04:D6:F8:40:43:3B:12:0C:AC:BB:5B:8C:59:E6:13
Certificate issuer:       /CN=A9162E3D0001/serialNumber=CB0214A5C404D6F840433B120CACBB5B8C59E613
Certificate serial:       26A60D3478F410937315345CD0C4101035C2FF83
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
Manifest:                 rsync://rpki-rps.cnnic.cn/repo/A1065591195721662465/0/12292A8CE4276ED3C82E79BA376F7A0363A06716.mft
caRepository:             rsync://rpki-rps.cnnic.cn/repo/A1065591195721662465/0/
Notify URL:               https://rrdp-rps.cnnic.cn/rrdp/notification.xml
Certificate not before:   Mon 19 Jan 2026 11:19:32 +0000
Certificate not after:    Mon 18 Jan 2027 11:24:32 +0000
Subordinate resources:    IP: 144.79.118.0/23
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 26 Jan 2026 09:17:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:a6:0d:34:78:f4:10:93:73:15:34:5c:d0:c4:10:10:35:c2:ff:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9162E3D0001, serialNumber=CB0214A5C404D6F840433B120CACBB5B8C59E613
        Validity
            Not Before: Jan 19 11:19:32 2026 GMT
            Not After : Jan 18 11:24:32 2027 GMT
        Subject: CN=12292A8CE4276ED3C82E79BA376F7A0363A06716
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:04:b6:09:4a:22:16:79:7e:9b:6d:ea:3e:94:
                    51:d0:e8:d7:81:89:23:c1:12:bd:8f:a1:f2:7f:55:
                    2c:1f:0b:62:ae:d5:e1:26:1b:f0:7e:4f:b7:63:c7:
                    4f:90:c6:e5:2a:5b:85:ef:9d:c6:18:b1:7e:7f:76:
                    c1:a1:37:61:ab:35:70:5c:bb:98:e4:08:81:29:ce:
                    db:12:e0:b1:00:4e:33:ea:7e:62:c5:7e:c4:9a:c0:
                    37:6b:07:b8:82:1b:77:95:76:e5:79:6d:8c:e7:41:
                    1a:c7:2a:61:b8:dd:d7:a7:04:c4:50:0d:87:1e:68:
                    17:af:22:e5:15:b9:ae:27:ef:c4:a5:9d:5e:68:08:
                    f4:35:c5:29:82:c5:3c:e1:81:a0:e9:2b:e0:fb:6f:
                    30:ad:ca:46:6d:11:c8:a5:06:d2:11:48:2f:a0:3e:
                    55:7f:5c:cf:ba:cb:6c:0e:ff:19:b5:12:61:81:92:
                    49:c7:a5:62:b1:09:d1:92:b3:9b:44:57:d1:e5:e8:
                    84:87:5b:93:b6:bd:b4:f5:c6:3e:57:5d:e8:3e:71:
                    91:3d:47:62:63:56:77:e1:84:bb:e0:89:a7:1b:f0:
                    bc:7c:45:b4:ee:88:f2:ae:78:eb:75:c4:db:30:a0:
                    1f:34:df:99:4e:3b:6a:e2:7b:6a:be:8f:97:79:cc:
                    59:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                12:29:2A:8C:E4:27:6E:D3:C8:2E:79:BA:37:6F:7A:03:63:A0:67:16
            X509v3 Authority Key Identifier:
                keyid:CB:02:14:A5:C4:04:D6:F8:40:43:3B:12:0C:AC:BB:5B:8C:59:E6:13

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721662465/0/
                RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721662465/0/12292A8CE4276ED3C82E79BA376F7A0363A06716.mft
                RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.79.118.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6e:11:22:40:4c:a7:bf:de:b7:68:d8:f9:b2:b1:57:ab:0f:29:
         45:cf:f5:a7:09:37:4c:62:9c:16:6f:a7:29:a4:f0:65:65:83:
         d4:02:e2:d2:1f:be:da:20:e5:e5:37:0c:66:bd:f1:83:8a:6c:
         26:5a:52:b1:f8:a9:50:42:81:d1:a6:b5:fe:74:a0:7a:5f:e8:
         00:15:aa:da:08:f7:0c:cf:e1:97:ec:e3:58:5f:d8:bb:e2:d8:
         fe:1a:d2:d7:8a:e1:a8:64:ba:da:6b:34:c4:e1:b1:b7:f3:8f:
         a5:86:db:99:e3:22:21:f6:db:22:57:e8:72:5f:e8:3c:a7:22:
         0b:69:e8:7b:c3:74:9d:43:3a:76:2c:ca:75:02:70:06:98:d5:
         ea:c6:19:09:3b:c4:0b:36:2a:a3:e4:87:3c:68:c5:06:bc:b8:
         fd:af:40:35:89:e1:18:82:bc:7f:e8:5e:2e:c5:e6:e4:51:2a:
         79:d7:3a:5c:7e:f6:30:07:b2:63:43:c7:7b:e5:f9:17:51:e6:
         b1:01:40:07:d9:4a:e2:5a:20:e2:c9:a5:5e:2b:aa:0b:f5:2a:
         59:4f:ad:d5:11:26:60:0d:30:61:85:61:d7:21:6f:38:e1:23:
         f7:29:5b:6b:7f:62:fb:d4:79:a9:18:b1:14:33:61:8f:7c:d6:
         ec:27:fe:7c
-----BEGIN CERTIFICATE-----
MIIFpzCCBI+gAwIBAgIUJqYNNHj0EJNzFTRc0MQQEDXC/4MwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAwwMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhDQjAyMTRBNUM0
MDRENkY4NDA0MzNCMTIwQ0FDQkI1QjhDNTlFNjEzMB4XDTI2MDExOTExMTkzMloX
DTI3MDExODExMjQzMlowMzExMC8GA1UEAxMoMTIyOTJBOENFNDI3NkVEM0M4MkU3
OUJBMzc2RjdBMDM2M0EwNjcxNjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBANkEtglKIhZ5fptt6j6UUdDo14GJI8ESvY+h8n9VLB8LYq7V4SYb8H5Pt2PH
T5DG5Spbhe+dxhixfn92waE3Yas1cFy7mOQIgSnO2xLgsQBOM+p+YsV+xJrAN2sH
uIIbd5V25XltjOdBGscqYbjd16cExFANhx5oF68i5RW5rifvxKWdXmgI9DXFKYLF
POGBoOkr4PtvMK3KRm0RyKUG0hFIL6A+VX9cz7rLbA7/GbUSYYGSScelYrEJ0ZKz
m0RX0eXohIdbk7a9tPXGPldd6D5xkT1HYmNWd+GEu+CJpxvwvHxFtO6I8q5463XE
2zCgHzTfmU47auJ7ar6Pl3nMWU8CAwEAAaOCApowggKWMA8GA1UdEwEB/wQFMAMB
Af8wHQYDVR0OBBYEFBIpKozkJ27TyC55ujdvegNjoGcWMB8GA1UdIwQYMBaAFMsC
FKXEBNb4QEM7Egysu1uMWeYTMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig
ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw
OTA2NzU3MTUvMC9DQjAyMTRBNUM0MDRENkY4NDA0MzNCMTIwQ0FDQkI1QjhDNTlF
NjEzLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CM0EyNEYyMDFENjYxMUUyOEFDODgzN0M3
MkZEMUZGMi95d0lVcGNRRTF2aEFRenNTREt5N1c0eFo1aE0uY2VyMIIBAQYIKwYB
BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu
Y24vcmVwby9BMTA2NTU5MTE5NTcyMTY2MjQ2NS8wLzBuBggrBgEFBQcwCoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDY1NTkxMTk1NzIxNjYyNDY1
LzAvMTIyOTJBOENFNDI3NkVEM0M4MkU3OUJBMzc2RjdBMDM2M0EwNjcxNi5tZnQw
OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp
ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAGQT3YwDQYJKoZIhvcNAQELBQADggEBAG4RIkBM
p7/et2jY+bKxV6sPKUXP9acJN0xinBZvpymk8GVlg9QC4tIfvtog5eU3DGa98YOK
bCZaUrH4qVBCgdGmtf50oHpf6AAVqtoI9wzP4Zfs41hf2Lvi2P4a0teK4ahkutpr
NMThsbfzj6WG25njIiH22yJX6HJf6DynIgtp6HvDdJ1DOnYsynUCcAaY1erGGQk7
xAs2KqPkhzxoxQa8uP2vQDWJ4RiCvH/oXi7F5uRRKnnXOlx+9jAHsmNDx3vl+RdR
5rEBQAfZSuJaIOLJpV4rqgv1KllPrdURJmANMGGFYdchbzjhI/cpW2t/YvvUeakY
sRQzYY981uwn/nw=
-----END CERTIFICATE-----
Generated at Sun Jan 25 11:12:02 2026 by rpki-client