This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/0/1CF709ED9E0B03394B9F9BEB57ED8D2C23261DF4.cer File: 1CF709ED9E0B03394B9F9BEB57ED8D2C23261DF4.cer (raw, json) Hash identifier: O5Aqpeq/kZcfHJ2H0u+k2L3bZ42gmrdlPUk2s6js8js= Subject key identifier: 1C:F7:09:ED:9E:0B:03:39:4B:9F:9B:EB:57:ED:8D:2C:23:26:1D:F4 Authority key identifier: CB:02:14:A5:C4:04:D6:F8:40:43:3B:12:0C:AC:BB:5B:8C:59:E6:13 Certificate issuer: /CN=A9162E3D0001/serialNumber=CB0214A5C404D6F840433B120CACBB5B8C59E613 Certificate serial: 5B7028127DBDD5F2A1BB1A991D53EB211CE89CA4 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1065585649346084866/1/1CF709ED9E0B03394B9F9BEB57ED8D2C23261DF4.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1065585649346084866/1/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Mon 19 Jan 2026 10:58:49 +0000 Certificate not after: Mon 18 Jan 2027 11:03:49 +0000 Subordinate resources: IP: 157.15.94.0/23 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 16:37:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:70:28:12:7d:bd:d5:f2:a1:bb:1a:99:1d:53:eb:21:1c:e8:9c:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=CB0214A5C404D6F840433B120CACBB5B8C59E613 Validity Not Before: Jan 19 10:58:49 2026 GMT Not After : Jan 18 11:03:49 2027 GMT Subject: CN=1CF709ED9E0B03394B9F9BEB57ED8D2C23261DF4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:d2:91:59:00:f0:49:43:4f:28:93:64:4f:4d: 5d:fb:54:c0:e2:c5:a4:b3:41:1e:1f:53:3e:b7:fe: 16:7a:e1:6a:0f:2d:29:94:ad:b8:85:4f:5b:03:1b: d7:0c:c6:88:85:de:39:6d:ab:fd:f5:af:78:2a:46: 36:fd:e6:ed:ba:6b:65:1f:bb:38:e0:bf:17:cb:98: 3b:9d:e8:74:f9:70:c6:4d:30:f4:48:a9:49:ed:27: 02:14:84:c2:f1:91:02:52:df:a1:66:4c:2a:10:d8: 22:81:6a:04:8c:13:15:4d:73:e3:72:9d:3a:7e:2f: 9a:4a:56:ff:a8:bf:56:a6:f5:15:fd:a2:6d:db:95: 0d:e0:66:e8:14:d1:6b:c4:58:f9:22:c6:73:c1:8e: bf:d2:45:b9:be:f8:d8:e7:24:66:40:da:08:70:d6: 68:15:eb:3d:32:8b:42:60:05:a4:e3:26:d5:a6:2d: ae:79:72:35:27:88:ec:ed:28:df:c4:af:4b:5f:de: 37:1d:92:f8:18:28:ef:d2:ea:81:4e:d5:83:95:a4: b5:66:c0:32:f6:6b:0d:83:d6:47:91:54:a9:9e:38: 54:3a:35:84:d0:9f:e6:45:7c:11:06:fb:44:02:01: b1:bb:03:86:14:47:f6:65:e2:07:64:97:7f:35:66: b5:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 1C:F7:09:ED:9E:0B:03:39:4B:9F:9B:EB:57:ED:8D:2C:23:26:1D:F4 X509v3 Authority Key Identifier: keyid:CB:02:14:A5:C4:04:D6:F8:40:43:3B:12:0C:AC:BB:5B:8C:59:E6:13 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649346084866/1/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649346084866/1/1CF709ED9E0B03394B9F9BEB57ED8D2C23261DF4.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.15.94.0/23 Signature Algorithm: sha256WithRSAEncryption a8:9e:8b:79:68:c2:7c:05:4c:01:a5:ac:05:56:c7:aa:b7:02: b0:03:57:ec:c0:c7:fb:1d:e1:16:4d:a8:21:a1:00:2b:ad:e8: f3:ef:6d:8f:b7:16:26:a7:bf:30:35:ee:e9:de:06:82:d5:ce: a2:0b:77:cd:f5:91:a0:68:ad:73:b2:8e:14:e2:bf:af:b1:0c: 93:7e:a5:dd:49:f2:5d:ba:0e:00:4e:67:95:e9:ea:33:05:d0: 88:3d:0d:8e:67:9a:ad:4c:c5:4e:7e:93:99:82:92:44:e3:f1: ee:d6:49:cd:e5:23:1c:2a:2d:74:1f:e0:88:57:a7:e1:4e:1b: 74:d1:84:5c:05:64:92:9a:b4:b4:4f:b0:6d:66:29:ff:c4:70: 09:d5:04:ad:8f:16:c8:1b:84:12:2a:a6:ae:68:40:4d:6d:62: 5c:c1:30:85:ee:c3:ac:7f:16:36:99:63:26:ef:41:79:f0:46: 80:91:be:77:d1:b8:db:de:f7:e5:62:d0:3e:74:0b:a0:5f:13: c5:3f:07:4d:47:6d:61:1d:73:c1:90:29:27:33:83:c9:eb:a9: bf:3e:1b:4c:8b:27:c0:1e:b4:4a:39:ae:23:93:21:27:44:15: 56:71:37:ab:9e:3a:50:7d:e1:51:e7:ae:d1:11:22:c7:97:17: 4d:73:ee:95 -----BEGIN CERTIFICATE----- MIIFpzCCBI+gAwIBAgIUW3AoEn291fKhuxqZHVPrIRzonKQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhDQjAyMTRBNUM0 MDRENkY4NDA0MzNCMTIwQ0FDQkI1QjhDNTlFNjEzMB4XDTI2MDExOTEwNTg0OVoX DTI3MDExODExMDM0OVowMzExMC8GA1UEAxMoMUNGNzA5RUQ5RTBCMDMzOTRCOUY5 QkVCNTdFRDhEMkMyMzI2MURGNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKnSkVkA8ElDTyiTZE9NXftUwOLFpLNBHh9TPrf+Fnrhag8tKZStuIVPWwMb 1wzGiIXeOW2r/fWveCpGNv3m7bprZR+7OOC/F8uYO53odPlwxk0w9EipSe0nAhSE wvGRAlLfoWZMKhDYIoFqBIwTFU1z43KdOn4vmkpW/6i/Vqb1Ff2ibduVDeBm6BTR a8RY+SLGc8GOv9JFub742OckZkDaCHDWaBXrPTKLQmAFpOMm1aYtrnlyNSeI7O0o 38SvS1/eNx2S+Bgo79LqgU7Vg5WktWbAMvZrDYPWR5FUqZ44VDo1hNCf5kV8EQb7 RAIBsbsDhhRH9mXiB2SXfzVmtRUCAwEAAaOCApowggKWMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFBz3Ce2eCwM5S5+b61ftjSwjJh30MB8GA1UdIwQYMBaAFMsC FKXEBNb4QEM7Egysu1uMWeYTMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMC9DQjAyMTRBNUM0MDRENkY4NDA0MzNCMTIwQ0FDQkI1QjhDNTlF NjEzLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CM0EyNEYyMDFENjYxMUUyOEFDODgzN0M3 MkZEMUZGMi95d0lVcGNRRTF2aEFRenNTREt5N1c0eFo1aE0uY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTA2NTU4NTY0OTM0NjA4NDg2Ni8xLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDY1NTg1NjQ5MzQ2MDg0ODY2 LzEvMUNGNzA5RUQ5RTBCMDMzOTRCOUY5QkVCNTdFRDhEMkMyMzI2MURGNC5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAGdD14wDQYJKoZIhvcNAQELBQADggEBAKiei3lo wnwFTAGlrAVWx6q3ArADV+zAx/sd4RZNqCGhACut6PPvbY+3FianvzA17uneBoLV zqILd831kaBorXOyjhTiv6+xDJN+pd1J8l26DgBOZ5Xp6jMF0Ig9DY5nmq1MxU5+ k5mCkkTj8e7WSc3lIxwqLXQf4IhXp+FOG3TRhFwFZJKatLRPsG1mKf/EcAnVBK2P FsgbhBIqpq5oQE1tYlzBMIXuw6x/FjaZYybvQXnwRoCRvnfRuNve9+Vi0D50C6Bf E8U/B01HbWEdc8GQKSczg8nrqb8+G0yLJ8AetEo5riOTISdEFVZxN6ueOlB94VHn rtERIseXF01z7pU= -----END CERTIFICATE-----Generated at Sun Jan 25 09:40:56 2026 by rpki-client