This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/0/1E0C6D40B86B2CC5DEFEDF8E42F6BA8451C6F077.cer
File:                     1E0C6D40B86B2CC5DEFEDF8E42F6BA8451C6F077.cer (raw, json)
Hash identifier:          NrpIcF6toAp1eMOj5hKOZthRQlcBgcBtKoUAveRUJ7w=
Subject key identifier:   1E:0C:6D:40:B8:6B:2C:C5:DE:FE:DF:8E:42:F6:BA:84:51:C6:F0:77
Authority key identifier: CB:02:14:A5:C4:04:D6:F8:40:43:3B:12:0C:AC:BB:5B:8C:59:E6:13
Certificate issuer:       /CN=A9162E3D0001/serialNumber=CB0214A5C404D6F840433B120CACBB5B8C59E613
Certificate serial:       1B3BD6C69F0CECC2064950551D726781FD8F70B9
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
Manifest:                 rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/1/1E0C6D40B86B2CC5DEFEDF8E42F6BA8451C6F077.mft
caRepository:             rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/1/
Notify URL:               https://rrdp-rps.cnnic.cn/rrdp/notification.xml
Certificate not before:   Mon 19 Jan 2026 10:35:15 +0000
Certificate not after:    Mon 18 Jan 2027 10:40:15 +0000
Subordinate resources:    IP: 140.210.16.0/20
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 25 Jan 2026 16:37:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:3b:d6:c6:9f:0c:ec:c2:06:49:50:55:1d:72:67:81:fd:8f:70:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9162E3D0001, serialNumber=CB0214A5C404D6F840433B120CACBB5B8C59E613
        Validity
            Not Before: Jan 19 10:35:15 2026 GMT
            Not After : Jan 18 10:40:15 2027 GMT
        Subject: CN=1E0C6D40B86B2CC5DEFEDF8E42F6BA8451C6F077
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:8b:f1:9d:e6:8b:74:ce:ec:ba:06:cf:67:4c:
                    e9:e0:04:46:18:c0:f9:ed:98:d1:6a:3a:0b:27:65:
                    8d:53:0f:8d:2e:97:3d:cf:64:0c:c4:8c:f4:19:af:
                    4d:e1:9e:6d:26:8b:af:88:bd:08:b4:07:50:3e:97:
                    7f:20:e5:2d:ae:68:22:30:e1:37:b4:54:5a:ba:8d:
                    8d:9a:0e:5e:ea:e1:f6:9b:9c:98:61:b4:59:f1:a2:
                    0d:5b:92:17:4e:68:c1:cc:64:66:8c:4d:43:fa:fc:
                    77:af:0d:3b:21:70:2d:bb:cd:fa:5b:ab:aa:63:2b:
                    d1:76:67:f3:b7:76:e1:79:d2:af:6a:b9:9b:5a:93:
                    a8:90:0c:86:a7:4a:3f:5f:ec:1d:b8:85:ea:4e:79:
                    0b:e6:a5:f5:af:6b:ae:87:7e:c1:c8:1c:7d:cf:d1:
                    5e:73:3a:5c:b5:70:ec:15:cf:24:b4:39:7b:3d:da:
                    82:91:b8:8a:85:17:72:6f:46:4e:15:b2:96:19:08:
                    80:91:92:90:cb:13:5d:f9:03:f5:36:91:cf:60:11:
                    62:e4:be:cc:9e:8e:4e:e1:f3:53:1c:90:e7:d1:b5:
                    23:8e:5a:11:7a:39:2d:3f:34:07:f6:b7:99:e2:57:
                    c7:a6:a4:03:13:62:19:b8:47:20:7b:e4:9a:af:86:
                    5a:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                1E:0C:6D:40:B8:6B:2C:C5:DE:FE:DF:8E:42:F6:BA:84:51:C6:F0:77
            X509v3 Authority Key Identifier:
                keyid:CB:02:14:A5:C4:04:D6:F8:40:43:3B:12:0C:AC:BB:5B:8C:59:E6:13

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/1/
                RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/1/1E0C6D40B86B2CC5DEFEDF8E42F6BA8451C6F077.mft
                RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.210.16.0/20

    Signature Algorithm: sha256WithRSAEncryption
         8c:80:ff:81:f0:0e:96:4d:c4:0c:99:81:69:a6:84:56:40:83:
         64:95:1c:83:33:43:0f:c7:1a:98:9d:b0:0e:23:5b:a5:b9:31:
         fd:df:70:16:7d:94:a8:97:2c:2a:f5:aa:3a:f8:e5:05:8b:4d:
         0e:62:a6:11:ce:f7:4b:63:ce:c4:cc:ad:d1:e4:37:b8:bb:68:
         a0:78:3a:42:6b:6c:02:4f:29:17:1b:a0:46:2c:7b:ec:14:9b:
         25:21:89:23:9a:59:f2:06:3e:35:77:16:c5:76:65:52:52:a2:
         76:ba:3c:de:78:0e:95:47:cc:67:94:e9:f8:b2:9d:ee:3e:0c:
         75:26:05:d7:9f:dc:6f:76:c7:9e:23:e3:79:13:5c:d3:ed:78:
         6b:fd:82:db:9b:f0:59:93:a3:69:7c:9b:44:ba:da:57:c9:4a:
         ee:69:0b:23:d1:2c:20:aa:95:34:56:9f:20:1f:4c:dc:48:eb:
         5c:9e:7d:49:bc:46:fb:62:3d:ce:09:47:16:07:2d:f7:26:9d:
         46:63:b2:b9:68:5a:1a:c5:93:61:0a:eb:16:db:67:e2:fe:bf:
         73:a2:5d:b8:1e:f5:4e:ed:b2:34:7b:95:5b:c4:69:8f:13:11:
         31:91:3d:c8:67:2f:b8:2f:fe:16:ae:c2:da:31:70:cd:88:15:
         d4:73:d2:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:32:50 2026 by rpki-client