This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/0/1E52A9C4B7583314611765C8F6A599F283954B3C.cer
File:                     1E52A9C4B7583314611765C8F6A599F283954B3C.cer (raw, json)
Hash identifier:          WydUxs3SJNtQaRqZf83ZZ1wTRh68zDdJw6QGcpZFj4g=
Subject key identifier:   1E:52:A9:C4:B7:58:33:14:61:17:65:C8:F6:A5:99:F2:83:95:4B:3C
Authority key identifier: CB:02:14:A5:C4:04:D6:F8:40:43:3B:12:0C:AC:BB:5B:8C:59:E6:13
Certificate issuer:       /CN=A9162E3D0001/serialNumber=CB0214A5C404D6F840433B120CACBB5B8C59E613
Certificate serial:       051F17B7D327127F09A5E8485A7010B19C63B1FC
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
Manifest:                 rsync://rpki-rps.cnnic.cn/repo/A1065576723372048386/1/1E52A9C4B7583314611765C8F6A599F283954B3C.mft
caRepository:             rsync://rpki-rps.cnnic.cn/repo/A1065576723372048386/1/
Notify URL:               https://rrdp-rps.cnnic.cn/rrdp/notification.xml
Certificate not before:   Mon 19 Jan 2026 10:22:06 +0000
Certificate not after:    Mon 18 Jan 2027 10:27:06 +0000
Subordinate resources:    IP: 139.148.0.0/16
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 26 Jan 2026 09:17:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:1f:17:b7:d3:27:12:7f:09:a5:e8:48:5a:70:10:b1:9c:63:b1:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9162E3D0001, serialNumber=CB0214A5C404D6F840433B120CACBB5B8C59E613
        Validity
            Not Before: Jan 19 10:22:06 2026 GMT
            Not After : Jan 18 10:27:06 2027 GMT
        Subject: CN=1E52A9C4B7583314611765C8F6A599F283954B3C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:2d:34:59:1a:0b:e5:60:6c:4d:cf:8b:25:9a:
                    72:ac:41:f1:13:84:d2:67:77:4a:6f:c2:1e:4d:78:
                    b1:0c:95:d1:83:5d:30:83:36:c3:9b:09:c9:a2:45:
                    2c:b4:c4:59:59:2d:91:98:9a:08:f7:a9:ed:cf:1c:
                    7c:be:47:9c:ac:34:17:3c:e6:67:e7:d3:3c:21:89:
                    60:05:69:6b:62:75:dc:52:42:15:24:71:ee:48:ef:
                    c4:b3:a9:1b:0d:f6:19:bd:d6:af:10:f6:f1:61:10:
                    cb:8a:14:0e:41:2f:4b:39:e4:3f:1b:0c:a8:aa:28:
                    3a:90:4e:98:07:66:fe:79:58:7a:ae:5f:47:bd:7e:
                    d5:a2:db:b4:df:49:20:46:30:9e:8c:45:d9:d8:01:
                    ae:f3:6f:54:9d:82:d2:d0:16:68:55:80:e2:ac:32:
                    b6:6d:a7:ae:44:84:c0:52:c8:30:ec:7f:e8:ad:b6:
                    71:fb:7f:9d:bf:e7:a2:77:a8:eb:dd:59:29:1f:f4:
                    cc:c8:4f:20:11:03:3c:7e:1e:de:15:43:61:26:7c:
                    99:4a:a9:d8:49:41:32:55:e3:dd:92:d2:2a:77:84:
                    ff:24:2a:68:cf:9b:68:99:a1:5e:de:52:be:14:07:
                    36:55:6b:88:7f:2d:54:50:75:9e:e4:2f:d5:64:47:
                    82:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                1E:52:A9:C4:B7:58:33:14:61:17:65:C8:F6:A5:99:F2:83:95:4B:3C
            X509v3 Authority Key Identifier:
                keyid:CB:02:14:A5:C4:04:D6:F8:40:43:3B:12:0C:AC:BB:5B:8C:59:E6:13

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372048386/1/
                RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372048386/1/1E52A9C4B7583314611765C8F6A599F283954B3C.mft
                RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.148.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         9b:78:cc:8b:32:32:b6:78:49:b5:f6:c9:28:0e:18:6d:22:a9:
         69:dc:43:20:f4:04:f9:52:ee:c2:ab:01:8b:5e:3a:2b:60:d4:
         b4:6e:40:ec:12:91:b5:7c:a3:bc:83:98:77:68:8a:16:d8:c8:
         ef:06:26:e9:f5:0f:8b:09:11:3b:dc:6c:79:1b:ec:14:ce:3e:
         1a:4c:ba:e6:6f:3f:78:39:71:25:97:7a:12:a3:64:84:48:7c:
         4a:f4:bb:d9:32:4d:41:8a:7b:d6:d2:c9:ec:53:34:30:bd:e3:
         04:2b:97:d3:5c:05:b6:22:ec:29:a2:63:94:d0:6f:b5:24:14:
         36:25:f8:bc:91:35:db:bc:48:52:14:5c:c9:84:75:61:13:50:
         d6:a2:39:3e:36:47:4b:44:82:f9:44:c7:86:51:c6:66:cd:6f:
         d3:c8:8c:bd:8a:7a:2d:02:18:18:bd:8f:4d:e9:ed:16:5d:e2:
         92:6c:8d:1f:9f:0a:3a:38:c3:29:dd:0b:44:eb:92:54:bf:51:
         b5:db:66:dd:63:82:b5:82:43:1e:28:0d:55:6b:aa:5e:ca:b2:
         43:5b:b9:c0:4b:cf:19:78:b0:83:e3:78:01:29:7c:f5:d3:ee:
         1f:04:5d:98:34:15:c2:66:4f:50:0a:83:51:cb:76:70:fd:63:
         14:f3:56:a8
-----BEGIN CERTIFICATE-----
MIIFpjCCBI6gAwIBAgIUBR8Xt9MnEn8JpehIWnAQsZxjsfwwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAwwMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhDQjAyMTRBNUM0
MDRENkY4NDA0MzNCMTIwQ0FDQkI1QjhDNTlFNjEzMB4XDTI2MDExOTEwMjIwNloX
DTI3MDExODEwMjcwNlowMzExMC8GA1UEAxMoMUU1MkE5QzRCNzU4MzMxNDYxMTc2
NUM4RjZBNTk5RjI4Mzk1NEIzQzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAKctNFkaC+VgbE3PiyWacqxB8ROE0md3Sm/CHk14sQyV0YNdMIM2w5sJyaJF
LLTEWVktkZiaCPep7c8cfL5HnKw0FzzmZ+fTPCGJYAVpa2J13FJCFSRx7kjvxLOp
Gw32Gb3WrxD28WEQy4oUDkEvSznkPxsMqKooOpBOmAdm/nlYeq5fR71+1aLbtN9J
IEYwnoxF2dgBrvNvVJ2C0tAWaFWA4qwytm2nrkSEwFLIMOx/6K22cft/nb/noneo
691ZKR/0zMhPIBEDPH4e3hVDYSZ8mUqp2ElBMlXj3ZLSKneE/yQqaM+baJmhXt5S
vhQHNlVriH8tVFB1nuQv1WRHgv0CAwEAAaOCApkwggKVMA8GA1UdEwEB/wQFMAMB
Af8wHQYDVR0OBBYEFB5SqcS3WDMUYRdlyPalmfKDlUs8MB8GA1UdIwQYMBaAFMsC
FKXEBNb4QEM7Egysu1uMWeYTMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig
ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw
OTA2NzU3MTUvMC9DQjAyMTRBNUM0MDRENkY4NDA0MzNCMTIwQ0FDQkI1QjhDNTlF
NjEzLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CM0EyNEYyMDFENjYxMUUyOEFDODgzN0M3
MkZEMUZGMi95d0lVcGNRRTF2aEFRenNTREt5N1c0eFo1aE0uY2VyMIIBAQYIKwYB
BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu
Y24vcmVwby9BMTA2NTU3NjcyMzM3MjA0ODM4Ni8xLzBuBggrBgEFBQcwCoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDY1NTc2NzIzMzcyMDQ4Mzg2
LzEvMUU1MkE5QzRCNzU4MzMxNDYxMTc2NUM4RjZBNTk5RjI4Mzk1NEIzQy5tZnQw
OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp
ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUH
AQcBAf8EDzANMAsEAgABMAUDAwCLlDANBgkqhkiG9w0BAQsFAAOCAQEAm3jMizIy
tnhJtfbJKA4YbSKpadxDIPQE+VLuwqsBi146K2DUtG5A7BKRtXyjvIOYd2iKFtjI
7wYm6fUPiwkRO9xseRvsFM4+Gky65m8/eDlxJZd6EqNkhEh8SvS72TJNQYp71tLJ
7FM0ML3jBCuX01wFtiLsKaJjlNBvtSQUNiX4vJE127xIUhRcyYR1YRNQ1qI5PjZH
S0SC+UTHhlHGZs1v08iMvYp6LQIYGL2PTentFl3ikmyNH58KOjjDKd0LROuSVL9R
tdtm3WOCtYJDHigNVWuqXsqyQ1u5wEvPGXiwg+N4ASl89dPuHwRdmDQVwmZPUAqD
Uct2cP1jFPNWqA==
-----END CERTIFICATE-----
Generated at Sun Jan 25 15:52:55 2026 by rpki-client