This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/0/1E52A9C4B7583314611765C8F6A599F283954B3C.cer
File: 1E52A9C4B7583314611765C8F6A599F283954B3C.cer (raw, json)
Hash identifier: WydUxs3SJNtQaRqZf83ZZ1wTRh68zDdJw6QGcpZFj4g=
Subject key identifier: 1E:52:A9:C4:B7:58:33:14:61:17:65:C8:F6:A5:99:F2:83:95:4B:3C
Authority key identifier: CB:02:14:A5:C4:04:D6:F8:40:43:3B:12:0C:AC:BB:5B:8C:59:E6:13
Certificate issuer: /CN=A9162E3D0001/serialNumber=CB0214A5C404D6F840433B120CACBB5B8C59E613
Certificate serial: 051F17B7D327127F09A5E8485A7010B19C63B1FC
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
Manifest: rsync://rpki-rps.cnnic.cn/repo/A1065576723372048386/1/1E52A9C4B7583314611765C8F6A599F283954B3C.mft
caRepository: rsync://rpki-rps.cnnic.cn/repo/A1065576723372048386/1/
Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml
Certificate not before: Mon 19 Jan 2026 10:22:06 +0000
Certificate not after: Mon 18 Jan 2027 10:27:06 +0000
Subordinate resources: IP: 139.148.0.0/16
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 26 Jan 2026 09:17:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:1f:17:b7:d3:27:12:7f:09:a5:e8:48:5a:70:10:b1:9c:63:b1:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0001, serialNumber=CB0214A5C404D6F840433B120CACBB5B8C59E613
Validity
Not Before: Jan 19 10:22:06 2026 GMT
Not After : Jan 18 10:27:06 2027 GMT
Subject: CN=1E52A9C4B7583314611765C8F6A599F283954B3C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:2d:34:59:1a:0b:e5:60:6c:4d:cf:8b:25:9a:
72:ac:41:f1:13:84:d2:67:77:4a:6f:c2:1e:4d:78:
b1:0c:95:d1:83:5d:30:83:36:c3:9b:09:c9:a2:45:
2c:b4:c4:59:59:2d:91:98:9a:08:f7:a9:ed:cf:1c:
7c:be:47:9c:ac:34:17:3c:e6:67:e7:d3:3c:21:89:
60:05:69:6b:62:75:dc:52:42:15:24:71:ee:48:ef:
c4:b3:a9:1b:0d:f6:19:bd:d6:af:10:f6:f1:61:10:
cb:8a:14:0e:41:2f:4b:39:e4:3f:1b:0c:a8:aa:28:
3a:90:4e:98:07:66:fe:79:58:7a:ae:5f:47:bd:7e:
d5:a2:db:b4:df:49:20:46:30:9e:8c:45:d9:d8:01:
ae:f3:6f:54:9d:82:d2:d0:16:68:55:80:e2:ac:32:
b6:6d:a7:ae:44:84:c0:52:c8:30:ec:7f:e8:ad:b6:
71:fb:7f:9d:bf:e7:a2:77:a8:eb:dd:59:29:1f:f4:
cc:c8:4f:20:11:03:3c:7e:1e:de:15:43:61:26:7c:
99:4a:a9:d8:49:41:32:55:e3:dd:92:d2:2a:77:84:
ff:24:2a:68:cf:9b:68:99:a1:5e:de:52:be:14:07:
36:55:6b:88:7f:2d:54:50:75:9e:e4:2f:d5:64:47:
82:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
1E:52:A9:C4:B7:58:33:14:61:17:65:C8:F6:A5:99:F2:83:95:4B:3C
X509v3 Authority Key Identifier:
keyid:CB:02:14:A5:C4:04:D6:F8:40:43:3B:12:0C:AC:BB:5B:8C:59:E6:13
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372048386/1/
RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372048386/1/1E52A9C4B7583314611765C8F6A599F283954B3C.mft
RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
139.148.0.0/16
Signature Algorithm: sha256WithRSAEncryption
9b:78:cc:8b:32:32:b6:78:49:b5:f6:c9:28:0e:18:6d:22:a9:
69:dc:43:20:f4:04:f9:52:ee:c2:ab:01:8b:5e:3a:2b:60:d4:
b4:6e:40:ec:12:91:b5:7c:a3:bc:83:98:77:68:8a:16:d8:c8:
ef:06:26:e9:f5:0f:8b:09:11:3b:dc:6c:79:1b:ec:14:ce:3e:
1a:4c:ba:e6:6f:3f:78:39:71:25:97:7a:12:a3:64:84:48:7c:
4a:f4:bb:d9:32:4d:41:8a:7b:d6:d2:c9:ec:53:34:30:bd:e3:
04:2b:97:d3:5c:05:b6:22:ec:29:a2:63:94:d0:6f:b5:24:14:
36:25:f8:bc:91:35:db:bc:48:52:14:5c:c9:84:75:61:13:50:
d6:a2:39:3e:36:47:4b:44:82:f9:44:c7:86:51:c6:66:cd:6f:
d3:c8:8c:bd:8a:7a:2d:02:18:18:bd:8f:4d:e9:ed:16:5d:e2:
92:6c:8d:1f:9f:0a:3a:38:c3:29:dd:0b:44:eb:92:54:bf:51:
b5:db:66:dd:63:82:b5:82:43:1e:28:0d:55:6b:aa:5e:ca:b2:
43:5b:b9:c0:4b:cf:19:78:b0:83:e3:78:01:29:7c:f5:d3:ee:
1f:04:5d:98:34:15:c2:66:4f:50:0a:83:51:cb:76:70:fd:63:
14:f3:56:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 15:52:55 2026 by rpki-client