This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/0/42EFD1D00C09B99E5E9DBCDD0E590421661D6558.cer File: 42EFD1D00C09B99E5E9DBCDD0E590421661D6558.cer (raw, json) Hash identifier: XNdbMO/qJ0ItrhogJqEeaWhMfM45eo5FJcgzxhcLcN4= Subject key identifier: 42:EF:D1:D0:0C:09:B9:9E:5E:9D:BC:DD:0E:59:04:21:66:1D:65:58 Authority key identifier: CB:02:14:A5:C4:04:D6:F8:40:43:3B:12:0C:AC:BB:5B:8C:59:E6:13 Certificate issuer: /CN=A9162E3D0001/serialNumber=CB0214A5C404D6F840433B120CACBB5B8C59E613 Certificate serial: 533F08A29889C8890A0E2864EDF24AEBBB95D968 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1065585389265616897/1/42EFD1D00C09B99E5E9DBCDD0E590421661D6558.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1065585389265616897/1/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Mon 19 Jan 2026 10:57:40 +0000 Certificate not after: Mon 18 Jan 2027 11:02:40 +0000 Subordinate resources: IP: 157.10.34.0/23 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Jan 2026 09:17:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:3f:08:a2:98:89:c8:89:0a:0e:28:64:ed:f2:4a:eb:bb:95:d9:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=CB0214A5C404D6F840433B120CACBB5B8C59E613 Validity Not Before: Jan 19 10:57:40 2026 GMT Not After : Jan 18 11:02:40 2027 GMT Subject: CN=42EFD1D00C09B99E5E9DBCDD0E590421661D6558 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:43:10:22:41:f5:74:c9:96:3f:ee:a7:4a:c6: 05:0b:cb:a9:5e:b8:cd:aa:90:38:71:7c:e3:c9:d4: 82:a1:eb:e2:f8:76:c2:26:3b:4f:c3:ae:0a:d9:19: 5a:62:f7:ee:c2:0f:17:8e:15:fc:ff:1e:12:56:fa: 67:f6:45:1a:88:8e:b9:50:cf:14:63:db:b6:fe:bd: e4:aa:97:01:5f:13:99:95:6c:8e:cb:da:6d:d0:c5: 3d:77:88:63:36:e4:09:4c:65:ea:fe:5f:4c:af:67: 89:99:f5:9f:80:eb:d5:ae:ce:ab:77:96:cd:34:cc: a9:3e:a7:ab:27:41:2a:26:7f:fc:2a:29:80:4f:01: 53:9c:e0:69:25:a8:13:42:8b:77:cb:93:bc:97:e9: 4c:a1:e0:8e:ca:58:00:68:2c:52:fd:57:9b:5e:34: 50:bc:4b:21:6d:e2:fc:55:a0:49:64:c6:b9:1c:e0: 36:30:ba:d5:6c:c4:a8:c4:37:4f:11:bc:fc:e7:23: 1f:0d:73:f2:f2:13:a6:d4:d7:e8:f5:82:87:24:24: d7:7b:4e:e0:e2:53:75:14:ad:95:21:33:f5:d8:6d: 16:42:f2:1c:6b:87:bb:8b:1d:8c:d8:e1:31:f8:42: 18:a9:e6:bf:85:1e:ea:a0:b7:53:34:3b:6a:8d:ad: 37:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 42:EF:D1:D0:0C:09:B9:9E:5E:9D:BC:DD:0E:59:04:21:66:1D:65:58 X509v3 Authority Key Identifier: keyid:CB:02:14:A5:C4:04:D6:F8:40:43:3B:12:0C:AC:BB:5B:8C:59:E6:13 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265616897/1/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265616897/1/42EFD1D00C09B99E5E9DBCDD0E590421661D6558.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.10.34.0/23 Signature Algorithm: sha256WithRSAEncryption 33:41:5e:c7:a1:92:81:24:f7:60:c1:71:f0:75:72:8e:eb:3f: 0f:17:70:e5:bf:79:b7:8d:64:39:f2:b4:4c:74:24:93:dc:bb: 98:37:85:50:e7:04:23:9b:10:94:0d:ca:db:ba:b6:b7:2b:dd: b7:67:ba:9b:b8:d9:0a:dc:93:d5:13:35:cf:82:5b:9c:71:ad: f3:bc:17:d1:fb:69:92:2d:23:e5:d4:21:b8:a5:2a:32:f9:c6: 15:8f:ff:10:1e:56:56:5f:ec:6f:a4:81:b7:c4:44:a6:18:94: 9e:12:b9:16:92:57:38:d6:ae:13:3b:62:d7:1e:1e:75:fc:28: 74:77:52:e3:99:66:0e:25:42:58:4d:51:a7:82:cd:7e:ee:ae: 57:cf:1b:66:4d:ed:8f:ac:0d:35:10:b0:e5:5d:79:01:21:a0: 29:c8:cb:b0:5f:4f:f5:3f:69:c4:9a:3e:89:39:59:3e:c2:36: 75:40:05:97:f2:a4:40:61:ee:5f:d7:14:08:29:68:7e:33:ed: 2d:f0:17:1e:ed:13:88:8c:2e:31:98:c3:f1:38:1b:5b:2e:ef: 3f:65:be:01:b2:12:cb:d1:80:cd:fc:c5:06:c3:1b:79:92:c2: 45:85:2b:1c:cb:59:ed:71:ee:36:54:b7:b8:ef:e5:0f:94:db: 8c:ca:c4:bf -----BEGIN CERTIFICATE----- MIIFpzCCBI+gAwIBAgIUUz8IopiJyIkKDihk7fJK67uV2WgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhDQjAyMTRBNUM0 MDRENkY4NDA0MzNCMTIwQ0FDQkI1QjhDNTlFNjEzMB4XDTI2MDExOTEwNTc0MFoX DTI3MDExODExMDI0MFowMzExMC8GA1UEAxMoNDJFRkQxRDAwQzA5Qjk5RTVFOURC Q0REMEU1OTA0MjE2NjFENjU1ODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAN5DECJB9XTJlj/up0rGBQvLqV64zaqQOHF848nUgqHr4vh2wiY7T8OuCtkZ WmL37sIPF44V/P8eElb6Z/ZFGoiOuVDPFGPbtv695KqXAV8TmZVsjsvabdDFPXeI YzbkCUxl6v5fTK9niZn1n4Dr1a7Oq3eWzTTMqT6nqydBKiZ//CopgE8BU5zgaSWo E0KLd8uTvJfpTKHgjspYAGgsUv1Xm140ULxLIW3i/FWgSWTGuRzgNjC61WzEqMQ3 TxG8/OcjHw1z8vITptTX6PWChyQk13tO4OJTdRStlSEz9dhtFkLyHGuHu4sdjNjh MfhCGKnmv4Ue6qC3UzQ7ao2tN50CAwEAAaOCApowggKWMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFELv0dAMCbmeXp283Q5ZBCFmHWVYMB8GA1UdIwQYMBaAFMsC FKXEBNb4QEM7Egysu1uMWeYTMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMC9DQjAyMTRBNUM0MDRENkY4NDA0MzNCMTIwQ0FDQkI1QjhDNTlF NjEzLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CM0EyNEYyMDFENjYxMUUyOEFDODgzN0M3 MkZEMUZGMi95d0lVcGNRRTF2aEFRenNTREt5N1c0eFo1aE0uY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTA2NTU4NTM4OTI2NTYxNjg5Ny8xLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDY1NTg1Mzg5MjY1NjE2ODk3 LzEvNDJFRkQxRDAwQzA5Qjk5RTVFOURCQ0REMEU1OTA0MjE2NjFENjU1OC5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAGdCiIwDQYJKoZIhvcNAQELBQADggEBADNBXseh koEk92DBcfB1co7rPw8XcOW/ebeNZDnytEx0JJPcu5g3hVDnBCObEJQNytu6trcr 3bdnupu42Qrck9UTNc+CW5xxrfO8F9H7aZItI+XUIbilKjL5xhWP/xAeVlZf7G+k gbfERKYYlJ4SuRaSVzjWrhM7YtceHnX8KHR3UuOZZg4lQlhNUaeCzX7urlfPG2ZN 7Y+sDTUQsOVdeQEhoCnIy7BfT/U/acSaPok5WT7CNnVABZfypEBh7l/XFAgpaH4z 7S3wFx7tE4iMLjGYw/E4G1su7z9lvgGyEsvRgM38xQbDG3mSwkWFKxzLWe1x7jZU t7jv5Q+U24zKxL8= -----END CERTIFICATE-----Generated at Sun Jan 25 14:19:28 2026 by rpki-client