This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/0/7EAC9E43C8FAE7ED5B6159423D60EA732848F05F.cer File: 7EAC9E43C8FAE7ED5B6159423D60EA732848F05F.cer (raw, json) Hash identifier: YVREQUBkqSV8hbreZJSrO3JHQvND6MNTUJNavjT7H9I= Subject key identifier: 7E:AC:9E:43:C8:FA:E7:ED:5B:61:59:42:3D:60:EA:73:28:48:F0:5F Authority key identifier: CB:02:14:A5:C4:04:D6:F8:40:43:3B:12:0C:AC:BB:5B:8C:59:E6:13 Certificate issuer: /CN=A9162E3D0001/serialNumber=CB0214A5C404D6F840433B120CACBB5B8C59E613 Certificate serial: 39BE44DACC67D6BC12265406CD2B80655604613A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1065583221971877891/1/7EAC9E43C8FAE7ED5B6159423D60EA732848F05F.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1065583221971877891/1/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Mon 19 Jan 2026 10:42:19 +0000 Certificate not after: Mon 18 Jan 2027 10:47:19 +0000 Subordinate resources: IP: 40.72.0.0/15 IP: 40.125.128.0/17 IP: 40.126.64.0/18 IP: 40.162.0.0/16 IP: 52.130.0.0/15 IP: 139.217.0.0/16 IP: 139.219.0.0/16 IP: 143.64.0.0/16 IP: 159.27.0.0/16 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Jan 2026 09:17:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:be:44:da:cc:67:d6:bc:12:26:54:06:cd:2b:80:65:56:04:61:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=CB0214A5C404D6F840433B120CACBB5B8C59E613 Validity Not Before: Jan 19 10:42:19 2026 GMT Not After : Jan 18 10:47:19 2027 GMT Subject: CN=7EAC9E43C8FAE7ED5B6159423D60EA732848F05F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:8d:e9:a4:55:97:c2:43:92:e8:6b:56:48:b9: bc:66:a0:6d:e2:5a:ad:9c:bb:84:de:7d:85:a3:6e: d9:41:7a:d8:d2:76:a6:e2:fb:82:2a:92:ca:98:e0: bf:6e:7e:a3:76:69:9d:89:f5:a6:e2:67:6f:d2:6e: 4f:59:b2:6e:2b:0a:ab:23:ca:bb:7f:8f:2b:6e:7c: df:06:81:3d:15:6f:9d:d5:f5:1a:c0:38:c0:4a:f4: b3:cd:a1:17:18:28:c9:2b:cc:ab:e7:ee:12:cb:27: 00:b3:f5:38:70:05:30:18:37:91:89:28:95:a9:e1: a1:17:cc:cf:2c:48:46:64:80:74:89:4d:3a:77:fd: 97:13:c3:5a:f0:32:6c:2d:28:b2:27:84:18:30:48: d3:7c:09:78:c1:be:94:0f:3b:02:0c:8f:f8:2e:7d: 41:f0:71:04:7a:61:c9:a4:92:5a:68:aa:46:e9:c1: 3d:4c:27:42:2c:a6:9c:b9:0c:41:77:7b:e7:ac:2a: 09:fe:17:dd:4c:7c:d9:e8:54:ee:0d:2d:90:bf:4c: 28:fc:74:c1:13:0d:cc:5f:b3:07:44:22:a8:95:2b: 47:0b:12:b4:1f:6a:64:b3:20:0d:2a:fe:a2:58:f8: 3d:a0:54:a2:3b:21:82:6c:5b:40:25:8b:84:af:14: d9:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 7E:AC:9E:43:C8:FA:E7:ED:5B:61:59:42:3D:60:EA:73:28:48:F0:5F X509v3 Authority Key Identifier: keyid:CB:02:14:A5:C4:04:D6:F8:40:43:3B:12:0C:AC:BB:5B:8C:59:E6:13 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1065583221971877891/1/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1065583221971877891/1/7EAC9E43C8FAE7ED5B6159423D60EA732848F05F.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 40.72.0.0/15 40.125.128.0/17 40.126.64.0/18 40.162.0.0/16 52.130.0.0/15 139.217.0.0/16 139.219.0.0/16 143.64.0.0/16 159.27.0.0/16 Signature Algorithm: sha256WithRSAEncryption 0b:7d:04:17:9e:64:14:5d:f8:51:f1:ad:59:95:3d:b2:d6:a5: 1e:28:0c:27:3f:9d:42:31:c9:6a:a8:59:15:a9:93:68:7b:68: c1:ce:21:5c:e9:d9:f0:94:e7:15:43:07:68:eb:4c:9e:8e:a2: 73:38:0a:08:15:fa:fe:72:3c:54:31:aa:7c:02:71:e2:5d:bd: 8b:fd:50:33:fd:da:85:df:85:68:74:e5:eb:25:68:1f:16:96: c2:34:13:2a:a5:ed:24:42:c3:71:92:dc:e1:cc:8f:43:d7:cf: a8:8e:b1:23:26:cf:eb:c6:ad:5e:1a:82:fe:13:33:3a:e0:1e: de:2f:cb:dc:94:58:61:84:b2:7a:02:15:2d:37:35:b8:d4:9d: 1f:70:5f:6a:95:0c:0a:09:78:6a:c9:b3:ab:b0:46:c8:fa:32: 44:6e:a1:03:5f:4d:e1:b4:1f:79:20:4c:ba:f7:3b:5c:2e:14: 4f:39:94:5d:10:8c:f7:46:9d:e9:4c:0f:1e:aa:bf:61:aa:9e: a8:f9:fa:92:79:92:b5:5b:2b:d8:38:b8:64:ff:46:f9:bc:bf: 18:f2:10:61:bc:4e:ed:7d:82:95:81:71:48:e9:e6:3c:f9:85: cf:7c:49:63:76:1c:b3:8a:9d:b0:4c:ee:40:83:87:70:79:8e: a9:4a:3d:23 -----BEGIN CERTIFICATE----- MIIF0DCCBLigAwIBAgIUOb5E2sxn1rwSJlQGzSuAZVYEYTowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhDQjAyMTRBNUM0 MDRENkY4NDA0MzNCMTIwQ0FDQkI1QjhDNTlFNjEzMB4XDTI2MDExOTEwNDIxOVoX DTI3MDExODEwNDcxOVowMzExMC8GA1UEAxMoN0VBQzlFNDNDOEZBRTdFRDVCNjE1 OTQyM0Q2MEVBNzMyODQ4RjA1RjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAK6N6aRVl8JDkuhrVki5vGagbeJarZy7hN59haNu2UF62NJ2puL7giqSypjg v25+o3ZpnYn1puJnb9JuT1mybisKqyPKu3+PK2583waBPRVvndX1GsA4wEr0s82h FxgoySvMq+fuEssnALP1OHAFMBg3kYkolanhoRfMzyxIRmSAdIlNOnf9lxPDWvAy bC0osieEGDBI03wJeMG+lA87AgyP+C59QfBxBHphyaSSWmiqRunBPUwnQiymnLkM QXd756wqCf4X3Ux82ehU7g0tkL9MKPx0wRMNzF+zB0QiqJUrRwsStB9qZLMgDSr+ olj4PaBUojshgmxbQCWLhK8U2ecCAwEAAaOCAsMwggK/MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFH6snkPI+uftW2FZQj1g6nMoSPBfMB8GA1UdIwQYMBaAFMsC FKXEBNb4QEM7Egysu1uMWeYTMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMC9DQjAyMTRBNUM0MDRENkY4NDA0MzNCMTIwQ0FDQkI1QjhDNTlF NjEzLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CM0EyNEYyMDFENjYxMUUyOEFDODgzN0M3 MkZEMUZGMi95d0lVcGNRRTF2aEFRenNTREt5N1c0eFo1aE0uY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTA2NTU4MzIyMTk3MTg3Nzg5MS8xLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDY1NTgzMjIxOTcxODc3ODkx LzEvN0VBQzlFNDNDOEZBRTdFRDVCNjE1OTQyM0Q2MEVBNzMyODQ4RjA1Ri5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwSAYIKwYBBQUH AQcBAf8EOTA3MDUEAgABMC8DAwEoSAMEByh9gAMEBih+QAMDACiiAwMBNIIDAwCL 2QMDAIvbAwMAj0ADAwCfGzANBgkqhkiG9w0BAQsFAAOCAQEAC30EF55kFF34UfGt WZU9stalHigMJz+dQjHJaqhZFamTaHtowc4hXOnZ8JTnFUMHaOtMno6iczgKCBX6 /nI8VDGqfAJx4l29i/1QM/3ahd+FaHTl6yVoHxaWwjQTKqXtJELDcZLc4cyPQ9fP qI6xIybP68atXhqC/hMzOuAe3i/L3JRYYYSyegIVLTc1uNSdH3BfapUMCgl4asmz q7BGyPoyRG6hA19N4bQfeSBMuvc7XC4UTzmUXRCM90ad6UwPHqq/YaqeqPn6knmS tVsr2Di4ZP9G+by/GPIQYbxO7X2ClYFxSOnmPPmFz3xJY3Ycs4qdsEzuQIOHcHmO qUo9Iw== -----END CERTIFICATE-----Generated at Sun Jan 25 14:20:38 2026 by rpki-client