This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/0/7FC5418B4A590DF15355E167B7AFC0FF7C905516.cer File: 7FC5418B4A590DF15355E167B7AFC0FF7C905516.cer (raw, json) Hash identifier: PItaArSVk6NQh/k+8ZfYk4laxh0ev3jf4U9M4r425Yg= Subject key identifier: 7F:C5:41:8B:4A:59:0D:F1:53:55:E1:67:B7:AF:C0:FF:7C:90:55:16 Authority key identifier: CB:02:14:A5:C4:04:D6:F8:40:43:3B:12:0C:AC:BB:5B:8C:59:E6:13 Certificate issuer: /CN=A9162E3D0001/serialNumber=CB0214A5C404D6F840433B120CACBB5B8C59E613 Certificate serial: 69D58923F24265AAAB221D9FB848892B39B33D75 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1065591683061972994/0/7FC5418B4A590DF15355E167B7AFC0FF7C905516.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1065591683061972994/0/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Mon 19 Jan 2026 11:17:23 +0000 Certificate not after: Mon 18 Jan 2027 11:22:23 +0000 Subordinate resources: IP: 157.66.42.0/23 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Jan 2026 09:17:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:d5:89:23:f2:42:65:aa:ab:22:1d:9f:b8:48:89:2b:39:b3:3d:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=CB0214A5C404D6F840433B120CACBB5B8C59E613 Validity Not Before: Jan 19 11:17:23 2026 GMT Not After : Jan 18 11:22:23 2027 GMT Subject: CN=7FC5418B4A590DF15355E167B7AFC0FF7C905516 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:f3:71:21:13:ee:9e:00:a9:a1:ed:ac:7e:55: 8a:b6:20:7d:05:74:17:6d:ff:39:ab:13:6a:7e:c9: 49:84:31:9c:c6:bf:ea:34:42:06:73:b0:b7:0b:9c: 12:3b:be:7f:f4:dd:c3:bd:26:d5:54:44:55:12:80: 78:db:3e:00:e2:fc:c7:12:b0:c0:97:8c:fa:3f:3e: 7e:8e:df:36:24:58:7b:e8:7b:9e:ce:30:bb:95:8b: 3c:ac:65:9e:42:e4:2a:12:ed:05:f5:ab:c5:8c:80: 77:38:73:61:53:7b:3d:d8:8b:f0:01:3f:f0:1a:7e: 09:d4:ab:24:6c:7d:41:fa:68:31:c3:91:11:d4:22: 6b:c8:56:b0:8e:49:04:5e:88:42:8d:6a:ff:24:46: 48:dc:26:23:21:75:10:67:c6:42:54:1a:a6:1f:1c: e5:3b:bb:57:2e:40:fa:bc:b4:4b:d7:c7:1e:c9:a3: 48:da:6a:87:4f:a5:79:40:60:d7:b8:2b:78:18:8c: af:c5:68:5d:a9:39:6a:c0:5c:ec:bc:56:53:b6:8a: be:93:2d:60:2c:2d:be:f6:70:0d:cd:fd:ef:bc:49: b6:df:1b:00:47:dc:23:ed:6f:8d:20:99:0e:64:c3: 00:81:cb:83:3b:b7:b2:f2:e9:1b:5e:68:de:75:ce: 2c:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 7F:C5:41:8B:4A:59:0D:F1:53:55:E1:67:B7:AF:C0:FF:7C:90:55:16 X509v3 Authority Key Identifier: keyid:CB:02:14:A5:C4:04:D6:F8:40:43:3B:12:0C:AC:BB:5B:8C:59:E6:13 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591683061972994/0/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591683061972994/0/7FC5418B4A590DF15355E167B7AFC0FF7C905516.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.66.42.0/23 Signature Algorithm: sha256WithRSAEncryption 1e:95:7a:d8:46:24:29:2b:f4:9d:a9:23:24:23:3d:c4:c8:93: 56:8f:ca:58:ab:e4:3c:8c:4b:68:79:4f:35:d9:fb:49:34:30: 8e:16:8b:e9:e3:3d:36:80:6f:6c:eb:17:22:3f:0d:7e:93:9f: 33:25:0a:cb:47:3d:d0:ab:f2:09:ea:b5:e2:11:68:97:3f:f1: 9d:9a:61:ec:02:40:f5:31:44:85:1a:7d:b8:01:ff:fc:bd:37: ab:4e:37:bf:43:65:3d:67:8e:dc:6c:f5:e4:7f:3e:0b:69:87: e5:bb:4f:f8:b1:90:51:07:9c:8c:e3:ec:44:54:cf:d2:53:30: 7c:fb:2f:bc:31:3e:e3:c7:ed:6f:78:b0:0f:4d:fd:1d:c6:ea: 8b:fd:db:7f:c5:53:34:30:0b:29:67:53:a3:0b:70:9f:59:e7: 97:90:21:d3:03:a0:64:51:75:7a:fa:2f:84:ec:7d:16:df:81: e2:82:28:6b:6c:76:fb:ce:5d:78:aa:29:90:14:e3:4b:94:95: 77:53:a6:5c:d8:a2:e9:87:e6:20:f2:1b:d9:4d:30:94:f4:de: e5:5a:0d:cf:f5:bd:9f:20:9e:94:23:c6:9c:e4:68:0c:17:6d: 86:11:7a:54:69:58:09:0f:c9:4c:2d:86:26:db:52:36:a7:44: a6:a7:e3:d6 -----BEGIN CERTIFICATE----- MIIFpzCCBI+gAwIBAgIUadWJI/JCZaqrIh2fuEiJKzmzPXUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhDQjAyMTRBNUM0 MDRENkY4NDA0MzNCMTIwQ0FDQkI1QjhDNTlFNjEzMB4XDTI2MDExOTExMTcyM1oX DTI3MDExODExMjIyM1owMzExMC8GA1UEAxMoN0ZDNTQxOEI0QTU5MERGMTUzNTVF MTY3QjdBRkMwRkY3QzkwNTUxNjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANnzcSET7p4AqaHtrH5VirYgfQV0F23/OasTan7JSYQxnMa/6jRCBnOwtwuc Eju+f/Tdw70m1VREVRKAeNs+AOL8xxKwwJeM+j8+fo7fNiRYe+h7ns4wu5WLPKxl nkLkKhLtBfWrxYyAdzhzYVN7PdiL8AE/8Bp+CdSrJGx9QfpoMcOREdQia8hWsI5J BF6IQo1q/yRGSNwmIyF1EGfGQlQaph8c5Tu7Vy5A+ry0S9fHHsmjSNpqh0+leUBg 17greBiMr8VoXak5asBc7LxWU7aKvpMtYCwtvvZwDc3977xJtt8bAEfcI+1vjSCZ DmTDAIHLgzu3svLpG15o3nXOLJcCAwEAAaOCApowggKWMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFH/FQYtKWQ3xU1XhZ7evwP98kFUWMB8GA1UdIwQYMBaAFMsC FKXEBNb4QEM7Egysu1uMWeYTMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMC9DQjAyMTRBNUM0MDRENkY4NDA0MzNCMTIwQ0FDQkI1QjhDNTlF NjEzLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CM0EyNEYyMDFENjYxMUUyOEFDODgzN0M3 MkZEMUZGMi95d0lVcGNRRTF2aEFRenNTREt5N1c0eFo1aE0uY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTA2NTU5MTY4MzA2MTk3Mjk5NC8wLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDY1NTkxNjgzMDYxOTcyOTk0 LzAvN0ZDNTQxOEI0QTU5MERGMTUzNTVFMTY3QjdBRkMwRkY3QzkwNTUxNi5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAGdQiowDQYJKoZIhvcNAQELBQADggEBAB6VethG JCkr9J2pIyQjPcTIk1aPylir5DyMS2h5TzXZ+0k0MI4Wi+njPTaAb2zrFyI/DX6T nzMlCstHPdCr8gnqteIRaJc/8Z2aYewCQPUxRIUafbgB//y9N6tON79DZT1njtxs 9eR/Pgtph+W7T/ixkFEHnIzj7ERUz9JTMHz7L7wxPuPH7W94sA9N/R3G6ov923/F UzQwCylnU6MLcJ9Z55eQIdMDoGRRdXr6L4TsfRbfgeKCKGtsdvvOXXiqKZAU40uU lXdTplzYoumH5iDyG9lNMJT03uVaDc/1vZ8gnpQjxpzkaAwXbYYRelRpWAkPyUwt hibbUjanRKan49Y= -----END CERTIFICATE-----Generated at Sun Jan 25 11:11:33 2026 by rpki-client