This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/0/8046423AC6A5B7D6D11E9BCB978AC4065EE9CA76.cer File: 8046423AC6A5B7D6D11E9BCB978AC4065EE9CA76.cer (raw, json) Hash identifier: tMDDxvN5y/rRtdbqBnWdBeOYsc0y7N+j0k/Rz89Qv/4= Subject key identifier: 80:46:42:3A:C6:A5:B7:D6:D1:1E:9B:CB:97:8A:C4:06:5E:E9:CA:76 Authority key identifier: CB:02:14:A5:C4:04:D6:F8:40:43:3B:12:0C:AC:BB:5B:8C:59:E6:13 Certificate issuer: /CN=A9162E3D0001/serialNumber=CB0214A5C404D6F840433B120CACBB5B8C59E613 Certificate serial: 590297BB7E459783C62C36E3ED71C6A75BEEA8BA Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1065588335524773889/1/8046423AC6A5B7D6D11E9BCB978AC4065EE9CA76.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1065588335524773889/1/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Mon 19 Jan 2026 11:02:56 +0000 Certificate not after: Mon 18 Jan 2027 11:07:56 +0000 Subordinate resources: IP: 140.210.0.0/22 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Jan 2026 09:17:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:02:97:bb:7e:45:97:83:c6:2c:36:e3:ed:71:c6:a7:5b:ee:a8:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=CB0214A5C404D6F840433B120CACBB5B8C59E613 Validity Not Before: Jan 19 11:02:56 2026 GMT Not After : Jan 18 11:07:56 2027 GMT Subject: CN=8046423AC6A5B7D6D11E9BCB978AC4065EE9CA76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:48:8d:b3:cd:47:ac:98:3f:80:ee:20:3c:e0: e8:ce:6f:75:36:e2:14:0f:01:dd:af:26:1e:bb:9f: a6:c6:0b:e0:da:86:a0:d2:c4:47:80:5b:bc:68:0e: e6:08:33:d1:1d:84:6e:af:d1:81:47:de:41:b9:11: 51:f1:12:68:bf:45:64:c7:05:37:a5:54:1c:9c:81: e8:4c:bf:cd:8b:81:6b:54:da:38:66:15:3c:c6:1a: 20:31:0b:f0:be:4b:53:fe:2f:48:d6:c1:4b:5b:1e: d6:b7:e7:9f:20:2b:1f:d8:99:33:c4:26:0d:0d:03: 6a:12:20:60:e6:83:f7:de:c9:e9:b0:88:05:e4:a3: ee:b4:78:3e:9f:4a:16:39:6e:f2:e1:4b:3a:c4:9e: f9:75:69:00:1b:13:5a:a5:d2:f3:0c:43:e8:7e:a3: 13:bb:d9:03:c5:e5:0f:f8:73:44:18:43:73:ca:37: 79:af:f0:8c:0f:4d:9b:c4:34:03:b8:bf:6b:03:f6: 7d:42:44:4c:12:b0:0e:cb:73:90:fb:df:7b:34:ee: fd:c1:fc:7f:8e:aa:a8:1f:c3:d6:a3:d8:c0:b0:04: 86:d6:d1:f4:fb:42:3c:c4:db:bc:5c:a9:b6:07:7f: 38:8e:8a:fe:83:2d:89:ba:99:6c:50:4e:a0:41:26: d0:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 80:46:42:3A:C6:A5:B7:D6:D1:1E:9B:CB:97:8A:C4:06:5E:E9:CA:76 X509v3 Authority Key Identifier: keyid:CB:02:14:A5:C4:04:D6:F8:40:43:3B:12:0C:AC:BB:5B:8C:59:E6:13 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335524773889/1/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335524773889/1/8046423AC6A5B7D6D11E9BCB978AC4065EE9CA76.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 140.210.0.0/22 Signature Algorithm: sha256WithRSAEncryption 7d:2f:42:6b:dd:12:b9:c4:72:cd:ce:0d:a3:fe:18:99:18:3b: ad:f4:b6:93:a9:82:d1:7e:da:07:58:a4:b9:87:b9:8c:92:04: 6b:d1:28:48:23:44:11:19:44:b6:0f:a3:39:dd:b0:2b:a1:ea: 3b:d8:cc:9d:fe:83:ae:c0:09:05:46:00:fb:97:d9:29:cd:cb: f9:17:61:ac:1d:24:ba:21:07:3d:fb:b8:ef:0c:60:c2:71:74: 2e:17:e5:7d:77:fd:82:e6:76:4c:a7:6c:41:c5:72:7a:56:39: 21:e3:7e:85:57:ff:f6:26:12:88:b6:5a:56:9b:d4:92:57:9b: ef:e7:af:d7:07:d4:7d:0a:03:d7:65:6c:30:12:d7:ad:11:6e: 0b:1d:48:7b:b4:fd:35:39:79:15:17:e8:14:94:b8:50:04:67: 1d:13:8f:bb:a7:98:29:e5:e3:cc:1d:87:5f:6a:da:85:e2:0a: f7:7c:65:70:b6:ab:6d:dd:1a:c2:48:dc:c5:60:7e:0a:24:bb: ea:9e:63:30:9c:08:38:e1:cd:ad:f2:7c:b2:7d:5b:90:4a:fd: 7a:7d:0d:62:86:d1:0b:ac:92:fc:ac:ba:1f:cd:e0:dc:c0:06: b9:30:75:23:cc:cf:39:0f:d8:3a:26:3e:2a:6b:0e:ec:21:1b: ce:07:c1:8a -----BEGIN CERTIFICATE----- MIIFpzCCBI+gAwIBAgIUWQKXu35Fl4PGLDbj7XHGp1vuqLowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhDQjAyMTRBNUM0 MDRENkY4NDA0MzNCMTIwQ0FDQkI1QjhDNTlFNjEzMB4XDTI2MDExOTExMDI1NloX DTI3MDExODExMDc1NlowMzExMC8GA1UEAxMoODA0NjQyM0FDNkE1QjdENkQxMUU5 QkNCOTc4QUM0MDY1RUU5Q0E3NjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAK9IjbPNR6yYP4DuIDzg6M5vdTbiFA8B3a8mHrufpsYL4NqGoNLER4BbvGgO 5ggz0R2Ebq/RgUfeQbkRUfESaL9FZMcFN6VUHJyB6Ey/zYuBa1TaOGYVPMYaIDEL 8L5LU/4vSNbBS1se1rfnnyArH9iZM8QmDQ0DahIgYOaD997J6bCIBeSj7rR4Pp9K Fjlu8uFLOsSe+XVpABsTWqXS8wxD6H6jE7vZA8XlD/hzRBhDc8o3ea/wjA9Nm8Q0 A7i/awP2fUJETBKwDstzkPvfezTu/cH8f46qqB/D1qPYwLAEhtbR9PtCPMTbvFyp tgd/OI6K/oMtibqZbFBOoEEm0OsCAwEAAaOCApowggKWMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFIBGQjrGpbfW0R6by5eKxAZe6cp2MB8GA1UdIwQYMBaAFMsC FKXEBNb4QEM7Egysu1uMWeYTMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMC9DQjAyMTRBNUM0MDRENkY4NDA0MzNCMTIwQ0FDQkI1QjhDNTlF NjEzLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CM0EyNEYyMDFENjYxMUUyOEFDODgzN0M3 MkZEMUZGMi95d0lVcGNRRTF2aEFRenNTREt5N1c0eFo1aE0uY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTA2NTU4ODMzNTUyNDc3Mzg4OS8xLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDY1NTg4MzM1NTI0NzczODg5 LzEvODA0NjQyM0FDNkE1QjdENkQxMUU5QkNCOTc4QUM0MDY1RUU5Q0E3Ni5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAKM0gAwDQYJKoZIhvcNAQELBQADggEBAH0vQmvd ErnEcs3ODaP+GJkYO630tpOpgtF+2gdYpLmHuYySBGvRKEgjRBEZRLYPozndsCuh 6jvYzJ3+g67ACQVGAPuX2SnNy/kXYawdJLohBz37uO8MYMJxdC4X5X13/YLmdkyn bEHFcnpWOSHjfoVX//YmEoi2Wlab1JJXm+/nr9cH1H0KA9dlbDAS160RbgsdSHu0 /TU5eRUX6BSUuFAEZx0Tj7unmCnl48wdh19q2oXiCvd8ZXC2q23dGsJI3MVgfgok u+qeYzCcCDjhza3yfLJ9W5BK/Xp9DWKG0Quskvysuh/N4NzABrkwdSPMzzkP2Dom PiprDuwhG84HwYo= -----END CERTIFICATE-----Generated at Sun Jan 25 17:15:26 2026 by rpki-client