This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/0/97B5B7009501E4718F06B9B36D215369C958203F.cer File: 97B5B7009501E4718F06B9B36D215369C958203F.cer (raw, json) Hash identifier: oI1LEFu91SulHVjvAecB0WG+VtEvHu9KeaCtgF6QgGA= Subject key identifier: 97:B5:B7:00:95:01:E4:71:8F:06:B9:B3:6D:21:53:69:C9:58:20:3F Authority key identifier: CB:02:14:A5:C4:04:D6:F8:40:43:3B:12:0C:AC:BB:5B:8C:59:E6:13 Certificate issuer: /CN=A9162E3D0001/serialNumber=CB0214A5C404D6F840433B120CACBB5B8C59E613 Certificate serial: 7692F09FBE0D5438D859E1A36C138A3D448A2674 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1065591117757612035/1/97B5B7009501E4718F06B9B36D215369C958203F.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1065591117757612035/1/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Mon 19 Jan 2026 11:18:41 +0000 Certificate not after: Mon 18 Jan 2027 11:23:41 +0000 Subordinate resources: IP: 140.210.8.0/21 IP: 160.30.230.0/23 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 16:37:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:92:f0:9f:be:0d:54:38:d8:59:e1:a3:6c:13:8a:3d:44:8a:26:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=CB0214A5C404D6F840433B120CACBB5B8C59E613 Validity Not Before: Jan 19 11:18:41 2026 GMT Not After : Jan 18 11:23:41 2027 GMT Subject: CN=97B5B7009501E4718F06B9B36D215369C958203F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:1b:14:30:9d:38:5e:96:69:04:ce:53:5c:a3: 68:67:b3:09:c7:78:6d:6f:70:85:2b:e0:b9:43:8a: 40:7c:b2:d0:29:c5:74:3b:4f:b8:e1:0a:68:28:d3: 55:64:61:9a:25:dc:5b:ad:e4:3a:67:eb:e2:58:d3: ec:73:a9:de:92:eb:78:cb:4e:c3:3e:be:71:c6:07: dd:66:31:35:87:7d:a9:41:1e:b2:06:dd:9d:74:15: 14:c5:95:d0:14:ac:cd:bf:09:e8:d9:9a:f7:f4:aa: 0a:65:ea:d6:6b:7e:fe:e6:02:22:75:56:23:e4:dd: 01:cf:ea:18:d5:04:1b:7c:ee:a4:27:b9:7d:64:6a: c4:da:ea:dc:e6:f1:55:dc:31:64:61:c8:47:4b:4e: e4:2c:4b:a8:79:0a:45:8a:32:29:36:f6:55:dc:48: 31:b6:fb:7f:54:e7:74:3b:9b:7b:d4:c5:7e:c3:d3: 00:47:c6:79:9a:9f:bc:5e:a1:15:ab:80:85:7e:95: a8:26:a0:52:f3:bd:a1:74:8b:01:c6:1b:3c:ea:a5: b6:d6:b3:86:87:be:91:99:78:25:67:21:aa:c0:ef: 83:0a:dd:c7:f4:06:c0:59:32:33:29:60:1b:7f:19: e9:fc:d0:9b:d3:8c:f1:88:8c:21:51:f5:a3:07:7e: d6:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 97:B5:B7:00:95:01:E4:71:8F:06:B9:B3:6D:21:53:69:C9:58:20:3F X509v3 Authority Key Identifier: keyid:CB:02:14:A5:C4:04:D6:F8:40:43:3B:12:0C:AC:BB:5B:8C:59:E6:13 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591117757612035/1/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591117757612035/1/97B5B7009501E4718F06B9B36D215369C958203F.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 140.210.8.0/21 160.30.230.0/23 Signature Algorithm: sha256WithRSAEncryption 52:13:4c:4e:58:02:b0:93:1d:7b:a3:19:75:8b:d3:1a:1a:f7: 50:a1:b5:fe:2a:dc:44:42:8f:28:1b:66:b3:f3:0a:01:81:06: 2a:15:95:e3:59:dd:b0:5c:53:15:50:81:41:c9:f2:58:5a:fc: 85:73:b5:66:16:7a:f5:e6:c1:68:c9:40:31:bf:12:e5:f1:c6: 81:9f:aa:7b:d4:4a:df:c4:16:f3:0a:1f:a4:8d:0b:cf:cc:d9: 72:1a:45:f0:96:da:5d:74:d3:65:22:5a:93:b0:5e:1a:59:f0: b5:ce:81:b2:75:2b:04:25:ae:45:8f:a6:62:27:30:c1:7a:e4: f9:69:cb:b1:39:51:06:57:e8:2d:ab:7c:fa:bd:e3:87:5d:13: 47:85:21:c5:4f:0e:4b:50:ba:11:de:11:14:de:e4:96:e8:56: a4:ba:49:cd:ea:84:46:5b:52:00:8f:7b:4f:ff:a3:c1:fa:0d: d2:75:57:43:fb:1a:dc:38:c8:1a:d5:c0:ca:0c:09:81:5a:d6: 17:9a:56:f8:cd:41:46:f7:82:09:d3:f7:e4:a1:1f:20:f2:c3: 9e:c4:ad:8b:ed:6e:00:2e:98:f8:49:26:a5:48:99:1d:96:59: c2:c1:cc:0c:58:f1:2d:45:0a:99:24:e5:fa:af:1b:a6:7f:f7: 60:9f:c8:9f -----BEGIN CERTIFICATE----- MIIFrTCCBJWgAwIBAgIUdpLwn74NVDjYWeGjbBOKPUSKJnQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhDQjAyMTRBNUM0 MDRENkY4NDA0MzNCMTIwQ0FDQkI1QjhDNTlFNjEzMB4XDTI2MDExOTExMTg0MVoX DTI3MDExODExMjM0MVowMzExMC8GA1UEAxMoOTdCNUI3MDA5NTAxRTQ3MThGMDZC OUIzNkQyMTUzNjlDOTU4MjAzRjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOkbFDCdOF6WaQTOU1yjaGezCcd4bW9whSvguUOKQHyy0CnFdDtPuOEKaCjT VWRhmiXcW63kOmfr4ljT7HOp3pLreMtOwz6+ccYH3WYxNYd9qUEesgbdnXQVFMWV 0BSszb8J6Nma9/SqCmXq1mt+/uYCInVWI+TdAc/qGNUEG3zupCe5fWRqxNrq3Obx VdwxZGHIR0tO5CxLqHkKRYoyKTb2VdxIMbb7f1TndDube9TFfsPTAEfGeZqfvF6h FauAhX6VqCagUvO9oXSLAcYbPOqlttazhoe+kZl4JWchqsDvgwrdx/QGwFkyMylg G38Z6fzQm9OM8YiMIVH1owd+1rMCAwEAAaOCAqAwggKcMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFJe1twCVAeRxjwa5s20hU2nJWCA/MB8GA1UdIwQYMBaAFMsC FKXEBNb4QEM7Egysu1uMWeYTMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMC9DQjAyMTRBNUM0MDRENkY4NDA0MzNCMTIwQ0FDQkI1QjhDNTlF NjEzLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CM0EyNEYyMDFENjYxMUUyOEFDODgzN0M3 MkZEMUZGMi95d0lVcGNRRTF2aEFRenNTREt5N1c0eFo1aE0uY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTA2NTU5MTExNzc1NzYxMjAzNS8xLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDY1NTkxMTE3NzU3NjEyMDM1 LzEvOTdCNUI3MDA5NTAxRTQ3MThGMDZCOUIzNkQyMTUzNjlDOTU4MjAzRi5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwJQYIKwYBBQUH AQcBAf8EFjAUMBIEAgABMAwDBAOM0ggDBAGgHuYwDQYJKoZIhvcNAQELBQADggEB AFITTE5YArCTHXujGXWL0xoa91Chtf4q3ERCjygbZrPzCgGBBioVleNZ3bBcUxVQ gUHJ8lha/IVztWYWevXmwWjJQDG/EuXxxoGfqnvUSt/EFvMKH6SNC8/M2XIaRfCW 2l1002UiWpOwXhpZ8LXOgbJ1KwQlrkWPpmInMMF65Plpy7E5UQZX6C2rfPq944dd E0eFIcVPDktQuhHeERTe5JboVqS6Sc3qhEZbUgCPe0//o8H6DdJ1V0P7Gtw4yBrV wMoMCYFa1heaVvjNQUb3ggnT9+ShHyDyw57ErYvtbgAumPhJJqVImR2WWcLBzAxY 8S1FCpkk5fqvG6Z/92CfyJ8= -----END CERTIFICATE-----Generated at Sun Jan 25 08:16:03 2026 by rpki-client