This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/0/BF61A6EB2CD2942DFFBA1347B940D5B97D99DDD2.cer File: BF61A6EB2CD2942DFFBA1347B940D5B97D99DDD2.cer (raw, json) Hash identifier: MAtb9XjPHB5wojgWV3idOD+myk7+izc1kGjzNkP1wRM= Subject key identifier: BF:61:A6:EB:2C:D2:94:2D:FF:BA:13:47:B9:40:D5:B9:7D:99:DD:D2 Authority key identifier: CB:02:14:A5:C4:04:D6:F8:40:43:3B:12:0C:AC:BB:5B:8C:59:E6:13 Certificate issuer: /CN=A9162E3D0001/serialNumber=CB0214A5C404D6F840433B120CACBB5B8C59E613 Certificate serial: 787188F52F4F6E6DB350CB32B68EAF57369993FD Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1065580055121559554/1/BF61A6EB2CD2942DFFBA1347B940D5B97D99DDD2.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1065580055121559554/1/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Mon 19 Jan 2026 10:30:57 +0000 Certificate not after: Mon 18 Jan 2027 10:35:57 +0000 Subordinate resources: IP: 139.159.96.0 -- 139.159.115.255 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 16:37:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:71:88:f5:2f:4f:6e:6d:b3:50:cb:32:b6:8e:af:57:36:99:93:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=CB0214A5C404D6F840433B120CACBB5B8C59E613 Validity Not Before: Jan 19 10:30:57 2026 GMT Not After : Jan 18 10:35:57 2027 GMT Subject: CN=BF61A6EB2CD2942DFFBA1347B940D5B97D99DDD2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:6c:d2:90:a0:b9:5e:24:20:10:a9:ae:d3:1b: 2a:cf:a4:dc:47:a0:a8:8a:03:d4:2f:d1:72:2e:fb: 96:cd:f9:87:2d:38:45:5b:c4:ac:73:fa:f2:13:19: 90:99:1b:5f:ea:fd:2d:55:73:43:1a:f4:de:5c:c8: d8:20:d5:ce:14:fa:cd:1d:c7:8c:aa:d3:ba:1d:39: 47:b9:2b:7d:9e:20:41:50:7b:67:7f:32:e3:9c:06: 10:a4:eb:05:a2:cb:10:cf:00:fc:01:c1:39:24:0d: a4:27:16:f1:0a:1f:9c:08:37:36:dc:f7:91:88:c4: 12:58:52:26:65:10:30:ec:0d:5b:f6:5b:d8:ef:d5: 7e:49:47:e0:ae:10:8a:03:d0:ff:39:c9:97:f9:ec: d2:0b:be:4e:95:14:0e:88:d9:78:5b:7a:70:b4:b6: 11:0e:f9:8e:e8:71:91:2e:27:10:b6:48:70:0b:aa: 69:73:44:70:c8:03:a3:2f:c7:00:c2:d6:ef:79:ad: 63:03:78:3e:cd:ce:ce:7e:0c:b5:9b:35:b1:54:71: 2d:c4:a4:4d:34:ca:3f:68:6c:33:fa:3f:4d:87:cd: f9:c2:1b:8d:f9:9c:1e:c5:a7:7b:aa:35:d5:eb:80: d4:5b:2a:75:d3:4b:2a:fd:04:37:1f:c7:46:2f:49: 4c:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: BF:61:A6:EB:2C:D2:94:2D:FF:BA:13:47:B9:40:D5:B9:7D:99:DD:D2 X509v3 Authority Key Identifier: keyid:CB:02:14:A5:C4:04:D6:F8:40:43:3B:12:0C:AC:BB:5B:8C:59:E6:13 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121559554/1/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121559554/1/BF61A6EB2CD2942DFFBA1347B940D5B97D99DDD2.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 139.159.96.0-139.159.115.255 Signature Algorithm: sha256WithRSAEncryption b0:de:ef:34:37:92:eb:58:09:8b:ce:46:a9:5e:94:2b:49:c0: 14:ce:5a:79:8b:9f:05:6a:5b:39:5e:ef:d2:e4:ad:45:27:13: 80:40:4f:e7:12:71:aa:e3:3d:a7:0a:10:4c:8b:27:b3:a6:c1: d0:44:dd:9b:0c:94:ac:2e:96:7d:c6:24:86:8a:c6:3a:b4:1b: b8:0c:c5:28:8b:ce:5a:b1:c4:0c:b6:6c:fe:48:35:0f:ba:1e: 35:d9:17:7b:8e:dc:16:60:62:e2:f0:a4:0a:b2:ec:5d:95:07: ae:95:2d:0d:6d:b2:42:79:fb:53:dc:dc:ba:17:21:30:e7:8b: 5c:b0:9c:14:74:0f:c2:2c:56:89:c4:20:9e:80:0d:3b:76:e8: 30:61:b6:20:bd:c0:aa:91:f6:aa:06:51:39:61:a8:cf:27:b6: d3:59:f7:75:3b:65:b0:e2:f1:c5:49:a4:a6:82:ec:3b:7d:1f: 63:12:2e:a1:fd:57:a7:cc:4c:89:08:77:24:a8:09:ed:db:80: 63:8b:c7:c5:17:e3:b2:1f:a9:ce:32:f4:c1:9e:2b:a8:5e:bb: 92:3e:f2:4c:4a:f2:45:a1:72:2a:bb:cf:05:df:69:4e:a9:53: 9a:05:7b:56:40:0b:af:7e:25:f3:7c:48:5a:50:7f:40:4e:f7: d2:1b:39:33 -----BEGIN CERTIFICATE----- MIIFrzCCBJegAwIBAgIUeHGI9S9Pbm2zUMsyto6vVzaZk/0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhDQjAyMTRBNUM0 MDRENkY4NDA0MzNCMTIwQ0FDQkI1QjhDNTlFNjEzMB4XDTI2MDExOTEwMzA1N1oX DTI3MDExODEwMzU1N1owMzExMC8GA1UEAxMoQkY2MUE2RUIyQ0QyOTQyREZGQkEx MzQ3Qjk0MEQ1Qjk3RDk5REREMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALts0pCguV4kIBCprtMbKs+k3EegqIoD1C/Rci77ls35hy04RVvErHP68hMZ kJkbX+r9LVVzQxr03lzI2CDVzhT6zR3HjKrTuh05R7krfZ4gQVB7Z38y45wGEKTr BaLLEM8A/AHBOSQNpCcW8QofnAg3Ntz3kYjEElhSJmUQMOwNW/Zb2O/VfklH4K4Q igPQ/znJl/ns0gu+TpUUDojZeFt6cLS2EQ75juhxkS4nELZIcAuqaXNEcMgDoy/H AMLW73mtYwN4Ps3Ozn4MtZs1sVRxLcSkTTTKP2hsM/o/TYfN+cIbjfmcHsWne6o1 1euA1FsqddNLKv0ENx/HRi9JTLkCAwEAAaOCAqIwggKeMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFL9hpuss0pQt/7oTR7lA1bl9md3SMB8GA1UdIwQYMBaAFMsC FKXEBNb4QEM7Egysu1uMWeYTMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMC9DQjAyMTRBNUM0MDRENkY4NDA0MzNCMTIwQ0FDQkI1QjhDNTlF NjEzLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CM0EyNEYyMDFENjYxMUUyOEFDODgzN0M3 MkZEMUZGMi95d0lVcGNRRTF2aEFRenNTREt5N1c0eFo1aE0uY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTA2NTU4MDA1NTEyMTU1OTU1NC8xLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDY1NTgwMDU1MTIxNTU5NTU0 LzEvQkY2MUE2RUIyQ0QyOTQyREZGQkExMzQ3Qjk0MEQ1Qjk3RDk5REREMi5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwJwYIKwYBBQUH AQcBAf8EGDAWMBQEAgABMA4wDAMEBYufYAMEAoufcDANBgkqhkiG9w0BAQsFAAOC AQEAsN7vNDeS61gJi85GqV6UK0nAFM5aeYufBWpbOV7v0uStRScTgEBP5xJxquM9 pwoQTIsns6bB0ETdmwyUrC6WfcYkhorGOrQbuAzFKIvOWrHEDLZs/kg1D7oeNdkX e47cFmBi4vCkCrLsXZUHrpUtDW2yQnn7U9zcuhchMOeLXLCcFHQPwixWicQgnoAN O3boMGG2IL3AqpH2qgZROWGozye201n3dTtlsOLxxUmkpoLsO30fYxIuof1Xp8xM iQh3JKgJ7duAY4vHxRfjsh+pzjL0wZ4rqF67kj7yTEryRaFyKrvPBd9pTqlTmgV7 VkALr34l83xIWlB/QE730hs5Mw== -----END CERTIFICATE-----Generated at Sun Jan 25 10:33:04 2026 by rpki-client