This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/0/F8291D72985D2225F7CB1A97A84837BBD2F5FE88.cer File: F8291D72985D2225F7CB1A97A84837BBD2F5FE88.cer (raw, json) Hash identifier: FhQekzTy7C6OxtpsQvxtzjCO7KZ8y0mP+yndGsKEkcI= Subject key identifier: F8:29:1D:72:98:5D:22:25:F7:CB:1A:97:A8:48:37:BB:D2:F5:FE:88 Authority key identifier: CB:02:14:A5:C4:04:D6:F8:40:43:3B:12:0C:AC:BB:5B:8C:59:E6:13 Certificate issuer: /CN=A9162E3D0001/serialNumber=CB0214A5C404D6F840433B120CACBB5B8C59E613 Certificate serial: 249B899947273FD6FEA6FFA277835AEA675A4F99 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1065588335524708353/1/F8291D72985D2225F7CB1A97A84837BBD2F5FE88.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1065588335524708353/1/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Mon 19 Jan 2026 11:02:39 +0000 Certificate not after: Mon 18 Jan 2027 11:07:39 +0000 Subordinate resources: IP: 157.10.112.0/23 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Jan 2026 09:17:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:9b:89:99:47:27:3f:d6:fe:a6:ff:a2:77:83:5a:ea:67:5a:4f:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=CB0214A5C404D6F840433B120CACBB5B8C59E613 Validity Not Before: Jan 19 11:02:39 2026 GMT Not After : Jan 18 11:07:39 2027 GMT Subject: CN=F8291D72985D2225F7CB1A97A84837BBD2F5FE88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fa:d9:e4:c4:25:2c:af:41:88:f6:cd:e4:30:79: 42:80:93:6a:06:ef:f1:74:4c:09:f2:ac:b2:54:75: c0:95:77:08:cb:61:00:57:d4:f0:20:c8:46:b1:05: 86:d9:91:3b:f8:e4:3d:85:86:76:8b:82:b8:4c:c3: e5:de:cb:b2:4c:02:66:2e:0e:72:6f:cc:c7:1e:65: 46:4e:2e:56:35:d6:f1:7c:f1:8d:40:0e:03:05:a0: 1b:b6:b8:1a:e4:af:b9:04:8e:2d:f0:a9:59:10:3c: 04:79:c6:9f:19:25:c5:26:5f:47:98:ee:d9:f5:a1: bc:d6:41:58:1e:49:db:2f:ab:fb:62:32:d3:c3:7a: bb:a4:de:c8:09:81:89:cf:17:e2:64:29:b7:3d:b7: f7:fa:20:96:65:05:1c:7c:7a:e9:6f:64:25:ca:5b: 87:ac:f7:a8:2b:59:46:26:a5:a4:ef:e7:db:bd:95: 1e:2f:cf:8e:9e:4d:ad:d7:7f:fa:28:88:87:8e:d3: 65:01:aa:c1:97:88:60:df:d1:46:5a:84:13:be:05: dd:4c:09:df:e3:20:22:c2:3e:f7:dc:30:2d:f9:a5: f2:53:32:ab:72:08:91:45:64:09:c5:d1:57:aa:b4: 53:8a:45:43:98:e1:e3:ae:36:d0:05:77:f0:89:f6: 5a:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: F8:29:1D:72:98:5D:22:25:F7:CB:1A:97:A8:48:37:BB:D2:F5:FE:88 X509v3 Authority Key Identifier: keyid:CB:02:14:A5:C4:04:D6:F8:40:43:3B:12:0C:AC:BB:5B:8C:59:E6:13 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335524708353/1/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335524708353/1/F8291D72985D2225F7CB1A97A84837BBD2F5FE88.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.10.112.0/23 Signature Algorithm: sha256WithRSAEncryption 98:03:89:ba:9d:43:35:79:84:b2:ae:29:a0:6b:93:8f:66:4f: 65:22:47:10:10:e4:23:22:a5:c7:e5:0d:89:f5:7b:7d:93:ea: dc:3a:d3:f5:df:5e:fb:d5:b7:8c:cc:40:c1:94:b3:95:eb:c7: 5a:b5:65:38:a2:35:b3:e4:dd:45:c6:32:8e:11:b1:8a:1b:1c: 54:dc:4f:00:fd:0b:56:d6:b5:ad:5c:36:c8:ab:a9:e9:86:91: e3:5a:e0:2f:6a:63:d0:cb:07:a4:e7:19:e6:90:84:c7:94:70: 51:1d:c2:10:67:8d:56:f9:bc:46:59:13:bf:32:64:55:2d:c1: 7c:72:80:e1:4b:cd:bc:0c:16:bb:3a:05:97:69:93:64:2c:aa: ad:65:96:24:44:83:1e:fd:c6:82:20:f5:bd:ed:50:ad:9b:00: ec:26:fd:28:b4:83:c8:9c:91:c3:c4:7a:3c:0f:77:3e:dc:6d: eb:b0:dc:f7:0c:58:26:29:6e:2d:16:b5:24:47:97:01:fc:ed: 4e:5c:82:de:3d:e6:e5:8e:61:79:7c:20:bb:06:5e:60:f3:52: 79:d6:92:9c:9d:d3:31:b9:83:a5:de:0a:79:f0:ce:80:16:a8: df:74:a2:19:b4:af:cd:fb:b6:5c:9a:2b:96:be:1b:75:9b:69: 3d:c0:d1:6b -----BEGIN CERTIFICATE----- MIIFpzCCBI+gAwIBAgIUJJuJmUcnP9b+pv+id4Na6mdaT5kwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhDQjAyMTRBNUM0 MDRENkY4NDA0MzNCMTIwQ0FDQkI1QjhDNTlFNjEzMB4XDTI2MDExOTExMDIzOVoX DTI3MDExODExMDczOVowMzExMC8GA1UEAxMoRjgyOTFENzI5ODVEMjIyNUY3Q0Ix QTk3QTg0ODM3QkJEMkY1RkU4ODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAPrZ5MQlLK9BiPbN5DB5QoCTagbv8XRMCfKsslR1wJV3CMthAFfU8CDIRrEF htmRO/jkPYWGdouCuEzD5d7LskwCZi4Ocm/Mxx5lRk4uVjXW8XzxjUAOAwWgG7a4 GuSvuQSOLfCpWRA8BHnGnxklxSZfR5ju2fWhvNZBWB5J2y+r+2Iy08N6u6TeyAmB ic8X4mQptz239/oglmUFHHx66W9kJcpbh6z3qCtZRialpO/n272VHi/Pjp5Nrdd/ +iiIh47TZQGqwZeIYN/RRlqEE74F3UwJ3+MgIsI+99wwLfml8lMyq3IIkUVkCcXR V6q0U4pFQ5jh46420AV38In2WiUCAwEAAaOCApowggKWMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFPgpHXKYXSIl98sal6hIN7vS9f6IMB8GA1UdIwQYMBaAFMsC FKXEBNb4QEM7Egysu1uMWeYTMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMC9DQjAyMTRBNUM0MDRENkY4NDA0MzNCMTIwQ0FDQkI1QjhDNTlF NjEzLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CM0EyNEYyMDFENjYxMUUyOEFDODgzN0M3 MkZEMUZGMi95d0lVcGNRRTF2aEFRenNTREt5N1c0eFo1aE0uY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTA2NTU4ODMzNTUyNDcwODM1My8xLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDY1NTg4MzM1NTI0NzA4MzUz LzEvRjgyOTFENzI5ODVEMjIyNUY3Q0IxQTk3QTg0ODM3QkJEMkY1RkU4OC5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAGdCnAwDQYJKoZIhvcNAQELBQADggEBAJgDibqd QzV5hLKuKaBrk49mT2UiRxAQ5CMipcflDYn1e32T6tw60/XfXvvVt4zMQMGUs5Xr x1q1ZTiiNbPk3UXGMo4RsYobHFTcTwD9C1bWta1cNsirqemGkeNa4C9qY9DLB6Tn GeaQhMeUcFEdwhBnjVb5vEZZE78yZFUtwXxygOFLzbwMFrs6BZdpk2Qsqq1lliRE gx79xoIg9b3tUK2bAOwm/Si0g8ickcPEejwPdz7cbeuw3PcMWCYpbi0WtSRHlwH8 7U5cgt495uWOYXl8ILsGXmDzUnnWkpyd0zG5g6XeCnnwzoAWqN90ohm0r837tlya K5a+G3WbaT3A0Ws= -----END CERTIFICATE-----Generated at Mon Jan 26 02:02:10 2026 by rpki-client