This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/027E626491D467F2D967FA80361028FA06A786F4.cer File: 027E626491D467F2D967FA80361028FA06A786F4.cer (raw, json) Hash identifier: ysHUv1EbDC0zIx1CelAMs+LqbYV2g8zVdp7PIrPkb1E= Subject key identifier: 02:7E:62:64:91:D4:67:F2:D9:67:FA:80:36:10:28:FA:06:A7:86:F4 Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Certificate serial: 20AC774C8B1DFD64F8EA558ADE8A9B6FF21B5350 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1065591195721269249/0/027E626491D467F2D967FA80361028FA06A786F4.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1065591195721269249/0/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Mon 19 Jan 2026 11:14:01 +0000 Certificate not after: Mon 18 Jan 2027 11:19:01 +0000 Subordinate resources: IP: 103.9.152.0/22 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 19:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:ac:77:4c:8b:1d:fd:64:f8:ea:55:8a:de:8a:9b:6f:f2:1b:53:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Validity Not Before: Jan 19 11:14:01 2026 GMT Not After : Jan 18 11:19:01 2027 GMT Subject: CN=027E626491D467F2D967FA80361028FA06A786F4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:9a:ba:2d:1a:16:94:a9:ef:5b:0b:4b:8f:c4: 45:ed:ab:7e:98:39:bb:81:51:d5:24:51:a6:60:b0: d3:41:ad:f4:1e:70:c3:67:c5:6f:59:dd:78:f5:89: 12:11:7b:ca:dd:55:f7:a9:9e:06:7e:dc:f7:88:04: 9f:f9:4d:f5:ce:74:bc:5b:86:ad:74:09:a3:f4:a0: 4e:3a:b9:4e:91:17:18:80:0b:b3:9e:b1:59:80:13: ab:e8:44:0a:df:04:12:0e:67:cc:69:01:ec:33:9e: b6:e2:87:73:6b:ad:3f:59:1f:b1:9d:fd:77:1c:67: 3e:3c:fb:2e:5b:5f:9e:25:31:d1:b7:5e:4a:b7:95: 0c:b5:61:85:51:55:69:39:3d:0f:d7:0b:63:23:61: 56:a1:50:e2:4b:25:bb:2b:96:26:01:64:a4:86:63: 5b:e5:09:8f:d4:d5:9c:c6:1e:7b:fa:48:fd:ad:4e: a9:90:12:8f:16:cb:80:9f:b6:3f:6c:fd:92:2e:8d: 37:a7:3c:13:5f:13:12:66:59:68:5e:49:81:be:e1: 2a:7e:90:8c:47:5a:31:5c:2e:6e:15:67:70:b1:9a: 2e:e7:dd:b3:65:a5:96:0a:21:19:e5:0e:c8:bb:ed: 2c:bb:1c:7e:e4:8d:0f:8b:45:38:1f:c3:7a:9b:d2: 6b:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 02:7E:62:64:91:D4:67:F2:D9:67:FA:80:36:10:28:FA:06:A7:86:F4 X509v3 Authority Key Identifier: keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721269249/0/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721269249/0/027E626491D467F2D967FA80361028FA06A786F4.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.9.152.0/22 Signature Algorithm: sha256WithRSAEncryption 00:24:97:a1:60:af:6c:f0:82:73:6d:24:72:eb:3d:e2:e3:1c: 46:f2:d1:bb:94:d0:7f:42:5d:fc:4d:16:8e:0b:c0:10:1f:88: 2d:bf:b2:06:38:d8:42:cb:39:83:74:c8:71:32:dc:03:be:08: 94:91:23:0d:ae:13:5d:ac:ec:a0:09:25:48:42:f9:a3:e3:4b: 94:92:b4:8c:f5:8c:67:37:b4:0d:74:38:1d:6d:16:e5:0b:20: ee:22:97:2d:aa:16:9e:d6:16:3c:42:32:15:82:3a:1d:4b:59: f0:ca:0b:58:8f:67:10:49:bb:e0:cf:72:53:c8:a5:37:69:0f: 55:92:d9:2c:83:9d:18:2c:0d:8b:9b:23:bf:78:c6:01:b7:a5: 0d:d1:01:cd:df:7e:a8:83:d4:28:00:0b:b9:3b:45:c0:54:9c: 21:2a:4d:70:96:ea:e0:da:ae:f0:a3:af:95:87:7c:03:4e:c5: 6f:21:22:08:fa:4a:e2:f5:09:84:1f:fd:e0:f9:d7:97:3e:c8: 2f:23:f9:c9:d2:91:28:73:8a:0b:a0:01:cc:0a:b5:ab:85:a4: 29:18:c6:67:38:41:04:7a:13:25:5c:10:d7:23:49:91:50:d8: dc:2f:01:c0:c2:32:a8:30:27:6a:28:4c:4c:4b:11:4d:10:af: 9c:6f:d3:3c -----BEGIN CERTIFICATE----- MIIFpzCCBI+gAwIBAgIUIKx3TIsd/WT46lWK3oqbb/IbU1AwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDExOTExMTQwMVoX DTI3MDExODExMTkwMVowMzExMC8GA1UEAxMoMDI3RTYyNjQ5MUQ0NjdGMkQ5NjdG QTgwMzYxMDI4RkEwNkE3ODZGNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALuaui0aFpSp71sLS4/ERe2rfpg5u4FR1SRRpmCw00Gt9B5ww2fFb1ndePWJ EhF7yt1V96meBn7c94gEn/lN9c50vFuGrXQJo/SgTjq5TpEXGIALs56xWYATq+hE Ct8EEg5nzGkB7DOetuKHc2utP1kfsZ39dxxnPjz7LltfniUx0bdeSreVDLVhhVFV aTk9D9cLYyNhVqFQ4ksluyuWJgFkpIZjW+UJj9TVnMYee/pI/a1OqZASjxbLgJ+2 P2z9ki6NN6c8E18TEmZZaF5Jgb7hKn6QjEdaMVwubhVncLGaLufds2WllgohGeUO yLvtLLscfuSND4tFOB/DepvSa8ECAwEAAaOCApowggKWMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFAJ+YmSR1Gfy2Wf6gDYQKPoGp4b0MB8GA1UdIwQYMBaAFKVu hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTA2NTU5MTE5NTcyMTI2OTI0OS8wLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDY1NTkxMTk1NzIxMjY5MjQ5 LzAvMDI3RTYyNjQ5MUQ0NjdGMkQ5NjdGQTgwMzYxMDI4RkEwNkE3ODZGNC5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAJnCZgwDQYJKoZIhvcNAQELBQADggEBAAAkl6Fg r2zwgnNtJHLrPeLjHEby0buU0H9CXfxNFo4LwBAfiC2/sgY42ELLOYN0yHEy3AO+ CJSRIw2uE12s7KAJJUhC+aPjS5SStIz1jGc3tA10OB1tFuULIO4ily2qFp7WFjxC MhWCOh1LWfDKC1iPZxBJu+DPclPIpTdpD1WS2SyDnRgsDYubI794xgG3pQ3RAc3f fqiD1CgAC7k7RcBUnCEqTXCW6uDarvCjr5WHfANOxW8hIgj6SuL1CYQf/eD515c+ yC8j+cnSkShzigugAcwKtauFpCkYxmc4QQR6EyVcENcjSZFQ2NwvAcDCMqgwJ2oo TExLEU0Qr5xv0zw= -----END CERTIFICATE-----Generated at Sun Jan 25 06:01:38 2026 by rpki-client