This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2E6BE7EE043A01D3CD483F302C345E46581A5C85.cer
File: 2E6BE7EE043A01D3CD483F302C345E46581A5C85.cer (raw, json)
Hash identifier: Y2oX0yoaYVxmt1bleAQAmmzCCIswj9wZ1VmPHQUeWqM=
Subject key identifier: 2E:6B:E7:EE:04:3A:01:D3:CD:48:3F:30:2C:34:5E:46:58:1A:5C:85
Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10
Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710
Certificate serial: 35482A5625D8E7CF5DDAC2C3DC153E7A6DD77096
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
Manifest: rsync://rpki-rps.cnnic.cn/repo/A1065591117757546499/0/2E6BE7EE043A01D3CD483F302C345E46581A5C85.mft
caRepository: rsync://rpki-rps.cnnic.cn/repo/A1065591117757546499/0/
Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml
Certificate not before: Mon 19 Jan 2026 11:13:42 +0000
Certificate not after: Mon 18 Jan 2027 11:18:42 +0000
Subordinate resources: IP: 103.120.52.0/22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 25 Jan 2026 19:40:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:48:2a:56:25:d8:e7:cf:5d:da:c2:c3:dc:15:3e:7a:6d:d7:70:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710
Validity
Not Before: Jan 19 11:13:42 2026 GMT
Not After : Jan 18 11:18:42 2027 GMT
Subject: CN=2E6BE7EE043A01D3CD483F302C345E46581A5C85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:dd:18:05:ea:6a:ff:0b:f9:56:3c:cc:06:33:
4e:a4:c2:30:21:73:b4:97:1a:d5:97:ca:29:fb:81:
8a:4c:9a:57:a0:20:4b:4f:55:24:d3:9b:7d:27:26:
0d:38:74:6c:12:1d:d7:ef:88:6b:f4:82:24:62:a6:
ef:0c:67:fa:ce:8c:76:97:11:04:f7:5d:53:58:f8:
6d:24:28:bc:bd:0d:bb:d2:13:d1:28:a7:fa:23:fc:
11:a0:f4:43:7b:73:de:be:7e:51:1f:eb:71:83:8a:
38:ed:3a:96:8b:71:3c:fd:2d:c2:8b:33:ce:8f:e1:
f9:66:e7:e9:f9:6c:89:16:b8:0b:10:0f:81:95:ae:
b3:a5:b4:b8:f8:35:04:53:50:fb:e3:31:0d:34:aa:
5c:b9:4e:61:13:a4:7e:c9:34:88:44:9c:d9:95:bc:
de:ec:32:55:f8:0a:81:8e:61:38:3d:56:0e:22:d9:
d2:fa:aa:f2:53:84:73:60:5c:61:78:a1:59:42:00:
52:7d:68:5a:c1:2f:7d:5e:cb:a7:5d:45:a0:5f:37:
51:22:d8:9a:68:4e:8a:c5:32:95:2b:32:d7:85:2a:
5a:f4:d6:b0:02:93:40:42:07:e4:f5:c4:ab:66:7e:
9b:a4:cc:e4:fd:25:39:59:2a:51:6d:b0:84:d6:d9:
91:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
2E:6B:E7:EE:04:3A:01:D3:CD:48:3F:30:2C:34:5E:46:58:1A:5C:85
X509v3 Authority Key Identifier:
keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591117757546499/0/
RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591117757546499/0/2E6BE7EE043A01D3CD483F302C345E46581A5C85.mft
RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.120.52.0/22
Signature Algorithm: sha256WithRSAEncryption
92:2e:49:90:1c:da:9c:68:b6:0f:d5:b5:66:07:46:9c:db:2f:
38:5a:6f:c6:86:49:a8:a7:0c:03:44:a0:c3:6a:4b:3c:f7:a2:
87:c6:f9:19:7c:98:86:76:0f:42:4a:91:7e:c5:b8:ce:52:40:
69:1c:ae:63:8a:b1:45:d3:5a:76:2a:45:34:5e:3e:54:05:25:
90:d4:1f:70:e9:f9:9d:23:f8:91:c8:d1:77:cf:3a:1d:66:04:
f8:a5:dc:46:13:14:20:45:07:aa:fd:f0:19:df:da:eb:53:21:
a7:51:6b:29:5b:a6:6f:90:76:34:96:25:f8:2a:2c:50:8a:ff:
32:6c:d6:5c:b2:ea:e0:92:fd:9b:10:a9:10:b8:58:db:be:a7:
cb:a0:0d:33:dd:75:71:cf:64:1f:06:74:6a:e1:ad:68:eb:1f:
cd:fd:f8:9f:c5:c1:20:aa:a7:ea:51:90:9d:24:3e:a9:aa:25:
ca:8d:33:b8:be:68:c8:98:14:cf:15:39:e1:a0:54:72:74:0e:
88:db:1a:1c:93:9d:80:d4:93:87:f9:b7:b8:d5:e1:08:4d:a6:
a1:80:ef:e0:37:74:c7:3f:37:9f:f2:11:db:46:37:fb:97:24:
a1:e4:8e:e4:53:a3:3c:4a:3a:73:81:3c:5d:0b:84:54:9e:df:
24:4a:00:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 09:41:06 2026 by rpki-client