This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6EC1E34EADEA227095D578E784C85C8FAB3B907E.cer
File:                     6EC1E34EADEA227095D578E784C85C8FAB3B907E.cer (raw, json)
Hash identifier:          9JRzb/yt6ReShfJMcHEQ11QE1jKWxzP3KxMRlYoL46w=
Subject key identifier:   6E:C1:E3:4E:AD:EA:22:70:95:D5:78:E7:84:C8:5C:8F:AB:3B:90:7E
Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10
Certificate issuer:       /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710
Certificate serial:       315CF53792939E160DCE84D70FE286DDE35CAC36
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
Manifest:                 rsync://rpki-rps.cnnic.cn/repo/A1065591683061907458/0/6EC1E34EADEA227095D578E784C85C8FAB3B907E.mft
caRepository:             rsync://rpki-rps.cnnic.cn/repo/A1065591683061907458/0/
Notify URL:               https://rrdp-rps.cnnic.cn/rrdp/notification.xml
Certificate not before:   Mon 19 Jan 2026 11:17:06 +0000
Certificate not after:    Mon 18 Jan 2027 11:22:06 +0000
Subordinate resources:    IP: 210.87.72.0/23
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 25 Jan 2026 19:40:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:5c:f5:37:92:93:9e:16:0d:ce:84:d7:0f:e2:86:dd:e3:5c:ac:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710
        Validity
            Not Before: Jan 19 11:17:06 2026 GMT
            Not After : Jan 18 11:22:06 2027 GMT
        Subject: CN=6EC1E34EADEA227095D578E784C85C8FAB3B907E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:4b:9b:58:75:43:96:54:9b:4f:31:5d:ae:a6:
                    07:ad:ab:8f:ce:48:bb:29:c5:6e:aa:77:f1:a5:83:
                    70:28:e4:0c:74:ef:e3:15:44:4e:5f:5f:9c:2b:8e:
                    d6:6c:7f:71:52:fb:09:b7:9b:e1:48:b7:53:7c:fb:
                    dc:d4:f4:a9:fc:13:c2:37:e0:f4:55:73:fe:4c:ed:
                    aa:64:4b:2a:65:87:d1:13:36:e5:6a:3e:c5:9f:db:
                    fa:d4:7c:ba:e8:70:b4:cc:a6:ab:28:76:10:9c:76:
                    4a:76:c1:a3:ae:ef:09:82:40:52:eb:46:2d:c1:b5:
                    8a:04:4c:2b:ad:13:d3:09:7f:30:82:7a:ed:2b:e5:
                    09:b8:67:d8:ae:4c:31:b0:85:9e:a0:e4:85:cd:1f:
                    a4:e4:18:5f:ec:38:fc:d1:bd:29:e2:ce:ab:8f:7d:
                    13:fb:b4:19:c5:0c:f8:43:fb:9e:58:d8:6b:09:97:
                    b5:71:2f:79:19:f2:c0:3d:1a:db:d2:58:a1:6a:48:
                    5f:b4:00:f0:6b:54:e8:45:38:8a:80:90:fa:98:fa:
                    2d:8a:ee:7c:f3:07:94:0d:a0:cd:92:f7:28:0d:c8:
                    f3:93:84:9c:bf:91:c3:14:a2:56:8c:ce:a8:51:bb:
                    09:96:0e:f9:f4:d0:24:13:ac:5f:4f:cb:6e:00:bd:
                    90:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                6E:C1:E3:4E:AD:EA:22:70:95:D5:78:E7:84:C8:5C:8F:AB:3B:90:7E
            X509v3 Authority Key Identifier:
                keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591683061907458/0/
                RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591683061907458/0/6EC1E34EADEA227095D578E784C85C8FAB3B907E.mft
                RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.87.72.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5c:b3:d3:e4:96:e6:34:86:76:14:6d:19:bf:b4:e7:77:0c:b6:
         02:ab:a8:08:d9:c1:02:c7:d3:47:36:04:9b:53:f6:1a:28:9f:
         31:2f:81:72:68:07:b6:aa:9c:77:f1:2d:95:dd:49:a5:75:af:
         42:4b:39:23:52:b3:ec:ff:5c:c6:1b:46:52:ab:14:a2:d8:2a:
         a7:c6:c2:43:47:dd:5d:9f:f1:52:20:1f:f0:f4:19:cb:cf:27:
         1e:f9:5e:d3:78:c5:b4:6f:61:b3:1a:e8:4d:cf:f9:cc:b5:e2:
         d3:37:ce:a7:3a:b0:c0:d8:2f:83:cd:d4:f8:4a:fb:46:d1:dd:
         82:ea:d6:51:a2:f8:4f:ba:f0:0d:ce:6b:94:b6:ab:3e:1b:b6:
         59:81:49:70:52:48:51:4c:c8:00:35:9b:64:78:00:a2:16:89:
         72:e0:be:3c:b5:65:90:f1:d2:36:b9:be:46:d4:5b:c0:ec:42:
         d0:7c:c9:2c:b2:f9:45:be:ed:41:2b:12:68:95:3e:77:dd:b4:
         a0:0d:9d:53:b1:fd:a2:56:f9:6d:41:5f:62:6d:80:63:33:a0:
         8f:d9:b3:e5:98:18:2f:33:05:a0:e7:db:3c:5f:48:09:ce:eb:
         40:45:29:a1:f9:15:85:d5:82:6b:c2:96:a4:8d:3f:a4:b8:56:
         4a:8d:32:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 06:01:38 2026 by rpki-client