This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7BE06B4744FCF211D039415BB8B17941EC767358.cer File: 7BE06B4744FCF211D039415BB8B17941EC767358.cer (raw, json) Hash identifier: hiIgfrlhlr9MyLi5TFr9UJlHdVWqOV1zLrqVJ+Ml7EA= Subject key identifier: 7B:E0:6B:47:44:FC:F2:11:D0:39:41:5B:B8:B1:79:41:EC:76:73:58 Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Certificate serial: 6547E32F3011516DFFD33A1CA3CD8A08577FC5B4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1065588993548419074/0/7BE06B4744FCF211D039415BB8B17941EC767358.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1065588993548419074/0/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Mon 19 Jan 2026 11:07:51 +0000 Certificate not after: Mon 18 Jan 2027 11:12:51 +0000 Subordinate resources: IP: 45.115.228.0/22 IP: 45.127.216.0/22 IP: 103.56.8.0/22 IP: 103.196.204.0/22 IP: 103.207.48.0/22 IP: 210.16.104.0/22 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 19:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:47:e3:2f:30:11:51:6d:ff:d3:3a:1c:a3:cd:8a:08:57:7f:c5:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Validity Not Before: Jan 19 11:07:51 2026 GMT Not After : Jan 18 11:12:51 2027 GMT Subject: CN=7BE06B4744FCF211D039415BB8B17941EC767358 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:20:8d:d7:a0:de:e0:8a:22:ac:e5:22:f9:1d: 18:0e:7d:81:ad:43:5c:07:6d:7e:6a:85:4d:0a:a2: db:1f:ad:ef:78:61:04:b2:bc:b4:0d:92:9f:11:98: 14:18:78:7f:74:3e:7e:4a:50:db:0a:b7:75:ad:b1: 1a:85:e8:26:7e:d8:81:a9:e2:d5:49:44:f1:6f:58: 01:8f:89:da:4d:7e:44:48:f2:5d:72:8b:63:84:7c: eb:9f:be:8e:78:0b:ba:e6:99:82:61:3f:2c:fd:e2: 85:9d:2a:bb:55:0e:7e:c7:2c:69:64:02:26:0e:b6: 19:b5:51:b1:ef:e8:59:c7:fd:45:35:53:d6:18:4f: 81:6e:92:8c:57:bf:54:7b:c8:94:72:44:a5:4f:ee: c8:fe:20:83:76:78:37:5b:2c:72:42:40:81:3c:9b: ef:92:88:05:f8:00:d2:17:36:85:99:ef:c0:0a:17: a6:c3:f0:b8:bd:1e:45:ff:0f:26:12:5e:ea:f9:76: 88:f8:94:f0:b9:6f:a0:15:0b:6b:cc:c1:33:87:0e: f6:c3:7d:14:6b:21:bc:8c:77:35:e3:0c:46:7e:b9: 9c:f3:fe:05:a6:4f:de:6f:3d:1c:03:c2:a4:21:ab: bd:f2:b1:de:83:4c:ea:2d:21:db:83:d0:27:a8:1f: 32:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 7B:E0:6B:47:44:FC:F2:11:D0:39:41:5B:B8:B1:79:41:EC:76:73:58 X509v3 Authority Key Identifier: keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548419074/0/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548419074/0/7BE06B4744FCF211D039415BB8B17941EC767358.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.115.228.0/22 45.127.216.0/22 103.56.8.0/22 103.196.204.0/22 103.207.48.0/22 210.16.104.0/22 Signature Algorithm: sha256WithRSAEncryption 7f:c4:7d:65:aa:d6:31:f3:56:02:ad:39:18:a3:cd:7d:a5:89: 5f:d2:a0:29:7f:60:48:3d:81:6f:77:3e:0e:93:f4:0c:3e:29: 14:d5:25:26:da:96:61:75:56:c4:f7:51:80:72:ed:32:8d:f9: e9:69:1e:65:22:43:6b:80:30:12:09:0f:ac:c0:fb:7a:f7:f4: 22:d8:45:0b:5b:23:6b:c1:ea:dd:70:f6:97:be:32:b2:69:a0: a4:e8:f7:bc:15:a5:23:ee:42:df:11:ad:0d:f1:38:17:87:e1: a2:0e:07:fa:37:c8:4e:42:63:b0:71:c0:01:c6:c8:c5:d1:10: b0:a5:b4:73:ff:8a:21:01:c7:4d:24:eb:24:c2:22:3b:c2:05: 23:df:48:c0:08:47:5b:6f:3e:2e:e5:d2:90:14:4d:56:59:6e: fb:73:e1:a4:ba:f7:b2:62:6f:88:a4:c2:0d:86:77:58:b2:c7: 76:97:61:80:8a:01:04:32:80:31:c8:83:40:02:f6:3a:16:7e: 21:77:b4:6b:a2:c4:48:7b:a0:f7:a7:5e:ce:37:74:a7:59:6d: a8:bc:5a:74:20:c3:f9:4b:be:06:38:d4:23:36:cb:37:0d:b1: 93:6d:60:ca:6b:cb:20:21:f0:a6:58:fd:55:e3:c8:ae:90:ad: 4e:e6:1d:0a -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUZUfjLzARUW3/0zoco82KCFd/xbQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDExOTExMDc1MVoX DTI3MDExODExMTI1MVowMzExMC8GA1UEAxMoN0JFMDZCNDc0NEZDRjIxMUQwMzk0 MTVCQjhCMTc5NDFFQzc2NzM1ODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAN8gjdeg3uCKIqzlIvkdGA59ga1DXAdtfmqFTQqi2x+t73hhBLK8tA2SnxGY FBh4f3Q+fkpQ2wq3da2xGoXoJn7Ygani1UlE8W9YAY+J2k1+REjyXXKLY4R865++ jngLuuaZgmE/LP3ihZ0qu1UOfscsaWQCJg62GbVRse/oWcf9RTVT1hhPgW6SjFe/ VHvIlHJEpU/uyP4gg3Z4N1ssckJAgTyb75KIBfgA0hc2hZnvwAoXpsPwuL0eRf8P JhJe6vl2iPiU8LlvoBULa8zBM4cO9sN9FGshvIx3NeMMRn65nPP+BaZP3m89HAPC pCGrvfKx3oNM6i0h24PQJ6gfMlMCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFHvga0dE/PIR0DlBW7ixeUHsdnNYMB8GA1UdIwQYMBaAFKVu hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTA2NTU4ODk5MzU0ODQxOTA3NC8wLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDY1NTg4OTkzNTQ4NDE5MDc0 LzAvN0JFMDZCNDc0NEZDRjIxMUQwMzk0MTVCQjhCMTc5NDFFQzc2NzM1OC5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwPQYIKwYBBQUH AQcBAf8ELjAsMCoEAgABMCQDBAItc+QDBAItf9gDBAJnOAgDBAJnxMwDBAJnzzAD BALSEGgwDQYJKoZIhvcNAQELBQADggEBAH/EfWWq1jHzVgKtORijzX2liV/SoCl/ YEg9gW93Pg6T9Aw+KRTVJSbalmF1VsT3UYBy7TKN+elpHmUiQ2uAMBIJD6zA+3r3 9CLYRQtbI2vB6t1w9pe+MrJpoKTo97wVpSPuQt8RrQ3xOBeH4aIOB/o3yE5CY7Bx wAHGyMXRELCltHP/iiEBx00k6yTCIjvCBSPfSMAIR1tvPi7l0pAUTVZZbvtz4aS6 97Jib4ikwg2Gd1iyx3aXYYCKAQQygDHIg0AC9joWfiF3tGuixEh7oPenXs43dKdZ bai8WnQgw/lLvgY41CM2yzcNsZNtYMpryyAh8KZY/VXjyK6QrU7mHQo= -----END CERTIFICATE-----Generated at Sun Jan 25 06:01:39 2026 by rpki-client