This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7C1507F087228AEDCBF33768752874E09F57729C.cer
File: 7C1507F087228AEDCBF33768752874E09F57729C.cer (raw, json)
Hash identifier: bq/bVAZG3jzMbyZy/e15Zrku0ajnaYjweqeRIEDVu3k=
Subject key identifier: 7C:15:07:F0:87:22:8A:ED:CB:F3:37:68:75:28:74:E0:9F:57:72:9C
Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10
Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710
Certificate serial: 43158128E85C359C25E812DE64EE2DB5BCEC5F5D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
Manifest: rsync://rpki-rps.cnnic.cn/repo/A1066929963686428675/0/7C1507F087228AEDCBF33768752874E09F57729C.mft
caRepository: rsync://rpki-rps.cnnic.cn/repo/A1066929963686428675/0/
Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml
Certificate not before: Fri 23 Jan 2026 03:53:47 +0000
Certificate not after: Fri 22 Jan 2027 03:58:47 +0000
Subordinate resources: IP: 43.247.4.0/24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 25 Jan 2026 19:40:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:15:81:28:e8:5c:35:9c:25:e8:12:de:64:ee:2d:b5:bc:ec:5f:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710
Validity
Not Before: Jan 23 03:53:47 2026 GMT
Not After : Jan 22 03:58:47 2027 GMT
Subject: CN=7C1507F087228AEDCBF33768752874E09F57729C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:e5:67:61:b3:4d:9d:e6:12:9e:45:40:f8:77:
68:81:20:12:cf:5b:ee:63:4c:c2:f3:9e:0b:01:de:
c8:c2:ba:f1:cb:72:b6:3d:35:5c:95:7e:56:a5:5f:
ca:68:f0:a3:17:5c:cb:df:e9:6f:9d:30:ef:57:25:
28:65:d1:18:90:9d:44:f2:bc:9d:36:7e:d8:99:65:
04:78:6f:88:b1:ce:63:44:9e:81:a6:c7:73:6c:e5:
08:a9:e6:2d:b9:6c:20:32:ff:29:1c:23:bf:6c:0e:
69:f2:e3:49:2f:61:a1:1f:cf:e7:0c:0f:f3:bd:4a:
87:63:7d:f6:12:66:c8:b2:31:91:93:96:bd:32:30:
20:d3:db:71:58:37:c1:87:03:ed:7d:44:ee:d7:b8:
12:ca:07:a0:fe:dd:02:7e:d8:09:42:d5:16:36:17:
f6:74:ee:6d:37:85:23:9c:1c:55:32:bc:48:3a:42:
28:4b:38:04:94:f0:2c:1d:79:8f:9b:6c:22:19:d7:
7b:22:75:26:21:6e:08:e5:17:6a:3c:51:4a:bb:08:
cb:6b:d6:51:78:72:85:5a:73:44:2f:56:40:53:11:
5e:56:0b:b9:d6:d1:2d:81:64:47:3c:45:d1:39:96:
35:df:80:b1:d7:ba:2c:db:59:5b:41:fe:44:59:75:
b0:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
7C:15:07:F0:87:22:8A:ED:CB:F3:37:68:75:28:74:E0:9F:57:72:9C
X509v3 Authority Key Identifier:
keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1066929963686428675/0/
RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1066929963686428675/0/7C1507F087228AEDCBF33768752874E09F57729C.mft
RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
43.247.4.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:fb:89:b7:a0:6a:9c:fa:7e:db:7f:9e:b5:22:1b:b6:8e:ad:
2e:30:f8:67:93:f4:98:b5:e2:19:5e:96:fd:ed:d7:4e:81:40:
85:eb:a9:3f:10:f9:45:b6:e3:70:90:f5:25:58:33:98:c8:5e:
b9:9f:50:a5:6b:ae:50:ff:5b:fe:ed:53:2b:a4:5b:57:20:e1:
b7:b1:fe:9b:2b:6a:91:9d:4b:2e:c7:5e:39:5c:70:f6:3e:b1:
bf:94:7d:0d:d9:05:ec:e4:87:87:c7:51:15:b9:5b:f1:ac:9b:
e8:ff:e5:28:05:e7:c9:cc:f0:9d:15:7c:c7:c2:85:7e:43:da:
d7:ee:40:15:32:c1:40:d0:69:87:e0:ae:4b:30:5c:50:b2:13:
93:1b:fa:09:f2:34:6c:62:4e:2f:ac:6d:1d:bb:ec:51:3b:33:
25:3b:bb:f6:44:28:39:c1:05:28:20:2e:da:9b:e1:26:11:e6:
f0:30:cc:dc:10:62:67:8e:85:b1:3d:54:34:c7:b1:db:75:57:
e7:a0:b1:c7:19:b0:17:c3:52:cb:42:f0:71:4c:3a:0a:3d:eb:
17:77:db:f4:7c:aa:c4:fd:96:32:88:20:97:9d:80:ce:63:78:
73:75:c2:b8:a7:76:c2:cd:7d:58:36:b2:bc:5e:b9:40:6e:99:
a5:8b:c7:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 05:56:46 2026 by rpki-client