This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7C1507F087228AEDCBF33768752874E09F57729C.cer
File:                     7C1507F087228AEDCBF33768752874E09F57729C.cer (raw, json)
Hash identifier:          bq/bVAZG3jzMbyZy/e15Zrku0ajnaYjweqeRIEDVu3k=
Subject key identifier:   7C:15:07:F0:87:22:8A:ED:CB:F3:37:68:75:28:74:E0:9F:57:72:9C
Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10
Certificate issuer:       /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710
Certificate serial:       43158128E85C359C25E812DE64EE2DB5BCEC5F5D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
Manifest:                 rsync://rpki-rps.cnnic.cn/repo/A1066929963686428675/0/7C1507F087228AEDCBF33768752874E09F57729C.mft
caRepository:             rsync://rpki-rps.cnnic.cn/repo/A1066929963686428675/0/
Notify URL:               https://rrdp-rps.cnnic.cn/rrdp/notification.xml
Certificate not before:   Fri 23 Jan 2026 03:53:47 +0000
Certificate not after:    Fri 22 Jan 2027 03:58:47 +0000
Subordinate resources:    IP: 43.247.4.0/24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 25 Jan 2026 19:40:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:15:81:28:e8:5c:35:9c:25:e8:12:de:64:ee:2d:b5:bc:ec:5f:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710
        Validity
            Not Before: Jan 23 03:53:47 2026 GMT
            Not After : Jan 22 03:58:47 2027 GMT
        Subject: CN=7C1507F087228AEDCBF33768752874E09F57729C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:e5:67:61:b3:4d:9d:e6:12:9e:45:40:f8:77:
                    68:81:20:12:cf:5b:ee:63:4c:c2:f3:9e:0b:01:de:
                    c8:c2:ba:f1:cb:72:b6:3d:35:5c:95:7e:56:a5:5f:
                    ca:68:f0:a3:17:5c:cb:df:e9:6f:9d:30:ef:57:25:
                    28:65:d1:18:90:9d:44:f2:bc:9d:36:7e:d8:99:65:
                    04:78:6f:88:b1:ce:63:44:9e:81:a6:c7:73:6c:e5:
                    08:a9:e6:2d:b9:6c:20:32:ff:29:1c:23:bf:6c:0e:
                    69:f2:e3:49:2f:61:a1:1f:cf:e7:0c:0f:f3:bd:4a:
                    87:63:7d:f6:12:66:c8:b2:31:91:93:96:bd:32:30:
                    20:d3:db:71:58:37:c1:87:03:ed:7d:44:ee:d7:b8:
                    12:ca:07:a0:fe:dd:02:7e:d8:09:42:d5:16:36:17:
                    f6:74:ee:6d:37:85:23:9c:1c:55:32:bc:48:3a:42:
                    28:4b:38:04:94:f0:2c:1d:79:8f:9b:6c:22:19:d7:
                    7b:22:75:26:21:6e:08:e5:17:6a:3c:51:4a:bb:08:
                    cb:6b:d6:51:78:72:85:5a:73:44:2f:56:40:53:11:
                    5e:56:0b:b9:d6:d1:2d:81:64:47:3c:45:d1:39:96:
                    35:df:80:b1:d7:ba:2c:db:59:5b:41:fe:44:59:75:
                    b0:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                7C:15:07:F0:87:22:8A:ED:CB:F3:37:68:75:28:74:E0:9F:57:72:9C
            X509v3 Authority Key Identifier:
                keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1066929963686428675/0/
                RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1066929963686428675/0/7C1507F087228AEDCBF33768752874E09F57729C.mft
                RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.247.4.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4e:fb:89:b7:a0:6a:9c:fa:7e:db:7f:9e:b5:22:1b:b6:8e:ad:
         2e:30:f8:67:93:f4:98:b5:e2:19:5e:96:fd:ed:d7:4e:81:40:
         85:eb:a9:3f:10:f9:45:b6:e3:70:90:f5:25:58:33:98:c8:5e:
         b9:9f:50:a5:6b:ae:50:ff:5b:fe:ed:53:2b:a4:5b:57:20:e1:
         b7:b1:fe:9b:2b:6a:91:9d:4b:2e:c7:5e:39:5c:70:f6:3e:b1:
         bf:94:7d:0d:d9:05:ec:e4:87:87:c7:51:15:b9:5b:f1:ac:9b:
         e8:ff:e5:28:05:e7:c9:cc:f0:9d:15:7c:c7:c2:85:7e:43:da:
         d7:ee:40:15:32:c1:40:d0:69:87:e0:ae:4b:30:5c:50:b2:13:
         93:1b:fa:09:f2:34:6c:62:4e:2f:ac:6d:1d:bb:ec:51:3b:33:
         25:3b:bb:f6:44:28:39:c1:05:28:20:2e:da:9b:e1:26:11:e6:
         f0:30:cc:dc:10:62:67:8e:85:b1:3d:54:34:c7:b1:db:75:57:
         e7:a0:b1:c7:19:b0:17:c3:52:cb:42:f0:71:4c:3a:0a:3d:eb:
         17:77:db:f4:7c:aa:c4:fd:96:32:88:20:97:9d:80:ce:63:78:
         73:75:c2:b8:a7:76:c2:cd:7d:58:36:b2:bc:5e:b9:40:6e:99:
         a5:8b:c7:2b
-----BEGIN CERTIFICATE-----
MIIFpzCCBI+gAwIBAgIUQxWBKOhcNZwl6BLeZO4ttbzsX10wDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAwwMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw
M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDEyMzAzNTM0N1oX
DTI3MDEyMjAzNTg0N1owMzExMC8GA1UEAxMoN0MxNTA3RjA4NzIyOEFFRENCRjMz
NzY4NzUyODc0RTA5RjU3NzI5QzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALTlZ2GzTZ3mEp5FQPh3aIEgEs9b7mNMwvOeCwHeyMK68ctytj01XJV+VqVf
ymjwoxdcy9/pb50w71clKGXRGJCdRPK8nTZ+2JllBHhviLHOY0SegabHc2zlCKnm
LblsIDL/KRwjv2wOafLjSS9hoR/P5wwP871Kh2N99hJmyLIxkZOWvTIwINPbcVg3
wYcD7X1E7te4EsoHoP7dAn7YCULVFjYX9nTubTeFI5wcVTK8SDpCKEs4BJTwLB15
j5tsIhnXeyJ1JiFuCOUXajxRSrsIy2vWUXhyhVpzRC9WQFMRXlYLudbRLYFkRzxF
0TmWNd+Asde6LNtZW0H+RFl1sD8CAwEAAaOCApowggKWMA8GA1UdEwEB/wQFMAMB
Af8wHQYDVR0OBBYEFHwVB/CHIorty/M3aHUodOCfV3KcMB8GA1UdIwQYMBaAFKVu
hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig
ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw
OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE
NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB
BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu
Y24vcmVwby9BMTA2NjkyOTk2MzY4NjQyODY3NS8wLzBuBggrBgEFBQcwCoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDY2OTI5OTYzNjg2NDI4Njc1
LzAvN0MxNTA3RjA4NzIyOEFFRENCRjMzNzY4NzUyODc0RTA5RjU3NzI5Qy5tZnQw
OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp
ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAAr9wQwDQYJKoZIhvcNAQELBQADggEBAE77ibeg
apz6ftt/nrUiG7aOrS4w+GeT9Ji14hlelv3t106BQIXrqT8Q+UW243CQ9SVYM5jI
XrmfUKVrrlD/W/7tUyukW1cg4bex/psrapGdSy7HXjlccPY+sb+UfQ3ZBezkh4fH
URW5W/Gsm+j/5SgF58nM8J0VfMfChX5D2tfuQBUywUDQaYfgrkswXFCyE5Mb+gny
NGxiTi+sbR277FE7MyU7u/ZEKDnBBSggLtqb4SYR5vAwzNwQYmeOhbE9VDTHsdt1
V+egsccZsBfDUstC8HFMOgo96xd32/R8qsT9ljKIIJedgM5jeHN1wrindsLNfVg2
srxeuUBumaWLxys=
-----END CERTIFICATE-----
Generated at Sun Jan 25 05:56:46 2026 by rpki-client