This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E0CF9C7318170E2949AD635E3BF470E276EE1E76.cer File: E0CF9C7318170E2949AD635E3BF470E276EE1E76.cer (raw, json) Hash identifier: ahXepxpDCAxbbXDZ3s+mn1DlueOLGRLUU2xDUgz0dzQ= Subject key identifier: E0:CF:9C:73:18:17:0E:29:49:AD:63:5E:3B:F4:70:E2:76:EE:1E:76 Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Certificate serial: 3B28DFCCD315D472621B190A4B4E01C39E5CC0F4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1065576199948206083/0/E0CF9C7318170E2949AD635E3BF470E276EE1E76.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1065576199948206083/0/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Mon 19 Jan 2026 10:20:25 +0000 Certificate not after: Mon 18 Jan 2027 10:25:25 +0000 Subordinate resources: AS: 45081 IP: 121.255.0.0/16 IP: 202.141.160.0/19 IP: 2400:b600::/32 IP: 2401:1e00::/32 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 19:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:28:df:cc:d3:15:d4:72:62:1b:19:0a:4b:4e:01:c3:9e:5c:c0:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Validity Not Before: Jan 19 10:20:25 2026 GMT Not After : Jan 18 10:25:25 2027 GMT Subject: CN=E0CF9C7318170E2949AD635E3BF470E276EE1E76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:62:13:57:a8:56:15:06:78:25:6c:33:85:75: 09:30:d3:cb:d5:6f:d4:c5:7d:1d:01:83:2d:ef:3c: f0:6e:ad:f5:72:0a:65:c7:bf:3d:df:2d:71:1d:bb: b5:7e:5c:94:fd:79:35:c7:4e:e6:db:ba:9f:ae:47: 5a:a1:88:86:90:44:f9:54:65:12:fd:e2:3e:73:85: 3d:56:a3:4f:df:f8:7d:37:6a:00:94:a5:ac:4e:b3: 2d:c0:af:99:0d:4e:b4:91:8a:61:40:4a:51:d2:bc: 40:06:f9:a2:89:d3:b8:92:b4:2f:ad:9e:f0:26:9c: ab:a7:df:8c:58:23:36:1a:18:bb:09:a5:e4:84:8b: df:27:28:e4:55:3b:3c:34:ff:f5:1c:86:4a:29:1e: 6b:16:79:c5:09:86:1d:ac:aa:85:3f:e5:8b:64:71: 56:9d:c8:85:2e:7b:2a:49:ab:65:e3:86:0d:5c:12: ad:ac:5f:27:48:a7:c0:b8:ba:a9:60:8a:4c:e8:0f: 14:b4:05:af:ff:2f:d9:d4:d5:e6:50:30:3b:cc:ce: 54:d4:43:92:1c:e9:fc:ea:5f:ed:ba:15:77:06:40: 3b:21:91:ca:1c:86:c4:b6:71:a0:a0:48:28:09:db: 7f:a2:f8:2c:8e:54:6a:da:23:a2:0d:f1:60:37:60: d9:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: E0:CF:9C:73:18:17:0E:29:49:AD:63:5E:3B:F4:70:E2:76:EE:1E:76 X509v3 Authority Key Identifier: keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948206083/0/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948206083/0/E0CF9C7318170E2949AD635E3BF470E276EE1E76.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 121.255.0.0/16 202.141.160.0/19 IPv6: 2400:b600::/32 2401:1e00::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 45081 Signature Algorithm: sha256WithRSAEncryption 0f:0d:77:e8:96:4e:89:72:50:0d:9f:2f:6b:f2:30:26:f5:0f: c6:6e:b3:06:a3:a6:6a:c9:41:67:b7:c4:6f:ea:3b:23:83:00: 09:98:33:0f:53:ac:2b:f3:a9:24:1d:98:78:4a:05:91:ae:95: 2d:51:8d:e2:dc:b9:03:62:90:29:08:85:cc:09:4f:3b:6f:ea: d5:82:d3:3c:62:67:79:05:4e:93:20:c5:4c:97:f6:12:76:71: 55:65:dd:e0:2d:c5:97:7a:12:b7:2a:48:c6:21:97:90:f9:38: 54:b0:c2:58:6b:f1:c8:95:03:42:56:cf:d7:00:2e:d6:ed:4c: 0a:d8:ee:63:fb:f5:96:68:1d:e1:34:f7:81:b2:bc:96:92:96: f2:4d:7e:4b:53:13:4f:26:f7:0d:c4:f3:77:32:5a:72:f3:7b: 67:73:80:34:5c:0d:91:62:91:a8:5a:92:2c:fa:b2:a8:0c:35: 09:39:91:0c:9b:67:1c:ed:c9:40:80:fc:a1:e2:d7:62:d8:50: b8:6b:45:d8:20:cc:33:1d:47:00:ef:f4:51:2b:ef:89:ef:0c: d9:6b:6b:b5:eb:39:4d:d2:03:6c:84:dd:0d:7f:10:4a:ba:97: 7c:d9:a9:4e:da:ec:de:09:9d:52:e2:19:8f:81:25:3b:31:d2: 79:cf:f7:69 -----BEGIN CERTIFICATE----- MIIF3jCCBMagAwIBAgIUOyjfzNMV1HJiGxkKS04Bw55cwPQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDExOTEwMjAyNVoX DTI3MDExODEwMjUyNVowMzExMC8GA1UEAxMoRTBDRjlDNzMxODE3MEUyOTQ5QUQ2 MzVFM0JGNDcwRTI3NkVFMUU3NjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAM5iE1eoVhUGeCVsM4V1CTDTy9Vv1MV9HQGDLe888G6t9XIKZce/Pd8tcR27 tX5clP15NcdO5tu6n65HWqGIhpBE+VRlEv3iPnOFPVajT9/4fTdqAJSlrE6zLcCv mQ1OtJGKYUBKUdK8QAb5oonTuJK0L62e8Cacq6ffjFgjNhoYuwml5ISL3yco5FU7 PDT/9RyGSikeaxZ5xQmGHayqhT/li2RxVp3IhS57KkmrZeOGDVwSraxfJ0inwLi6 qWCKTOgPFLQFr/8v2dTV5lAwO8zOVNRDkhzp/Opf7boVdwZAOyGRyhyGxLZxoKBI KAnbf6L4LI5Uatojog3xYDdg2RMCAwEAAaOCAtEwggLNMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFODPnHMYFw4pSa1jXjv0cOJ27h52MB8GA1UdIwQYMBaAFKVu hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTA2NTU3NjE5OTk0ODIwNjA4My8wLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDY1NTc2MTk5OTQ4MjA2MDgz LzAvRTBDRjlDNzMxODE3MEUyOTQ5QUQ2MzVFM0JGNDcwRTI3NkVFMUU3Ni5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwOgYIKwYBBQUH AQcBAf8EKzApMBEEAgABMAsDAwB5/wMEBcqNoDAUBAIAAjAOAwUAJAC2AAMFACQB HgAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDALAZMA0GCSqGSIb3DQEBCwUAA4IB AQAPDXfolk6JclANny9r8jAm9Q/GbrMGo6ZqyUFnt8Rv6jsjgwAJmDMPU6wr86kk HZh4SgWRrpUtUY3i3LkDYpApCIXMCU87b+rVgtM8Ymd5BU6TIMVMl/YSdnFVZd3g LcWXehK3KkjGIZeQ+ThUsMJYa/HIlQNCVs/XAC7W7UwK2O5j+/WWaB3hNPeBsryW kpbyTX5LUxNPJvcNxPN3Mlpy83tnc4A0XA2RYpGoWpIs+rKoDDUJOZEMm2cc7clA gPyh4tdi2FC4a0XYIMwzHUcA7/RRK++J7wzZa2u16zlN0gNshN0NfxBKupd82alO 2uzeCZ1S4hmPgSU7MdJ5z/dp -----END CERTIFICATE-----Generated at Sun Jan 25 06:01:12 2026 by rpki-client