This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.cer
File: 0C02007C391DB5414355DE1A053D4E6D06CDD2CE.cer (raw, json)
Hash identifier: DMoIlP6onACVRn+jmF8M81AttzE0YCRZRJ9V63KupUc=
Subject key identifier: 0C:02:00:7C:39:1D:B5:41:43:55:DE:1A:05:3D:4E:6D:06:CD:D2:CE
Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10
Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710
Certificate serial: 4B06D8AC2DFC7659D907947DEBD26429CBDBAC06
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
Manifest: rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.mft
caRepository: rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/
Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml
Certificate not before: Mon 19 Jan 2026 11:15:37 +0000
Certificate not after: Mon 18 Jan 2027 11:20:37 +0000
Subordinate resources: IP: 180.223.0.0/16
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 22 Jan 2026 02:23:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:06:d8:ac:2d:fc:76:59:d9:07:94:7d:eb:d2:64:29:cb:db:ac:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710
Validity
Not Before: Jan 19 11:15:37 2026 GMT
Not After : Jan 18 11:20:37 2027 GMT
Subject: CN=0C02007C391DB5414355DE1A053D4E6D06CDD2CE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:14:27:d0:d9:dd:d4:6f:15:cb:78:49:7b:20:
e7:e5:3c:0f:d5:95:4a:ea:29:87:d4:b6:e7:6a:f8:
03:6c:e5:62:3f:cf:fa:ee:5c:76:d0:5d:d7:a5:cf:
55:48:30:00:6f:ad:01:b2:af:99:30:3c:3a:21:4e:
0c:a0:05:fa:77:f5:46:e2:25:6f:90:95:86:5e:c3:
18:d3:d1:80:7c:55:a0:04:ea:ff:93:fe:6c:a2:a9:
8b:e7:97:2f:eb:17:57:37:34:13:99:73:e3:73:0a:
88:ef:9e:e1:84:df:ff:26:6c:51:9d:0d:48:26:1e:
04:8c:89:33:3d:13:20:8d:2b:c2:fe:ba:64:d6:dd:
d9:d9:1d:73:ba:bc:f6:95:ec:aa:1c:ff:e8:fc:a7:
0b:9c:7b:b9:35:41:f4:5d:87:7e:78:8a:ea:35:60:
f9:20:15:5d:90:04:70:57:f7:21:a5:3f:75:91:46:
91:6e:09:6a:28:57:76:13:81:c8:e7:9d:81:eb:e1:
30:82:70:2d:80:83:ab:94:df:95:4a:ff:f7:5f:84:
b1:80:57:84:9a:71:44:11:3a:8c:18:c4:6d:18:8c:
94:1a:69:2a:1e:c1:ba:94:75:d2:76:8c:77:8b:d7:
da:9b:63:19:6b:25:65:60:21:92:46:90:2a:86:a7:
29:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
0C:02:00:7C:39:1D:B5:41:43:55:DE:1A:05:3D:4E:6D:06:CD:D2:CE
X509v3 Authority Key Identifier:
keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/
RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.mft
RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
180.223.0.0/16
Signature Algorithm: sha256WithRSAEncryption
3c:4e:41:c3:04:72:78:76:0f:d7:f1:4b:62:de:c7:1d:a7:ea:
0e:00:ea:30:ab:01:d1:ab:f2:03:7f:dc:c6:ca:e4:f8:58:de:
bb:73:55:74:41:4e:d2:ea:79:e0:54:17:79:16:6f:9d:e1:a5:
d6:8f:d5:94:7d:38:a6:25:89:fb:c6:47:18:f4:9d:58:16:20:
d8:f4:d5:64:20:3f:ad:49:66:59:2f:77:29:df:8b:17:91:14:
00:fb:ac:1a:7c:1e:4d:0d:de:38:b2:99:22:3e:78:d2:d5:34:
ac:f3:49:65:ed:a8:60:f7:00:73:35:ae:7e:95:c1:37:0e:d6:
76:a1:a9:bc:4f:a3:ef:44:44:46:d0:3c:89:62:49:43:86:02:
49:61:44:d1:c7:6b:cc:30:82:b4:6e:f7:67:b3:a5:26:02:db:
83:87:c5:21:98:be:e1:fd:26:0a:38:cd:da:41:9b:be:fa:3d:
36:44:1f:18:00:ea:0e:7a:19:4b:de:6f:ff:38:33:7a:34:47:
d2:90:e4:e5:b7:29:3c:c0:2a:df:66:b6:9f:0d:f8:41:c5:22:
05:63:f6:54:71:fb:db:0b:2f:e0:90:0e:f7:a2:80:25:c3:f1:
5a:8c:ab:10:86:99:55:0c:b9:84:36:32:04:e7:5a:14:c3:59:
8a:5b:8b:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 12:45:39 2026 by rpki-client