This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer File: E893434A32058DAFE9758FDA7B36659444C9EF8E.cer (raw, json) Hash identifier: i3mnO3fZkmav+5B2Dbb6v2QVyi4u+TIJUg2IabW0AjI= Subject key identifier: E8:93:43:4A:32:05:8D:AF:E9:75:8F:DA:7B:36:65:94:44:C9:EF:8E Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Certificate serial: 77A07E8C1031031FD726E622CC36F662E96E0CC8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Mon 19 Jan 2026 11:04:04 +0000 Certificate not after: Mon 18 Jan 2027 11:09:04 +0000 Subordinate resources: IP: 101.232.0.0/15 IP: 119.59.128.0/17 IP: 123.98.0.0/17 IP: 124.42.128.0/17 IP: 210.79.64.0/18 IP: 211.149.32.0 -- 211.149.95.255 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 23 Jan 2026 15:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:a0:7e:8c:10:31:03:1f:d7:26:e6:22:cc:36:f6:62:e9:6e:0c:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Validity Not Before: Jan 19 11:04:04 2026 GMT Not After : Jan 18 11:09:04 2027 GMT Subject: CN=E893434A32058DAFE9758FDA7B36659444C9EF8E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:33:7d:bb:eb:e4:db:fa:a7:49:fd:c3:28:6d: aa:4e:dd:87:8e:90:e9:c7:30:41:33:97:6d:52:7a: 01:5e:e6:49:0c:c5:b2:07:ae:98:fc:1d:45:be:dd: 11:c1:3e:d1:91:b1:b3:b3:cc:9c:e9:8c:7a:5f:c2: 5a:e4:7b:8c:c7:51:a7:2d:05:ad:ba:a8:ac:fa:fe: 30:63:4e:1c:69:38:83:d9:f8:98:63:62:14:68:33: a5:4b:c7:08:5f:05:3a:f7:28:e9:dc:66:ec:98:6a: 57:14:9a:2a:94:82:68:46:d2:16:83:b1:c0:67:1e: 92:ae:f1:f6:2d:5e:99:af:b5:d9:8e:18:a6:e5:00: fa:40:1c:39:ee:c4:7d:05:0a:dc:f0:fe:7a:d5:0e: 58:21:9f:45:72:be:25:fa:b3:55:a6:2d:08:c9:db: e7:4e:97:b3:2b:d5:83:b9:81:81:dd:2c:76:5d:25: b2:ab:de:a4:56:58:3d:84:de:7c:3d:7f:14:8f:16: cc:54:9c:a7:ff:fc:a4:24:c8:16:3e:51:da:35:4d: 94:3f:49:79:02:a9:64:fb:df:4d:2b:e1:07:82:3d: 49:5b:86:77:6c:f8:43:c8:e4:af:35:d2:7c:a2:52: 65:34:b3:c8:d5:d9:64:32:80:d3:d1:fa:e4:85:31: 8b:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: E8:93:43:4A:32:05:8D:AF:E9:75:8F:DA:7B:36:65:94:44:C9:EF:8E X509v3 Authority Key Identifier: keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 101.232.0.0/15 119.59.128.0/17 123.98.0.0/17 124.42.128.0/17 210.79.64.0/18 211.149.32.0-211.149.95.255 Signature Algorithm: sha256WithRSAEncryption 88:67:83:61:de:2e:a4:d9:4a:f5:78:fc:ef:91:58:82:36:a0: 57:52:66:db:0a:fd:20:4f:b6:c3:b1:42:77:d3:7f:a1:67:8d: 6d:0d:33:6f:93:80:13:46:1d:2d:a3:af:9d:0a:8d:52:ba:63: 39:8c:ce:87:f7:67:5f:ad:c5:81:e6:57:df:38:84:31:f1:24: 81:9c:e0:4c:3c:bb:ef:65:d9:cb:5c:b6:8e:d0:84:aa:da:83: b2:47:8c:24:da:12:81:21:fc:0d:2a:79:4f:0c:90:ca:8f:3c: e2:ad:8c:d9:12:54:ff:f7:16:f9:c5:36:e4:4c:6f:39:9c:a0: e6:c2:fb:c7:79:ea:c2:e0:9b:71:7b:08:ff:6a:62:f4:53:ae: 32:6e:24:3b:23:c3:a3:fc:65:52:35:50:75:c8:28:b2:46:82: f9:13:4b:c7:90:5e:67:e1:4d:1c:5a:2f:97:f4:49:80:6d:47: 53:84:bb:3a:74:35:1f:3e:c4:cc:c1:90:d7:fb:88:bf:2d:eb: 12:46:bf:5e:8b:c5:55:7a:9d:19:db:73:da:90:fd:e1:25:bd: dd:37:6a:b6:e3:38:3c:7b:94:d9:cc:bd:5b:8b:9a:3b:21:62: 08:32:f7:84:5e:b6:90:fc:5f:55:ba:fd:dd:29:8b:95:0a:e0: ae:0a:6d:1d -----BEGIN CERTIFICATE----- MIIFzDCCBLSgAwIBAgIUd6B+jBAxAx/XJuYizDb2YuluDMgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDExOTExMDQwNFoX DTI3MDExODExMDkwNFowMzExMC8GA1UEAxMoRTg5MzQzNEEzMjA1OERBRkU5NzU4 RkRBN0IzNjY1OTQ0NEM5RUY4RTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMkzfbvr5Nv6p0n9wyhtqk7dh46Q6ccwQTOXbVJ6AV7mSQzFsgeumPwdRb7d EcE+0ZGxs7PMnOmMel/CWuR7jMdRpy0FrbqorPr+MGNOHGk4g9n4mGNiFGgzpUvH CF8FOvco6dxm7JhqVxSaKpSCaEbSFoOxwGcekq7x9i1ema+12Y4YpuUA+kAcOe7E fQUK3PD+etUOWCGfRXK+JfqzVaYtCMnb506XsyvVg7mBgd0sdl0lsqvepFZYPYTe fD1/FI8WzFScp//8pCTIFj5R2jVNlD9JeQKpZPvfTSvhB4I9SVuGd2z4Q8jkrzXS fKJSZTSzyNXZZDKA09H65IUxixsCAwEAAaOCAr8wggK7MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFOiTQ0oyBY2v6XWP2ns2ZZREye+OMB8GA1UdIwQYMBaAFKVu hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTA2NTU4ODU1MzEyOTUyNTI1MS8wLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDY1NTg4NTUzMTI5NTI1MjUx LzAvRTg5MzQzNEEzMjA1OERBRkU5NzU4RkRBN0IzNjY1OTQ0NEM5RUY4RS5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwRAYIKwYBBQUH AQcBAf8ENTAzMDEEAgABMCsDAwFl6AMEB3c7gAMEB3tiAAMEB3wqgAMEBtJPQDAM AwQF05UgAwQF05VAMA0GCSqGSIb3DQEBCwUAA4IBAQCIZ4Nh3i6k2Ur1ePzvkViC NqBXUmbbCv0gT7bDsUJ303+hZ41tDTNvk4ATRh0to6+dCo1SumM5jM6H92dfrcWB 5lffOIQx8SSBnOBMPLvvZdnLXLaO0ISq2oOyR4wk2hKBIfwNKnlPDJDKjzzirYzZ ElT/9xb5xTbkTG85nKDmwvvHeerC4Jtxewj/amL0U64ybiQ7I8Oj/GVSNVB1yCiy RoL5E0vHkF5n4U0cWi+X9EmAbUdThLs6dDUfPsTMwZDX+4i/LesSRr9ei8VVep0Z 23PakP3hJb3dN2q24zg8e5TZzL1bi5o7IWIIMveEXraQ/F9Vuv3dKYuVCuCuCm0d -----END CERTIFICATE-----Generated at Thu Jan 22 16:43:06 2026 by rpki-client