This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/452E5EF14738FB7690CC3BDEA989AD085EA76E10.cer
File:                     452E5EF14738FB7690CC3BDEA989AD085EA76E10.cer (raw, json)
Hash identifier:          zqYRj1hAqHN/tY8ckOJywRrH3lQIlqA2l5Q0+d6RCGE=
Subject key identifier:   45:2E:5E:F1:47:38:FB:76:90:CC:3B:DE:A9:89:AD:08:5E:A7:6E:10
Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10
Certificate issuer:       /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710
Certificate serial:       768E8128A59A3AB6834EDFAB7C885E0C760E99EF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
Manifest:                 rsync://rpki-rps.cnnic.cn/repo/A1065591117757743107/0/452E5EF14738FB7690CC3BDEA989AD085EA76E10.mft
caRepository:             rsync://rpki-rps.cnnic.cn/repo/A1065591117757743107/0/
Notify URL:               https://rrdp-rps.cnnic.cn/rrdp/notification.xml
Certificate not before:   Mon 19 Jan 2026 11:19:15 +0000
Certificate not after:    Mon 18 Jan 2027 11:24:15 +0000
Subordinate resources:    IP: 163.61.62.0/23
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 24 Jan 2026 04:26:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:8e:81:28:a5:9a:3a:b6:83:4e:df:ab:7c:88:5e:0c:76:0e:99:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710
        Validity
            Not Before: Jan 19 11:19:15 2026 GMT
            Not After : Jan 18 11:24:15 2027 GMT
        Subject: CN=452E5EF14738FB7690CC3BDEA989AD085EA76E10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:3f:47:74:f3:4c:16:36:f2:d1:64:60:e7:10:
                    a1:84:95:79:34:75:58:de:eb:dc:0b:50:cd:51:c6:
                    fe:b7:bf:82:68:4f:fe:b1:a9:50:e2:c7:66:ba:6b:
                    3c:94:79:a4:99:55:b3:8f:a0:34:b1:ab:9e:48:5f:
                    b7:4a:05:e5:07:5d:2c:f2:60:81:93:a7:15:d1:9c:
                    fe:9a:e4:7c:8b:f5:0f:d8:f3:78:60:82:35:24:f2:
                    96:78:e2:40:0a:38:5a:66:2c:ce:3e:6b:f0:f6:1c:
                    06:b8:d9:46:65:c0:bf:d2:35:d3:b6:81:b7:b4:15:
                    b7:47:25:88:bd:14:61:5e:8c:3d:d9:17:1a:1d:80:
                    8f:d7:82:45:10:42:5f:26:59:55:ff:48:b0:e0:2c:
                    86:7a:88:b7:ef:91:3f:db:1b:5c:74:45:68:a3:9b:
                    a3:37:0e:ff:75:74:8a:9c:f7:cc:fe:2d:6a:87:d6:
                    27:4b:9f:56:f2:69:cd:11:c4:31:73:d1:20:b5:1b:
                    6b:49:dd:8f:4e:34:50:5f:dc:3e:aa:6d:97:f8:50:
                    69:2d:19:ef:1b:da:9b:0e:0c:0d:03:d9:6b:a4:5e:
                    47:67:9f:af:3d:88:5e:67:2e:b5:3d:32:56:53:de:
                    e5:62:ed:4f:17:fd:d3:d5:58:1d:f6:87:f6:cc:8a:
                    e5:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                45:2E:5E:F1:47:38:FB:76:90:CC:3B:DE:A9:89:AD:08:5E:A7:6E:10
            X509v3 Authority Key Identifier:
                keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591117757743107/0/
                RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591117757743107/0/452E5EF14738FB7690CC3BDEA989AD085EA76E10.mft
                RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.61.62.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5a:e8:c0:ed:9e:0f:e8:15:fd:9f:ee:58:26:48:77:02:f7:42:
         2d:81:2a:ac:14:be:85:f8:4f:de:57:da:82:2c:e3:19:72:a1:
         99:00:80:9a:25:92:61:87:f0:36:b2:c3:b3:ca:cc:f3:8d:b4:
         6a:36:16:39:06:bb:99:15:7c:65:66:09:c5:19:ba:d1:90:0b:
         8d:ec:5e:ba:b4:ad:eb:a7:13:f1:c6:84:f6:25:cf:ae:4c:f2:
         e6:84:03:39:1d:a8:aa:94:da:f3:32:8f:ee:58:01:e7:f6:0b:
         9b:38:0c:91:d8:47:72:3d:ae:91:c8:d8:2a:bc:39:13:46:5d:
         af:2c:19:3d:e0:be:e5:f8:a1:3d:b9:69:af:cf:ff:1b:92:18:
         5c:d0:84:52:17:7f:c9:52:76:8a:25:e8:f4:56:42:48:41:c0:
         ca:5b:00:aa:7f:c4:f6:67:75:c1:2a:17:9d:bb:20:82:10:ef:
         83:57:0d:12:98:4f:bd:08:88:33:5d:6c:79:28:81:a0:48:bf:
         96:f3:62:87:5d:fb:eb:97:4c:f7:49:4b:87:05:0a:85:a3:01:
         eb:e2:03:48:d1:dd:82:44:4c:8b:b5:1c:10:45:46:fd:61:15:
         9c:49:93:cc:31:12:27:11:6f:09:93:a7:2d:20:0c:b6:08:95:
         ff:52:31:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 23 15:20:46 2026 by rpki-client