This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/452E5EF14738FB7690CC3BDEA989AD085EA76E10.cer
File: 452E5EF14738FB7690CC3BDEA989AD085EA76E10.cer (raw, json)
Hash identifier: zqYRj1hAqHN/tY8ckOJywRrH3lQIlqA2l5Q0+d6RCGE=
Subject key identifier: 45:2E:5E:F1:47:38:FB:76:90:CC:3B:DE:A9:89:AD:08:5E:A7:6E:10
Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10
Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710
Certificate serial: 768E8128A59A3AB6834EDFAB7C885E0C760E99EF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
Manifest: rsync://rpki-rps.cnnic.cn/repo/A1065591117757743107/0/452E5EF14738FB7690CC3BDEA989AD085EA76E10.mft
caRepository: rsync://rpki-rps.cnnic.cn/repo/A1065591117757743107/0/
Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml
Certificate not before: Mon 19 Jan 2026 11:19:15 +0000
Certificate not after: Mon 18 Jan 2027 11:24:15 +0000
Subordinate resources: IP: 163.61.62.0/23
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 24 Jan 2026 04:26:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:8e:81:28:a5:9a:3a:b6:83:4e:df:ab:7c:88:5e:0c:76:0e:99:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710
Validity
Not Before: Jan 19 11:19:15 2026 GMT
Not After : Jan 18 11:24:15 2027 GMT
Subject: CN=452E5EF14738FB7690CC3BDEA989AD085EA76E10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:3f:47:74:f3:4c:16:36:f2:d1:64:60:e7:10:
a1:84:95:79:34:75:58:de:eb:dc:0b:50:cd:51:c6:
fe:b7:bf:82:68:4f:fe:b1:a9:50:e2:c7:66:ba:6b:
3c:94:79:a4:99:55:b3:8f:a0:34:b1:ab:9e:48:5f:
b7:4a:05:e5:07:5d:2c:f2:60:81:93:a7:15:d1:9c:
fe:9a:e4:7c:8b:f5:0f:d8:f3:78:60:82:35:24:f2:
96:78:e2:40:0a:38:5a:66:2c:ce:3e:6b:f0:f6:1c:
06:b8:d9:46:65:c0:bf:d2:35:d3:b6:81:b7:b4:15:
b7:47:25:88:bd:14:61:5e:8c:3d:d9:17:1a:1d:80:
8f:d7:82:45:10:42:5f:26:59:55:ff:48:b0:e0:2c:
86:7a:88:b7:ef:91:3f:db:1b:5c:74:45:68:a3:9b:
a3:37:0e:ff:75:74:8a:9c:f7:cc:fe:2d:6a:87:d6:
27:4b:9f:56:f2:69:cd:11:c4:31:73:d1:20:b5:1b:
6b:49:dd:8f:4e:34:50:5f:dc:3e:aa:6d:97:f8:50:
69:2d:19:ef:1b:da:9b:0e:0c:0d:03:d9:6b:a4:5e:
47:67:9f:af:3d:88:5e:67:2e:b5:3d:32:56:53:de:
e5:62:ed:4f:17:fd:d3:d5:58:1d:f6:87:f6:cc:8a:
e5:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
45:2E:5E:F1:47:38:FB:76:90:CC:3B:DE:A9:89:AD:08:5E:A7:6E:10
X509v3 Authority Key Identifier:
keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591117757743107/0/
RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591117757743107/0/452E5EF14738FB7690CC3BDEA989AD085EA76E10.mft
RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.61.62.0/23
Signature Algorithm: sha256WithRSAEncryption
5a:e8:c0:ed:9e:0f:e8:15:fd:9f:ee:58:26:48:77:02:f7:42:
2d:81:2a:ac:14:be:85:f8:4f:de:57:da:82:2c:e3:19:72:a1:
99:00:80:9a:25:92:61:87:f0:36:b2:c3:b3:ca:cc:f3:8d:b4:
6a:36:16:39:06:bb:99:15:7c:65:66:09:c5:19:ba:d1:90:0b:
8d:ec:5e:ba:b4:ad:eb:a7:13:f1:c6:84:f6:25:cf:ae:4c:f2:
e6:84:03:39:1d:a8:aa:94:da:f3:32:8f:ee:58:01:e7:f6:0b:
9b:38:0c:91:d8:47:72:3d:ae:91:c8:d8:2a:bc:39:13:46:5d:
af:2c:19:3d:e0:be:e5:f8:a1:3d:b9:69:af:cf:ff:1b:92:18:
5c:d0:84:52:17:7f:c9:52:76:8a:25:e8:f4:56:42:48:41:c0:
ca:5b:00:aa:7f:c4:f6:67:75:c1:2a:17:9d:bb:20:82:10:ef:
83:57:0d:12:98:4f:bd:08:88:33:5d:6c:79:28:81:a0:48:bf:
96:f3:62:87:5d:fb:eb:97:4c:f7:49:4b:87:05:0a:85:a3:01:
eb:e2:03:48:d1:dd:82:44:4c:8b:b5:1c:10:45:46:fd:61:15:
9c:49:93:cc:31:12:27:11:6f:09:93:a7:2d:20:0c:b6:08:95:
ff:52:31:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 23 15:20:46 2026 by rpki-client