This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/108AF2F98E2BC0D03F28DC1BE3E30023BD005F65.cer
File:                     108AF2F98E2BC0D03F28DC1BE3E30023BD005F65.cer (raw, json)
Hash identifier:          FlRTiTQIIWsrVA4V45lgjSo65fV/V/2vJWM59B1Lx+4=
Subject key identifier:   10:8A:F2:F9:8E:2B:C0:D0:3F:28:DC:1B:E3:E3:00:23:BD:00:5F:65
Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10
Certificate issuer:       /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710
Certificate serial:       5E8219DBC0D714154756333930BE44A4D21F1904
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
Manifest:                 rsync://rpki-rps.cnnic.cn/repo/A1065585649346019330/0/108AF2F98E2BC0D03F28DC1BE3E30023BD005F65.mft
caRepository:             rsync://rpki-rps.cnnic.cn/repo/A1065585649346019330/0/
Notify URL:               https://rrdp-rps.cnnic.cn/rrdp/notification.xml
Certificate not before:   Mon 19 Jan 2026 10:58:32 +0000
Certificate not after:    Mon 18 Jan 2027 11:03:32 +0000
Subordinate resources:    AS: 146787
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 25 Jan 2026 19:40:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:82:19:db:c0:d7:14:15:47:56:33:39:30:be:44:a4:d2:1f:19:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710
        Validity
            Not Before: Jan 19 10:58:32 2026 GMT
            Not After : Jan 18 11:03:32 2027 GMT
        Subject: CN=108AF2F98E2BC0D03F28DC1BE3E30023BD005F65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:ab:d4:e9:c0:2f:fe:67:72:7e:53:c8:06:b9:
                    18:0a:ef:fe:67:e9:15:18:9b:8c:a7:ed:ac:c3:1b:
                    f0:83:40:92:6a:c8:0d:d4:ef:e9:c3:01:56:09:07:
                    42:2b:7f:1a:9e:e9:90:92:07:27:07:4b:fc:0e:ec:
                    45:7e:37:a6:8a:4d:a7:62:70:93:60:99:16:ce:dc:
                    da:d1:88:77:0c:3e:de:2c:d1:a8:f5:6c:2b:1e:f3:
                    df:78:eb:4c:6d:9a:be:4e:2f:1a:fd:60:89:1f:16:
                    76:69:b1:ed:6a:e1:27:c6:f0:06:2a:0d:be:55:37:
                    8d:e7:ce:7d:41:2e:f9:f4:31:3c:f1:5f:19:d6:fc:
                    cd:4c:f0:d3:25:bf:3c:72:d6:0e:21:c7:b4:c0:f6:
                    fe:a2:3e:77:85:26:c7:46:5c:e2:3b:30:dc:1f:36:
                    ff:22:2b:7c:52:2f:28:ef:40:9b:f8:68:b0:cd:2d:
                    20:05:f6:b1:7e:db:74:a5:b5:7e:64:ee:5e:84:9b:
                    c8:a3:ee:b3:aa:47:72:d2:e0:4c:16:94:ab:cf:90:
                    f6:2e:0f:b1:57:07:34:a6:eb:92:b0:76:d0:d8:ab:
                    4a:a4:12:6b:3a:4f:07:e9:bd:69:ec:7a:19:ed:e5:
                    e2:83:c1:b8:2a:42:dc:fa:82:98:ab:be:ec:dc:6a:
                    15:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                10:8A:F2:F9:8E:2B:C0:D0:3F:28:DC:1B:E3:E3:00:23:BD:00:5F:65
            X509v3 Authority Key Identifier:
                keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649346019330/0/
                RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649346019330/0/108AF2F98E2BC0D03F28DC1BE3E30023BD005F65.mft
                RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  146787

    Signature Algorithm: sha256WithRSAEncryption
         79:c5:7d:c9:12:34:d3:69:fc:75:51:8b:58:e9:ab:2f:6d:f6:
         2b:81:5e:b2:33:43:ca:93:f5:fa:c7:68:b8:ef:1c:2f:22:bf:
         19:18:c5:14:6b:44:86:50:c0:ba:15:1d:2f:4e:8e:46:48:bf:
         45:9b:6d:0a:97:e3:e6:72:76:52:55:57:9c:2e:c6:e8:5c:df:
         bf:cf:3b:d6:b7:17:57:af:f5:d4:83:90:ea:2b:f7:cb:25:72:
         fe:84:b4:28:61:41:95:e6:a5:48:64:87:e1:0b:2b:16:51:e4:
         9e:0f:16:1b:af:f3:2c:8e:f0:a8:e3:cc:81:92:3d:c2:2c:dd:
         9b:0a:48:ea:c4:87:e3:ef:f8:3c:5d:8d:54:5e:e6:9d:70:82:
         3d:af:b6:39:aa:d5:b5:28:a8:bd:5a:90:3d:0f:8c:f1:97:81:
         f0:15:4e:aa:e4:81:4c:d1:37:a6:d9:86:61:f3:36:d7:2f:85:
         a7:6c:c5:6e:9e:24:12:51:9e:88:8b:82:1d:94:72:1b:09:55:
         e9:54:02:e8:15:8c:f5:b8:d3:98:dd:9c:13:91:da:c5:67:39:
         fe:f4:ee:4c:61:d9:f6:3a:dc:d6:8e:38:d4:fc:ef:92:02:8c:
         f9:4c:74:b1:21:04:ea:d4:5c:b1:94:49:fa:f2:10:f6:19:55:
         75:85:87:18
-----BEGIN CERTIFICATE-----
MIIFojCCBIqgAwIBAgIUXoIZ28DXFBVHVjM5ML5EpNIfGQQwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAwwMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw
M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDExOTEwNTgzMloX
DTI3MDExODExMDMzMlowMzExMC8GA1UEAxMoMTA4QUYyRjk4RTJCQzBEMDNGMjhE
QzFCRTNFMzAwMjNCRDAwNUY2NTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAOar1OnAL/5ncn5TyAa5GArv/mfpFRibjKftrMMb8INAkmrIDdTv6cMBVgkH
Qit/Gp7pkJIHJwdL/A7sRX43popNp2Jwk2CZFs7c2tGIdww+3izRqPVsKx7z33jr
TG2avk4vGv1giR8Wdmmx7WrhJ8bwBioNvlU3jefOfUEu+fQxPPFfGdb8zUzw0yW/
PHLWDiHHtMD2/qI+d4Umx0Zc4jsw3B82/yIrfFIvKO9Am/hosM0tIAX2sX7bdKW1
fmTuXoSbyKPus6pHctLgTBaUq8+Q9i4PsVcHNKbrkrB20NirSqQSazpPB+m9aex6
Ge3l4oPBuCpC3PqCmKu+7NxqFXECAwEAAaOCApUwggKRMA8GA1UdEwEB/wQFMAMB
Af8wHQYDVR0OBBYEFBCK8vmOK8DQPyjcG+PjACO9AF9lMB8GA1UdIwQYMBaAFKVu
hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig
ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw
OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE
NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB
BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu
Y24vcmVwby9BMTA2NTU4NTY0OTM0NjAxOTMzMC8wLzBuBggrBgEFBQcwCoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDY1NTg1NjQ5MzQ2MDE5MzMw
LzAvMTA4QUYyRjk4RTJCQzBEMDNGMjhEQzFCRTNFMzAwMjNCRDAwNUY2NS5tZnQw
OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp
ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwGgYIKwYBBQUH
AQgBAf8ECzAJoAcwBQIDAj1jMA0GCSqGSIb3DQEBCwUAA4IBAQB5xX3JEjTTafx1
UYtY6asvbfYrgV6yM0PKk/X6x2i47xwvIr8ZGMUUa0SGUMC6FR0vTo5GSL9Fm20K
l+PmcnZSVVecLsboXN+/zzvWtxdXr/XUg5DqK/fLJXL+hLQoYUGV5qVIZIfhCysW
UeSeDxYbr/MsjvCo48yBkj3CLN2bCkjqxIfj7/g8XY1UXuadcII9r7Y5qtW1KKi9
WpA9D4zxl4HwFU6q5IFM0Tem2YZh8zbXL4WnbMVuniQSUZ6Ii4IdlHIbCVXpVALo
FYz1uNOY3ZwTkdrFZzn+9O5MYdn2OtzWjjjU/O+SAoz5THSxIQTq1FyxlEn68hD2
GVV1hYcY
-----END CERTIFICATE-----