This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/134AC3674D05C4DDEB3FBEE5E96B93EA8D37C51E.cer
File:                     134AC3674D05C4DDEB3FBEE5E96B93EA8D37C51E.cer (raw, json)
Hash identifier:          G3+rn6vmx7+pW2SucslXDSHuFrQ+MvnKPYPbJxVnYAI=
Subject key identifier:   13:4A:C3:67:4D:05:C4:DD:EB:3F:BE:E5:E9:6B:93:EA:8D:37:C5:1E
Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10
Certificate issuer:       /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710
Certificate serial:       56B2D3768F362DB9EC5334C492F263D9A9BAF001
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
Manifest:                 rsync://rpki-rps.cnnic.cn/repo/A1065588553129394179/0/134AC3674D05C4DDEB3FBEE5E96B93EA8D37C51E.mft
caRepository:             rsync://rpki-rps.cnnic.cn/repo/A1065588553129394179/0/
Notify URL:               https://rrdp-rps.cnnic.cn/rrdp/notification.xml
Certificate not before:   Mon 19 Jan 2026 11:03:32 +0000
Certificate not after:    Mon 18 Jan 2027 11:08:32 +0000
Subordinate resources:    AS: 151251
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 25 Jan 2026 19:40:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:b2:d3:76:8f:36:2d:b9:ec:53:34:c4:92:f2:63:d9:a9:ba:f0:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710
        Validity
            Not Before: Jan 19 11:03:32 2026 GMT
            Not After : Jan 18 11:08:32 2027 GMT
        Subject: CN=134AC3674D05C4DDEB3FBEE5E96B93EA8D37C51E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:a6:62:3d:42:20:47:aa:4e:5d:af:25:30:2c:
                    9f:e2:a7:59:9a:71:de:d7:e2:1f:91:3e:b3:02:cf:
                    5a:d1:67:e3:2a:86:db:b2:54:44:e2:05:9a:36:37:
                    01:a6:00:bb:89:d3:fd:d8:89:1b:30:6c:46:4c:28:
                    85:a5:6b:76:f0:cf:02:7d:cd:2f:ca:78:ae:cf:d2:
                    72:31:e4:29:c2:d0:04:93:54:67:dd:3d:e9:06:5d:
                    19:e2:8a:7a:ab:f2:7f:51:2c:e8:2b:b6:80:7c:cd:
                    fb:a0:a5:37:1e:2f:22:44:e0:53:78:4e:0e:1e:e9:
                    de:2c:64:5a:05:70:35:57:87:3f:9f:38:0b:99:90:
                    96:e0:5f:0c:43:47:3a:8c:0b:be:ba:e0:99:ed:4d:
                    d6:bb:14:95:9e:69:f6:08:5a:7d:ab:91:a3:2a:2c:
                    f6:5b:f2:61:9c:56:a8:2f:f9:1d:52:2d:97:3d:2c:
                    6b:37:ec:7a:ba:9b:1a:f6:a5:e9:15:ad:fa:e6:98:
                    c0:16:34:6d:78:19:98:38:83:47:ba:c0:32:98:31:
                    17:f6:4a:db:65:4a:79:dd:03:90:f1:f3:83:19:ca:
                    f8:70:a4:cf:a1:1c:c4:07:27:73:57:1e:7d:31:03:
                    f5:f7:8b:d9:9f:39:ce:5d:79:99:ab:5c:f0:1f:87:
                    1b:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                13:4A:C3:67:4D:05:C4:DD:EB:3F:BE:E5:E9:6B:93:EA:8D:37:C5:1E
            X509v3 Authority Key Identifier:
                keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129394179/0/
                RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129394179/0/134AC3674D05C4DDEB3FBEE5E96B93EA8D37C51E.mft
                RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  151251

    Signature Algorithm: sha256WithRSAEncryption
         01:6f:db:f3:9b:ad:55:b3:0d:0c:6d:50:b4:ef:3c:5b:bf:01:
         6a:fd:08:da:03:00:a4:24:67:bd:74:65:28:98:15:01:c5:f7:
         be:64:69:c7:be:35:01:12:bf:16:cb:76:ac:50:d2:ee:70:b7:
         8c:f1:7e:21:08:b8:ee:76:ba:d8:5d:42:5b:d2:1c:91:13:53:
         9b:f3:0c:5f:2e:e0:68:dc:ce:01:02:37:08:12:fb:e4:92:21:
         cd:f7:13:f8:d4:7e:dc:65:f7:0a:1c:52:8c:16:46:63:c8:8b:
         71:20:b4:b8:d1:2b:0a:ca:45:34:35:2f:d2:03:35:b7:56:ba:
         84:dd:cd:ba:e0:0a:dd:00:5b:5f:2c:13:6d:d6:67:50:a8:d0:
         b4:e5:89:bd:16:c5:49:a7:42:9d:34:92:e8:94:6d:07:fe:4c:
         21:87:6a:d0:3b:11:ce:7a:c4:a0:5d:9e:57:cc:c0:67:bf:38:
         2c:83:36:ee:5c:16:65:8f:96:db:fe:08:31:94:9f:d5:43:e4:
         c3:25:bc:01:fe:54:10:b0:f2:75:74:72:12:c8:8c:3d:df:27:
         7f:a2:5e:a7:45:dd:cc:07:b2:1e:a2:e7:77:0f:ca:14:57:81:
         29:08:dc:22:86:07:e5:d6:87:ea:1a:c6:6d:72:ba:40:89:61:
         02:1d:0c:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 06:01:36 2026 by rpki-client