This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/335692178DD0300DC3B374F86B473CB008656DCF.cer
File: 335692178DD0300DC3B374F86B473CB008656DCF.cer (raw, json)
Hash identifier: la5AiQYkmn7YqLusbW23UEjkxnHwqq6N09YrKeS7jfY=
Subject key identifier: 33:56:92:17:8D:D0:30:0D:C3:B3:74:F8:6B:47:3C:B0:08:65:6D:CF
Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10
Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710
Certificate serial: 7AA1A86A569BA4148D8D0FCF66B792B26C1C4B73
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
Manifest: rsync://rpki-rps.cnnic.cn/repo/A1065582330347257857/0/335692178DD0300DC3B374F86B473CB008656DCF.mft
caRepository: rsync://rpki-rps.cnnic.cn/repo/A1065582330347257857/0/
Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml
Certificate not before: Mon 19 Jan 2026 10:46:49 +0000
Certificate not after: Mon 18 Jan 2027 10:51:49 +0000
Subordinate resources: AS: 137768
IP: 103.131.36.0/22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 25 Jan 2026 19:40:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:a1:a8:6a:56:9b:a4:14:8d:8d:0f:cf:66:b7:92:b2:6c:1c:4b:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710
Validity
Not Before: Jan 19 10:46:49 2026 GMT
Not After : Jan 18 10:51:49 2027 GMT
Subject: CN=335692178DD0300DC3B374F86B473CB008656DCF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:c8:a7:e0:6e:04:fa:ec:f1:fe:bc:de:96:51:
96:4d:01:e9:ce:b2:43:ce:74:65:ab:6a:f0:e8:de:
5f:38:75:f7:b0:6c:cd:c9:89:ed:d6:80:8f:a6:cd:
64:fd:61:d0:42:1d:af:07:28:27:03:8c:f6:a9:07:
35:86:86:60:e5:13:e6:8e:cd:b4:39:b7:61:2d:24:
8b:13:da:ca:3e:00:45:5f:e3:da:c3:0e:00:af:ee:
0a:33:5f:27:6a:95:41:cb:97:b4:f3:93:25:34:47:
98:78:7b:4a:02:6d:bf:c1:19:fe:8e:46:b9:20:02:
ac:40:30:53:2a:36:fd:b9:df:93:cd:75:ec:16:22:
ee:e6:3f:33:a6:1a:84:85:48:09:25:26:4a:85:aa:
59:5d:bc:b2:7f:b7:6b:49:96:b9:3c:39:14:a2:50:
af:19:e5:fb:ed:97:31:8f:cd:f8:5e:97:9b:2f:0f:
39:45:ea:03:0a:9d:3c:49:e7:29:c3:c9:c4:11:8e:
7a:d0:81:41:ef:56:9c:3f:63:e3:0c:8b:f7:8c:06:
f1:1e:ec:9f:1b:85:92:30:f5:33:9e:bc:12:b3:0d:
8c:78:ec:92:30:07:2c:f8:f1:20:72:bf:e6:24:45:
38:ae:4b:d4:56:3c:55:f5:72:3b:ca:df:09:6f:5b:
90:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
33:56:92:17:8D:D0:30:0D:C3:B3:74:F8:6B:47:3C:B0:08:65:6D:CF
X509v3 Authority Key Identifier:
keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330347257857/0/
RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330347257857/0/335692178DD0300DC3B374F86B473CB008656DCF.mft
RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.131.36.0/22
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
137768
Signature Algorithm: sha256WithRSAEncryption
9a:2b:e8:a5:f3:0b:da:39:66:d4:5a:88:69:cf:77:b8:14:25:
6d:82:ac:69:cd:fe:da:e7:3c:9f:6c:ae:cc:28:d2:63:e9:32:
5e:da:36:85:2e:d7:f1:ce:4c:18:62:af:5c:45:09:16:2e:7b:
73:a6:19:4e:8a:06:c3:1b:cb:3e:e4:c6:0a:89:08:e0:1d:b5:
f4:d2:c2:19:ec:c8:45:9c:ff:85:d3:75:dc:92:e7:1e:48:dc:
25:d1:9b:a7:a3:bb:39:4f:7d:f0:5f:64:f3:86:cd:11:88:c0:
ab:5a:a5:24:74:29:f0:0c:08:b0:70:07:6d:5f:cd:71:3c:a4:
7c:ac:da:31:ce:dc:83:2a:1d:74:fe:34:3f:8d:de:13:89:3c:
10:32:3a:8c:75:3c:5e:e5:17:fa:79:c3:4a:21:ef:b6:62:b3:
63:11:1a:a3:74:12:3e:3e:f8:85:34:0d:06:81:d9:ab:a7:a5:
d5:c0:e5:ae:70:5f:fc:18:bb:59:d8:bf:64:47:fa:e8:36:d7:
ce:20:f8:68:6e:6c:62:5c:a6:57:b7:25:5e:21:fd:f0:e8:af:
7e:63:1e:30:8b:85:90:36:37:dd:07:9d:6a:4b:91:ce:02:c4:
30:1b:ea:d3:00:b7:ad:64:b1:7c:ed:6f:c9:fe:ca:34:7c:1b:
31:7c:de:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 09:40:10 2026 by rpki-client