This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/46C13E5032045116B0FA54934DD7BFCA0483335A.cer
File:                     46C13E5032045116B0FA54934DD7BFCA0483335A.cer (raw, json)
Hash identifier:          1cJFK/T5PYsgBtPrvxHAVClvqUD9dsbDvhp+Qz6LDIQ=
Subject key identifier:   46:C1:3E:50:32:04:51:16:B0:FA:54:93:4D:D7:BF:CA:04:83:33:5A
Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10
Certificate issuer:       /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710
Certificate serial:       79B5E599BF1BAE4D169F634B8AF87268492816F0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
Manifest:                 rsync://rpki-rps.cnnic.cn/repo/A1065576199948009475/0/46C13E5032045116B0FA54934DD7BFCA0483335A.mft
caRepository:             rsync://rpki-rps.cnnic.cn/repo/A1065576199948009475/0/
Notify URL:               https://rrdp-rps.cnnic.cn/rrdp/notification.xml
Certificate not before:   Mon 19 Jan 2026 10:17:21 +0000
Certificate not after:    Mon 18 Jan 2027 10:22:21 +0000
Subordinate resources:    AS: 9807
                          AS: 45074
                          IP: 219.235.128.0/19
                          IP: 2400:5a00::/32
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 25 Jan 2026 19:40:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:b5:e5:99:bf:1b:ae:4d:16:9f:63:4b:8a:f8:72:68:49:28:16:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710
        Validity
            Not Before: Jan 19 10:17:21 2026 GMT
            Not After : Jan 18 10:22:21 2027 GMT
        Subject: CN=46C13E5032045116B0FA54934DD7BFCA0483335A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:5b:6a:3d:db:09:b1:16:8b:2d:38:1c:c7:7a:
                    a0:98:15:41:f1:96:28:eb:d3:d2:70:4a:71:1d:3c:
                    a3:da:c4:24:71:55:7d:80:ef:34:d3:e2:98:1d:bc:
                    02:af:ca:2c:50:30:de:b3:76:fa:ed:e3:b4:21:be:
                    98:d0:1b:d2:65:07:3a:85:93:08:5d:a0:5f:64:9a:
                    69:60:b1:28:69:d1:5c:de:a8:ce:e0:90:85:dd:d3:
                    bf:26:88:01:fd:01:57:df:dd:9e:e8:5e:fd:c8:cc:
                    f0:87:b4:42:9b:dc:b0:8b:c9:d8:a8:82:58:f9:68:
                    8f:27:b3:90:63:66:a6:d8:0d:eb:38:16:06:06:a3:
                    fb:e7:da:b6:bf:0d:47:28:f0:0b:7f:2c:f4:f1:78:
                    64:e8:cd:76:ed:6a:f8:11:87:b4:6f:8f:e0:4a:51:
                    ea:1d:6b:e5:c7:2f:64:12:aa:f7:75:d1:29:ba:9f:
                    93:6a:70:35:12:f0:14:df:0d:eb:41:94:c4:66:0a:
                    be:c5:27:8b:97:10:72:ff:54:23:98:0e:2e:7b:06:
                    b0:0b:49:5c:56:73:fc:44:da:f8:96:65:03:0b:23:
                    a4:43:f4:60:b8:87:41:4d:1e:4c:6a:31:be:41:5c:
                    e4:b5:cc:3a:ac:34:6f:5a:76:0d:ef:cc:3b:9c:6f:
                    b5:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                46:C1:3E:50:32:04:51:16:B0:FA:54:93:4D:D7:BF:CA:04:83:33:5A
            X509v3 Authority Key Identifier:
                keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948009475/0/
                RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948009475/0/46C13E5032045116B0FA54934DD7BFCA0483335A.mft
                RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.235.128.0/19
                IPv6:
                  2400:5a00::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  9807
                  45074

    Signature Algorithm: sha256WithRSAEncryption
         62:d8:03:df:ad:88:fe:a0:e8:96:87:bb:ba:8f:1a:d0:0a:b4:
         8a:85:78:d6:33:ca:c7:bc:14:32:36:0b:d2:44:13:7d:d7:a3:
         71:e2:b1:9b:25:3f:ef:38:66:5e:07:b7:14:50:e3:aa:b7:ac:
         92:22:bd:a7:82:a2:7f:2f:f1:4c:d2:69:55:03:83:69:9b:76:
         39:a5:e1:04:aa:d4:49:67:17:d9:c5:7e:ac:2e:77:2e:2a:04:
         bb:ea:b8:eb:4a:87:bc:0b:e9:c6:ac:39:78:ea:1c:95:5c:3c:
         b9:9b:28:49:20:21:5c:09:c1:47:37:f0:57:b5:13:10:2c:3e:
         0e:b4:8e:23:05:93:dc:cd:d2:61:44:5d:d3:10:ea:07:09:87:
         7d:4f:f2:7e:17:df:96:31:ee:1a:fb:4a:64:ee:33:77:6f:17:
         17:d3:8e:b3:aa:26:50:01:4f:cd:0c:34:52:96:1c:8a:93:ad:
         1e:af:a7:08:36:af:32:75:10:8e:a0:49:6d:af:9c:87:e5:bc:
         17:3a:44:40:91:ef:3f:82:30:77:a0:3e:67:ff:1f:57:dc:1a:
         b3:34:1c:17:24:60:2e:d0:4d:e1:07:0b:29:d9:26:d8:aa:6b:
         1d:1f:52:28:df:66:67:f8:ba:33:1d:97:0b:9e:34:96:4b:08:
         2a:e7:60:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 05:55:38 2026 by rpki-client