This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/46C13E5032045116B0FA54934DD7BFCA0483335A.cer
File: 46C13E5032045116B0FA54934DD7BFCA0483335A.cer (raw, json)
Hash identifier: 1cJFK/T5PYsgBtPrvxHAVClvqUD9dsbDvhp+Qz6LDIQ=
Subject key identifier: 46:C1:3E:50:32:04:51:16:B0:FA:54:93:4D:D7:BF:CA:04:83:33:5A
Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10
Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710
Certificate serial: 79B5E599BF1BAE4D169F634B8AF87268492816F0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
Manifest: rsync://rpki-rps.cnnic.cn/repo/A1065576199948009475/0/46C13E5032045116B0FA54934DD7BFCA0483335A.mft
caRepository: rsync://rpki-rps.cnnic.cn/repo/A1065576199948009475/0/
Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml
Certificate not before: Mon 19 Jan 2026 10:17:21 +0000
Certificate not after: Mon 18 Jan 2027 10:22:21 +0000
Subordinate resources: AS: 9807
AS: 45074
IP: 219.235.128.0/19
IP: 2400:5a00::/32
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 25 Jan 2026 19:40:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:b5:e5:99:bf:1b:ae:4d:16:9f:63:4b:8a:f8:72:68:49:28:16:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710
Validity
Not Before: Jan 19 10:17:21 2026 GMT
Not After : Jan 18 10:22:21 2027 GMT
Subject: CN=46C13E5032045116B0FA54934DD7BFCA0483335A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:5b:6a:3d:db:09:b1:16:8b:2d:38:1c:c7:7a:
a0:98:15:41:f1:96:28:eb:d3:d2:70:4a:71:1d:3c:
a3:da:c4:24:71:55:7d:80:ef:34:d3:e2:98:1d:bc:
02:af:ca:2c:50:30:de:b3:76:fa:ed:e3:b4:21:be:
98:d0:1b:d2:65:07:3a:85:93:08:5d:a0:5f:64:9a:
69:60:b1:28:69:d1:5c:de:a8:ce:e0:90:85:dd:d3:
bf:26:88:01:fd:01:57:df:dd:9e:e8:5e:fd:c8:cc:
f0:87:b4:42:9b:dc:b0:8b:c9:d8:a8:82:58:f9:68:
8f:27:b3:90:63:66:a6:d8:0d:eb:38:16:06:06:a3:
fb:e7:da:b6:bf:0d:47:28:f0:0b:7f:2c:f4:f1:78:
64:e8:cd:76:ed:6a:f8:11:87:b4:6f:8f:e0:4a:51:
ea:1d:6b:e5:c7:2f:64:12:aa:f7:75:d1:29:ba:9f:
93:6a:70:35:12:f0:14:df:0d:eb:41:94:c4:66:0a:
be:c5:27:8b:97:10:72:ff:54:23:98:0e:2e:7b:06:
b0:0b:49:5c:56:73:fc:44:da:f8:96:65:03:0b:23:
a4:43:f4:60:b8:87:41:4d:1e:4c:6a:31:be:41:5c:
e4:b5:cc:3a:ac:34:6f:5a:76:0d:ef:cc:3b:9c:6f:
b5:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
46:C1:3E:50:32:04:51:16:B0:FA:54:93:4D:D7:BF:CA:04:83:33:5A
X509v3 Authority Key Identifier:
keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948009475/0/
RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948009475/0/46C13E5032045116B0FA54934DD7BFCA0483335A.mft
RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
219.235.128.0/19
IPv6:
2400:5a00::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
9807
45074
Signature Algorithm: sha256WithRSAEncryption
62:d8:03:df:ad:88:fe:a0:e8:96:87:bb:ba:8f:1a:d0:0a:b4:
8a:85:78:d6:33:ca:c7:bc:14:32:36:0b:d2:44:13:7d:d7:a3:
71:e2:b1:9b:25:3f:ef:38:66:5e:07:b7:14:50:e3:aa:b7:ac:
92:22:bd:a7:82:a2:7f:2f:f1:4c:d2:69:55:03:83:69:9b:76:
39:a5:e1:04:aa:d4:49:67:17:d9:c5:7e:ac:2e:77:2e:2a:04:
bb:ea:b8:eb:4a:87:bc:0b:e9:c6:ac:39:78:ea:1c:95:5c:3c:
b9:9b:28:49:20:21:5c:09:c1:47:37:f0:57:b5:13:10:2c:3e:
0e:b4:8e:23:05:93:dc:cd:d2:61:44:5d:d3:10:ea:07:09:87:
7d:4f:f2:7e:17:df:96:31:ee:1a:fb:4a:64:ee:33:77:6f:17:
17:d3:8e:b3:aa:26:50:01:4f:cd:0c:34:52:96:1c:8a:93:ad:
1e:af:a7:08:36:af:32:75:10:8e:a0:49:6d:af:9c:87:e5:bc:
17:3a:44:40:91:ef:3f:82:30:77:a0:3e:67:ff:1f:57:dc:1a:
b3:34:1c:17:24:60:2e:d0:4d:e1:07:0b:29:d9:26:d8:aa:6b:
1d:1f:52:28:df:66:67:f8:ba:33:1d:97:0b:9e:34:96:4b:08:
2a:e7:60:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 05:55:38 2026 by rpki-client