This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5FC9ED42C0C65E1325089AE613864A6A06CEC140.cer
File: 5FC9ED42C0C65E1325089AE613864A6A06CEC140.cer (raw, json)
Hash identifier: Y3Nw19J8AbY4UtKf6kRQ1u9AwvAqK4n7Osfdw3drKlA=
Subject key identifier: 5F:C9:ED:42:C0:C6:5E:13:25:08:9A:E6:13:86:4A:6A:06:CE:C1:40
Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10
Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710
Certificate serial: 53002E48BE61381D36F35FA5AA682951ED5E122B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
Manifest: rsync://rpki-rps.cnnic.cn/repo/A1065582741577531394/0/5FC9ED42C0C65E1325089AE613864A6A06CEC140.mft
caRepository: rsync://rpki-rps.cnnic.cn/repo/A1065582741577531394/0/
Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml
Certificate not before: Mon 19 Jan 2026 10:41:44 +0000
Certificate not after: Mon 18 Jan 2027 10:46:44 +0000
Subordinate resources: AS: 131530
IP: 103.98.164.0/22
IP: 2403:fc0::/32
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 25 Jan 2026 19:40:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:00:2e:48:be:61:38:1d:36:f3:5f:a5:aa:68:29:51:ed:5e:12:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710
Validity
Not Before: Jan 19 10:41:44 2026 GMT
Not After : Jan 18 10:46:44 2027 GMT
Subject: CN=5FC9ED42C0C65E1325089AE613864A6A06CEC140
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:16:ab:53:1e:54:d1:db:f6:a5:2d:5f:17:9e:
41:3c:46:12:ef:67:36:a3:46:0b:db:45:64:05:81:
82:6f:8d:ae:9f:b4:f7:01:96:18:c8:6c:ca:eb:ad:
77:d5:c1:bc:e6:4f:34:48:54:64:fd:8a:77:6a:44:
01:71:db:29:52:48:58:c1:99:07:20:f8:1e:5d:e2:
e4:bf:53:8f:12:9b:6b:ac:88:c0:d4:6e:e8:62:99:
6e:27:44:34:95:b2:17:2c:cc:2c:4f:91:2f:f0:a9:
64:ff:b4:22:45:7b:41:ad:70:2a:c5:a1:0a:4e:82:
54:d0:35:e0:1b:52:1e:b0:ea:a0:f1:57:8d:69:20:
33:ee:05:19:aa:b4:1c:5a:d2:aa:02:01:24:d8:ea:
ff:ea:cd:73:28:4e:1a:31:2c:c8:bc:3d:45:57:14:
18:b1:df:7e:81:39:8f:b4:d6:c7:b9:2c:f2:49:1e:
7c:da:a8:ba:ed:71:97:99:ea:f1:af:cd:7f:7d:d3:
46:44:c6:cc:e8:c0:2c:b4:9c:70:c4:52:b0:10:1c:
58:28:92:f7:c4:8e:20:03:9e:5d:6f:5e:e6:63:4f:
c4:da:9f:72:a3:d5:0f:3f:ce:69:ab:41:a4:e2:02:
a0:e9:93:c4:c4:c9:98:bd:a5:c7:49:f7:a8:4c:50:
97:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
5F:C9:ED:42:C0:C6:5E:13:25:08:9A:E6:13:86:4A:6A:06:CE:C1:40
X509v3 Authority Key Identifier:
keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577531394/0/
RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577531394/0/5FC9ED42C0C65E1325089AE613864A6A06CEC140.mft
RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.98.164.0/22
IPv6:
2403:fc0::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
131530
Signature Algorithm: sha256WithRSAEncryption
28:c7:e6:60:d6:f3:b7:4c:61:ce:a2:5e:fb:55:61:d1:cc:94:
17:2b:49:61:45:46:27:b6:72:75:03:9b:82:7a:f1:9c:45:da:
3e:90:1d:15:f8:86:10:3c:a7:db:8b:4f:64:3a:fe:6d:a6:4e:
66:27:01:91:fa:9c:3a:9a:3e:0b:cb:cf:36:6a:be:4e:80:8f:
50:c1:df:e0:b4:94:6d:9f:d3:70:98:e0:77:57:f6:be:50:ae:
01:5f:7c:b6:b5:f5:9a:7b:3a:00:ca:29:87:f6:63:6b:13:0c:
2d:2a:26:91:71:02:96:75:d5:5a:72:bf:11:63:11:df:3a:b3:
c0:a7:15:c5:e0:6b:b9:57:55:82:81:03:b5:b7:d8:50:2c:bd:
3d:83:eb:d4:87:01:7f:ee:32:07:37:71:c4:04:5c:fe:34:09:
55:9d:7a:46:c6:2d:b3:17:60:5c:45:f9:40:4a:f2:c7:b3:d8:
34:68:d6:08:52:2b:7f:ac:27:1a:ce:2b:bb:e2:d6:70:53:9c:
2c:ba:97:64:83:98:b2:e7:51:ed:94:cb:de:87:25:5d:d2:9c:
db:32:53:f3:37:68:ba:37:3d:e9:c1:c0:92:aa:67:10:a9:b1:
1a:65:90:12:15:ff:43:1b:1a:3c:bb:69:27:a7:64:03:38:91:
0d:d9:12:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 05:55:40 2026 by rpki-client