This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6E6551DDF15FCB648500A7080FA37D8EE8602A86.cer
File:                     6E6551DDF15FCB648500A7080FA37D8EE8602A86.cer (raw, json)
Hash identifier:          s2kaZGIdtfYYVe6am/HG5y2bXSjujRJCIJvzE4Rh178=
Subject key identifier:   6E:65:51:DD:F1:5F:CB:64:85:00:A7:08:0F:A3:7D:8E:E8:60:2A:86
Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10
Certificate issuer:       /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710
Certificate serial:       1191C16D1C3078CCCE312FF2BCB6378A2E199EA4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
Manifest:                 rsync://rpki-rps.cnnic.cn/repo/A1065588335525232641/0/6E6551DDF15FCB648500A7080FA37D8EE8602A86.mft
caRepository:             rsync://rpki-rps.cnnic.cn/repo/A1065588335525232641/0/
Notify URL:               https://rrdp-rps.cnnic.cn/rrdp/notification.xml
Certificate not before:   Mon 19 Jan 2026 11:10:37 +0000
Certificate not after:    Mon 18 Jan 2027 11:15:37 +0000
Subordinate resources:    IP: 103.99.76.0/22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 25 Jan 2026 19:40:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:91:c1:6d:1c:30:78:cc:ce:31:2f:f2:bc:b6:37:8a:2e:19:9e:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710
        Validity
            Not Before: Jan 19 11:10:37 2026 GMT
            Not After : Jan 18 11:15:37 2027 GMT
        Subject: CN=6E6551DDF15FCB648500A7080FA37D8EE8602A86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:a5:e1:81:c8:fe:7b:f2:5b:40:62:5d:8e:c0:
                    8d:77:8b:65:65:86:d5:1a:b1:56:d1:51:cc:e4:9e:
                    48:66:b7:5c:29:38:b3:3b:c6:b7:d5:5b:18:03:e6:
                    e0:65:bb:67:c1:aa:9b:8d:53:13:e7:bb:d7:e3:21:
                    b1:69:a0:7a:76:5b:35:75:f5:1f:8b:8b:1f:66:48:
                    dc:fa:1e:06:ab:3a:3c:8c:fe:09:f6:cb:57:35:2c:
                    13:7b:55:e0:5c:ed:f7:f6:60:ac:8d:81:19:8c:88:
                    42:58:94:22:34:99:92:0d:e2:58:dc:91:d6:d5:81:
                    ce:e2:35:91:7e:91:2e:39:b8:6c:d8:54:35:c1:c1:
                    7a:ed:cd:88:7b:e4:de:8c:21:79:85:02:08:ab:57:
                    65:c2:4d:8c:d1:39:b4:57:f9:2a:fe:db:80:5d:3a:
                    af:ae:84:93:c3:3a:59:89:23:a5:2e:b8:7e:ec:f5:
                    78:77:e3:ed:a6:4e:50:bf:7b:46:08:09:af:d3:5a:
                    28:46:fb:26:e2:cb:cc:37:12:7f:55:de:b0:0f:25:
                    e2:c6:08:98:2e:3c:53:4b:db:51:60:1c:a3:37:27:
                    cb:53:37:55:46:2e:fa:8a:f5:20:41:bf:34:72:24:
                    64:a1:bb:d1:74:e1:38:45:f2:97:98:d3:65:40:72:
                    48:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                6E:65:51:DD:F1:5F:CB:64:85:00:A7:08:0F:A3:7D:8E:E8:60:2A:86
            X509v3 Authority Key Identifier:
                keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335525232641/0/
                RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335525232641/0/6E6551DDF15FCB648500A7080FA37D8EE8602A86.mft
                RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.99.76.0/22

    Signature Algorithm: sha256WithRSAEncryption
         32:91:c8:24:3b:22:e9:38:c9:c7:2c:26:c9:6d:29:62:e1:52:
         bc:ec:2b:f9:c1:0f:dc:1a:d3:72:5e:69:af:d4:ba:31:30:74:
         23:01:3d:1e:cc:70:33:64:41:a7:af:8f:ad:9d:cd:ca:ae:5e:
         80:d5:24:21:a8:15:aa:73:24:bd:19:16:e2:2f:81:af:cd:98:
         34:e0:a5:15:82:10:b1:e9:5e:c9:b9:b5:a8:52:bc:b4:d2:65:
         d2:79:89:0b:8c:52:c0:83:88:ff:71:59:79:a2:d4:a5:66:69:
         87:f1:2c:c5:4d:af:a4:6a:21:d3:5d:a0:23:66:ac:f6:18:6b:
         6b:58:a2:c3:15:13:d6:da:d1:53:d5:3e:6b:27:b4:ab:25:b5:
         fe:85:3b:42:6b:04:53:65:e4:bc:85:bf:ba:b5:40:e7:a2:cf:
         e3:4a:12:50:11:0d:69:cc:84:ea:32:64:3f:4d:a9:89:04:bc:
         15:0b:e4:c8:2e:1d:c1:89:74:a4:36:22:ba:c5:c5:53:8f:ee:
         0c:49:a8:67:f8:6d:17:80:18:00:55:d2:94:03:71:98:58:14:
         74:94:61:8e:c2:f9:49:f0:78:c5:4d:14:bd:a4:13:ec:f6:41:
         45:95:f0:1c:0c:3d:90:4f:02:07:ae:6d:f7:08:1f:7e:52:c8:
         0e:90:c3:ac
-----BEGIN CERTIFICATE-----
MIIFpzCCBI+gAwIBAgIUEZHBbRwweMzOMS/yvLY3ii4ZnqQwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAwwMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw
M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDExOTExMTAzN1oX
DTI3MDExODExMTUzN1owMzExMC8GA1UEAxMoNkU2NTUxRERGMTVGQ0I2NDg1MDBB
NzA4MEZBMzdEOEVFODYwMkE4NjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAO2l4YHI/nvyW0BiXY7AjXeLZWWG1RqxVtFRzOSeSGa3XCk4szvGt9VbGAPm
4GW7Z8Gqm41TE+e71+MhsWmgenZbNXX1H4uLH2ZI3PoeBqs6PIz+CfbLVzUsE3tV
4Fzt9/ZgrI2BGYyIQliUIjSZkg3iWNyR1tWBzuI1kX6RLjm4bNhUNcHBeu3NiHvk
3owheYUCCKtXZcJNjNE5tFf5Kv7bgF06r66Ek8M6WYkjpS64fuz1eHfj7aZOUL97
RggJr9NaKEb7JuLLzDcSf1XesA8l4sYImC48U0vbUWAcozcny1M3VUYu+or1IEG/
NHIkZKG70XThOEXyl5jTZUBySI0CAwEAAaOCApowggKWMA8GA1UdEwEB/wQFMAMB
Af8wHQYDVR0OBBYEFG5lUd3xX8tkhQCnCA+jfY7oYCqGMB8GA1UdIwQYMBaAFKVu
hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig
ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw
OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE
NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB
BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu
Y24vcmVwby9BMTA2NTU4ODMzNTUyNTIzMjY0MS8wLzBuBggrBgEFBQcwCoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDY1NTg4MzM1NTI1MjMyNjQx
LzAvNkU2NTUxRERGMTVGQ0I2NDg1MDBBNzA4MEZBMzdEOEVFODYwMkE4Ni5tZnQw
OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp
ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAJnY0wwDQYJKoZIhvcNAQELBQADggEBADKRyCQ7
Iuk4yccsJsltKWLhUrzsK/nBD9wa03Jeaa/UujEwdCMBPR7McDNkQaevj62dzcqu
XoDVJCGoFapzJL0ZFuIvga/NmDTgpRWCELHpXsm5tahSvLTSZdJ5iQuMUsCDiP9x
WXmi1KVmaYfxLMVNr6RqIdNdoCNmrPYYa2tYosMVE9ba0VPVPmsntKsltf6FO0Jr
BFNl5LyFv7q1QOeiz+NKElARDWnMhOoyZD9NqYkEvBUL5MguHcGJdKQ2IrrFxVOP
7gxJqGf4bReAGABV0pQDcZhYFHSUYY7C+UnweMVNFL2kE+z2QUWV8BwMPZBPAgeu
bfcIH35SyA6Qw6w=
-----END CERTIFICATE-----
Generated at Sun Jan 25 12:45:58 2026 by rpki-client