This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/848188DBA8D369CB93B918182269D397DE354F44.cer
File: 848188DBA8D369CB93B918182269D397DE354F44.cer (raw, json)
Hash identifier: WxFv/KAwqnhn/gjpgPIK1JNbImP38ANczgw6gBC2YfU=
Subject key identifier: 84:81:88:DB:A8:D3:69:CB:93:B9:18:18:22:69:D3:97:DE:35:4F:44
Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10
Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710
Certificate serial: 72AFD41326EAD37BC820A17534FD2BE6CEC7A3F2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
Manifest: rsync://rpki-rps.cnnic.cn/repo/A1065585649345757186/0/848188DBA8D369CB93B918182269D397DE354F44.mft
caRepository: rsync://rpki-rps.cnnic.cn/repo/A1065585649345757186/0/
Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml
Certificate not before: Mon 19 Jan 2026 10:52:41 +0000
Certificate not after: Mon 18 Jan 2027 10:57:41 +0000
Subordinate resources: AS: 63584
IP: 103.60.32.0/22
IP: 111.223.8.0/22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 25 Jan 2026 19:40:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:af:d4:13:26:ea:d3:7b:c8:20:a1:75:34:fd:2b:e6:ce:c7:a3:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710
Validity
Not Before: Jan 19 10:52:41 2026 GMT
Not After : Jan 18 10:57:41 2027 GMT
Subject: CN=848188DBA8D369CB93B918182269D397DE354F44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:f0:f0:40:03:68:aa:a5:33:f8:9c:b0:43:4b:
4f:18:e8:3a:69:e0:5c:1f:44:10:43:08:36:9a:e3:
35:df:99:80:d4:10:1f:bc:f5:d6:02:18:fb:66:96:
25:d4:73:42:c0:56:3a:52:3b:bc:23:9e:03:cd:c1:
a3:04:8c:39:0d:b0:5a:40:6c:b6:f5:3c:2e:24:a6:
19:61:4b:bf:d9:95:28:c3:8f:8c:ca:56:a4:3c:29:
7c:61:3d:01:52:37:32:0a:46:9d:f6:c9:a0:c8:29:
22:94:27:99:22:41:9e:fe:e0:8d:e0:5f:16:7f:60:
ab:be:63:1e:c2:0f:0f:50:a8:af:f0:96:e9:68:30:
18:0e:4c:72:56:c3:6b:e1:d0:9a:1a:e6:37:23:96:
fe:ad:b4:63:96:2b:bd:20:39:78:87:fd:15:61:6a:
4b:65:ca:a0:63:cf:0c:2a:7f:a5:2f:94:df:83:14:
1e:1e:2b:35:f2:63:44:7b:ce:e5:d7:ab:ce:4d:8d:
f0:02:94:a9:62:75:b8:1d:9c:31:47:bc:b8:06:82:
33:1e:4c:89:ca:db:ba:5f:de:54:a8:d0:be:2c:d5:
02:7a:77:a4:00:21:78:01:d6:60:48:6d:f1:e2:99:
c6:2f:de:bd:13:88:ea:db:de:ff:8e:19:d0:95:64:
d6:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
84:81:88:DB:A8:D3:69:CB:93:B9:18:18:22:69:D3:97:DE:35:4F:44
X509v3 Authority Key Identifier:
keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345757186/0/
RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345757186/0/848188DBA8D369CB93B918182269D397DE354F44.mft
RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.60.32.0/22
111.223.8.0/22
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
63584
Signature Algorithm: sha256WithRSAEncryption
35:c3:3b:6e:ed:97:bc:7b:9d:6a:94:29:06:6e:1a:fe:9c:d0:
18:07:58:16:d9:d1:2f:d6:40:4c:73:65:67:31:a5:25:40:09:
20:b4:2a:c7:34:e9:cd:f6:b9:8d:13:dc:4c:b0:1a:70:45:4f:
93:5d:80:1d:75:73:50:4d:b1:c3:37:ce:cd:89:21:58:8d:6b:
f4:b5:32:e1:e5:b6:f7:4a:ef:6f:3f:1b:bd:39:ed:77:4b:d0:
65:c8:76:51:3d:9e:3c:4e:59:dc:b2:ab:2b:d4:85:5b:47:9e:
f2:32:08:be:cc:7a:b8:e3:26:ad:cd:c5:ca:c7:61:ad:e1:9e:
d4:ba:d1:9e:16:fd:4f:9f:16:22:b9:52:bc:b0:33:a9:f4:cc:
13:24:a6:e8:f0:be:20:b5:d2:91:2f:6f:b4:3c:97:05:be:0d:
4b:2c:10:0c:1d:61:af:66:68:c2:a2:33:98:8d:37:e7:15:22:
0b:8a:6e:13:00:46:11:2a:dd:07:62:bd:3c:f9:9d:5a:ad:09:
df:a1:06:7d:d5:9a:0f:f3:cd:bc:0f:01:6b:ca:5f:70:d1:a9:
aa:da:8e:a0:36:86:6c:55:0d:80:90:f3:f5:1d:a1:2f:64:04:
cf:47:3b:d2:f4:1f:de:c4:d4:48:7d:b7:d8:bf:03:a5:3a:ee:
2c:df:8d:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 06:01:07 2026 by rpki-client