This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/95AFB4515D628A1186D20869CFEAF47D559D5337.cer File: 95AFB4515D628A1186D20869CFEAF47D559D5337.cer (raw, json) Hash identifier: MJGk6fRQZ95pPgX8QjHFkEpUXLEKxtlSbv11iFg/Mh8= Subject key identifier: 95:AF:B4:51:5D:62:8A:11:86:D2:08:69:CF:EA:F4:7D:55:9D:53:37 Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Certificate serial: 4B615743C59F4B4D517F22B8917D3C878740CB6F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1065585911217520643/0/95AFB4515D628A1186D20869CFEAF47D559D5337.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1065585911217520643/0/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Mon 19 Jan 2026 11:00:17 +0000 Certificate not after: Mon 18 Jan 2027 11:05:17 +0000 Subordinate resources: AS: 151268 IP: 103.109.20.0/22 IP: 103.236.52.0 -- 103.236.67.255 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 19:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:61:57:43:c5:9f:4b:4d:51:7f:22:b8:91:7d:3c:87:87:40:cb:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Validity Not Before: Jan 19 11:00:17 2026 GMT Not After : Jan 18 11:05:17 2027 GMT Subject: CN=95AFB4515D628A1186D20869CFEAF47D559D5337 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:b2:d0:d9:0d:bd:38:03:3a:3a:c8:48:e8:ed: ab:2f:eb:6f:74:51:9d:73:a9:59:0a:6d:f0:b6:a3: e1:68:4d:81:43:db:22:35:14:52:52:5b:e5:5f:46: 0b:47:f0:4a:47:b6:d8:51:42:5f:40:21:3c:5d:54: 36:76:5c:55:78:a4:1b:c3:e8:ae:37:d9:d7:55:91: f7:3b:29:0f:f6:29:e6:7a:a7:32:79:84:e1:08:cd: 05:26:95:be:80:ae:ef:ca:f8:1f:85:e6:50:0c:06: 28:49:f1:34:6b:ee:b6:53:0f:c8:bd:02:07:30:37: 8a:a3:99:b7:f8:c5:fa:7e:f8:f3:e7:c1:c9:1a:f2: a4:b4:59:eb:f6:d8:da:5a:3d:41:82:85:e7:be:5d: 77:64:fc:41:b6:9c:c7:c3:c7:99:90:80:5d:82:23: 7c:fc:f1:73:98:dd:dd:24:b5:bf:5e:33:bc:6b:04: ec:13:55:61:03:6e:df:46:24:be:bf:89:9b:08:4b: 03:98:fa:46:45:44:76:66:99:9b:48:ce:f3:6e:c9: 1c:bb:fe:fc:58:1c:e8:3a:c6:3a:0b:1f:02:b7:4e: d9:76:46:97:ff:6c:80:ff:df:4d:55:55:9d:4c:b8: d0:a9:e9:db:09:88:9e:73:40:32:a8:74:d6:d6:50: 7a:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 95:AF:B4:51:5D:62:8A:11:86:D2:08:69:CF:EA:F4:7D:55:9D:53:37 X509v3 Authority Key Identifier: keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217520643/0/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217520643/0/95AFB4515D628A1186D20869CFEAF47D559D5337.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.109.20.0/22 103.236.52.0-103.236.67.255 sbgp-autonomousSysNum: critical Autonomous System Numbers: 151268 Signature Algorithm: sha256WithRSAEncryption 8a:72:fe:1a:3d:cc:26:18:d9:c9:02:fa:2f:20:39:96:08:1d: 9f:68:44:ed:bf:1e:2f:21:62:9d:03:c7:3d:05:85:3f:88:1f: 5d:ce:30:75:4b:bc:28:5b:ae:5d:f7:84:5f:fa:cc:6b:bf:81: be:71:a1:8f:ef:87:00:96:70:28:39:a5:07:7c:97:07:4e:32: 9c:6d:1b:40:14:8a:d9:17:ea:62:7f:e7:30:04:72:0f:7f:b8: 03:75:e1:a4:01:53:bd:21:25:fa:76:60:6a:54:40:6f:23:f6: 3a:1a:14:b3:62:e6:56:4f:0f:84:55:f7:ab:8f:dd:67:0a:05: 79:fd:4d:d3:26:87:69:43:82:4d:ea:cb:a5:63:50:c2:96:b2: 0e:7b:43:b1:49:d3:13:62:88:b0:f5:ef:52:ef:d1:5b:21:02: 78:b2:f4:ce:ab:d3:5f:62:f0:81:b4:c6:55:5c:90:f4:32:38: b5:78:36:95:f5:b2:82:ca:5b:e9:ff:e5:67:92:77:19:cd:c1: 2d:0b:d8:a0:46:6a:eb:25:10:cb:2a:02:e5:82:19:4b:83:12: cc:90:30:99:8f:ff:bd:53:d7:18:7a:38:6f:ce:de:98:97:90: 57:52:fa:62:3b:59:15:c3:0a:bc:be:7a:1e:ab:0b:ec:ce:21: b3:47:d8:da -----BEGIN CERTIFICATE----- MIIF0TCCBLmgAwIBAgIUS2FXQ8WfS01RfyK4kX08h4dAy28wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDExOTExMDAxN1oX DTI3MDExODExMDUxN1owMzExMC8GA1UEAxMoOTVBRkI0NTE1RDYyOEExMTg2RDIw ODY5Q0ZFQUY0N0Q1NTlENTMzNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALey0NkNvTgDOjrISOjtqy/rb3RRnXOpWQpt8Laj4WhNgUPbIjUUUlJb5V9G C0fwSke22FFCX0AhPF1UNnZcVXikG8PorjfZ11WR9zspD/Yp5nqnMnmE4QjNBSaV voCu78r4H4XmUAwGKEnxNGvutlMPyL0CBzA3iqOZt/jF+n748+fByRrypLRZ6/bY 2lo9QYKF575dd2T8Qbacx8PHmZCAXYIjfPzxc5jd3SS1v14zvGsE7BNVYQNu30Yk vr+JmwhLA5j6RkVEdmaZm0jO827JHLv+/Fgc6DrGOgsfArdO2XZGl/9sgP/fTVVV nUy40Knp2wmInnNAMqh01tZQenMCAwEAAaOCAsQwggLAMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFJWvtFFdYooRhtIIac/q9H1VnVM3MB8GA1UdIwQYMBaAFKVu hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTA2NTU4NTkxMTIxNzUyMDY0My8wLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDY1NTg1OTExMjE3NTIwNjQz LzAvOTVBRkI0NTE1RDYyOEExMTg2RDIwODY5Q0ZFQUY0N0Q1NTlENTMzNy5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwLQYIKwYBBQUH AQcBAf8EHjAcMBoEAgABMBQDBAJnbRQwDAMEAmfsNAMEAmfsQDAaBggrBgEFBQcB CAEB/wQLMAmgBzAFAgMCTuQwDQYJKoZIhvcNAQELBQADggEBAIpy/ho9zCYY2ckC +i8gOZYIHZ9oRO2/Hi8hYp0Dxz0FhT+IH13OMHVLvChbrl33hF/6zGu/gb5xoY/v hwCWcCg5pQd8lwdOMpxtG0AUitkX6mJ/5zAEcg9/uAN14aQBU70hJfp2YGpUQG8j 9joaFLNi5lZPD4RV96uP3WcKBXn9TdMmh2lDgk3qy6VjUMKWsg57Q7FJ0xNiiLD1 71Lv0VshAniy9M6r019i8IG0xlVckPQyOLV4NpX1soLKW+n/5WeSdxnNwS0L2KBG auslEMsqAuWCGUuDEsyQMJmP/71T1xh6OG/O3piXkFdS+mI7WRXDCry+eh6rC+zO IbNH2No= -----END CERTIFICATE-----Generated at Sun Jan 25 12:46:29 2026 by rpki-client