This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B361C757B6D70C317FD018CE921CC13F568B00D8.cer
File: B361C757B6D70C317FD018CE921CC13F568B00D8.cer (raw, json)
Hash identifier: MbCM4ziAZMToYgXNeOtTExM67BwfKIvymLhhsKqNvgk=
Subject key identifier: B3:61:C7:57:B6:D7:0C:31:7F:D0:18:CE:92:1C:C1:3F:56:8B:00:D8
Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10
Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710
Certificate serial: 3BC2F535C5309139D326B895331829FA35E8957F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
Manifest: rsync://rpki-rps.cnnic.cn/repo/A1065583221972008963/0/B361C757B6D70C317FD018CE921CC13F568B00D8.mft
caRepository: rsync://rpki-rps.cnnic.cn/repo/A1065583221972008963/0/
Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml
Certificate not before: Mon 19 Jan 2026 10:42:52 +0000
Certificate not after: Mon 18 Jan 2027 10:47:52 +0000
Subordinate resources: AS: 151231
IP: 103.104.152.0/22
IP: 2402:2e60::/32
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 25 Jan 2026 19:40:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:c2:f5:35:c5:30:91:39:d3:26:b8:95:33:18:29:fa:35:e8:95:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710
Validity
Not Before: Jan 19 10:42:52 2026 GMT
Not After : Jan 18 10:47:52 2027 GMT
Subject: CN=B361C757B6D70C317FD018CE921CC13F568B00D8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:05:ee:2b:97:89:f4:86:be:08:80:40:bd:e8:
5a:2b:bd:30:ea:86:c2:5f:11:2d:bc:9e:7a:70:d1:
b9:c0:f3:ff:2d:8c:d3:f7:a8:74:13:f4:7a:a7:68:
ae:df:73:1b:de:64:ca:4d:9f:18:d5:48:04:79:1f:
f4:4c:74:51:1e:0b:be:9a:55:21:ea:fa:d9:b3:e4:
6e:c0:38:4b:e6:f6:51:71:b1:9b:f2:2d:86:ec:09:
32:32:c4:26:24:85:e0:c4:18:e6:02:aa:b7:e2:b2:
1f:4b:8b:ce:c0:e0:99:d0:4f:44:6b:a8:9b:e2:87:
01:75:c0:85:5f:63:fd:13:b9:57:a5:a5:60:4c:70:
42:5e:5e:27:9a:c4:2c:1e:93:84:a9:79:ae:4d:2f:
a6:20:f7:8e:a4:a6:ae:fe:d3:af:df:41:b6:58:0a:
ef:9d:8c:eb:21:ef:5e:7d:d0:44:3a:dc:02:fd:d0:
e6:79:33:a6:2a:1a:44:77:6d:ad:50:76:18:9c:7d:
b2:6a:9e:8d:26:b3:61:d0:9f:57:b1:b4:5e:8c:3e:
e4:c8:68:bd:92:e0:05:17:a3:c2:98:69:2e:ba:bd:
98:d4:11:2e:6b:2c:06:66:7d:16:9f:9b:48:1c:59:
f1:f2:98:e7:b4:d6:c6:c3:5d:19:1e:33:eb:6c:a5:
32:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
B3:61:C7:57:B6:D7:0C:31:7F:D0:18:CE:92:1C:C1:3F:56:8B:00:D8
X509v3 Authority Key Identifier:
keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1065583221972008963/0/
RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1065583221972008963/0/B361C757B6D70C317FD018CE921CC13F568B00D8.mft
RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.104.152.0/22
IPv6:
2402:2e60::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
151231
Signature Algorithm: sha256WithRSAEncryption
51:f5:21:8a:d8:20:e4:31:95:31:02:ec:88:f3:97:c2:bd:47:
8e:e3:41:3f:98:f6:d7:50:fa:14:c0:d7:46:83:e4:83:28:31:
60:44:2a:dc:c1:34:21:1c:df:19:5f:a6:3e:d8:6b:2c:9b:0b:
bb:08:e8:4a:80:28:98:d1:52:bc:e4:23:db:18:ee:b0:f8:4c:
d3:36:c3:6b:b8:2e:05:1a:7a:cf:2e:00:6b:7a:57:fa:ac:28:
5c:f1:34:be:fc:ec:d5:90:e3:2a:9c:39:9d:18:4a:48:ae:57:
0c:4f:ff:b0:c1:55:28:f4:d9:a2:83:a0:06:f5:c7:fe:95:2a:
15:2f:53:8e:0d:c9:1a:88:f6:ad:7d:78:ef:c7:0e:0a:d6:73:
55:41:63:6d:5a:00:cd:3e:74:3a:ec:96:c0:2a:70:a8:e3:f6:
8a:c9:f0:18:1b:e6:18:a4:6c:9c:38:2c:91:13:6b:29:dc:e7:
0f:3b:de:aa:41:5e:15:b0:be:10:21:4b:a5:7e:fe:31:3a:6d:
e4:41:f4:2b:87:ec:9a:1e:dd:04:98:84:24:34:69:57:f4:db:
32:6e:1c:5f:ae:f5:89:60:fa:84:19:88:4d:b4:e3:6c:01:bb:
cd:36:15:f8:dd:a2:3d:0f:98:de:32:03:b7:43:9f:bb:d0:45:
d4:96:7c:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 05:55:40 2026 by rpki-client