This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BF7230B41A75F66CC3D2372CC0CFFA248AFD961E.cer
File: BF7230B41A75F66CC3D2372CC0CFFA248AFD961E.cer (raw, json)
Hash identifier: rxl8h7xihpPXb/GLuUH44ZVayJVJZjeCpYtqPU9qrcU=
Subject key identifier: BF:72:30:B4:1A:75:F6:6C:C3:D2:37:2C:C0:CF:FA:24:8A:FD:96:1E
Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10
Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710
Certificate serial: 0D7F455B3F4A1F7819CC6AE7346B69D5DDDE0AD3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
Manifest: rsync://rpki-rps.cnnic.cn/repo/A1065582741577728002/0/BF7230B41A75F66CC3D2372CC0CFFA248AFD961E.mft
caRepository: rsync://rpki-rps.cnnic.cn/repo/A1065582741577728002/0/
Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml
Certificate not before: Mon 19 Jan 2026 10:46:13 +0000
Certificate not after: Mon 18 Jan 2027 10:51:13 +0000
Subordinate resources: AS: 9392
IP: 103.122.240.0/22
IP: 2405:94c0::/32
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 25 Jan 2026 19:40:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:7f:45:5b:3f:4a:1f:78:19:cc:6a:e7:34:6b:69:d5:dd:de:0a:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710
Validity
Not Before: Jan 19 10:46:13 2026 GMT
Not After : Jan 18 10:51:13 2027 GMT
Subject: CN=BF7230B41A75F66CC3D2372CC0CFFA248AFD961E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:34:56:7b:83:3b:fe:7f:85:e8:ca:1d:c7:71:
7c:9d:96:3e:20:5f:d4:ac:32:32:20:ee:65:43:6c:
c3:ab:93:7b:22:4d:9b:a9:26:c0:a0:30:a2:54:b4:
92:e4:49:1a:28:d9:d3:30:f3:14:e5:5e:8f:f9:bc:
65:49:7e:8f:4b:03:9b:08:87:62:ba:40:62:d7:2b:
51:69:48:cd:e2:8a:8b:b6:f6:14:10:d8:15:5a:b7:
11:07:f0:35:05:e6:ea:62:6e:14:7f:c0:93:8f:5f:
20:4f:01:6e:5b:ee:62:82:c8:73:a7:3b:ea:00:42:
67:29:7b:94:92:6e:24:e7:6e:a2:b8:f3:bb:6a:04:
51:16:e6:d2:e7:0b:fd:37:65:3e:2f:b3:95:d5:8e:
97:df:db:c1:78:b4:23:13:9c:27:7c:f8:25:e6:52:
bd:99:13:51:35:cf:c2:ab:45:db:d0:4d:72:2e:29:
4d:74:34:2c:ef:30:bc:ea:0f:d5:93:ef:4c:9e:75:
69:7b:70:c5:ab:c4:34:4b:0a:0b:0b:80:23:51:7c:
50:3c:4d:66:8c:10:b7:fa:82:47:2e:bc:a7:8f:a6:
05:6a:8b:2c:8c:4a:a7:0b:27:54:82:c3:8d:7a:a2:
36:65:f9:08:b6:59:cc:14:1f:0e:ae:95:c8:6c:2e:
6c:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
BF:72:30:B4:1A:75:F6:6C:C3:D2:37:2C:C0:CF:FA:24:8A:FD:96:1E
X509v3 Authority Key Identifier:
keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577728002/0/
RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577728002/0/BF7230B41A75F66CC3D2372CC0CFFA248AFD961E.mft
RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.122.240.0/22
IPv6:
2405:94c0::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
9392
Signature Algorithm: sha256WithRSAEncryption
61:e4:d3:6e:b5:2a:4c:5e:1e:fe:98:e8:3e:e9:20:55:f1:43:
68:00:c3:80:60:4b:b6:93:22:68:6f:9b:04:9c:73:42:1d:da:
7e:eb:ed:50:ac:1a:dd:ce:0a:6d:06:4f:1a:f9:6f:41:d3:ad:
cf:b5:b4:ed:d1:ad:8f:ec:57:2e:1c:c2:14:75:1c:b5:65:8e:
1c:e2:4a:07:3a:ed:37:95:37:6b:5c:99:e4:a0:fb:24:c7:09:
fd:ef:90:ef:ed:c8:d9:de:af:06:e2:49:e1:97:20:e8:7c:48:
a1:13:15:93:e9:97:49:c1:24:81:06:77:93:7c:97:98:93:7c:
8f:e4:9b:9d:db:25:0b:2d:34:b9:05:f7:68:ca:ad:3b:52:c8:
03:9a:b6:67:56:a9:fb:ce:a0:74:98:16:3b:94:ba:f6:58:22:
36:cf:9b:bf:74:49:66:0d:3b:ec:f0:8a:aa:de:e0:8e:1c:02:
8a:2a:02:e2:75:1c:1d:6f:5f:1f:32:83:d1:f0:b4:dc:2d:25:
81:45:ad:cd:a4:21:ab:29:1a:1b:f2:b6:23:20:4c:81:88:99:
0b:3a:2c:2c:f0:39:ec:46:26:6d:4f:3f:23:86:80:7f:f8:a5:
87:5d:c8:96:ca:36:9c:6f:26:6b:bd:2c:87:a9:fd:4d:00:be:
fe:e2:d9:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 11:11:27 2026 by rpki-client