This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E4E3385BD421AF1ACED423A48E055F5555BFF1F5.cer
File:                     E4E3385BD421AF1ACED423A48E055F5555BFF1F5.cer (raw, json)
Hash identifier:          MXlrH7GgsKFa4eSfANAy6Ax5fWHsotimGDUBbaNo/bk=
Subject key identifier:   E4:E3:38:5B:D4:21:AF:1A:CE:D4:23:A4:8E:05:5F:55:55:BF:F1:F5
Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10
Certificate issuer:       /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710
Certificate serial:       5FE58249E27A060F1BBE2805F19F4E5D1C44C5F2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
Manifest:                 rsync://rpki-rps.cnnic.cn/repo/A1065585389265616897/0/E4E3385BD421AF1ACED423A48E055F5555BFF1F5.mft
caRepository:             rsync://rpki-rps.cnnic.cn/repo/A1065585389265616897/0/
Notify URL:               https://rrdp-rps.cnnic.cn/rrdp/notification.xml
Certificate not before:   Mon 19 Jan 2026 10:57:40 +0000
Certificate not after:    Mon 18 Jan 2027 11:02:40 +0000
Subordinate resources:    AS: 63538
                          IP: 2401:70e0::/32
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 25 Jan 2026 19:40:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:e5:82:49:e2:7a:06:0f:1b:be:28:05:f1:9f:4e:5d:1c:44:c5:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710
        Validity
            Not Before: Jan 19 10:57:40 2026 GMT
            Not After : Jan 18 11:02:40 2027 GMT
        Subject: CN=E4E3385BD421AF1ACED423A48E055F5555BFF1F5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:e8:5a:40:d2:04:47:23:15:13:07:aa:ae:51:
                    5f:48:7f:52:a8:0f:51:17:b2:3d:17:d3:e1:a0:7b:
                    86:6c:af:3c:da:4c:ce:4c:45:51:6b:be:e7:81:7c:
                    0e:d4:b6:71:85:76:77:42:51:e3:a0:e5:d7:ab:a0:
                    37:fc:1e:0e:99:0f:2d:bb:f3:f3:17:43:04:88:25:
                    90:4f:6c:84:ed:d9:10:14:a6:ed:75:3c:31:f1:72:
                    29:ee:e0:06:88:5a:71:5d:1b:df:88:5e:53:f2:44:
                    a6:70:51:10:36:ff:9c:2d:85:ee:72:35:48:52:94:
                    72:ce:d3:85:3b:71:cb:68:00:7a:4b:f8:e7:c1:ad:
                    f1:d6:f8:e5:3f:36:79:4c:d4:6b:c3:d2:53:7b:22:
                    ea:2f:06:3b:2e:1a:92:45:eb:74:2e:0e:be:81:07:
                    f6:99:a4:35:3f:41:48:79:66:64:8d:81:8f:a7:7f:
                    63:07:28:21:90:d1:a7:55:40:47:41:5d:72:dc:dd:
                    d1:44:8f:ca:de:ef:c1:84:6a:d5:cb:2f:10:31:e5:
                    53:73:6c:c1:74:a6:2d:f7:ea:c2:44:d4:6d:48:b0:
                    27:2f:90:f1:fc:06:4a:ee:3a:8a:2e:51:d6:0c:93:
                    1c:de:28:9e:e6:c2:6e:38:34:40:32:9e:ba:34:f7:
                    06:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                E4:E3:38:5B:D4:21:AF:1A:CE:D4:23:A4:8E:05:5F:55:55:BF:F1:F5
            X509v3 Authority Key Identifier:
                keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265616897/0/
                RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265616897/0/E4E3385BD421AF1ACED423A48E055F5555BFF1F5.mft
                RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:70e0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  63538

    Signature Algorithm: sha256WithRSAEncryption
         65:f9:6d:a3:04:c6:be:31:4b:45:1a:46:e7:b6:7e:4e:ef:ea:
         e2:db:0f:9d:a3:3f:f6:fb:34:1f:e0:83:b6:b1:98:ed:3e:c3:
         1d:5b:a9:f3:af:5e:7f:c1:a1:db:c4:6f:71:fe:ea:4c:43:3c:
         07:a5:ee:a4:f9:56:7e:53:00:9a:98:09:39:ba:79:b8:50:2a:
         3c:af:b4:70:84:f8:78:4f:7e:c1:47:3a:6c:5a:aa:3d:13:49:
         ca:76:f4:77:5c:63:eb:b1:b6:6b:02:7d:4a:32:0b:13:21:3c:
         b0:51:7e:5c:77:70:ee:44:01:ab:3a:19:04:8e:1a:00:98:82:
         54:c8:8c:3d:a3:a8:a5:82:4f:9a:9b:2b:2d:b5:13:68:2f:2f:
         82:a9:61:02:01:4a:b3:e7:3b:7b:77:40:80:f7:d9:a5:51:30:
         75:de:c5:ef:66:9f:93:8a:35:7f:bd:bf:98:10:33:63:f9:b7:
         6d:10:9a:9b:73:24:0f:10:49:35:c5:19:ee:f8:bb:78:95:1f:
         e6:29:fe:9a:25:ab:e9:40:38:e6:da:33:a5:6d:44:3a:8c:b5:
         c1:4c:ce:80:8c:90:ea:14:9d:3f:a5:4e:08:10:ec:72:78:17:
         34:d1:ae:f7:3b:d7:39:fd:f8:a6:b7:09:e9:2e:f9:c7:d4:f6:
         48:a7:d9:f0
-----BEGIN CERTIFICATE-----
MIIFxDCCBKygAwIBAgIUX+WCSeJ6Bg8bvigF8Z9OXRxExfIwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAwwMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw
M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDExOTEwNTc0MFoX
DTI3MDExODExMDI0MFowMzExMC8GA1UEAxMoRTRFMzM4NUJENDIxQUYxQUNFRDQy
M0E0OEUwNTVGNTU1NUJGRjFGNTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAOPoWkDSBEcjFRMHqq5RX0h/UqgPUReyPRfT4aB7hmyvPNpMzkxFUWu+54F8
DtS2cYV2d0JR46Dl16ugN/weDpkPLbvz8xdDBIglkE9shO3ZEBSm7XU8MfFyKe7g
BohacV0b34heU/JEpnBREDb/nC2F7nI1SFKUcs7ThTtxy2gAekv458Gt8db45T82
eUzUa8PSU3si6i8GOy4akkXrdC4OvoEH9pmkNT9BSHlmZI2Bj6d/YwcoIZDRp1VA
R0Fdctzd0USPyt7vwYRq1csvEDHlU3NswXSmLffqwkTUbUiwJy+Q8fwGSu46ii5R
1gyTHN4onubCbjg0QDKeujT3BpcCAwEAAaOCArcwggKzMA8GA1UdEwEB/wQFMAMB
Af8wHQYDVR0OBBYEFOTjOFvUIa8aztQjpI4FX1VVv/H1MB8GA1UdIwQYMBaAFKVu
hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig
ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw
OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE
NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB
BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu
Y24vcmVwby9BMTA2NTU4NTM4OTI2NTYxNjg5Ny8wLzBuBggrBgEFBQcwCoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDY1NTg1Mzg5MjY1NjE2ODk3
LzAvRTRFMzM4NUJENDIxQUYxQUNFRDQyM0E0OEUwNTVGNTU1NUJGRjFGNS5tZnQw
OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp
ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUH
AQcBAf8EETAPMA0EAgACMAcDBQAkAXDgMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC
AwD4MjANBgkqhkiG9w0BAQsFAAOCAQEAZfltowTGvjFLRRpG57Z+Tu/q4tsPnaM/
9vs0H+CDtrGY7T7DHVup869ef8Gh28Rvcf7qTEM8B6XupPlWflMAmpgJObp5uFAq
PK+0cIT4eE9+wUc6bFqqPRNJynb0d1xj67G2awJ9SjILEyE8sFF+XHdw7kQBqzoZ
BI4aAJiCVMiMPaOopYJPmpsrLbUTaC8vgqlhAgFKs+c7e3dAgPfZpVEwdd7F72af
k4o1f72/mBAzY/m3bRCam3MkDxBJNcUZ7vi7eJUf5in+miWr6UA45tozpW1EOoy1
wUzOgIyQ6hSdP6VOCBDscngXNNGu9zvXOf34prcJ6S75x9T2SKfZ8A==
-----END CERTIFICATE-----
Generated at Sun Jan 25 06:00:59 2026 by rpki-client