This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E4E3385BD421AF1ACED423A48E055F5555BFF1F5.cer
File: E4E3385BD421AF1ACED423A48E055F5555BFF1F5.cer (raw, json)
Hash identifier: MXlrH7GgsKFa4eSfANAy6Ax5fWHsotimGDUBbaNo/bk=
Subject key identifier: E4:E3:38:5B:D4:21:AF:1A:CE:D4:23:A4:8E:05:5F:55:55:BF:F1:F5
Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10
Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710
Certificate serial: 5FE58249E27A060F1BBE2805F19F4E5D1C44C5F2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
Manifest: rsync://rpki-rps.cnnic.cn/repo/A1065585389265616897/0/E4E3385BD421AF1ACED423A48E055F5555BFF1F5.mft
caRepository: rsync://rpki-rps.cnnic.cn/repo/A1065585389265616897/0/
Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml
Certificate not before: Mon 19 Jan 2026 10:57:40 +0000
Certificate not after: Mon 18 Jan 2027 11:02:40 +0000
Subordinate resources: AS: 63538
IP: 2401:70e0::/32
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 25 Jan 2026 19:40:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:e5:82:49:e2:7a:06:0f:1b:be:28:05:f1:9f:4e:5d:1c:44:c5:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710
Validity
Not Before: Jan 19 10:57:40 2026 GMT
Not After : Jan 18 11:02:40 2027 GMT
Subject: CN=E4E3385BD421AF1ACED423A48E055F5555BFF1F5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:e8:5a:40:d2:04:47:23:15:13:07:aa:ae:51:
5f:48:7f:52:a8:0f:51:17:b2:3d:17:d3:e1:a0:7b:
86:6c:af:3c:da:4c:ce:4c:45:51:6b:be:e7:81:7c:
0e:d4:b6:71:85:76:77:42:51:e3:a0:e5:d7:ab:a0:
37:fc:1e:0e:99:0f:2d:bb:f3:f3:17:43:04:88:25:
90:4f:6c:84:ed:d9:10:14:a6:ed:75:3c:31:f1:72:
29:ee:e0:06:88:5a:71:5d:1b:df:88:5e:53:f2:44:
a6:70:51:10:36:ff:9c:2d:85:ee:72:35:48:52:94:
72:ce:d3:85:3b:71:cb:68:00:7a:4b:f8:e7:c1:ad:
f1:d6:f8:e5:3f:36:79:4c:d4:6b:c3:d2:53:7b:22:
ea:2f:06:3b:2e:1a:92:45:eb:74:2e:0e:be:81:07:
f6:99:a4:35:3f:41:48:79:66:64:8d:81:8f:a7:7f:
63:07:28:21:90:d1:a7:55:40:47:41:5d:72:dc:dd:
d1:44:8f:ca:de:ef:c1:84:6a:d5:cb:2f:10:31:e5:
53:73:6c:c1:74:a6:2d:f7:ea:c2:44:d4:6d:48:b0:
27:2f:90:f1:fc:06:4a:ee:3a:8a:2e:51:d6:0c:93:
1c:de:28:9e:e6:c2:6e:38:34:40:32:9e:ba:34:f7:
06:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
E4:E3:38:5B:D4:21:AF:1A:CE:D4:23:A4:8E:05:5F:55:55:BF:F1:F5
X509v3 Authority Key Identifier:
keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265616897/0/
RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265616897/0/E4E3385BD421AF1ACED423A48E055F5555BFF1F5.mft
RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2401:70e0::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
63538
Signature Algorithm: sha256WithRSAEncryption
65:f9:6d:a3:04:c6:be:31:4b:45:1a:46:e7:b6:7e:4e:ef:ea:
e2:db:0f:9d:a3:3f:f6:fb:34:1f:e0:83:b6:b1:98:ed:3e:c3:
1d:5b:a9:f3:af:5e:7f:c1:a1:db:c4:6f:71:fe:ea:4c:43:3c:
07:a5:ee:a4:f9:56:7e:53:00:9a:98:09:39:ba:79:b8:50:2a:
3c:af:b4:70:84:f8:78:4f:7e:c1:47:3a:6c:5a:aa:3d:13:49:
ca:76:f4:77:5c:63:eb:b1:b6:6b:02:7d:4a:32:0b:13:21:3c:
b0:51:7e:5c:77:70:ee:44:01:ab:3a:19:04:8e:1a:00:98:82:
54:c8:8c:3d:a3:a8:a5:82:4f:9a:9b:2b:2d:b5:13:68:2f:2f:
82:a9:61:02:01:4a:b3:e7:3b:7b:77:40:80:f7:d9:a5:51:30:
75:de:c5:ef:66:9f:93:8a:35:7f:bd:bf:98:10:33:63:f9:b7:
6d:10:9a:9b:73:24:0f:10:49:35:c5:19:ee:f8:bb:78:95:1f:
e6:29:fe:9a:25:ab:e9:40:38:e6:da:33:a5:6d:44:3a:8c:b5:
c1:4c:ce:80:8c:90:ea:14:9d:3f:a5:4e:08:10:ec:72:78:17:
34:d1:ae:f7:3b:d7:39:fd:f8:a6:b7:09:e9:2e:f9:c7:d4:f6:
48:a7:d9:f0
-----BEGIN CERTIFICATE-----
MIIFxDCCBKygAwIBAgIUX+WCSeJ6Bg8bvigF8Z9OXRxExfIwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAwwMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw
M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDExOTEwNTc0MFoX
DTI3MDExODExMDI0MFowMzExMC8GA1UEAxMoRTRFMzM4NUJENDIxQUYxQUNFRDQy
M0E0OEUwNTVGNTU1NUJGRjFGNTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAOPoWkDSBEcjFRMHqq5RX0h/UqgPUReyPRfT4aB7hmyvPNpMzkxFUWu+54F8
DtS2cYV2d0JR46Dl16ugN/weDpkPLbvz8xdDBIglkE9shO3ZEBSm7XU8MfFyKe7g
BohacV0b34heU/JEpnBREDb/nC2F7nI1SFKUcs7ThTtxy2gAekv458Gt8db45T82
eUzUa8PSU3si6i8GOy4akkXrdC4OvoEH9pmkNT9BSHlmZI2Bj6d/YwcoIZDRp1VA
R0Fdctzd0USPyt7vwYRq1csvEDHlU3NswXSmLffqwkTUbUiwJy+Q8fwGSu46ii5R
1gyTHN4onubCbjg0QDKeujT3BpcCAwEAAaOCArcwggKzMA8GA1UdEwEB/wQFMAMB
Af8wHQYDVR0OBBYEFOTjOFvUIa8aztQjpI4FX1VVv/H1MB8GA1UdIwQYMBaAFKVu
hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig
ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw
OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE
NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB
BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu
Y24vcmVwby9BMTA2NTU4NTM4OTI2NTYxNjg5Ny8wLzBuBggrBgEFBQcwCoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDY1NTg1Mzg5MjY1NjE2ODk3
LzAvRTRFMzM4NUJENDIxQUYxQUNFRDQyM0E0OEUwNTVGNTU1NUJGRjFGNS5tZnQw
OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp
ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUH
AQcBAf8EETAPMA0EAgACMAcDBQAkAXDgMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC
AwD4MjANBgkqhkiG9w0BAQsFAAOCAQEAZfltowTGvjFLRRpG57Z+Tu/q4tsPnaM/
9vs0H+CDtrGY7T7DHVup869ef8Gh28Rvcf7qTEM8B6XupPlWflMAmpgJObp5uFAq
PK+0cIT4eE9+wUc6bFqqPRNJynb0d1xj67G2awJ9SjILEyE8sFF+XHdw7kQBqzoZ
BI4aAJiCVMiMPaOopYJPmpsrLbUTaC8vgqlhAgFKs+c7e3dAgPfZpVEwdd7F72af
k4o1f72/mBAzY/m3bRCam3MkDxBJNcUZ7vi7eJUf5in+miWr6UA45tozpW1EOoy1
wUzOgIyQ6hSdP6VOCBDscngXNNGu9zvXOf34prcJ6S75x9T2SKfZ8A==
-----END CERTIFICATE-----
Generated at Sun Jan 25 06:00:59 2026 by rpki-client