
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1133679B2C104A0446FA0C3764EEE246C5D21075.cer
File: 1133679B2C104A0446FA0C3764EEE246C5D21075.cer (raw, json)
Hash identifier: Sk6YC7NmJw+IHsqd8d3ul5cdFkBKzcj2AGVuHw/Elk4=
Subject key identifier: 11:33:67:9B:2C:10:4A:04:46:FA:0C:37:64:EE:E2:46:C5:D2:10:75
Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10
Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710
Certificate serial: 5BE4E4130EE74CBA1F273791E7F61E529E930CF2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
Manifest: rsync://rpki-rps.cnnic.cn/repo/A1065582741577400322/0/1133679B2C104A0446FA0C3764EEE246C5D21075.mft
caRepository: rsync://rpki-rps.cnnic.cn/repo/A1065582741577400322/0/
Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml
Certificate not before: Wed 01 Jul 2026 02:01:13 +0000
Certificate not after: Wed 30 Jun 2027 02:06:13 +0000
Subordinate resources: AS: 55991
IP: 43.228.204.0/22
IP: 43.228.240.0/22
IP: 103.41.116.0/22
IP: 103.56.100.0 -- 103.56.107.255
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Jul 2026 04:12:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:e4:e4:13:0e:e7:4c:ba:1f:27:37:91:e7:f6:1e:52:9e:93:0c:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710
Validity
Not Before: Jul 1 02:01:13 2026 GMT
Not After : Jun 30 02:06:13 2027 GMT
Subject: CN=1133679B2C104A0446FA0C3764EEE246C5D21075
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:ed:b4:88:44:d9:06:ef:b2:7a:fc:90:a9:2c:
20:94:bf:92:8b:50:6d:fa:7e:fe:0c:00:e9:4e:0e:
2d:18:98:10:9c:9a:93:f9:b5:94:d9:9e:5c:6a:d9:
70:35:f6:35:84:cc:2c:50:c5:3c:e8:5d:8e:b8:f6:
51:28:89:56:b6:10:e0:47:8b:b6:13:9d:69:2e:ad:
56:0c:8f:ec:5c:75:5f:c0:04:7f:2d:d3:c9:e1:67:
d5:eb:8c:7e:fb:83:8a:b8:bd:7c:91:77:5f:37:b0:
19:40:ef:23:82:11:be:06:38:87:0d:11:d0:ad:d8:
00:49:15:bb:d6:d0:f9:04:07:38:7f:05:3e:fc:2d:
49:e9:9e:0a:32:fd:a3:d8:b5:0e:96:2e:07:91:2d:
51:c8:8e:f9:bf:d0:99:36:92:b1:9b:01:16:65:80:
51:51:81:df:84:00:73:15:88:59:65:1a:fd:30:bd:
db:37:80:38:66:0b:89:6b:9e:da:6a:b5:4b:a4:2d:
d8:1d:a9:27:dc:fb:09:05:a0:de:75:0d:0b:b9:62:
a0:7f:a0:6b:ae:67:65:60:ab:b2:84:10:05:5a:08:
1d:ff:58:73:e5:38:09:7c:ab:29:48:42:db:b2:35:
81:6f:fb:45:d8:f2:6e:27:de:b3:da:02:48:1a:1b:
41:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
11:33:67:9B:2C:10:4A:04:46:FA:0C:37:64:EE:E2:46:C5:D2:10:75
X509v3 Authority Key Identifier:
keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577400322/0/
RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577400322/0/1133679B2C104A0446FA0C3764EEE246C5D21075.mft
RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
43.228.204.0/22
43.228.240.0/22
103.41.116.0/22
103.56.100.0-103.56.107.255
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
55991
Signature Algorithm: sha256WithRSAEncryption
36:b3:73:5b:5e:bb:7a:cc:d1:e6:56:84:b4:98:17:8b:7a:74:
be:2b:08:00:ba:9b:03:ca:71:f7:af:51:cf:7e:06:25:da:b1:
76:be:d3:4c:24:bc:76:2f:4e:45:c9:4d:59:fd:31:f7:3b:a9:
75:33:12:a7:7a:65:42:63:26:59:b6:b7:d7:b4:ea:0d:0c:99:
8c:b6:aa:29:84:f8:29:93:8f:8c:35:2e:8e:8e:bf:89:0c:4d:
e8:8e:c2:64:0f:3e:c8:15:b3:b2:2b:27:83:9c:43:31:46:6b:
62:f7:35:5b:78:e4:09:c3:4f:99:e0:4d:bb:98:42:b0:56:18:
9a:f5:3c:74:1b:b8:ed:5d:f6:bc:54:25:f1:1c:d7:cf:67:c7:
5f:d7:54:8a:10:08:b8:ba:60:e5:82:ba:a5:28:f1:fe:69:5b:
42:5f:38:2b:8f:8b:07:d1:5a:97:bb:cf:80:86:12:34:16:2e:
f4:0d:3d:50:7b:b8:e7:23:09:35:59:64:ad:1e:c7:2a:ba:82:
42:53:03:03:df:33:0b:a2:b7:e4:a6:08:f9:6f:92:3b:cb:1b:
2c:68:4c:6f:d1:79:67:4c:97:fd:58:d4:28:50:e9:aa:55:9e:
5a:6e:59:fc:de:ac:ae:c7:b1:e7:01:e2:36:cd:76:2b:c6:f9:
f6:35:6c:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:41:34 2026 by rpki-client