Certificate
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/32BF8200A36B6DAC1374D05EDB3097D701F3BC13.cer
File: 32BF8200A36B6DAC1374D05EDB3097D701F3BC13.cer (raw, json)
Hash identifier: YGNXbbyp42a/YMT/ouTdOFO6Q4wgEcqxbglXAx0GsAY=
Subject key identifier: 32:BF:82:00:A3:6B:6D:AC:13:74:D0:5E:DB:30:97:D7:01:F3:BC:13
Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10
Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710
Certificate serial: 7E0638828AAFC27EE4BAA63608810A72334091F3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
Manifest: rsync://rpki-rps.cnnic.cn/repo/A1152048045362249773/0/32BF8200A36B6DAC1374D05EDB3097D701F3BC13.mft
caRepository: rsync://rpki-rps.cnnic.cn/repo/A1152048045362249773/0/
Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml
Certificate not before: Tue 15 Sep 2026 01:02:39 +0000
Certificate not after: Tue 14 Sep 2027 01:07:39 +0000
Subordinate resources: AS: 59061
IP: 42.201.0.0/21
IP: 45.250.164.0/22
IP: 45.255.76.0/22
IP: 45.255.120.0/22
IP: 45.255.156.0/22
IP: 45.255.172.0/22
IP: 103.52.164.0/22
IP: 103.64.0.0/21
IP: 103.64.216.0/21
IP: 103.213.40.0/21
IP: 103.213.136.0/21
IP: 103.223.176.0/21
IP: 2404:74c0::/32
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 15 Oct 2026 01:08:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:06:38:82:8a:af:c2:7e:e4:ba:a6:36:08:81:0a:72:33:40:91:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710
Validity
Not Before: Sep 15 01:02:39 2026 GMT
Not After : Sep 14 01:07:39 2027 GMT
Subject: CN=32BF8200A36B6DAC1374D05EDB3097D701F3BC13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:c3:46:81:1d:83:f7:04:cd:c4:54:69:75:e4:
e2:d4:80:73:0d:50:cc:d8:97:b5:31:32:e5:25:a0:
e5:ee:71:10:0e:26:0d:10:42:16:45:d2:e8:c7:69:
7a:fe:17:9d:db:af:cd:a0:6b:61:2f:e9:fe:a0:1e:
54:dc:15:d9:f9:45:16:4e:2b:e1:9a:d9:78:eb:03:
69:59:34:88:7a:20:42:d9:ac:44:31:d5:69:f8:07:
6f:08:a6:d3:93:f1:95:60:81:5b:b6:27:b3:86:af:
49:93:a7:ba:b0:87:63:71:31:66:bd:96:e6:bb:ce:
45:84:41:27:2d:8a:10:22:57:c7:75:58:1f:3e:92:
75:cb:50:b1:59:1d:8f:ca:fd:ed:8e:88:6a:f3:9e:
0a:21:66:bf:ad:a5:85:46:b3:c5:92:e4:ca:66:e5:
40:73:a3:6a:24:ef:41:b1:96:4a:54:17:ae:bc:b9:
cd:e5:d8:be:b3:c3:a5:2d:22:65:7e:e7:cc:3b:0d:
46:8e:72:e1:a1:66:17:7e:c2:2e:8e:2f:c3:35:a9:
03:18:30:4d:b1:d7:c9:f0:8c:c0:a9:ca:97:3b:41:
6d:11:3f:1e:7e:c2:0e:8e:e1:15:38:6a:60:a7:23:
25:1e:ff:f0:ec:1f:7d:9b:85:69:29:93:15:3c:d7:
aa:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
32:BF:82:00:A3:6B:6D:AC:13:74:D0:5E:DB:30:97:D7:01:F3:BC:13
X509v3 Authority Key Identifier:
keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1152048045362249773/0/
RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1152048045362249773/0/32BF8200A36B6DAC1374D05EDB3097D701F3BC13.mft
RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
42.201.0.0/21
45.250.164.0/22
45.255.76.0/22
45.255.120.0/22
45.255.156.0/22
45.255.172.0/22
103.52.164.0/22
103.64.0.0/21
103.64.216.0/21
103.213.40.0/21
103.213.136.0/21
103.223.176.0/21
IPv6:
2404:74c0::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
59061
Signature Algorithm: sha256WithRSAEncryption
52:ae:26:92:95:81:55:8c:eb:38:b1:10:27:c4:39:b2:9e:0d:
e6:26:5c:2a:fd:47:e8:63:f5:cb:12:38:db:2f:48:7e:d9:b0:
42:87:80:ee:62:42:77:96:0e:e6:96:ff:04:44:39:d0:60:d4:
c0:95:a1:1b:5d:2c:fc:f4:70:1d:0e:f0:8b:d7:a7:06:86:24:
e6:7c:44:b5:f8:c5:aa:50:e3:aa:ce:1f:44:48:f5:b1:60:77:
72:47:27:3a:2d:88:f7:ff:17:b2:b2:3b:cd:1c:46:00:73:d9:
73:cc:6a:84:1c:46:08:36:35:6d:38:cd:d4:89:cb:56:cd:95:
40:d9:42:1d:0d:a5:20:ac:ba:fd:9c:5d:3e:74:1d:8f:47:b1:
21:bc:89:34:b0:a0:52:6b:ff:5f:7b:81:0e:57:c1:93:17:48:
41:fe:6c:df:80:7c:3a:4a:ae:da:cc:d2:2b:26:2d:e3:b0:26:
0e:63:02:c9:3c:1e:0d:73:89:51:0c:12:7f:5a:0c:53:7f:3b:
37:54:b3:67:47:e7:f5:71:67:00:d3:f7:1b:6b:83:ea:0f:b8:
b9:73:84:ad:13:ee:5a:ef:d7:56:73:6f:ba:2d:cf:1f:98:9e:
f9:77:4d:2c:00:09:aa:8e:b8:c6:be:f0:e1:e5:c3:fd:d7:9a:
57:bf:1e:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 04:45:02 2026 by rpki-client