Certificate
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/40D86726DB14F9E5E06610928FF6C77226F14874.cer
File: 40D86726DB14F9E5E06610928FF6C77226F14874.cer (raw, json)
Hash identifier: CnYMM71m/lp1KCnzVxvLC96RLrAjN8LWst1Q6dcg9bw=
Subject key identifier: 40:D8:67:26:DB:14:F9:E5:E0:66:10:92:8F:F6:C7:72:26:F1:48:74
Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10
Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710
Certificate serial: 748546ADA37E46F7592EA9D93F7B931A0572082F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
Manifest: rsync://rpki-rps.cnnic.cn/repo/A1106503155660619793/0/40D86726DB14F9E5E06610928FF6C77226F14874.mft
caRepository: rsync://rpki-rps.cnnic.cn/repo/A1106503155660619793/0/
Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml
Certificate not before: Tue 12 May 2026 08:43:32 +0000
Certificate not after: Tue 11 May 2027 08:48:32 +0000
Subordinate resources: AS: 63614
IP: 27.0.164.0/22
IP: 43.227.140.0/22
IP: 45.127.144.0/21
IP: 103.25.24.0/22
IP: 103.79.192.0/21
IP: 103.79.208.0/22
IP: 103.196.88.0/21
IP: 114.113.224.0/20
IP: 122.115.32.0/19
IP: 2400:3f40::/32
IP: 2400:3fc0::/32
IP: 2400:4540::/32
IP: 2402:9f80::/32
IP: 2402:e880::/32
IP: 2402:e980::/32
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 11:49:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:85:46:ad:a3:7e:46:f7:59:2e:a9:d9:3f:7b:93:1a:05:72:08:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710
Validity
Not Before: May 12 08:43:32 2026 GMT
Not After : May 11 08:48:32 2027 GMT
Subject: CN=40D86726DB14F9E5E06610928FF6C77226F14874
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:c2:cd:a8:66:63:fb:51:9a:31:cb:84:ea:9c:
4a:d5:b3:f4:02:10:21:8b:36:40:00:16:7d:53:71:
ca:1c:9c:fc:87:18:f0:86:11:0a:a2:eb:f9:9b:6d:
43:aa:4d:84:38:5d:72:f1:a9:9f:37:5c:d9:75:10:
5a:21:1f:4b:6f:f0:9e:4d:77:b6:79:1c:09:dc:0d:
32:f9:40:29:7c:39:3e:a4:b0:a0:77:ed:3d:56:86:
82:27:15:8c:3b:9b:6a:14:cd:a7:b3:a2:86:33:14:
5d:a0:cf:17:a6:f5:ab:5c:21:a4:33:6d:a7:b4:ab:
b7:d9:41:0b:9a:b8:ba:1e:3f:30:03:1e:4e:06:4a:
90:52:3d:7c:9a:37:49:f5:47:bf:51:0a:0e:d0:af:
63:8f:6c:16:11:42:0e:9e:a5:0e:e2:f0:fa:42:a8:
e1:e3:59:72:b9:2f:25:61:d7:5d:cd:18:57:2a:8e:
25:8d:5f:7e:fa:4d:cd:35:ea:5b:41:87:fc:9d:14:
7b:48:74:d1:44:b5:c1:b4:dc:30:ee:4e:4d:db:af:
ff:26:ab:bb:68:4e:18:f8:47:fe:bc:76:af:74:be:
af:58:a9:3c:31:31:3b:3d:d4:c2:de:fa:82:0b:b1:
34:0f:fc:2c:e5:79:a2:83:8f:bd:35:2c:08:95:b8:
04:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
40:D8:67:26:DB:14:F9:E5:E0:66:10:92:8F:F6:C7:72:26:F1:48:74
X509v3 Authority Key Identifier:
keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1106503155660619793/0/
RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1106503155660619793/0/40D86726DB14F9E5E06610928FF6C77226F14874.mft
RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
27.0.164.0/22
43.227.140.0/22
45.127.144.0/21
103.25.24.0/22
103.79.192.0/21
103.79.208.0/22
103.196.88.0/21
114.113.224.0/20
122.115.32.0/19
IPv6:
2400:3f40::/32
2400:3fc0::/32
2400:4540::/32
2402:9f80::/32
2402:e880::/32
2402:e980::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
63614
Signature Algorithm: sha256WithRSAEncryption
3e:9a:1b:80:33:1a:9e:f0:4d:f3:06:b9:05:74:e0:8b:0b:01:
e6:70:67:85:b5:59:b0:a5:b8:3f:0b:36:1c:5d:71:61:de:c9:
09:14:a6:54:2b:d5:78:db:18:36:c2:26:ec:72:ac:00:ee:1e:
3e:f4:7d:82:30:3a:ad:9a:82:0a:e6:3f:b8:34:c8:76:e4:c7:
39:a1:99:c8:92:a1:8f:39:7c:0b:09:9b:62:23:c2:a5:eb:1c:
7d:eb:37:c6:04:9d:42:5c:61:8d:d4:9b:21:89:33:b1:17:fa:
df:e3:81:ab:94:ae:6c:d7:bf:0b:17:eb:b3:ef:79:a9:cf:ee:
f1:14:58:2b:25:e0:44:11:ce:3e:3d:41:13:94:b8:36:99:96:
fb:30:df:1d:c2:55:29:3c:f9:fa:3f:82:ea:a7:3c:ab:14:d2:
fb:d3:08:15:71:60:f5:b1:b1:4f:44:56:5c:d5:21:84:d4:cc:
00:dd:c3:27:15:ef:1c:2e:a4:0a:cd:d4:98:82:1e:47:1f:de:
88:21:f4:77:e7:dd:69:9d:32:8a:7e:c4:e1:21:42:4b:44:d0:
08:79:b2:86:c3:04:d2:aa:7b:a6:9e:3f:d5:3f:7e:bb:02:2c:
dc:d3:89:ef:a6:26:93:d4:10:c8:7a:be:21:79:2a:20:ad:3e:
40:46:cc:85
-----BEGIN CERTIFICATE-----
MIIGJjCCBQ6gAwIBAgIUdIVGraN+RvdZLqnZP3uTGgVyCC8wDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw
M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDUxMjA4NDMzMloX
DTI3MDUxMTA4NDgzMlowMzExMC8GA1UEAxMoNDBEODY3MjZEQjE0RjlFNUUwNjYx
MDkyOEZGNkM3NzIyNkYxNDg3NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAL/CzahmY/tRmjHLhOqcStWz9AIQIYs2QAAWfVNxyhyc/IcY8IYRCqLr+Ztt
Q6pNhDhdcvGpnzdc2XUQWiEfS2/wnk13tnkcCdwNMvlAKXw5PqSwoHftPVaGgicV
jDubahTNp7OihjMUXaDPF6b1q1whpDNtp7Srt9lBC5q4uh4/MAMeTgZKkFI9fJo3
SfVHv1EKDtCvY49sFhFCDp6lDuLw+kKo4eNZcrkvJWHXXc0YVyqOJY1ffvpNzTXq
W0GH/J0Ue0h00US1wbTcMO5OTduv/yaru2hOGPhH/rx2r3S+r1ipPDExOz3Uwt76
gguxNA/8LOV5ooOPvTUsCJW4BNkCAwEAAaOCAxkwggMVMA8GA1UdEwEB/wQFMAMB
Af8wHQYDVR0OBBYEFEDYZybbFPnl4GYQko/2x3Im8Uh0MB8GA1UdIwQYMBaAFKVu
hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig
ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw
OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE
NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB
BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu
Y24vcmVwby9BMTEwNjUwMzE1NTY2MDYxOTc5My8wLzBuBggrBgEFBQcwCoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMTA2NTAzMTU1NjYwNjE5Nzkz
LzAvNDBEODY3MjZEQjE0RjlFNUUwNjYxMDkyOEZGNkM3NzIyNkYxNDg3NC5tZnQw
OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp
ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwgYEGCCsGAQUF
BwEHAQH/BHIwcDA8BAIAATA2AwQCGwCkAwQCK+OMAwQDLX+QAwQCZxkYAwQDZ0/A
AwQCZ0/QAwQDZ8RYAwQEcnHgAwQFenMgMDAEAgACMCoDBQAkAD9AAwUAJAA/wAMF
ACQARUADBQAkAp+AAwUAJALogAMFACQC6YAwGgYIKwYBBQUHAQgBAf8ECzAJoAcw
BQIDAPh+MA0GCSqGSIb3DQEBCwUAA4IBAQA+mhuAMxqe8E3zBrkFdOCLCwHmcGeF
tVmwpbg/CzYcXXFh3skJFKZUK9V42xg2wibscqwA7h4+9H2CMDqtmoIK5j+4NMh2
5Mc5oZnIkqGPOXwLCZtiI8Kl6xx96zfGBJ1CXGGN1JshiTOxF/rf44GrlK5s178L
F+uz73mpz+7xFFgrJeBEEc4+PUETlLg2mZb7MN8dwlUpPPn6P4LqpzyrFNL70wgV
cWD1sbFPRFZc1SGE1MwA3cMnFe8cLqQKzdSYgh5HH96IIfR3591pnTKKfsThIUJL
RNAIebKGwwTSqnumnj/VP367Aizc04nvpiaT1BDIer4heSogrT5ARsyF
-----END CERTIFICATE-----
Generated at Wed May 13 14:58:11 2026 by rpki-client