
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6FB728BF3CB41A02F3DF55AC259F5DD10B79EE40.cer
File: 6FB728BF3CB41A02F3DF55AC259F5DD10B79EE40.cer (raw, json)
Hash identifier: px8sxfasA5W/Q4e4jsfWmVEP7wQ9BNZnxiKVRTHbyAw=
Subject key identifier: 6F:B7:28:BF:3C:B4:1A:02:F3:DF:55:AC:25:9F:5D:D1:0B:79:EE:40
Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10
Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710
Certificate serial: 3B7C314B109B250EF3403806CA7EF24743A560A7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
Manifest: rsync://rpki-rps.cnnic.cn/repo/A1105370877056253965/0/6FB728BF3CB41A02F3DF55AC259F5DD10B79EE40.mft
caRepository: rsync://rpki-rps.cnnic.cn/repo/A1105370877056253965/0/
Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml
Certificate not before: Sat 09 May 2026 05:44:16 +0000
Certificate not after: Sat 08 May 2027 05:49:16 +0000
Subordinate resources: AS: 63530
IP: 45.121.52.0/24
IP: 45.121.55.0/24
IP: 103.207.184.0/22
IP: 2400:a5a0::/32
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 11:49:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:7c:31:4b:10:9b:25:0e:f3:40:38:06:ca:7e:f2:47:43:a5:60:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710
Validity
Not Before: May 9 05:44:16 2026 GMT
Not After : May 8 05:49:16 2027 GMT
Subject: CN=6FB728BF3CB41A02F3DF55AC259F5DD10B79EE40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:a5:79:7a:ed:44:9e:f2:d9:3e:42:79:46:8d:
08:de:72:df:b4:11:9f:3d:b8:c5:24:9a:f8:ed:20:
4c:a0:fe:5d:d1:8d:7f:b0:f7:e7:e4:35:04:e5:a7:
e1:51:5d:3d:7a:ea:98:8c:90:ea:22:28:a3:2d:32:
12:c0:7b:e2:65:ab:7b:7a:26:62:40:56:f8:08:be:
7c:34:26:24:3d:77:07:df:50:29:95:17:ec:cd:ed:
6e:49:c6:8a:24:e1:0a:0e:4c:1c:b3:07:37:e4:4b:
ac:26:1d:6f:84:5f:ce:85:ac:9a:01:32:3d:f0:ee:
e8:53:2f:ae:08:90:1a:86:4a:99:dd:11:0f:16:84:
82:c6:2e:a2:f0:60:5e:96:17:59:0c:d2:14:d4:4e:
da:32:78:ff:15:e8:ce:a1:77:15:8e:ce:3b:30:a2:
04:d7:f3:e5:a1:f3:f5:0c:7b:07:80:01:cd:55:53:
59:eb:b7:5e:91:5b:17:89:30:47:72:5b:ea:95:e7:
27:17:0a:4b:62:3a:4a:d3:97:b4:bc:38:e0:d1:1d:
7f:27:58:dc:f3:e4:61:6f:e8:22:2d:ae:f3:92:8c:
06:7f:7e:80:18:92:c1:7d:5b:ec:08:61:84:fe:6a:
2c:61:d1:b5:43:0e:a9:66:69:0c:64:82:38:af:80:
c4:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
6F:B7:28:BF:3C:B4:1A:02:F3:DF:55:AC:25:9F:5D:D1:0B:79:EE:40
X509v3 Authority Key Identifier:
keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1105370877056253965/0/
RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1105370877056253965/0/6FB728BF3CB41A02F3DF55AC259F5DD10B79EE40.mft
RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.121.52.0/24
45.121.55.0/24
103.207.184.0/22
IPv6:
2400:a5a0::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
63530
Signature Algorithm: sha256WithRSAEncryption
43:a6:68:36:0d:a6:51:e1:09:77:4b:bc:a9:2e:d3:24:24:d9:
90:f4:17:c1:69:c2:93:f0:1d:59:64:7d:9b:c7:87:b3:b0:0d:
46:e9:ff:6e:05:5f:41:61:20:26:93:ff:d8:22:d9:b6:3d:98:
97:76:1e:97:bf:df:2f:81:7a:1d:25:5d:6f:92:d0:b4:65:78:
aa:15:5e:ac:d6:08:10:dd:d9:c0:4d:00:ac:1c:4e:8b:b0:8b:
e3:a9:f6:d4:9d:ab:64:ba:a2:d7:91:c9:92:fc:0d:04:b6:6b:
97:6b:d5:8f:a8:f1:89:e3:3b:87:b5:3d:00:bc:40:fa:23:ec:
75:94:11:47:28:e0:54:1e:f5:b7:2d:08:59:b6:fb:d4:cd:7a:
ae:94:55:2a:23:49:44:44:87:40:7e:b8:37:6e:38:bc:21:86:
51:ae:d6:8c:85:fa:d0:53:ee:0f:47:7e:ea:aa:26:92:7b:43:
08:f4:85:0a:1f:7e:91:2a:bb:b3:9b:04:d5:d9:34:d7:49:63:
77:b8:3e:d2:e3:70:0b:3c:f0:7a:d3:b8:92:58:3d:bf:98:66:
2d:1f:b6:83:24:3f:ac:0d:dc:60:b6:aa:6c:31:96:e2:01:30:
62:eb:02:77:7c:1a:b4:90:9f:4f:84:94:c2:55:34:5b:88:f4:
eb:b6:72:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 20:17:17 2026 by rpki-client