Certificate
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/78A1695C768D09B6CA7E1978308E54BE84FEBAAE.cer
File: 78A1695C768D09B6CA7E1978308E54BE84FEBAAE.cer (raw, json)
Hash identifier: C8ncFR2FtI8neJC9MkYTQfQBtQikK9fkp+0Yc0yHBco=
Subject key identifier: 78:A1:69:5C:76:8D:09:B6:CA:7E:19:78:30:8E:54:BE:84:FE:BA:AE
Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10
Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710
Certificate serial: 17B98F2EC9EEE1DF379CD8FFAED8AD2A901A91A9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
Manifest: rsync://rpki-rps.cnnic.cn/repo/A1100955007496224770/0/78A1695C768D09B6CA7E1978308E54BE84FEBAAE.mft
caRepository: rsync://rpki-rps.cnnic.cn/repo/A1100955007496224770/0/
Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml
Certificate not before: Mon 27 Apr 2026 01:17:09 +0000
Certificate not after: Mon 26 Apr 2027 01:22:09 +0000
Subordinate resources: AS: 9800
AS: 38348
AS: 38351
IP: 61.240.0.0/14
IP: 116.78.0.0/15
IP: 116.128.0.0/10
IP: 210.72.160.0/19
IP: 210.74.64.0/19
IP: 210.77.32.0/19
IP: 210.78.160.0 -- 210.78.255.255
IP: 211.90.0.0 -- 211.97.255.255
IP: 211.99.64.0/19
IP: 211.144.224.0 -- 211.145.255.255
IP: 211.147.32.0/19
IP: 211.155.32.0/19
IP: 211.167.176.0/20
IP: 218.246.224.0/20
IP: 220.192.0.0/12
IP: 2001:e88::/32
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 11:49:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:b9:8f:2e:c9:ee:e1:df:37:9c:d8:ff:ae:d8:ad:2a:90:1a:91:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710
Validity
Not Before: Apr 27 01:17:09 2026 GMT
Not After : Apr 26 01:22:09 2027 GMT
Subject: CN=78A1695C768D09B6CA7E1978308E54BE84FEBAAE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:c8:23:d3:82:59:a3:d7:c5:a4:59:f6:8a:9c:
b3:43:e9:9a:5b:93:e5:a7:36:03:78:5b:2e:cd:12:
9f:56:cf:58:d3:b4:78:e6:18:77:e7:8c:6c:9a:63:
ca:3d:2f:dc:33:23:5f:a6:72:4b:e8:15:3e:d1:b8:
30:40:01:21:e9:92:e7:6a:94:1b:26:4f:a0:6d:9d:
09:fc:6b:7a:c4:f3:c0:73:cc:4f:0a:a7:23:f4:71:
64:e4:c1:1f:eb:d5:50:57:e9:a0:3a:67:81:e5:87:
81:75:c1:d7:e7:5c:c8:37:95:d1:15:7b:5b:7a:ca:
43:53:cd:2b:b5:b7:f8:0f:9f:8c:58:f3:95:6f:3a:
5d:a2:85:02:f1:73:19:4f:bf:f0:15:25:3f:71:d8:
4b:cb:03:f7:42:3a:e8:0b:92:f2:d9:3c:c8:63:6a:
37:8a:ae:41:e6:d4:2d:62:80:5f:11:c9:56:7e:41:
76:c2:a3:56:99:ad:49:e4:dd:60:aa:6e:bf:fd:81:
90:79:ee:42:35:ca:87:36:23:be:21:44:d2:9c:9b:
33:a4:08:ed:56:24:8b:d2:77:d4:69:d6:d1:67:9a:
00:db:2a:e4:b4:82:e8:53:e5:a1:4d:07:8d:5a:82:
f2:e7:3d:32:3c:c8:7d:3d:fb:05:c2:8a:b8:8b:bf:
d1:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
78:A1:69:5C:76:8D:09:B6:CA:7E:19:78:30:8E:54:BE:84:FE:BA:AE
X509v3 Authority Key Identifier:
keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1100955007496224770/0/
RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1100955007496224770/0/78A1695C768D09B6CA7E1978308E54BE84FEBAAE.mft
RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
61.240.0.0/14
116.78.0.0/15
116.128.0.0/10
210.72.160.0/19
210.74.64.0/19
210.77.32.0/19
210.78.160.0-210.78.255.255
211.90.0.0-211.97.255.255
211.99.64.0/19
211.144.224.0-211.145.255.255
211.147.32.0/19
211.155.32.0/19
211.167.176.0/20
218.246.224.0/20
220.192.0.0/12
IPv6:
2001:e88::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
9800
38348
38351
Signature Algorithm: sha256WithRSAEncryption
79:1a:5b:48:5a:b6:91:1c:f4:43:32:4d:2b:3f:06:f2:d9:35:
cf:68:90:15:8c:0d:32:81:ef:30:5d:88:27:3a:35:50:07:35:
f0:ed:36:af:92:5d:b2:4d:4a:09:5b:3b:a3:f0:7b:9b:14:c0:
67:33:65:0f:5b:ec:f6:80:b9:05:30:bc:08:a1:e0:31:d9:01:
f1:a7:de:2c:69:6e:b5:f4:7d:83:00:8b:3d:1f:f9:5c:fa:31:
dd:97:a0:05:69:b0:d7:b7:8b:9d:57:43:25:0a:40:6b:8e:a2:
72:b6:ca:df:6b:d2:a2:eb:18:13:ab:11:e9:b2:33:0d:60:10:
0d:ef:bc:57:84:a9:df:90:3d:f7:a8:53:d4:f9:87:dd:a4:89:
49:76:77:fb:14:b2:d7:6d:4c:08:4f:86:56:c2:ad:0d:2a:9e:
4a:03:66:57:79:67:d4:17:3f:c3:c8:58:38:6f:bb:2d:4e:07:
d7:09:06:ea:77:d2:ca:f5:65:d9:58:58:d2:bf:7b:9c:6f:16:
8e:af:aa:dd:17:91:e2:9d:12:83:cc:7f:39:4f:5b:98:f1:c8:
85:72:14:29:fa:32:3e:d8:4e:60:25:45:06:5a:5c:ad:b3:8b:
c0:9d:ef:c7:96:09:fa:97:9d:04:0f:da:76:04:27:20:01:ec:
68:d7:de:fe
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUF7mPLsnu4d83nNj/rtitKpAakakwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw
M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDQyNzAxMTcwOVoX
DTI3MDQyNjAxMjIwOVowMzExMC8GA1UEAxMoNzhBMTY5NUM3NjhEMDlCNkNBN0Ux
OTc4MzA4RTU0QkU4NEZFQkFBRTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMrII9OCWaPXxaRZ9oqcs0PpmluT5ac2A3hbLs0Sn1bPWNO0eOYYd+eMbJpj
yj0v3DMjX6ZyS+gVPtG4MEABIemS52qUGyZPoG2dCfxresTzwHPMTwqnI/RxZOTB
H+vVUFfpoDpngeWHgXXB1+dcyDeV0RV7W3rKQ1PNK7W3+A+fjFjzlW86XaKFAvFz
GU+/8BUlP3HYS8sD90I66AuS8tk8yGNqN4quQebULWKAXxHJVn5BdsKjVpmtSeTd
YKpuv/2BkHnuQjXKhzYjviFE0pybM6QI7VYki9J31GnW0WeaANsq5LSC6FPloU0H
jVqC8uc9MjzIfT37BcKKuIu/0ekCAwEAAaOCAzUwggMxMA8GA1UdEwEB/wQFMAMB
Af8wHQYDVR0OBBYEFHihaVx2jQm2yn4ZeDCOVL6E/rquMB8GA1UdIwQYMBaAFKVu
hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig
ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw
OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE
NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB
BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu
Y24vcmVwby9BMTEwMDk1NTAwNzQ5NjIyNDc3MC8wLzBuBggrBgEFBQcwCoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMTAwOTU1MDA3NDk2MjI0Nzcw
LzAvNzhBMTY5NUM3NjhEMDlCNkNBN0UxOTc4MzA4RTU0QkU4NEZFQkFBRS5tZnQw
OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp
ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwgZQGCCsGAQUF
BwEHAQH/BIGEMIGBMHAEAgABMGoDAwI98AMDAXROAwMGdIADBAXSSKADBAXSSkAD
BAXSTSAwCwMEBdJOoAMDANJOMAoDAwHTWgMDAdNgAwQF02NAMAsDBAXTkOADAwHT
kAMEBdOTIAMEBdObIAMEBNOnsAMEBNr24AMDBNzAMA0EAgACMAcDBQAgAQ6IMCMG
CCsGAQUFBwEIAQH/BBQwEqAQMA4CAiZIAgMAlcwCAwCVzzANBgkqhkiG9w0BAQsF
AAOCAQEAeRpbSFq2kRz0QzJNKz8G8tk1z2iQFYwNMoHvMF2IJzo1UAc18O02r5Jd
sk1KCVs7o/B7mxTAZzNlD1vs9oC5BTC8CKHgMdkB8afeLGlutfR9gwCLPR/5XPox
3ZegBWmw17eLnVdDJQpAa46icrbK32vSousYE6sR6bIzDWAQDe+8V4Sp35A996hT
1PmH3aSJSXZ3+xSy121MCE+GVsKtDSqeSgNmV3ln1Bc/w8hYOG+7LU4H1wkG6nfS
yvVl2VhY0r97nG8Wjq+q3ReR4p0Sg8x/OU9bmPHIhXIUKfoyPthOYCVFBlpcrbOL
wJ3vx5YJ+pedBA/adgQnIAHsaNfe/g==
-----END CERTIFICATE-----
Generated at Wed May 13 20:17:38 2026 by rpki-client