
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7E97B2869243296A265D98767FC04F1998D143DE.cer
File: 7E97B2869243296A265D98767FC04F1998D143DE.cer (raw, json)
Hash identifier: ciW/9pw5Js7fgbqPsHx1oKHCenOp3pcD0jG1hj4FCtc=
Subject key identifier: 7E:97:B2:86:92:43:29:6A:26:5D:98:76:7F:C0:4F:19:98:D1:43:DE
Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10
Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710
Certificate serial: 2CAB51BA72262886C5903447E381D8D8C91F2590
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
Manifest: rsync://rpki-rps.cnnic.cn/repo/A1101012581839011843/0/7E97B2869243296A265D98767FC04F1998D143DE.mft
caRepository: rsync://rpki-rps.cnnic.cn/repo/A1101012581839011843/0/
Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml
Certificate not before: Mon 27 Apr 2026 05:05:58 +0000
Certificate not after: Mon 26 Apr 2027 05:10:58 +0000
Subordinate resources: AS: 63696 -- 63697
IP: 103.233.136.0/22
IP: 2404:71c0::/32
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 11:49:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:ab:51:ba:72:26:28:86:c5:90:34:47:e3:81:d8:d8:c9:1f:25:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710
Validity
Not Before: Apr 27 05:05:58 2026 GMT
Not After : Apr 26 05:10:58 2027 GMT
Subject: CN=7E97B2869243296A265D98767FC04F1998D143DE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:97:86:06:8d:94:25:3f:63:e2:45:1c:02:ef:
07:2d:fa:a5:b7:33:6a:3f:54:69:aa:cf:d1:e9:b6:
47:eb:c7:3e:d9:98:60:91:d7:cd:3d:b1:35:cf:79:
a3:4a:0f:94:c7:17:e6:75:3c:dd:74:93:a6:0a:11:
c1:b7:8a:b8:2a:fa:3d:4d:0d:24:a5:45:57:c6:ed:
65:b6:e8:78:aa:1e:e0:b3:87:d1:20:a8:17:3b:36:
c7:94:95:9b:a4:4d:58:03:3d:dc:da:f5:7c:cc:6f:
c4:79:c2:99:44:81:1f:f5:d3:b1:88:e8:e3:94:f2:
98:9c:89:27:4f:76:9f:09:a7:31:05:6c:72:f7:fe:
40:71:c9:ad:12:c1:17:88:38:43:73:b9:62:29:8a:
19:86:e6:3f:4a:a5:c2:00:ac:a1:19:51:fc:0b:7a:
bb:63:22:0d:03:42:9e:98:30:0f:69:61:42:22:5b:
52:c0:63:12:04:60:5e:ec:ca:0c:2d:00:a3:88:d0:
c4:6c:2e:44:ed:12:b0:13:8d:6a:ca:31:fd:23:b7:
cd:a5:77:99:8c:fe:74:6a:db:c1:0c:54:d8:a5:aa:
2f:02:c3:e8:a1:be:3c:e1:3f:61:ac:fd:82:b4:ec:
23:1b:48:c3:31:ba:b0:95:c3:a5:e4:93:88:91:1e:
26:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
7E:97:B2:86:92:43:29:6A:26:5D:98:76:7F:C0:4F:19:98:D1:43:DE
X509v3 Authority Key Identifier:
keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1101012581839011843/0/
RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1101012581839011843/0/7E97B2869243296A265D98767FC04F1998D143DE.mft
RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.233.136.0/22
IPv6:
2404:71c0::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
63696-63697
Signature Algorithm: sha256WithRSAEncryption
34:06:ba:ca:4d:b1:c7:04:a6:50:5d:f3:f3:47:0f:3b:ea:c4:
05:6e:b1:c4:a9:4c:d4:b2:c1:18:5c:93:76:4a:c3:6c:99:fe:
ae:d6:0b:d3:c2:68:ea:53:74:8c:6f:4a:05:22:00:29:c6:dd:
7b:54:3f:69:aa:94:e3:25:c1:7a:86:a1:da:c3:7e:d0:5d:df:
d0:09:7e:b8:d2:9c:4d:31:4f:9d:64:dc:8d:19:5b:cc:b8:ef:
29:d9:b8:cb:59:d6:70:64:f1:b2:11:d0:98:55:c0:86:ff:ef:
d1:96:63:73:24:76:91:3e:87:63:7b:8f:52:ad:1e:c0:7b:72:
0f:91:34:1a:58:19:51:b0:e3:8a:5b:30:36:8e:4c:c6:f3:7b:
6a:15:51:80:75:78:73:34:88:c5:0a:a4:06:51:e9:a6:fe:84:
87:3e:b0:7a:00:5b:d2:43:9c:8a:f7:c9:88:c0:dd:f6:4e:ba:
8d:93:99:b1:42:54:39:fb:68:19:78:e8:34:cd:98:bd:c5:f5:
3e:d8:e8:5f:27:10:97:a9:20:fe:9b:09:f4:36:2e:c1:96:51:
34:76:4d:58:d7:a4:02:5c:8a:d4:7f:79:e1:f8:6e:8f:45:a6:
d4:6d:29:88:41:03:b2:bb:a4:a2:bc:b7:e5:26:ff:c3:10:f0:
f9:a2:37:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 19:39:23 2026 by rpki-client