Certificate
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7F335EE4A33D07C42C38C45EC648A6F91CE4E95D.cer
File: 7F335EE4A33D07C42C38C45EC648A6F91CE4E95D.cer (raw, json)
Hash identifier: LSqNm3MKq8HOLqDp+8VfcuadKWzlDcIwkcpRHbL0P9g=
Subject key identifier: 7F:33:5E:E4:A3:3D:07:C4:2C:38:C4:5E:C6:48:A6:F9:1C:E4:E9:5D
Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10
Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710
Certificate serial: 3624AEFC78D343F13AC7A067C702220BD5F984E1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
Manifest: rsync://rpki-rps.cnnic.cn/repo/A1106220441690701841/0/7F335EE4A33D07C42C38C45EC648A6F91CE4E95D.mft
caRepository: rsync://rpki-rps.cnnic.cn/repo/A1106220441690701841/0/
Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml
Certificate not before: Mon 11 May 2026 14:00:07 +0000
Certificate not after: Mon 10 May 2027 14:05:07 +0000
Subordinate resources: AS: 9394
AS: 24138
AS: 24425
AS: 38370
AS: 63711 -- 63716
IP: 36.192.0.0 -- 36.205.255.255
IP: 36.207.0.0 -- 36.211.255.255
IP: 36.222.0.0/15
IP: 43.247.240.0/22
IP: 61.232.0.0 -- 61.237.255.255
IP: 101.144.0.0/12
IP: 103.3.128.0/22
IP: 110.96.0.0/14
IP: 110.101.0.0 -- 110.115.255.255
IP: 110.117.0.0 -- 110.127.255.255
IP: 110.192.0.0 -- 110.198.255.255
IP: 110.200.0.0 -- 110.217.255.255
IP: 110.220.0.0/14
IP: 114.208.0.0/14
IP: 115.104.0.0/14
IP: 115.121.0.0 -- 115.123.255.255
IP: 115.180.0.0/16
IP: 116.217.0.0/16
IP: 116.219.0.0/16
IP: 118.146.0.0/15
IP: 118.204.0.0/16
IP: 118.245.0.0/16
IP: 120.90.0.0/15
IP: 121.70.0.0/16
IP: 122.64.0.0 -- 122.93.255.255
IP: 122.95.0.0/16
IP: 123.64.0.0 -- 123.76.255.255
IP: 123.78.0.0 -- 123.95.255.255
IP: 124.201.0.0/16
IP: 211.98.0.0/16
IP: 221.172.0.0/14
IP: 222.32.0.0 -- 222.44.255.255
IP: 222.46.0.0 -- 222.49.127.255
IP: 222.50.0.0 -- 222.59.127.255
IP: 222.60.0.0/14
IP: 2001:e08::/32
IP: 240a:8000::/21
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 09:37:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:24:ae:fc:78:d3:43:f1:3a:c7:a0:67:c7:02:22:0b:d5:f9:84:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710
Validity
Not Before: May 11 14:00:07 2026 GMT
Not After : May 10 14:05:07 2027 GMT
Subject: CN=7F335EE4A33D07C42C38C45EC648A6F91CE4E95D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:aa:5a:49:b2:26:15:d2:d3:a4:09:a4:54:35:
aa:7a:92:73:c3:1e:ad:58:03:4f:26:1d:ef:92:bf:
f4:6a:36:77:e8:c6:ac:4d:d9:05:ec:eb:1d:55:b5:
cc:bb:87:f1:14:0c:19:73:40:2f:82:72:43:37:97:
01:0e:6a:25:7c:22:d4:49:2c:fd:b6:00:7b:77:2c:
2c:ad:59:5a:f0:f1:17:22:ac:06:5f:9d:84:f3:6e:
08:a7:db:33:af:f2:7d:3b:6a:99:e0:95:7a:3f:3c:
5e:a7:eb:0a:a6:34:e3:79:18:1d:a1:7d:2c:79:5b:
b6:58:bf:5a:ca:48:21:2e:e0:e9:e1:75:5c:3f:10:
99:0f:6d:18:61:5e:a9:c3:d6:0c:c8:fa:dc:a4:be:
a9:a1:4a:cb:8d:9a:e6:32:c6:26:64:34:e2:af:ba:
48:b0:b9:c9:f9:ab:b7:52:e4:9f:60:a4:d0:59:10:
32:6f:39:f9:61:7e:04:35:e3:8c:a8:7e:6b:3e:54:
f9:43:6f:81:8d:f6:86:6d:19:b8:82:e4:a0:cb:bf:
6d:a0:0a:f6:43:2f:33:f2:59:aa:21:5e:2d:82:1c:
4f:86:fd:e0:79:4f:9e:02:34:0c:e6:99:8b:cf:71:
03:23:02:20:92:69:8a:23:7c:c0:27:4a:98:05:1e:
2e:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
7F:33:5E:E4:A3:3D:07:C4:2C:38:C4:5E:C6:48:A6:F9:1C:E4:E9:5D
X509v3 Authority Key Identifier:
keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1106220441690701841/0/
RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1106220441690701841/0/7F335EE4A33D07C42C38C45EC648A6F91CE4E95D.mft
RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
36.192.0.0-36.205.255.255
36.207.0.0-36.211.255.255
36.222.0.0/15
43.247.240.0/22
61.232.0.0-61.237.255.255
101.144.0.0/12
103.3.128.0/22
110.96.0.0/14
110.101.0.0-110.115.255.255
110.117.0.0-110.127.255.255
110.192.0.0-110.198.255.255
110.200.0.0-110.217.255.255
110.220.0.0/14
114.208.0.0/14
115.104.0.0/14
115.121.0.0-115.123.255.255
115.180.0.0/16
116.217.0.0/16
116.219.0.0/16
118.146.0.0/15
118.204.0.0/16
118.245.0.0/16
120.90.0.0/15
121.70.0.0/16
122.64.0.0-122.93.255.255
122.95.0.0/16
123.64.0.0-123.76.255.255
123.78.0.0-123.95.255.255
124.201.0.0/16
211.98.0.0/16
221.172.0.0/14
222.32.0.0-222.44.255.255
222.46.0.0-222.49.127.255
222.50.0.0-222.59.127.255
222.60.0.0/14
IPv6:
2001:e08::/32
240a:8000::/21
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
9394
24138
24425
38370
63711-63716
Signature Algorithm: sha256WithRSAEncryption
1f:99:7b:b0:d0:34:cc:8c:6a:fc:87:5f:19:23:61:7f:f2:cd:
fa:ce:af:33:6c:97:16:d5:fe:5f:f1:f5:d5:ea:aa:16:a8:54:
7c:9e:25:1f:0a:c4:15:28:ef:9a:69:b8:5d:b7:a0:66:a9:9e:
ee:c8:10:47:81:75:49:88:38:58:4b:c4:a0:1b:44:2c:b5:29:
6a:a5:88:a5:be:c6:0c:11:1e:4f:9a:5a:d9:b4:b5:81:59:6f:
5a:8d:33:8e:e7:3d:50:2a:d3:d8:b3:1d:9a:f5:3c:60:82:eb:
31:0c:48:54:44:00:7a:0d:0a:4c:12:2a:ce:a9:ca:52:ec:2b:
d2:36:9a:80:80:84:4e:b2:a5:5b:a5:56:d2:63:82:73:a9:88:
02:6c:cc:8e:72:7f:5f:5b:eb:0c:66:69:39:02:ba:2b:67:fc:
7f:6b:5b:20:1f:81:2c:0c:c7:18:56:39:79:56:ff:54:80:9b:
c6:d0:19:17:aa:a1:9c:f3:f7:00:29:56:a7:48:44:74:66:2a:
61:e4:fe:76:91:d4:70:b9:29:cc:20:66:26:2b:75:96:07:91:
d7:0f:55:29:f3:d8:b2:3c:80:66:65:e1:3a:fe:11:b4:dc:be:
7d:08:6c:25:88:70:94:22:66:9a:ee:11:91:fd:57:83:46:1f:
d7:b6:65:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:43:54 2026 by rpki-client