
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8E37F0EFBE28817DE0E635BA8FCBD756CD76EE8C.cer
File: 8E37F0EFBE28817DE0E635BA8FCBD756CD76EE8C.cer (raw, json)
Hash identifier: 9oN9c9kRR03z9McetUeLjn4HQ5GAi0LLagjlHkLBx7w=
Subject key identifier: 8E:37:F0:EF:BE:28:81:7D:E0:E6:35:BA:8F:CB:D7:56:CD:76:EE:8C
Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10
Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710
Certificate serial: 291A001D7677E949CEE11760C0709ED4F8C196B8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
Manifest: rsync://rpki-rps.cnnic.cn/repo/A1130438714586038313/0/8E37F0EFBE28817DE0E635BA8FCBD756CD76EE8C.mft
caRepository: rsync://rpki-rps.cnnic.cn/repo/A1130438714586038313/0/
Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml
Certificate not before: Fri 17 Jul 2026 09:54:53 +0000
Certificate not after: Fri 16 Jul 2027 09:59:53 +0000
Subordinate resources: AS: 137784 -- 137785
IP: 103.119.224.0/22
IP: 2403:4b40::/32
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Jul 2026 22:27:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:1a:00:1d:76:77:e9:49:ce:e1:17:60:c0:70:9e:d4:f8:c1:96:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710
Validity
Not Before: Jul 17 09:54:53 2026 GMT
Not After : Jul 16 09:59:53 2027 GMT
Subject: CN=8E37F0EFBE28817DE0E635BA8FCBD756CD76EE8C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:cb:c7:65:d0:d6:e2:35:16:10:65:aa:8c:e8:
fd:7e:46:87:f0:8b:64:31:bf:7c:88:16:c6:da:2e:
9d:17:91:5f:a1:ee:06:88:da:6e:74:dd:e3:ff:55:
d3:1a:61:12:fd:ac:f0:81:11:0e:86:06:f9:bb:ff:
82:4f:48:be:b6:46:2f:2c:fe:1b:8c:1b:6a:53:26:
e3:b3:3c:a1:19:c9:ed:6e:a0:d9:43:2a:46:dd:c5:
b8:27:f6:f4:cb:5c:99:9d:b2:0f:27:29:13:d6:0f:
7d:46:90:74:67:ca:8f:83:46:c4:f9:98:c8:70:b6:
84:02:66:82:b5:86:be:b3:df:bb:f8:c1:4c:4f:d1:
4f:8e:86:04:f3:67:98:2a:59:d4:38:1f:2c:fd:34:
0b:b6:04:5e:b7:08:c6:d2:a9:fd:96:11:56:a4:fd:
2a:fc:3b:62:f4:f6:b5:bd:8a:a2:2c:a0:e7:38:e1:
82:ef:26:68:5b:e3:9c:d8:df:68:d6:1f:08:ac:d7:
c3:f2:49:4d:9d:a0:9b:5b:7d:89:d2:54:4d:e5:99:
2c:9b:a5:53:2e:8f:f0:cc:65:5f:05:27:6f:52:92:
05:bb:95:23:e8:73:c3:61:98:a3:f7:9d:5b:4d:a1:
15:dd:08:02:73:11:b6:94:36:db:ff:5e:79:31:9b:
2f:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
8E:37:F0:EF:BE:28:81:7D:E0:E6:35:BA:8F:CB:D7:56:CD:76:EE:8C
X509v3 Authority Key Identifier:
keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1130438714586038313/0/
RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1130438714586038313/0/8E37F0EFBE28817DE0E635BA8FCBD756CD76EE8C.mft
RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.119.224.0/22
IPv6:
2403:4b40::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
137784-137785
Signature Algorithm: sha256WithRSAEncryption
58:46:63:d7:32:e6:60:0e:3d:ee:7d:d3:2d:0b:b1:16:a1:30:
85:c1:cf:ff:02:31:f9:43:7a:0e:1a:95:2c:81:94:0a:bd:6b:
95:02:fb:e3:00:7c:61:bc:e8:9b:7a:f6:9d:11:d0:10:c6:f8:
c3:d0:1e:21:76:20:21:55:b9:79:6a:c2:97:7a:67:f4:32:94:
3b:41:5c:25:c9:20:a2:3e:e1:c0:c2:2f:c4:98:8b:b8:90:9b:
5a:fd:f7:2f:f1:26:b1:89:a9:da:7b:23:4a:5d:b5:1f:33:9f:
d4:ab:1e:06:7b:d2:ac:25:66:74:f2:12:8b:43:61:31:f6:6e:
9b:e1:c6:f2:fd:6c:7f:b2:d4:4a:14:a4:7b:0e:4f:55:fd:5a:
93:36:7f:d9:0a:b9:9c:f3:bb:d8:34:5a:ae:6c:fc:37:22:e5:
a6:6e:54:69:33:56:3b:62:a8:11:80:da:8b:78:0e:7e:a8:74:
6d:77:63:b7:6d:3f:e1:60:1d:cb:fe:aa:72:37:7b:7e:c9:01:
e0:d6:7c:78:9c:c1:34:36:ad:14:e4:49:2e:7d:99:4a:51:f1:
ab:94:c8:62:a4:ab:d0:c3:b3:1b:ee:1f:c9:46:20:8d:50:3f:
32:91:fc:90:98:a6:d4:35:52:d5:d9:d2:0e:d6:19:32:39:47:
b8:dc:9c:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 22:37:59 2026 by rpki-client