
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/946192DB6B63164D7FB6B57EE9C4429CE0D5088D.cer
File: 946192DB6B63164D7FB6B57EE9C4429CE0D5088D.cer (raw, json)
Hash identifier: VQdWQRJwCTdPAQoCM4jv42tc2m9bGd/chvklDlUz16w=
Subject key identifier: 94:61:92:DB:6B:63:16:4D:7F:B6:B5:7E:E9:C4:42:9C:E0:D5:08:8D
Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10
Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710
Certificate serial: 6DCE45792126BC40E52D8CD23E0E53846CC77ACE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
Manifest: rsync://rpki-rps.cnnic.cn/repo/A1100981473361526785/0/946192DB6B63164D7FB6B57EE9C4429CE0D5088D.mft
caRepository: rsync://rpki-rps.cnnic.cn/repo/A1100981473361526785/0/
Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml
Certificate not before: Mon 27 Apr 2026 03:02:20 +0000
Certificate not after: Mon 26 Apr 2027 03:07:20 +0000
Subordinate resources: AS: 63571
IP: 36.255.164.0/22
IP: 103.209.200.0/22
IP: 2404:5a80::/32
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 11:49:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:ce:45:79:21:26:bc:40:e5:2d:8c:d2:3e:0e:53:84:6c:c7:7a:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710
Validity
Not Before: Apr 27 03:02:20 2026 GMT
Not After : Apr 26 03:07:20 2027 GMT
Subject: CN=946192DB6B63164D7FB6B57EE9C4429CE0D5088D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:20:64:31:f1:6c:dd:d7:d8:75:c9:c8:9a:b2:
70:06:69:59:d0:8d:4a:10:5e:1f:22:f2:f0:43:52:
5b:3f:c9:b7:bb:24:ce:05:89:54:c2:82:1e:81:30:
a7:8a:b9:6b:ec:87:e5:eb:ce:cb:ce:2a:83:8c:bc:
79:ed:40:0e:84:46:a5:eb:b8:35:05:80:5e:be:9d:
86:46:0f:85:bf:d8:f5:1b:26:d1:1b:e0:20:1a:7b:
0d:1a:d2:17:1b:28:e1:6a:89:53:8c:6a:dc:a4:21:
fe:46:3d:82:db:30:2b:dd:ac:a8:35:a3:61:79:7e:
94:4e:f8:f8:9a:c5:7f:d3:90:d3:be:d7:00:ef:20:
7f:b7:61:c8:2c:1e:79:28:c5:4d:64:2b:07:05:d3:
1a:72:e7:3d:6f:b4:9d:4d:01:38:52:8f:19:6b:45:
45:21:69:c9:c7:3f:38:1b:1e:70:fb:ab:34:cc:3f:
e9:64:c6:ef:fe:05:c7:6f:6a:25:10:f1:a9:23:9a:
55:3e:9c:dc:fe:64:43:f9:cd:00:50:57:88:19:f4:
a4:26:27:50:33:b1:4b:b4:da:3e:2f:62:41:ec:0c:
80:90:5a:a9:5d:47:2e:13:07:4b:f0:2c:f8:48:1f:
b2:96:69:86:e0:74:f9:c9:be:c6:fa:bf:96:40:4b:
93:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
94:61:92:DB:6B:63:16:4D:7F:B6:B5:7E:E9:C4:42:9C:E0:D5:08:8D
X509v3 Authority Key Identifier:
keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1100981473361526785/0/
RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1100981473361526785/0/946192DB6B63164D7FB6B57EE9C4429CE0D5088D.mft
RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
36.255.164.0/22
103.209.200.0/22
IPv6:
2404:5a80::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
63571
Signature Algorithm: sha256WithRSAEncryption
36:01:74:70:05:7e:14:e4:41:8c:50:17:2d:9d:2d:a3:40:92:
42:16:aa:e0:6f:2e:a3:be:96:5b:08:39:97:df:12:df:3c:07:
4c:df:4a:8e:3e:a8:58:8c:be:28:fa:d1:7d:0a:ff:5b:f5:85:
5d:73:91:d9:a4:78:26:8a:69:a2:bf:e6:ad:a1:31:76:0c:75:
e7:e3:ec:59:5e:94:6d:d7:aa:7c:2b:19:ea:29:a0:1e:5e:d4:
31:8e:85:9e:62:86:2f:04:37:df:3b:4e:7b:6b:3e:71:bf:57:
1f:da:c6:9b:40:52:66:51:eb:0a:74:15:e1:d4:4b:68:30:f7:
96:d9:5b:99:b9:e4:7f:67:bc:b7:07:fe:aa:45:fc:8d:ed:11:
9c:ee:9a:55:9d:b5:a9:5c:15:f8:5f:b0:e5:fc:02:dc:34:a3:
a5:f3:38:8a:ae:0d:c4:d8:c6:47:65:9a:88:ce:93:d4:5f:17:
6d:85:d2:af:ac:11:4a:a0:87:a6:0e:c0:ed:d0:90:33:16:df:
e3:6b:68:32:a4:44:b4:97:89:cb:84:d7:0f:6a:0b:19:95:b0:
4c:bc:d9:1a:c0:68:8d:7c:f6:f0:4b:66:2d:f0:cc:ca:ce:63:
41:a6:6a:ca:32:12:60:d4:97:1b:37:9d:b5:90:41:1f:0d:1f:
31:4a:ea:cd
-----BEGIN CERTIFICATE-----
MIIF2DCCBMCgAwIBAgIUbc5FeSEmvEDlLYzSPg5ThGzHes4wDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw
M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDQyNzAzMDIyMFoX
DTI3MDQyNjAzMDcyMFowMzExMC8GA1UEAxMoOTQ2MTkyREI2QjYzMTY0RDdGQjZC
NTdFRTlDNDQyOUNFMEQ1MDg4RDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALYgZDHxbN3X2HXJyJqycAZpWdCNShBeHyLy8ENSWz/Jt7skzgWJVMKCHoEw
p4q5a+yH5evOy84qg4y8ee1ADoRGpeu4NQWAXr6dhkYPhb/Y9Rsm0RvgIBp7DRrS
Fxso4WqJU4xq3KQh/kY9gtswK92sqDWjYXl+lE74+JrFf9OQ077XAO8gf7dhyCwe
eSjFTWQrBwXTGnLnPW+0nU0BOFKPGWtFRSFpycc/OBsecPurNMw/6WTG7/4Fx29q
JRDxqSOaVT6c3P5kQ/nNAFBXiBn0pCYnUDOxS7TaPi9iQewMgJBaqV1HLhMHS/As
+EgfspZphuB0+cm+xvq/lkBLk58CAwEAAaOCAsswggLHMA8GA1UdEwEB/wQFMAMB
Af8wHQYDVR0OBBYEFJRhkttrYxZNf7a1funEQpzg1QiNMB8GA1UdIwQYMBaAFKVu
hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig
ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw
OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE
NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB
BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu
Y24vcmVwby9BMTEwMDk4MTQ3MzM2MTUyNjc4NS8wLzBuBggrBgEFBQcwCoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMTAwOTgxNDczMzYxNTI2Nzg1
LzAvOTQ2MTkyREI2QjYzMTY0RDdGQjZCNTdFRTlDNDQyOUNFMEQ1MDg4RC5tZnQw
OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp
ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwNAYIKwYBBQUH
AQcBAf8EJTAjMBIEAgABMAwDBAIk/6QDBAJn0cgwDQQCAAIwBwMFACQEWoAwGgYI
KwYBBQUHAQgBAf8ECzAJoAcwBQIDAPhTMA0GCSqGSIb3DQEBCwUAA4IBAQA2AXRw
BX4U5EGMUBctnS2jQJJCFqrgby6jvpZbCDmX3xLfPAdM30qOPqhYjL4o+tF9Cv9b
9YVdc5HZpHgmimmiv+atoTF2DHXn4+xZXpRt16p8KxnqKaAeXtQxjoWeYoYvBDff
O057az5xv1cf2sabQFJmUesKdBXh1EtoMPeW2VuZueR/Z7y3B/6qRfyN7RGc7ppV
nbWpXBX4X7Dl/ALcNKOl8ziKrg3E2MZHZZqIzpPUXxdthdKvrBFKoIemDsDt0JAz
Ft/ja2gypES0l4nLhNcPagsZlbBMvNkawGiNfPbwS2Yt8MzKzmNBpmrKMhJg1Jcb
N521kEEfDR8xSurN
-----END CERTIFICATE-----
Generated at Wed May 13 20:17:10 2026 by rpki-client