Certificate
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BD26FB8F2F9D7A4F51682070766EBD8D2306733B.cer
File: BD26FB8F2F9D7A4F51682070766EBD8D2306733B.cer (raw, json)
Hash identifier: zfFHQcDDli+UrSq42yYaYnqJ294SjnXRnMs08B6FbRo=
Subject key identifier: BD:26:FB:8F:2F:9D:7A:4F:51:68:20:70:76:6E:BD:8D:23:06:73:3B
Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10
Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710
Certificate serial: 01042231320659D57F730209C017B2399F4E327A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
Manifest: rsync://rpki-rps.cnnic.cn/repo/A1106489019321024529/0/BD26FB8F2F9D7A4F51682070766EBD8D2306733B.mft
caRepository: rsync://rpki-rps.cnnic.cn/repo/A1106489019321024529/0/
Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml
Certificate not before: Tue 12 May 2026 07:47:20 +0000
Certificate not after: Tue 11 May 2027 07:52:20 +0000
Subordinate resources: IP: 45.114.96.0/22
IP: 45.123.132.0/22
IP: 103.54.48.0/22
IP: 103.63.248.0/22
IP: 103.74.56.0/21
IP: 103.80.176.0/21
IP: 106.3.16.0/20
IP: 106.3.192.0/20
IP: 110.173.32.0/20
IP: 114.115.0.0/17
IP: 122.112.32.0/19
IP: 122.115.0.0/20
IP: 122.115.224.0/20
IP: 203.100.192.0/20
IP: 2400:55c0::/32
IP: 2400:5640::/32
IP: 2407:2280::/32
IP: 2407:2380::/32
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 11:49:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:04:22:31:32:06:59:d5:7f:73:02:09:c0:17:b2:39:9f:4e:32:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710
Validity
Not Before: May 12 07:47:20 2026 GMT
Not After : May 11 07:52:20 2027 GMT
Subject: CN=BD26FB8F2F9D7A4F51682070766EBD8D2306733B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:8d:a0:6a:37:9f:fd:da:0c:34:6d:14:00:05:
ca:c9:3b:95:63:45:9b:20:35:41:e6:8e:c4:73:3c:
1d:69:10:e3:eb:63:f3:c2:d3:51:c6:35:72:99:d9:
ee:7c:46:27:12:f0:b5:1d:68:51:49:4e:cf:ed:c8:
f1:0f:59:9f:24:48:41:99:37:3e:a0:68:4a:48:08:
57:54:0c:9b:a8:f8:8b:67:8e:0f:cb:43:e9:db:e7:
14:d0:10:e3:a9:80:5a:d4:ae:fd:35:f2:be:8a:eb:
47:3d:8d:10:3e:78:d1:42:fe:2d:68:85:26:9e:4d:
c5:dc:fe:08:1a:b9:9d:49:90:54:61:fa:fa:3b:a2:
e8:0d:bc:e8:f0:ea:7b:c8:30:3a:b4:d7:02:58:74:
c0:a1:88:da:a2:65:5a:d5:88:43:8e:37:85:be:09:
dd:ca:e0:71:3d:cb:dc:87:2a:3b:30:34:79:bb:41:
af:6b:c0:97:9f:de:b2:05:86:a9:74:f7:7a:d0:6e:
74:a0:87:bd:b8:ab:a4:27:1f:2e:56:b9:16:76:c0:
71:26:fd:d6:df:7b:02:04:db:f3:bc:8b:89:ad:7b:
e6:12:76:0c:3a:78:79:c6:5b:e0:aa:00:c8:62:87:
27:c4:49:db:7f:a8:87:29:a7:87:88:41:2c:c7:97:
0c:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
BD:26:FB:8F:2F:9D:7A:4F:51:68:20:70:76:6E:BD:8D:23:06:73:3B
X509v3 Authority Key Identifier:
keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1106489019321024529/0/
RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1106489019321024529/0/BD26FB8F2F9D7A4F51682070766EBD8D2306733B.mft
RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.114.96.0/22
45.123.132.0/22
103.54.48.0/22
103.63.248.0/22
103.74.56.0/21
103.80.176.0/21
106.3.16.0/20
106.3.192.0/20
110.173.32.0/20
114.115.0.0/17
122.112.32.0/19
122.115.0.0/20
122.115.224.0/20
203.100.192.0/20
IPv6:
2400:55c0::/32
2400:5640::/32
2407:2280::/32
2407:2380::/32
Signature Algorithm: sha256WithRSAEncryption
67:2f:80:5b:d9:d7:56:cc:4d:a4:80:fe:8e:09:8e:f1:1a:1d:
1c:4f:2c:71:2b:09:8d:9d:dd:d4:dd:50:0a:93:30:10:be:5b:
48:47:c5:ba:db:74:b1:44:fb:68:cb:1d:cc:93:4e:42:e5:04:
02:f0:f2:22:5d:24:eb:2b:b0:a9:04:47:e8:80:d2:b9:62:02:
de:3e:40:b7:51:33:3b:b3:fe:e4:e3:03:2f:c0:55:cd:8f:da:
6a:67:1f:fb:ed:b1:b9:34:6d:c5:40:84:b3:97:77:d8:1f:ab:
75:20:41:fa:d1:e8:c2:ce:2f:68:88:f3:f5:74:68:43:c2:56:
cd:a0:48:e6:7e:8a:d5:18:25:41:15:ae:38:8d:72:6b:ca:a3:
dc:4c:69:35:eb:25:8d:78:02:1b:47:11:03:07:81:dd:e2:bf:
db:b3:aa:11:c3:fd:fe:42:8c:7f:96:a6:18:0a:76:a5:79:c0:
f6:e7:72:58:34:41:9b:af:91:b5:89:1c:85:53:f4:eb:19:40:
96:76:57:8f:e5:41:9a:31:c2:f7:d8:03:71:20:a6:e4:df:2a:
6b:a6:f5:4a:37:1e:41:b6:78:bd:f7:5c:a4:aa:fa:c7:b3:c8:
ab:bc:66:92:e6:49:5c:32:94:1e:8a:ab:b4:6d:5c:ca:44:0d:
75:33:fa:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 16:43:29 2026 by rpki-client