
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BD637A9BB5A01C3B165E9F166CAB6CD626B43206.cer
File: BD637A9BB5A01C3B165E9F166CAB6CD626B43206.cer (raw, json)
Hash identifier: zQc4Q41t3D46pfW/m5bRTufsYwn/LfBxr30/XNlnxyQ=
Subject key identifier: BD:63:7A:9B:B5:A0:1C:3B:16:5E:9F:16:6C:AB:6C:D6:26:B4:32:06
Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10
Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710
Certificate serial: 5243B06A8788515A8CA1A31FAACBCEFA3EBCD289
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
Manifest: rsync://rpki-rps.cnnic.cn/repo/A1155344907926241331/0/BD637A9BB5A01C3B165E9F166CAB6CD626B43206.mft
caRepository: rsync://rpki-rps.cnnic.cn/repo/A1155344907926241331/0/
Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml
Certificate not before: Sat 10 Oct 2026 01:25:32 +0000
Certificate not after: Sat 09 Oct 2027 01:30:32 +0000
Subordinate resources: AS: 155000
AS: 155002
IP: 163.52.246.0/23
IP: 2402:7820::/32
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 15 Oct 2026 01:08:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:43:b0:6a:87:88:51:5a:8c:a1:a3:1f:aa:cb:ce:fa:3e:bc:d2:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710
Validity
Not Before: Oct 10 01:25:32 2026 GMT
Not After : Oct 9 01:30:32 2027 GMT
Subject: CN=BD637A9BB5A01C3B165E9F166CAB6CD626B43206
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:4e:d1:12:ff:0f:4a:2a:f1:05:ca:41:85:96:
b0:e7:96:6b:79:99:2d:fe:09:ff:5e:22:17:b6:fa:
dc:f2:57:06:b2:af:50:14:80:52:b7:df:e3:c7:83:
ad:07:43:68:fb:f2:11:52:3c:89:6d:a7:09:45:9d:
cb:57:72:5a:e2:01:4b:a7:8f:b1:0a:d9:a2:ea:45:
8d:1d:ce:4e:30:03:e6:7e:06:e7:82:4f:ce:a2:ed:
f6:db:6f:9e:b1:d1:c5:94:85:c3:ad:00:ac:45:89:
f1:49:4e:48:48:b3:c8:5c:21:c5:66:8d:fb:22:3a:
54:de:d3:4b:a8:e1:55:1c:fb:2a:f4:f6:c9:f3:37:
b6:dc:be:a9:1d:b3:5e:a5:d1:2b:ae:25:75:d6:b7:
b4:1e:db:26:bf:be:be:ac:0e:33:6c:5f:c4:48:ac:
4e:52:6a:35:37:47:65:14:ec:b0:30:14:da:b4:7f:
f6:06:23:7a:d0:b3:73:93:ba:96:7d:de:94:38:61:
e3:47:82:e9:2a:c8:80:f6:61:81:81:c9:cc:13:fe:
da:f1:54:cc:96:59:4b:d2:3c:31:1d:3b:c5:2c:bd:
cd:5c:eb:07:75:a2:5a:e7:20:3e:e1:47:36:2a:ef:
3a:78:b9:6a:bf:06:e7:cc:c3:50:5e:bb:f8:66:94:
c6:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
BD:63:7A:9B:B5:A0:1C:3B:16:5E:9F:16:6C:AB:6C:D6:26:B4:32:06
X509v3 Authority Key Identifier:
keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1155344907926241331/0/
RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1155344907926241331/0/BD637A9BB5A01C3B165E9F166CAB6CD626B43206.mft
RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.52.246.0/23
IPv6:
2402:7820::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
155000
155002
Signature Algorithm: sha256WithRSAEncryption
34:0b:68:02:0c:11:23:3b:12:ae:92:e2:76:94:fb:12:21:11:
56:4f:77:c3:bb:ae:71:9c:f2:fd:2d:18:8c:7c:ea:f0:a8:48:
a7:23:32:22:58:37:54:2b:b8:2e:20:95:8a:a6:f2:17:e3:f3:
ce:2b:75:cc:41:8a:cb:af:61:1a:97:82:a7:34:a7:3f:bd:19:
89:b6:ec:dd:20:c2:9b:0b:a6:80:7f:f6:00:18:29:0e:d5:c1:
60:f8:5e:b5:6a:ce:0d:07:ce:c1:b1:dd:5a:21:12:a6:18:dd:
1b:c8:29:46:0c:f1:5e:2a:0e:6b:b0:f0:a3:0c:73:fc:ce:bd:
6d:71:06:9c:30:bf:88:cf:79:3e:c7:a5:49:9f:7a:67:6a:98:
0b:0e:b3:0f:81:4f:ff:7c:2b:44:51:b7:39:43:45:fe:0e:02:
d1:de:cd:1d:89:5b:67:20:37:52:35:b7:61:57:61:c5:a8:ad:
b7:75:f1:ce:a7:07:39:20:f7:68:f6:6b:90:ca:c1:7a:6c:c3:
4d:a9:27:c9:f0:81:5d:1c:a7:36:3a:3c:91:bd:b9:01:87:18:
03:0c:30:ef:c4:c0:70:9a:ba:6c:9b:14:70:98:86:19:79:0c:
07:3d:d6:1b:f3:23:65:56:9a:b1:93:f4:63:d1:da:22:85:72:
5e:3a:96:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 04:17:43 2026 by rpki-client