Certificate
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BDDC344D20BB4907F3D292B6962387327540E65E.cer
File: BDDC344D20BB4907F3D292B6962387327540E65E.cer (raw, json)
Hash identifier: MMAdSHZ6PMyrn/vMP8AiP0flMpbt8za3w23TI826mE4=
Subject key identifier: BD:DC:34:4D:20:BB:49:07:F3:D2:92:B6:96:23:87:32:75:40:E6:5E
Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10
Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710
Certificate serial: 069EAD6B2A1E48470A75B2BE0907B1E260F012AE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
Manifest: rsync://rpki-rps.cnnic.cn/repo/A1105304750166900747/1/BDDC344D20BB4907F3D292B6962387327540E65E.mft
caRepository: rsync://rpki-rps.cnnic.cn/repo/A1105304750166900747/1/
Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml
Certificate not before: Sat 09 May 2026 01:21:30 +0000
Certificate not after: Sat 08 May 2027 01:26:30 +0000
Subordinate resources: AS: 9806
AS: 17780
IP: 58.116.0.0/14
IP: 58.128.0.0/13
IP: 117.106.0.0 -- 117.107.127.255
IP: 117.112.0.0 -- 117.118.127.255
IP: 117.119.0.0/16
IP: 171.84.0.0/21
IP: 211.153.0.0/16
IP: 222.249.0.0/16
IP: 2401:e020::/32
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 11:49:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:9e:ad:6b:2a:1e:48:47:0a:75:b2:be:09:07:b1:e2:60:f0:12:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710
Validity
Not Before: May 9 01:21:30 2026 GMT
Not After : May 8 01:26:30 2027 GMT
Subject: CN=BDDC344D20BB4907F3D292B6962387327540E65E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:5b:fc:28:6f:c1:25:f1:6a:e7:bc:ef:20:82:
f3:d9:c6:d3:04:2f:36:74:07:28:36:34:04:48:de:
7a:e8:d8:ee:2c:c3:41:49:86:c4:a0:9a:a2:08:8b:
9e:a0:2a:e2:11:d9:4a:80:ee:41:19:7f:00:da:c5:
6a:09:1e:25:12:28:7a:f7:53:da:43:29:21:21:2d:
a0:8b:2a:96:57:47:66:41:d5:38:cb:5e:11:54:fc:
04:b4:cc:b7:ab:7c:04:6f:28:d8:b9:f1:fb:60:f3:
b4:d6:91:cb:9a:d5:45:c5:23:a6:54:28:5e:2e:e6:
af:fe:51:04:09:d4:5f:cd:8f:5e:83:91:9f:5c:02:
ef:2d:79:ca:52:d5:fe:e5:cc:6d:7b:e0:c7:4a:d6:
f2:45:e9:96:8c:e5:9e:54:f0:de:c1:0c:36:22:57:
79:34:b5:b4:9a:60:9a:c7:6f:e8:19:74:88:bc:09:
0e:82:17:a5:06:b1:64:18:1b:55:81:6f:7e:23:dd:
c3:d8:92:70:d8:b8:05:29:7b:e3:d3:c1:9f:81:02:
e6:00:19:f5:f7:b7:e5:d9:f7:e1:3f:cb:b3:00:5a:
8d:b2:fc:e7:a1:dd:3f:36:01:4a:33:ba:99:70:d8:
8b:c1:cf:ee:f8:aa:29:31:13:b5:70:47:5a:97:0d:
36:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
BD:DC:34:4D:20:BB:49:07:F3:D2:92:B6:96:23:87:32:75:40:E6:5E
X509v3 Authority Key Identifier:
keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1105304750166900747/1/
RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1105304750166900747/1/BDDC344D20BB4907F3D292B6962387327540E65E.mft
RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
58.116.0.0/14
58.128.0.0/13
117.106.0.0-117.107.127.255
117.112.0.0-117.118.127.255
117.119.0.0/16
171.84.0.0/21
211.153.0.0/16
222.249.0.0/16
IPv6:
2401:e020::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
9806
17780
Signature Algorithm: sha256WithRSAEncryption
98:35:46:70:cb:3d:1e:de:72:ad:0f:c4:2d:2c:16:23:3d:7e:
e4:d7:83:a8:1e:9c:0f:13:90:f6:cf:5d:46:63:aa:e0:00:da:
af:44:a7:ea:f0:b6:90:00:60:50:de:70:97:db:5f:65:36:8c:
7d:5f:9d:3d:34:1b:56:fb:ee:b9:46:2b:6d:69:48:76:3c:0f:
6e:2f:ec:0c:71:f1:f0:90:98:a0:ac:ca:18:5e:51:e8:4c:cb:
3b:78:b5:97:34:0a:43:af:81:d2:81:43:26:ec:0c:98:a3:63:
73:1a:65:d5:3b:93:be:01:90:1e:4c:72:65:a4:c5:fd:aa:63:
28:35:6b:f5:90:5b:ca:36:7e:d0:e2:1f:9c:79:35:79:4e:50:
ad:26:56:c2:3e:39:29:bf:da:4a:21:c8:af:a8:b8:2d:21:6c:
94:3c:a4:ce:01:07:26:54:c7:ab:48:89:66:dd:db:19:42:97:
c1:17:dc:6f:36:6c:d2:10:aa:a3:86:58:45:d9:e0:d2:56:26:
03:55:0a:4c:29:61:b2:61:e2:22:e3:19:15:48:86:6a:83:15:
26:a8:98:dc:f9:15:0c:3f:76:45:f7:f7:eb:5f:48:ce:da:1f:
06:21:06:f6:79:ca:cc:42:dd:ba:99:32:5e:1a:11:4e:a3:af:
a3:63:44:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 16:26:08 2026 by rpki-client