
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CB4F6DC5C4ABEF79AFBFEECF18BA6D82A1D90CC8.cer
File: CB4F6DC5C4ABEF79AFBFEECF18BA6D82A1D90CC8.cer (raw, json)
Hash identifier: R0AQMHOHudihQU9XijDEIbi91ELK6ZUwf56P9LTAS9Y=
Subject key identifier: CB:4F:6D:C5:C4:AB:EF:79:AF:BF:EE:CF:18:BA:6D:82:A1:D9:0C:C8
Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10
Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710
Certificate serial: 5A39FAE332F2D1FC800FE7E252FE2077FCDD66C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
Manifest: rsync://rpki-rps.cnnic.cn/repo/A1098537405054451714/0/CB4F6DC5C4ABEF79AFBFEECF18BA6D82A1D90CC8.mft
caRepository: rsync://rpki-rps.cnnic.cn/repo/A1098537405054451714/0/
Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml
Certificate not before: Mon 20 Apr 2026 09:10:29 +0000
Certificate not after: Mon 19 Apr 2027 09:15:29 +0000
Subordinate resources: AS: 131523 -- 131524
IP: 103.97.60.0/22
IP: 2401:82c0::/32
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 11:49:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:39:fa:e3:32:f2:d1:fc:80:0f:e7:e2:52:fe:20:77:fc:dd:66:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710
Validity
Not Before: Apr 20 09:10:29 2026 GMT
Not After : Apr 19 09:15:29 2027 GMT
Subject: CN=CB4F6DC5C4ABEF79AFBFEECF18BA6D82A1D90CC8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:d1:28:94:ec:c4:7c:54:a3:0d:f0:b2:b6:a8:
72:35:af:03:1d:78:1e:f3:4f:9f:f4:3a:2d:c4:41:
3b:70:f3:40:93:c4:42:f6:1d:5e:8d:6d:e7:8e:f2:
7b:ee:b7:16:d9:4c:22:a1:97:be:d1:68:5d:46:40:
29:ea:6e:37:dd:c3:05:e6:a2:50:af:c7:08:f9:fc:
21:1f:f1:d7:7f:ed:cd:5c:c1:7d:33:cc:b8:7d:d0:
35:86:25:06:28:c9:eb:0d:a9:7b:ec:25:34:d8:07:
3c:ad:aa:48:84:93:8c:0b:e4:20:e5:e4:4f:09:5b:
f4:c0:14:0f:3a:68:4b:f0:17:10:45:88:14:f0:b3:
b9:e8:ac:6d:6d:b9:c0:4f:3e:66:34:00:35:df:2b:
21:f3:68:d5:bb:73:28:50:2a:0d:e2:e1:c1:56:6a:
5a:54:1a:98:4d:02:eb:d1:31:2e:90:a9:63:e2:c1:
3d:d2:0a:22:dd:81:20:82:37:33:0b:a7:0e:75:94:
67:4c:40:20:f6:40:76:49:f8:d3:47:a2:45:9c:fe:
9b:63:6b:81:64:16:19:d2:45:a9:0d:be:a6:20:5b:
48:c9:9c:b8:96:e4:6e:73:2b:ef:c3:4d:5b:c4:ad:
e6:d0:6b:f6:e5:12:0f:fe:f1:f9:29:ec:c9:19:9d:
bb:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
CB:4F:6D:C5:C4:AB:EF:79:AF:BF:EE:CF:18:BA:6D:82:A1:D9:0C:C8
X509v3 Authority Key Identifier:
keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1098537405054451714/0/
RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1098537405054451714/0/CB4F6DC5C4ABEF79AFBFEECF18BA6D82A1D90CC8.mft
RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.97.60.0/22
IPv6:
2401:82c0::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
131523-131524
Signature Algorithm: sha256WithRSAEncryption
82:94:f3:a8:20:fc:3a:e4:d0:4a:d0:91:77:03:1e:2f:56:41:
8f:03:60:31:85:5c:4c:69:cc:5a:a8:f8:06:6f:f7:31:af:02:
1a:64:77:6e:cd:30:fd:04:74:cd:0c:9b:31:bc:b5:f2:5d:08:
1e:fc:56:06:74:68:b1:a7:1e:d8:b0:00:cb:ce:be:4f:01:ff:
5b:9a:a1:b7:b3:9e:46:16:81:8d:b1:65:ee:1f:72:f5:9f:26:
0c:2b:0d:9c:a7:94:5f:12:ba:94:08:ca:6e:70:eb:e8:3f:d5:
f9:d2:af:32:69:dc:68:45:76:3f:2c:ae:e2:5d:7e:89:74:78:
a1:45:df:0d:a0:15:69:1d:f3:9b:21:3b:6f:8f:8e:2c:97:58:
95:14:d7:e6:a6:07:d4:e2:60:17:f8:cd:94:72:9d:b3:4f:d6:
3b:fa:4e:bc:a8:a1:ce:d0:dd:34:c9:72:78:85:89:60:14:93:
a6:1c:1a:d2:96:77:5d:14:e6:6f:46:41:22:6f:56:07:19:bd:
2e:79:3f:d0:11:eb:b7:2d:ec:37:11:c1:32:47:b5:df:dc:fd:
b4:80:cc:6f:10:bb:84:80:eb:8a:f5:a2:44:e8:71:ae:c9:9a:
47:bc:fb:65:61:ec:46:12:9d:af:63:fa:58:25:7a:91:11:bd:
56:a2:a1:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 17:09:34 2026 by rpki-client