
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E31DF68687AB9050D1CF11727D6D9D126E30704C.cer
File: E31DF68687AB9050D1CF11727D6D9D126E30704C.cer (raw, json)
Hash identifier: /+EQ6gecrs720JexHsLD7COKIP1Qxg3LTR5pQ9NVX7o=
Subject key identifier: E3:1D:F6:86:87:AB:90:50:D1:CF:11:72:7D:6D:9D:12:6E:30:70:4C
Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10
Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710
Certificate serial: 6812096DA727701C5FF9F878E6B5C897AED225C8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
Manifest: rsync://rpki-rps.cnnic.cn/repo/A1132595094541565997/1/E31DF68687AB9050D1CF11727D6D9D126E30704C.mft
caRepository: rsync://rpki-rps.cnnic.cn/repo/A1132595094541565997/1/
Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml
Certificate not before: Thu 23 Jul 2026 08:43:36 +0000
Certificate not after: Thu 22 Jul 2027 08:48:36 +0000
Subordinate resources: AS: 137752
IP: 2402:6960::/32
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Jul 2026 04:12:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:12:09:6d:a7:27:70:1c:5f:f9:f8:78:e6:b5:c8:97:ae:d2:25:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710
Validity
Not Before: Jul 23 08:43:36 2026 GMT
Not After : Jul 22 08:48:36 2027 GMT
Subject: CN=E31DF68687AB9050D1CF11727D6D9D126E30704C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:28:3f:46:ec:a8:b0:97:7e:8f:1f:81:f9:f8:
40:fe:34:61:48:6f:f2:6c:a7:4c:3c:d2:2b:b5:82:
c4:58:52:6a:0c:94:f0:5f:fc:2c:df:dc:7a:ec:39:
63:8d:a9:05:16:7f:06:e9:45:04:40:e5:fa:69:f7:
d5:83:86:fb:0f:15:42:86:aa:58:94:9f:23:b9:e2:
45:c2:ce:84:e9:81:10:d0:81:ac:49:20:97:4e:2c:
c8:b8:0f:2e:79:9c:21:03:ba:bb:fc:a8:da:c8:a1:
21:34:83:ac:62:ca:e3:a0:1f:7c:d0:24:80:8f:bc:
ea:d8:6c:27:3f:3a:7c:7a:b2:70:0b:cb:d3:06:bf:
19:10:e6:84:e0:79:49:05:05:b5:de:cf:30:17:fc:
5d:11:8f:41:ab:e5:10:cd:91:0e:df:ab:88:85:05:
16:db:fe:87:b5:1f:40:eb:c9:4a:d8:94:6c:0e:27:
7b:d7:80:6c:77:c4:26:01:0f:91:d7:f3:66:6b:44:
02:bf:d8:60:ed:2d:fd:d6:fa:ba:22:d2:2c:fb:bd:
7d:fc:29:86:bc:6c:a6:ef:25:45:d8:b8:8e:f7:b7:
51:0e:37:18:ed:f1:a1:04:66:bd:1d:aa:36:8e:22:
f5:33:4a:05:17:7f:6a:db:fb:0b:8a:51:e3:3b:a3:
e0:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
E3:1D:F6:86:87:AB:90:50:D1:CF:11:72:7D:6D:9D:12:6E:30:70:4C
X509v3 Authority Key Identifier:
keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1132595094541565997/1/
RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1132595094541565997/1/E31DF68687AB9050D1CF11727D6D9D126E30704C.mft
RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2402:6960::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
137752
Signature Algorithm: sha256WithRSAEncryption
13:d7:13:4a:7d:e2:ff:29:c8:53:f6:3d:7b:0c:a6:1a:15:e5:
7d:5f:81:ed:27:c2:84:aa:7f:93:cb:4c:d4:1b:13:aa:03:45:
6c:71:a8:13:16:79:cb:b4:27:4f:2a:18:ee:aa:99:3d:b7:76:
7a:3b:64:9a:55:95:d5:47:9e:c9:1f:04:3c:c9:c8:82:da:95:
40:49:24:7d:a7:6a:37:f7:0f:ad:96:53:db:22:cf:42:94:a3:
77:5e:13:63:53:5b:1a:df:7f:20:91:75:de:1f:11:9c:33:fe:
83:99:95:10:3c:9b:4a:60:16:92:f2:81:e7:0d:38:8e:14:c3:
df:17:8d:22:f2:7d:72:9b:b0:b7:31:d7:e4:ae:5a:1f:5c:e5:
34:27:8e:92:f7:f9:a1:ce:a1:ed:9a:be:7f:ab:a1:cb:7a:1d:
c6:32:6f:78:f1:8e:e8:30:93:24:2b:63:52:5e:9c:fb:fe:a1:
d5:d8:d8:11:e8:74:56:05:41:e5:b1:06:d6:60:8d:de:0d:5e:
77:fd:e6:ee:62:d7:78:2b:c7:4e:aa:f7:eb:99:50:8c:d1:70:
23:97:37:45:d1:4f:a0:bf:af:ff:0d:2a:4d:84:f4:a3:7d:56:
72:80:8b:1a:12:f2:6d:14:08:c5:02:30:ad:d8:bc:ac:a0:18:
8d:1e:8b:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:45:24 2026 by rpki-client