
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FA453AF3F4AB166551FD4C322D5FD2384364BAEA.cer
File: FA453AF3F4AB166551FD4C322D5FD2384364BAEA.cer (raw, json)
Hash identifier: XPu7jf862xZqsesfub/hcM+4tICBfQw2e6Xf9yJuVrc=
Subject key identifier: FA:45:3A:F3:F4:AB:16:65:51:FD:4C:32:2D:5F:D2:38:43:64:BA:EA
Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10
Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710
Certificate serial: 69CA6F99C9BF6DF70A550A74469BE54CD323C8E0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
Manifest: rsync://rpki-rps.cnnic.cn/repo/A1106055295731236875/0/FA453AF3F4AB166551FD4C322D5FD2384364BAEA.mft
caRepository: rsync://rpki-rps.cnnic.cn/repo/A1106055295731236875/0/
Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml
Certificate not before: Mon 11 May 2026 03:03:54 +0000
Certificate not after: Mon 10 May 2027 03:08:54 +0000
Subordinate resources: AS: 137780
IP: 103.135.160.0/21
IP: 2403:6740::/32
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 11:49:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:ca:6f:99:c9:bf:6d:f7:0a:55:0a:74:46:9b:e5:4c:d3:23:c8:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710
Validity
Not Before: May 11 03:03:54 2026 GMT
Not After : May 10 03:08:54 2027 GMT
Subject: CN=FA453AF3F4AB166551FD4C322D5FD2384364BAEA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:9a:f1:3f:b2:25:60:22:1c:5f:79:f3:de:26:
53:77:00:b8:60:80:9b:3e:04:85:55:11:05:fe:23:
d4:b6:88:cd:80:cb:d6:c8:1a:a9:be:01:e6:b2:d6:
e6:37:6f:19:60:e4:a5:ba:f3:ac:96:be:27:fd:58:
5f:ec:88:5b:51:2f:09:d6:2e:a5:b4:5d:83:ff:27:
94:87:41:5b:f5:af:cb:14:9d:9a:f2:42:b9:92:26:
da:0f:32:70:f6:36:63:a8:c6:2f:03:9b:0e:4a:56:
4a:c3:da:4b:3e:53:7e:af:62:61:3c:5a:1a:c1:4d:
7c:64:7c:22:79:87:36:4e:4d:32:d9:f3:72:2d:2e:
f8:85:25:f0:0b:2a:b3:10:8e:c8:76:cc:68:f0:a9:
2d:13:14:b5:58:cf:12:60:74:c8:7f:f0:22:20:ec:
74:f4:9c:c2:f2:fd:66:d8:f5:0b:2e:69:b1:1d:c2:
93:a5:2a:9f:2b:b1:34:f0:45:f8:ab:fe:d1:7d:e6:
95:52:92:64:d2:db:f8:a4:2e:2a:c9:80:8d:ac:44:
05:8c:99:81:ff:aa:7b:55:81:1e:73:8b:85:3d:48:
07:df:9f:44:3e:11:3f:4b:2a:4d:fd:e8:12:13:b9:
97:96:15:f8:3b:8e:26:6b:ce:12:16:09:78:57:41:
1b:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
FA:45:3A:F3:F4:AB:16:65:51:FD:4C:32:2D:5F:D2:38:43:64:BA:EA
X509v3 Authority Key Identifier:
keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1106055295731236875/0/
RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1106055295731236875/0/FA453AF3F4AB166551FD4C322D5FD2384364BAEA.mft
RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.135.160.0/21
IPv6:
2403:6740::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
137780
Signature Algorithm: sha256WithRSAEncryption
6b:ff:a1:dc:67:8f:62:a1:cf:00:92:57:29:62:5c:35:c8:63:
e2:2d:6e:70:20:95:f8:c7:d6:af:18:3f:0d:3d:d7:9a:31:11:
ee:20:b5:56:ae:83:a4:ec:b1:8d:93:7a:9b:8d:1e:51:d0:b4:
74:e1:92:de:55:8e:44:46:10:65:d0:ad:a8:2f:dc:f3:9e:b0:
20:2b:cc:d7:6d:bf:1c:fc:55:22:78:c5:ae:8a:8c:15:90:f3:
7f:f9:2e:96:5e:d5:2b:2d:06:33:cb:f1:8b:f5:d0:99:c0:99:
ad:0c:db:8c:7c:00:72:29:64:7b:19:7c:53:65:26:d8:32:cf:
92:b4:32:d1:9e:93:59:f0:9a:29:5a:45:01:53:b6:c6:f9:11:
68:83:fd:55:db:ef:85:ef:0c:50:dc:24:d6:a8:4f:0e:a3:d6:
7a:97:58:bd:83:b1:6e:c0:fe:49:10:32:e7:df:7a:a0:c4:e7:
c3:c0:ca:d7:05:45:7b:37:93:aa:43:ec:8b:d7:c4:79:36:be:
b4:89:1d:8f:d3:4d:56:e9:25:07:5b:72:70:d0:b2:42:9a:39:
20:19:41:5a:50:5a:b3:04:d9:18:5e:94:74:cb:14:10:bc:6d:
2d:73:07:c6:e0:c6:ec:24:07:5d:42:4c:38:c2:6b:25:76:2b:
eb:d0:09:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:40:05 2026 by rpki-client