
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1055390775090675715/0/315716FC30019F539EC77C931D00EAAABC7835C2.cer
File: 315716FC30019F539EC77C931D00EAAABC7835C2.cer (raw, json)
Hash identifier: BJdmCEXK1JryuPV9b2Wy0LnaCtrGXKHcPE+2VKRyif8=
Subject key identifier: 31:57:16:FC:30:01:9F:53:9E:C7:7C:93:1D:00:EA:AA:BC:78:35:C2
Authority key identifier: CB:02:14:A5:C4:04:D6:F8:40:43:3B:12:0C:AC:BB:5B:8C:59:E6:13
Certificate issuer: /CN=A9162E3D0001/serialNumber=CB0214A5C404D6F840433B120CACBB5B8C59E613
Certificate serial: 3DE74B75110AC6C09D9F3DA11146C433C1405A17
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
Manifest: rsync://rpki-rps.cnnic.cn/repo/A1139095267102949421/0/315716FC30019F539EC77C931D00EAAABC7835C2.mft
caRepository: rsync://rpki-rps.cnnic.cn/repo/A1139095267102949421/0/
Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml
Certificate not before: Mon 10 Aug 2026 07:12:57 +0000
Certificate not after: Mon 09 Aug 2027 07:17:57 +0000
Subordinate resources: IP: 160.236.250.0/23
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 06 Sep 2026 10:41:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:e7:4b:75:11:0a:c6:c0:9d:9f:3d:a1:11:46:c4:33:c1:40:5a:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0001, serialNumber=CB0214A5C404D6F840433B120CACBB5B8C59E613
Validity
Not Before: Aug 10 07:12:57 2026 GMT
Not After : Aug 9 07:17:57 2027 GMT
Subject: CN=315716FC30019F539EC77C931D00EAAABC7835C2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:a7:6f:6c:e3:da:f3:54:15:d0:e5:01:c3:be:
d8:3d:dd:6c:46:c5:66:8f:e1:b7:56:39:8d:5a:07:
bd:23:fe:03:9f:d2:e5:70:24:41:86:a2:a0:98:3e:
04:01:c6:d0:46:34:90:8f:0a:b5:d6:3d:82:b0:31:
97:b2:93:8e:c5:a7:42:dd:14:a8:5e:aa:4a:22:74:
1c:94:5f:64:a8:4c:d7:43:04:ad:71:ee:f9:aa:15:
5f:94:22:30:3d:fa:0a:75:f2:f0:5e:99:f8:7a:05:
30:25:0d:b0:af:79:6e:89:de:4e:a4:d5:63:0c:b6:
d7:b6:91:99:9d:64:93:3b:d1:60:98:e6:83:3b:86:
c0:20:99:b5:9a:e9:49:44:63:65:bc:40:38:24:b5:
42:9e:1a:5b:ef:38:6e:15:bc:bf:76:0b:a4:61:8b:
13:70:a1:fe:d2:74:4f:a3:d5:cf:34:c0:cc:d4:b5:
60:c3:1a:84:42:71:a8:96:b8:47:d3:ef:9e:51:8f:
dc:01:61:f1:47:13:d0:2e:dc:f6:96:4e:6d:b6:01:
56:18:f1:fc:5e:12:75:fa:6c:6f:a6:04:59:e0:4b:
51:be:f8:25:43:e7:b4:46:1e:13:9a:c9:48:41:45:
8d:97:1e:b2:e1:9e:89:37:6b:6c:b2:3e:44:81:59:
a1:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
31:57:16:FC:30:01:9F:53:9E:C7:7C:93:1D:00:EA:AA:BC:78:35:C2
X509v3 Authority Key Identifier:
keyid:CB:02:14:A5:C4:04:D6:F8:40:43:3B:12:0C:AC:BB:5B:8C:59:E6:13
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1139095267102949421/0/
RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1139095267102949421/0/315716FC30019F539EC77C931D00EAAABC7835C2.mft
RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
160.236.250.0/23
Signature Algorithm: sha256WithRSAEncryption
65:db:64:77:2e:c6:4f:9d:39:04:ab:7d:64:48:c1:86:8b:42:
1b:75:f7:84:6a:7c:68:15:06:f9:58:59:13:da:47:5d:6e:f9:
f8:7a:36:d3:ad:ec:60:fa:38:b4:21:f3:74:8c:00:45:db:d6:
b9:e4:ad:4a:6f:e3:4c:fa:a4:9b:78:51:22:c8:c4:6d:d1:77:
78:d2:ee:90:c0:83:9b:99:fb:5a:57:20:a7:70:ab:e3:47:11:
b8:26:b7:7e:6f:af:aa:8a:5c:a5:8c:7d:fc:59:fb:5c:be:32:
b5:d5:7e:aa:1e:95:55:10:c3:33:3e:66:e4:03:68:00:d6:79:
36:ef:a5:0b:16:83:32:59:42:52:16:8c:d9:78:97:90:aa:7e:
59:38:9b:51:a6:aa:09:27:64:77:c8:cf:f0:44:ef:b1:43:5b:
d2:45:b9:f6:67:36:0e:5d:c4:6e:e4:b1:22:1c:4a:b3:42:62:
41:87:05:37:a2:af:08:ae:86:50:23:ce:4c:3b:5e:ca:5d:57:
ca:65:97:08:04:81:bb:eb:42:5b:00:93:61:bf:b6:20:78:97:
a3:70:02:4e:29:b5:55:18:08:c0:c1:be:2e:2a:44:b9:2a:4a:
5f:7b:fc:6e:7e:8b:b5:72:c1:e6:15:a9:73:4c:15:2d:fb:77:
3f:22:7c:30
-----BEGIN CERTIFICATE-----
MIIFpzCCBI+gAwIBAgIUPedLdREKxsCdnz2hEUbEM8FAWhcwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhDQjAyMTRBNUM0
MDRENkY4NDA0MzNCMTIwQ0FDQkI1QjhDNTlFNjEzMB4XDTI2MDgxMDA3MTI1N1oX
DTI3MDgwOTA3MTc1N1owMzExMC8GA1UEAxMoMzE1NzE2RkMzMDAxOUY1MzlFQzc3
QzkzMUQwMEVBQUFCQzc4MzVDMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAL+nb2zj2vNUFdDlAcO+2D3dbEbFZo/ht1Y5jVoHvSP+A5/S5XAkQYaioJg+
BAHG0EY0kI8KtdY9grAxl7KTjsWnQt0UqF6qSiJ0HJRfZKhM10MErXHu+aoVX5Qi
MD36CnXy8F6Z+HoFMCUNsK95boneTqTVYwy217aRmZ1kkzvRYJjmgzuGwCCZtZrp
SURjZbxAOCS1Qp4aW+84bhW8v3YLpGGLE3Ch/tJ0T6PVzzTAzNS1YMMahEJxqJa4
R9PvnlGP3AFh8UcT0C7c9pZObbYBVhjx/F4Sdfpsb6YEWeBLUb74JUPntEYeE5rJ
SEFFjZcesuGeiTdrbLI+RIFZoYkCAwEAAaOCApowggKWMA8GA1UdEwEB/wQFMAMB
Af8wHQYDVR0OBBYEFDFXFvwwAZ9Tnsd8kx0A6qq8eDXCMB8GA1UdIwQYMBaAFMsC
FKXEBNb4QEM7Egysu1uMWeYTMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig
ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw
OTA2NzU3MTUvMC9DQjAyMTRBNUM0MDRENkY4NDA0MzNCMTIwQ0FDQkI1QjhDNTlF
NjEzLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CM0EyNEYyMDFENjYxMUUyOEFDODgzN0M3
MkZEMUZGMi95d0lVcGNRRTF2aEFRenNTREt5N1c0eFo1aE0uY2VyMIIBAQYIKwYB
BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu
Y24vcmVwby9BMTEzOTA5NTI2NzEwMjk0OTQyMS8wLzBuBggrBgEFBQcwCoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMTM5MDk1MjY3MTAyOTQ5NDIx
LzAvMzE1NzE2RkMzMDAxOUY1MzlFQzc3QzkzMUQwMEVBQUFCQzc4MzVDMi5tZnQw
OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp
ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAGg7PowDQYJKoZIhvcNAQELBQADggEBAGXbZHcu
xk+dOQSrfWRIwYaLQht194RqfGgVBvlYWRPaR11u+fh6NtOt7GD6OLQh83SMAEXb
1rnkrUpv40z6pJt4USLIxG3Rd3jS7pDAg5uZ+1pXIKdwq+NHEbgmt35vr6qKXKWM
ffxZ+1y+MrXVfqoelVUQwzM+ZuQDaADWeTbvpQsWgzJZQlIWjNl4l5Cqflk4m1Gm
qgknZHfIz/BE77FDW9JFufZnNg5dxG7ksSIcSrNCYkGHBTeirwiuhlAjzkw7Xspd
V8pllwgEgbvrQlsAk2G/tiB4l6NwAk4ptVUYCMDBvi4qRLkqSl97/G5+i7VyweYV
qXNMFS37dz8ifDA=
-----END CERTIFICATE-----
Generated at Sat Sep 5 06:20:49 2026 by rpki-client