
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/0/E9ED8A9BE8453128BCDA3FDA2A2F98843847BC2F.cer
File: E9ED8A9BE8453128BCDA3FDA2A2F98843847BC2F.cer (raw, json)
Hash identifier: bjfKErnbGK5fmVkpoOzvJu+BgAyUd5fvO4gR2wtOlQQ=
Subject key identifier: E9:ED:8A:9B:E8:45:31:28:BC:DA:3F:DA:2A:2F:98:84:38:47:BC:2F
Authority key identifier: CB:02:14:A5:C4:04:D6:F8:40:43:3B:12:0C:AC:BB:5B:8C:59:E6:13
Certificate issuer: /CN=A9162E3D0001/serialNumber=CB0214A5C404D6F840433B120CACBB5B8C59E613
Certificate serial: 30E533D3C8025FB3A6D9BE24A7C46E41FDA25910
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
Manifest: rsync://rpki-rps.cnnic.cn/repo/A1094488874987552769/0/E9ED8A9BE8453128BCDA3FDA2A2F98843847BC2F.mft
caRepository: rsync://rpki-rps.cnnic.cn/repo/A1094488874987552769/0/
Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml
Certificate not before: Fri 29 May 2026 08:18:50 +0000
Certificate not after: Fri 28 May 2027 08:23:50 +0000
Subordinate resources: IP: 144.79.4.0/23
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 05 Jun 2026 13:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:e5:33:d3:c8:02:5f:b3:a6:d9:be:24:a7:c4:6e:41:fd:a2:59:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0001, serialNumber=CB0214A5C404D6F840433B120CACBB5B8C59E613
Validity
Not Before: May 29 08:18:50 2026 GMT
Not After : May 28 08:23:50 2027 GMT
Subject: CN=E9ED8A9BE8453128BCDA3FDA2A2F98843847BC2F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:07:71:e4:59:2b:3d:4a:8b:d7:a0:7c:8e:6c:
9d:b5:12:b6:67:9a:f0:d5:0b:ba:2d:4f:2e:ee:c5:
82:fc:84:f2:84:e2:ab:b3:e1:b5:9a:41:5d:64:b8:
98:e4:10:9f:6b:b6:0b:0a:04:14:f2:1c:c2:00:aa:
ed:08:e2:8b:eb:cd:b3:5e:d3:c0:97:d6:cb:f3:cd:
ec:9b:70:e4:f9:eb:a0:5e:7c:79:b0:89:83:84:6f:
37:78:26:32:5b:a5:d8:35:03:47:e2:09:e4:15:11:
fb:b4:71:33:28:8e:89:2c:ae:f3:90:ec:7d:76:1f:
4b:f3:d5:81:3f:dd:a2:a3:d7:a9:e2:d1:3d:f7:69:
da:5d:f2:f5:dd:e6:bc:47:2f:08:bc:c0:36:67:6c:
32:41:d2:c8:21:7d:9a:72:6f:2d:17:6d:2e:a4:73:
89:82:80:20:76:83:8f:5b:20:5a:ef:8c:9c:24:74:
27:ac:07:36:66:72:2c:25:7f:64:5c:4f:0e:ad:8f:
e5:4f:59:f5:40:b4:f0:fd:6b:3e:56:b6:9a:ee:01:
18:f4:d6:4c:08:03:3a:09:a3:3e:d4:57:19:34:2f:
e6:8b:ea:22:73:0f:d2:61:86:fc:31:b1:a2:c5:8c:
37:71:7f:50:62:d9:80:48:6a:25:21:3c:60:7f:65:
66:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
E9:ED:8A:9B:E8:45:31:28:BC:DA:3F:DA:2A:2F:98:84:38:47:BC:2F
X509v3 Authority Key Identifier:
keyid:CB:02:14:A5:C4:04:D6:F8:40:43:3B:12:0C:AC:BB:5B:8C:59:E6:13
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1094488874987552769/0/
RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1094488874987552769/0/E9ED8A9BE8453128BCDA3FDA2A2F98843847BC2F.mft
RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
144.79.4.0/23
Signature Algorithm: sha256WithRSAEncryption
10:6d:88:56:67:db:26:08:7c:06:f2:02:96:8b:fd:ea:29:a2:
50:18:c2:f2:83:9b:6e:6a:7c:72:39:f9:2c:2c:fb:a4:2a:c4:
84:ba:25:58:f8:fe:ae:ff:5d:60:bf:cf:03:f4:4a:6f:9e:c5:
27:f5:e0:52:c8:d9:c2:1a:9b:44:6c:af:09:97:76:13:99:51:
68:b5:13:07:f9:c1:67:27:ce:f0:4c:bb:34:89:39:c0:02:bd:
65:ba:63:f1:cf:b2:7d:26:96:f3:d5:05:bc:70:5c:f3:5c:38:
12:00:69:d5:ff:b1:29:d2:d7:f9:26:d4:69:5a:e3:1b:83:42:
f6:f3:c6:f3:bb:49:75:52:2a:aa:ba:44:77:ab:59:f6:b5:38:
c3:03:39:a5:46:71:83:dc:57:c9:d4:71:5d:17:2a:c9:d0:7f:
2f:a4:06:a9:79:54:83:fd:8d:27:8d:ca:d5:f6:6e:79:bd:12:
ec:a7:3f:8c:2e:59:9a:c4:fc:41:15:5b:d6:05:42:88:91:64:
44:93:a7:8b:ec:14:94:e0:b4:15:b3:e8:2f:33:21:ff:65:79:
a2:c2:d7:27:33:be:66:6f:a0:e9:35:c1:ba:80:70:a3:10:30:
78:69:2c:1c:c0:24:68:da:21:ca:55:83:32:bb:6c:8d:68:f3:
8d:d8:ff:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 14:11:15 2026 by rpki-client