
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1133679B2C104A0446FA0C3764EEE246C5D21075.cer
File: 1133679B2C104A0446FA0C3764EEE246C5D21075.cer (raw, json)
Hash identifier: jcC8c/+XQhEUD44HGZhupHPd3JcGM4+aKxRrhg4Ls3E=
Subject key identifier: 11:33:67:9B:2C:10:4A:04:46:FA:0C:37:64:EE:E2:46:C5:D2:10:75
Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10
Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710
Certificate serial: 4D93989FD4D4CB5003A0490D62686DE3E99F75C3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
Manifest: rsync://rpki-rps.cnnic.cn/repo/A1065582741577400322/0/1133679B2C104A0446FA0C3764EEE246C5D21075.mft
caRepository: rsync://rpki-rps.cnnic.cn/repo/A1065582741577400322/0/
Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml
Certificate not before: Thu 28 May 2026 08:57:53 +0000
Certificate not after: Thu 27 May 2027 09:02:53 +0000
Subordinate resources: AS: 55991
IP: 43.228.204.0/22
IP: 43.228.240.0/22
IP: 103.41.116.0/22
IP: 103.44.144.0/22
IP: 103.56.100.0 -- 103.56.107.255
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Jun 2026 04:35:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:93:98:9f:d4:d4:cb:50:03:a0:49:0d:62:68:6d:e3:e9:9f:75:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710
Validity
Not Before: May 28 08:57:53 2026 GMT
Not After : May 27 09:02:53 2027 GMT
Subject: CN=1133679B2C104A0446FA0C3764EEE246C5D21075
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:ed:b4:88:44:d9:06:ef:b2:7a:fc:90:a9:2c:
20:94:bf:92:8b:50:6d:fa:7e:fe:0c:00:e9:4e:0e:
2d:18:98:10:9c:9a:93:f9:b5:94:d9:9e:5c:6a:d9:
70:35:f6:35:84:cc:2c:50:c5:3c:e8:5d:8e:b8:f6:
51:28:89:56:b6:10:e0:47:8b:b6:13:9d:69:2e:ad:
56:0c:8f:ec:5c:75:5f:c0:04:7f:2d:d3:c9:e1:67:
d5:eb:8c:7e:fb:83:8a:b8:bd:7c:91:77:5f:37:b0:
19:40:ef:23:82:11:be:06:38:87:0d:11:d0:ad:d8:
00:49:15:bb:d6:d0:f9:04:07:38:7f:05:3e:fc:2d:
49:e9:9e:0a:32:fd:a3:d8:b5:0e:96:2e:07:91:2d:
51:c8:8e:f9:bf:d0:99:36:92:b1:9b:01:16:65:80:
51:51:81:df:84:00:73:15:88:59:65:1a:fd:30:bd:
db:37:80:38:66:0b:89:6b:9e:da:6a:b5:4b:a4:2d:
d8:1d:a9:27:dc:fb:09:05:a0:de:75:0d:0b:b9:62:
a0:7f:a0:6b:ae:67:65:60:ab:b2:84:10:05:5a:08:
1d:ff:58:73:e5:38:09:7c:ab:29:48:42:db:b2:35:
81:6f:fb:45:d8:f2:6e:27:de:b3:da:02:48:1a:1b:
41:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
11:33:67:9B:2C:10:4A:04:46:FA:0C:37:64:EE:E2:46:C5:D2:10:75
X509v3 Authority Key Identifier:
keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577400322/0/
RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577400322/0/1133679B2C104A0446FA0C3764EEE246C5D21075.mft
RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
43.228.204.0/22
43.228.240.0/22
103.41.116.0/22
103.44.144.0/22
103.56.100.0-103.56.107.255
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
55991
Signature Algorithm: sha256WithRSAEncryption
5e:2a:09:d7:f2:8f:61:7f:d9:25:1f:1c:ae:49:49:62:80:bf:
99:bc:23:d6:c0:84:24:28:37:80:99:4b:a3:b7:6e:48:2e:3f:
a4:60:1c:23:97:fc:aa:54:8a:e4:4f:f3:f8:6b:64:5c:72:98:
e9:d5:4c:18:19:3f:46:4b:24:fe:f3:84:fc:f3:62:16:93:a8:
0b:4a:1c:9b:5f:16:30:8a:d8:a6:f6:fc:55:75:00:a4:b1:bc:
46:88:f6:a1:06:0a:3d:b0:01:48:f9:28:71:85:da:b5:a4:0b:
f8:b8:f6:b8:01:d5:d6:77:d9:45:2a:7e:59:6b:e1:98:dc:3b:
32:02:98:78:70:f3:b0:61:32:41:14:d1:d7:49:e9:a5:22:6d:
27:58:2e:2e:75:9b:54:75:91:20:4a:c1:0f:6f:fa:d9:1c:9f:
ef:d4:94:af:69:0f:fa:8a:11:15:f7:93:49:7b:2e:f2:d0:3f:
34:64:77:de:3b:52:63:ec:86:3b:0c:4d:40:57:35:9b:3d:76:
05:92:b8:2e:e4:f7:75:8e:03:ed:82:01:58:d1:b6:39:5c:04:
fc:e6:f8:e6:ba:f6:34:f4:b1:38:84:e2:64:72:b0:80:e1:b8:
96:f4:58:0b:ea:7d:46:79:31:f0:3d:a5:cc:18:aa:19:e7:f6:
ff:d6:3d:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 12:41:45 2026 by rpki-client