
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1332FF90625961F264C4C1697510C8D39E9865D7.cer
File: 1332FF90625961F264C4C1697510C8D39E9865D7.cer (raw, json)
Hash identifier: yvTtPUFIywIxh576zv6VT9CYQ2rQzqLngeuUwwm7e0M=
Subject key identifier: 13:32:FF:90:62:59:61:F2:64:C4:C1:69:75:10:C8:D3:9E:98:65:D7
Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10
Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710
Certificate serial: 50CD0460193DD2F7CCBE229EAB4D36954A223F6A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
Manifest: rsync://rpki-rps.cnnic.cn/repo/A1094913563501264899/0/1332FF90625961F264C4C1697510C8D39E9865D7.mft
caRepository: rsync://rpki-rps.cnnic.cn/repo/A1094913563501264899/0/
Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml
Certificate not before: Fri 10 Apr 2026 09:10:38 +0000
Certificate not after: Fri 09 Apr 2027 09:15:38 +0000
Subordinate resources: AS: 137788
IP: 103.117.220.0/22
IP: 103.122.48.0/22
IP: 2403:2240::/32
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 12:10:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:cd:04:60:19:3d:d2:f7:cc:be:22:9e:ab:4d:36:95:4a:22:3f:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710
Validity
Not Before: Apr 10 09:10:38 2026 GMT
Not After : Apr 9 09:15:38 2027 GMT
Subject: CN=1332FF90625961F264C4C1697510C8D39E9865D7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:5c:f3:0e:e8:b1:f7:c5:cd:b1:1a:51:ff:81:
8b:1f:d9:e0:ef:7d:a2:49:0e:8a:e0:0c:9c:64:40:
06:81:80:c4:07:78:42:fb:42:75:7d:f9:61:7c:27:
ee:b6:71:02:79:dc:94:81:8e:7a:06:94:d2:ba:8b:
b2:48:c5:29:df:96:2f:29:d0:1b:ca:7c:e6:34:3b:
29:32:6a:ac:b4:e9:cf:37:e9:f7:7a:cb:71:3f:03:
7a:69:ac:28:d6:e5:8f:7e:56:24:c3:b9:df:dd:58:
b8:e0:7f:c1:a4:70:d9:68:23:2a:28:cc:2f:67:9e:
83:e5:88:71:5e:80:e6:4e:f2:b4:be:00:d0:83:c1:
a6:bd:31:55:10:a2:17:e7:a7:a8:36:9e:0c:42:85:
82:4b:eb:8f:71:0a:b6:11:4a:fd:39:d4:0f:7c:80:
78:93:d6:dc:06:66:87:99:26:8a:c0:96:23:95:83:
aa:bf:d2:c6:6d:a0:a0:c6:e3:d1:f8:0f:65:1e:28:
07:e3:fd:77:c2:8a:21:18:2d:a3:a6:17:23:ad:63:
11:db:6a:29:64:79:25:e2:59:33:73:18:bf:8a:eb:
c4:f2:e2:d7:da:b8:4f:9e:66:58:d4:cb:79:ba:f0:
2c:4f:ba:0c:54:b7:ac:75:54:e8:87:0a:e3:ac:ca:
b0:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
13:32:FF:90:62:59:61:F2:64:C4:C1:69:75:10:C8:D3:9E:98:65:D7
X509v3 Authority Key Identifier:
keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1094913563501264899/0/
RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1094913563501264899/0/1332FF90625961F264C4C1697510C8D39E9865D7.mft
RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.117.220.0/22
103.122.48.0/22
IPv6:
2403:2240::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
137788
Signature Algorithm: sha256WithRSAEncryption
72:65:ba:6d:80:15:46:a6:ea:39:cf:f3:71:63:db:18:ab:d9:
65:ec:71:68:1d:2c:1b:e0:5c:98:2d:53:fc:49:1e:f8:5b:38:
6b:90:b0:71:80:e9:5e:fe:a8:80:80:97:1c:94:84:11:77:4d:
05:c2:60:5c:58:49:77:84:95:81:bf:aa:ae:fb:04:98:e6:ea:
5f:53:f9:0e:37:90:d8:b5:e6:9d:52:4c:43:c8:b2:20:f3:1e:
4a:d6:d4:bc:f9:5c:99:cf:9e:8e:1b:aa:18:47:1a:e3:c8:0a:
7d:43:32:30:9f:1f:35:d4:f5:57:8c:82:ed:80:98:b2:4b:9e:
31:56:3b:51:98:4f:4d:9c:fb:c8:40:11:00:5b:57:86:f6:3a:
6a:cf:a2:3e:14:ea:c3:d5:5e:f6:31:cd:42:e8:11:33:00:4b:
43:93:32:96:d0:d2:7b:86:be:c1:37:5b:38:55:25:e6:17:30:
19:d8:f9:5f:91:85:34:e2:a6:fc:9c:a4:8e:63:bd:28:8d:32:
16:e7:d2:aa:b3:b5:ba:ae:f0:cd:b9:2a:af:a8:10:b5:2d:e0:
bc:fe:c6:26:e2:85:db:b2:ee:6e:a5:1a:d2:bd:0c:97:d1:3d:
bd:d0:99:31:0f:99:06:0c:33:cd:17:29:11:77:2e:92:d1:52:
59:b3:b3:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 09:29:05 2026 by rpki-client