Certificate
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1C519CD1C415925E7FCE92FDA20FF18EC544C74B.cer
File: 1C519CD1C415925E7FCE92FDA20FF18EC544C74B.cer (raw, json)
Hash identifier: 4tSH3Tw/l99x8KclAbjXOIRICn7n+oj3d7YD8JBWJBc=
Subject key identifier: 1C:51:9C:D1:C4:15:92:5E:7F:CE:92:FD:A2:0F:F1:8E:C5:44:C7:4B
Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10
Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710
Certificate serial: 64094F71930F381CB74204A3FB3B4EE613B68485
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
Manifest: rsync://rpki-rps.cnnic.cn/repo/A1096265459348537346/1/1C519CD1C415925E7FCE92FDA20FF18EC544C74B.mft
caRepository: rsync://rpki-rps.cnnic.cn/repo/A1096265459348537346/1/
Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml
Certificate not before: Tue 02 Jun 2026 09:45:11 +0000
Certificate not after: Tue 01 Jun 2027 09:50:11 +0000
Subordinate resources: AS: 9308
AS: 9802
AS: 17428
AS: 18244
AS: 24133
AS: 24140
AS: 24418
AS: 59020
IP: 42.158.0.0/16
IP: 58.82.0.0/17
IP: 58.83.0.0/16
IP: 59.151.0.0/17
IP: 59.191.0.0/17
IP: 101.134.0.0/15
IP: 103.247.168.0/22
IP: 118.30.0.0/16
IP: 118.195.0.0/17
IP: 120.132.128.0 -- 120.135.255.255
IP: 123.61.0.0/16
IP: 124.250.0.0/15
IP: 182.174.0.0 -- 182.175.243.255
IP: 183.84.0.0/15
IP: 203.196.0.0/21
IP: 210.77.128.0/19
IP: 211.99.160.0 -- 211.99.223.255
IP: 211.148.17.0 -- 211.148.25.255
IP: 211.148.27.0 -- 211.148.31.255
IP: 211.151.0.0 -- 211.152.31.255
IP: 211.152.64.0/18
IP: 2403:a200::/32
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Jun 2026 04:35:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:09:4f:71:93:0f:38:1c:b7:42:04:a3:fb:3b:4e:e6:13:b6:84:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710
Validity
Not Before: Jun 2 09:45:11 2026 GMT
Not After : Jun 1 09:50:11 2027 GMT
Subject: CN=1C519CD1C415925E7FCE92FDA20FF18EC544C74B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:54:83:6a:f2:2e:b4:02:e8:02:9d:32:0e:1b:
43:b6:53:cf:bd:6a:96:70:d0:fe:ca:58:98:c6:e9:
bf:f0:84:98:84:cc:fa:be:97:b3:4b:50:5a:f9:dc:
5a:50:66:c3:d2:ae:e1:92:c1:cf:81:09:37:c9:78:
c6:8b:f3:77:5f:79:99:92:14:8d:ae:c4:55:ad:c5:
06:dd:b7:2d:41:b0:42:03:f6:fb:e0:9f:50:b3:61:
cd:d6:95:6f:0a:c4:fd:16:9d:69:5b:f0:81:b7:6c:
f4:20:47:6d:c8:26:af:1c:37:60:59:7f:8c:e7:fa:
8d:ba:16:f5:29:6d:f6:6c:21:2c:87:45:0a:ee:51:
9a:78:1d:ea:ea:22:73:d9:e4:ab:d3:4b:e2:c7:2f:
69:ad:4e:e5:34:79:b9:58:cc:9a:6f:f7:0c:09:2d:
9b:4c:b2:d4:57:1e:d9:df:a0:50:32:15:18:5a:a2:
11:e1:d1:70:43:29:32:40:8e:34:ef:2f:dc:37:f4:
d2:b8:f6:17:79:c9:12:e2:64:e8:6b:6f:bf:a3:08:
2f:38:f8:eb:41:46:bb:1c:a1:ed:a9:a9:2a:77:22:
aa:a8:a6:49:4e:fb:d0:7c:53:42:c0:7b:aa:b6:df:
ed:5e:eb:fa:36:33:2d:3d:a0:1e:44:09:d7:80:57:
11:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
1C:51:9C:D1:C4:15:92:5E:7F:CE:92:FD:A2:0F:F1:8E:C5:44:C7:4B
X509v3 Authority Key Identifier:
keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1096265459348537346/1/
RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1096265459348537346/1/1C519CD1C415925E7FCE92FDA20FF18EC544C74B.mft
RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
42.158.0.0/16
58.82.0.0/17
58.83.0.0/16
59.151.0.0/17
59.191.0.0/17
101.134.0.0/15
103.247.168.0/22
118.30.0.0/16
118.195.0.0/17
120.132.128.0-120.135.255.255
123.61.0.0/16
124.250.0.0/15
182.174.0.0-182.175.243.255
183.84.0.0/15
203.196.0.0/21
210.77.128.0/19
211.99.160.0-211.99.223.255
211.148.17.0-211.148.25.255
211.148.27.0-211.148.31.255
211.151.0.0-211.152.31.255
211.152.64.0/18
IPv6:
2403:a200::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
9308
9802
17428
18244
24133
24140
24418
59020
Signature Algorithm: sha256WithRSAEncryption
6d:87:6b:58:09:bf:8f:12:da:15:5a:d8:42:e1:8d:28:a9:9b:
e2:5c:7f:13:23:25:f7:e4:98:fd:20:85:02:9f:d9:f9:d6:97:
fc:db:e2:67:2d:ce:ef:29:fe:37:9f:35:9f:b9:8a:62:53:88:
4a:ac:8e:f3:e0:f2:a5:ee:1c:c7:fd:b5:c0:64:49:ed:a5:c4:
69:00:bd:8b:16:69:fc:a8:8e:05:b8:78:cc:ea:96:45:d3:35:
9c:d0:9d:2a:62:95:da:d4:8d:ab:0c:2d:e7:48:d0:cc:80:a6:
31:af:91:21:91:28:62:5d:a5:8c:71:49:f4:1f:a8:b6:f4:52:
22:9b:f9:a4:a4:a7:d1:b0:49:75:b9:40:6c:78:62:5e:69:bb:
9d:e4:46:4b:b5:7f:2e:c2:c3:38:de:44:62:98:c6:11:9d:ff:
4d:f4:55:75:d5:d7:cc:b9:3c:42:f6:1e:f0:2d:c8:70:90:ab:
39:55:5f:90:41:02:60:54:cc:ea:9c:11:8d:e6:f9:83:23:97:
93:f8:2f:2c:0d:7d:72:46:d1:43:f8:b8:e7:87:fd:83:e5:ef:
30:04:fe:ad:ef:b3:5e:20:bf:cc:fc:8c:ec:d9:53:18:d9:b2:
87:09:b3:d3:97:32:02:e6:c6:18:50:a9:bd:54:b5:98:7e:3e:
89:49:2b:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 03:40:20 2026 by rpki-client