Certificate
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1FFF263C64163BC58514B539C10375CCB553D75E.cer
File: 1FFF263C64163BC58514B539C10375CCB553D75E.cer (raw, json)
Hash identifier: Fk/uQjJDn0MMVFX4yaG0kJKD/UXTjtPfSKeVHgO2cJw=
Subject key identifier: 1F:FF:26:3C:64:16:3B:C5:85:14:B5:39:C1:03:75:CC:B5:53:D7:5E
Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10
Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710
Certificate serial: 4F67C425463945ED80884F1C261652E17CAC0E98
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
Manifest: rsync://rpki-rps.cnnic.cn/repo/A1065579534394327043/0/1FFF263C64163BC58514B539C10375CCB553D75E.mft
caRepository: rsync://rpki-rps.cnnic.cn/repo/A1065579534394327043/0/
Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml
Certificate not before: Thu 28 May 2026 07:23:29 +0000
Certificate not after: Thu 27 May 2027 07:28:29 +0000
Subordinate resources: AS: 59083
IP: 43.254.152.0/22
IP: 45.252.8.0 -- 45.252.51.255
IP: 45.252.84.0/22
IP: 45.252.100.0/22
IP: 45.252.132.0 -- 45.252.139.255
IP: 45.252.144.0/22
IP: 59.153.168.0 -- 59.153.195.255
IP: 103.5.192.0/22
IP: 103.6.108.0/22
IP: 103.6.228.0/22
IP: 103.10.0.0/22
IP: 103.24.116.0/22
IP: 103.198.216.0 -- 103.198.247.255
IP: 103.220.248.0 -- 103.221.51.255
IP: 103.221.92.0/22
IP: 150.242.236.0/22
IP: 202.57.216.0/22
IP: 202.58.112.0/22
IP: 202.89.96.0/22
IP: 202.89.108.0/22
IP: 202.136.248.0/22
IP: 202.174.124.0/22
IP: 2403:1b80::/32
IP: 2406:1e80::/32
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 06 Jun 2026 23:56:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:67:c4:25:46:39:45:ed:80:88:4f:1c:26:16:52:e1:7c:ac:0e:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710
Validity
Not Before: May 28 07:23:29 2026 GMT
Not After : May 27 07:28:29 2027 GMT
Subject: CN=1FFF263C64163BC58514B539C10375CCB553D75E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:9f:e6:70:4d:42:9d:89:5c:ef:e7:cf:d2:c9:
d0:98:e2:ac:72:63:b3:86:82:f1:d7:91:dd:37:16:
c3:25:9b:4c:0c:bf:69:02:67:89:2b:78:ca:e5:77:
2f:60:9b:f7:ee:94:d9:58:9b:ea:cd:35:db:a1:d7:
bb:69:d2:48:e8:3d:9b:dd:aa:19:44:ea:6f:a0:6e:
60:c1:e1:47:22:bc:c5:4a:8f:18:84:0a:eb:18:3f:
ef:4e:f1:8e:92:15:75:bb:0f:12:d7:b2:37:ac:69:
b4:10:62:b9:3b:1c:1e:ac:9d:56:aa:3d:04:bb:2b:
62:00:d7:ae:09:67:b3:7f:87:b1:17:b3:f6:85:c5:
2a:a2:3e:81:6d:a3:94:26:94:6b:3e:62:3a:46:18:
d0:d2:78:0f:ed:fb:33:7f:eb:f9:7d:23:8d:c8:db:
05:96:54:c0:38:9f:19:7e:5e:63:c9:8e:b7:bb:2f:
fc:86:a0:80:19:ff:43:04:a1:cb:a8:fc:a8:6f:23:
d4:5b:cc:62:8d:0f:b5:85:dc:e6:c5:4f:5a:34:8a:
fd:4e:1b:db:a9:8f:1c:f2:35:22:36:3d:ac:c8:c3:
29:25:11:8c:b3:c4:16:5f:49:37:22:4c:55:17:7a:
d6:06:94:ec:08:85:a2:e5:3f:e8:80:76:be:b1:5b:
d7:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
1F:FF:26:3C:64:16:3B:C5:85:14:B5:39:C1:03:75:CC:B5:53:D7:5E
X509v3 Authority Key Identifier:
keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394327043/0/
RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394327043/0/1FFF263C64163BC58514B539C10375CCB553D75E.mft
RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
43.254.152.0/22
45.252.8.0-45.252.51.255
45.252.84.0/22
45.252.100.0/22
45.252.132.0-45.252.139.255
45.252.144.0/22
59.153.168.0-59.153.195.255
103.5.192.0/22
103.6.108.0/22
103.6.228.0/22
103.10.0.0/22
103.24.116.0/22
103.198.216.0-103.198.247.255
103.220.248.0-103.221.51.255
103.221.92.0/22
150.242.236.0/22
202.57.216.0/22
202.58.112.0/22
202.89.96.0/22
202.89.108.0/22
202.136.248.0/22
202.174.124.0/22
IPv6:
2403:1b80::/32
2406:1e80::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
59083
Signature Algorithm: sha256WithRSAEncryption
6f:12:99:63:8e:71:9e:29:45:e7:3c:8d:ba:3f:b2:f1:15:79:
4b:39:e6:81:9b:c6:97:0c:66:d2:29:8a:9f:31:30:f0:8b:09:
d0:f6:5e:d1:1b:78:18:01:cc:5f:72:2e:2d:be:9f:9f:31:39:
c3:09:48:8e:be:50:03:54:7e:6b:81:e9:d7:84:3d:8c:c0:e8:
b6:a6:7f:b5:28:95:39:c2:c8:cc:63:35:f6:a2:c3:a4:09:d7:
1e:e9:b0:29:60:71:41:46:e8:6e:7f:ac:3e:a5:61:00:54:85:
b7:ee:5b:be:53:8d:7d:78:79:9c:ac:b3:a6:f6:8c:d2:85:e0:
5b:b7:6d:06:1e:47:10:0d:41:f7:cf:b2:6a:5d:3b:1f:0a:1c:
dd:fd:1a:b9:64:d2:71:15:c8:ce:01:36:a0:f2:23:50:c8:0b:
eb:9d:7c:f8:81:c0:df:ab:77:a1:49:a0:44:ff:42:e1:20:c0:
d4:07:d5:5c:2f:49:ea:75:de:aa:30:7e:27:b2:73:82:05:a9:
62:8f:45:fa:9d:c1:16:02:ca:0b:9f:c8:9f:97:2d:7e:c6:a1:
31:d6:dd:68:d8:e4:f5:17:08:28:ee:1f:95:31:f1:60:94:64:
3c:c2:76:73:8a:79:d8:a6:96:cb:1a:ca:28:27:24:4e:d3:3c:
c4:2c:2c:e8
-----BEGIN CERTIFICATE-----
MIIGhDCCBWygAwIBAgIUT2fEJUY5Re2AiE8cJhZS4XysDpgwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw
M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDUyODA3MjMyOVoX
DTI3MDUyNzA3MjgyOVowMzExMC8GA1UEAxMoMUZGRjI2M0M2NDE2M0JDNTg1MTRC
NTM5QzEwMzc1Q0NCNTUzRDc1RTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAJ+f5nBNQp2JXO/nz9LJ0JjirHJjs4aC8deR3TcWwyWbTAy/aQJniSt4yuV3
L2Cb9+6U2Vib6s0126HXu2nSSOg9m92qGUTqb6BuYMHhRyK8xUqPGIQK6xg/707x
jpIVdbsPEteyN6xptBBiuTscHqydVqo9BLsrYgDXrglns3+HsRez9oXFKqI+gW2j
lCaUaz5iOkYY0NJ4D+37M3/r+X0jjcjbBZZUwDifGX5eY8mOt7sv/IaggBn/QwSh
y6j8qG8j1FvMYo0PtYXc5sVPWjSK/U4b26mPHPI1IjY9rMjDKSURjLPEFl9JNyJM
VRd61gaU7AiFouU/6IB2vrFb1yMCAwEAAaOCA3cwggNzMA8GA1UdEwEB/wQFMAMB
Af8wHQYDVR0OBBYEFB//JjxkFjvFhRS1OcEDdcy1U9deMB8GA1UdIwQYMBaAFKVu
hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig
ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw
OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE
NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB
BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu
Y24vcmVwby9BMTA2NTU3OTUzNDM5NDMyNzA0My8wLzBuBggrBgEFBQcwCoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDY1NTc5NTM0Mzk0MzI3MDQz
LzAvMUZGRjI2M0M2NDE2M0JDNTg1MTRCNTM5QzEwMzc1Q0NCNTUzRDc1RS5tZnQw
OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp
ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwgd8GCCsGAQUF
BwEHAQH/BIHPMIHMMIGzBAIAATCBrAMEAiv+mDAMAwQDLfwIAwQCLfwwAwQCLfxU
AwQCLfxkMAwDBAIt/IQDBAIt/IgDBAIt/JAwDAMEAzuZqAMEAjuZwAMEAmcFwAME
AmcGbAMEAmcG5AMEAmcKAAMEAmcYdDAMAwQDZ8bYAwQDZ8bwMAwDBANn3PgDBAJn
3TADBAJn3VwDBAKW8uwDBALKOdgDBALKOnADBALKWWADBALKWWwDBALKiPgDBALK
rnwwFAQCAAIwDgMFACQDG4ADBQAkBh6AMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC
AwDmyzANBgkqhkiG9w0BAQsFAAOCAQEAbxKZY45xnilF5zyNuj+y8RV5SznmgZvG
lwxm0imKnzEw8IsJ0PZe0Rt4GAHMX3IuLb6fnzE5wwlIjr5QA1R+a4Hp14Q9jMDo
tqZ/tSiVOcLIzGM19qLDpAnXHumwKWBxQUbobn+sPqVhAFSFt+5bvlONfXh5nKyz
pvaM0oXgW7dtBh5HEA1B98+yal07Hwoc3f0auWTScRXIzgE2oPIjUMgL6518+IHA
36t3oUmgRP9C4SDA1AfVXC9J6nXeqjB+J7JzggWpYo9F+p3BFgLKC5/In5ctfsah
MdbdaNjk9RcIKO4flTHxYJRkPMJ2c4p52KaWyxrKKCckTtM8xCws6A==
-----END CERTIFICATE-----
Generated at Sat Jun 6 15:02:51 2026 by rpki-client