Certificate
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/25C6596195B162409A5AFAA92570F258BAD3C42D.cer
File: 25C6596195B162409A5AFAA92570F258BAD3C42D.cer (raw, json)
Hash identifier: HsVkJgBEjTBIM5p96WeEfvqUfCHyRNo0vZsY4uTESms=
Subject key identifier: 25:C6:59:61:95:B1:62:40:9A:5A:FA:A9:25:70:F2:58:BA:D3:C4:2D
Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10
Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710
Certificate serial: 2854FE82CD327207DB45F962CDB52EFD9508DF95
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
Manifest: rsync://rpki-rps.cnnic.cn/repo/A1065585911216996355/0/25C6596195B162409A5AFAA92570F258BAD3C42D.mft
caRepository: rsync://rpki-rps.cnnic.cn/repo/A1065585911216996355/0/
Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml
Certificate not before: Fri 29 May 2026 01:54:08 +0000
Certificate not after: Fri 28 May 2027 01:59:08 +0000
Subordinate resources: AS: 131516
IP: 43.224.176.0/22
IP: 43.255.184.0/22
IP: 103.43.196.0/22
IP: 103.239.184.0/22
IP: 103.248.152.0/22
IP: 116.89.144.0/20
IP: 116.196.128.0 -- 116.196.175.255
IP: 123.176.80.0/20
IP: 150.242.240.0/22
IP: 211.147.96.0/19
IP: 2407:23c0::/32
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 May 2026 15:28:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:54:fe:82:cd:32:72:07:db:45:f9:62:cd:b5:2e:fd:95:08:df:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710
Validity
Not Before: May 29 01:54:08 2026 GMT
Not After : May 28 01:59:08 2027 GMT
Subject: CN=25C6596195B162409A5AFAA92570F258BAD3C42D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:66:36:b3:58:f3:07:69:76:b6:5c:dc:4f:43:
bc:fb:6c:80:12:89:99:70:42:8f:75:dc:75:82:a9:
e6:95:c5:9d:b9:5b:52:72:e2:e2:75:73:29:c2:70:
e1:d9:e2:ac:5d:d7:09:c8:dc:15:f4:7a:90:61:9d:
68:37:02:5f:7d:a1:06:fd:31:cf:44:14:7e:7b:33:
dd:1d:de:ea:08:ed:7a:6e:6b:02:9e:24:a3:65:42:
e5:e3:5d:8d:b2:83:51:08:93:c1:8f:c5:f3:7d:e2:
69:22:64:c4:e8:f4:25:c9:0f:9e:c5:e9:86:44:fb:
cb:b0:8b:1e:8e:5c:88:ad:b2:ae:05:30:c9:36:15:
13:f7:b6:78:df:5b:9f:58:1d:c8:03:b5:db:80:22:
c8:8e:1a:ee:14:6e:89:ac:dc:75:55:2a:51:e4:ae:
ba:0b:09:00:fd:96:d7:dd:0e:f6:c0:38:f4:56:7e:
f3:2a:9a:a4:e5:f6:6e:a0:96:75:35:70:ff:44:20:
92:16:e6:47:48:06:f8:fb:1d:f8:db:a1:a9:55:57:
a5:b7:65:29:2d:17:74:f0:18:df:88:2d:3a:0d:68:
2a:3c:df:b3:5b:41:e5:67:b5:e8:bc:26:45:b7:3b:
57:69:4f:a3:dc:63:bb:48:f5:80:ad:80:e0:f6:de:
12:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
25:C6:59:61:95:B1:62:40:9A:5A:FA:A9:25:70:F2:58:BA:D3:C4:2D
X509v3 Authority Key Identifier:
keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911216996355/0/
RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911216996355/0/25C6596195B162409A5AFAA92570F258BAD3C42D.mft
RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
43.224.176.0/22
43.255.184.0/22
103.43.196.0/22
103.239.184.0/22
103.248.152.0/22
116.89.144.0/20
116.196.128.0-116.196.175.255
123.176.80.0/20
150.242.240.0/22
211.147.96.0/19
IPv6:
2407:23c0::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
131516
Signature Algorithm: sha256WithRSAEncryption
2c:19:19:99:b2:b1:09:2b:8f:21:2f:b7:73:68:b0:5c:e0:ca:
2b:21:b9:ee:88:a1:7f:db:c2:a8:00:e9:31:89:ad:01:66:ac:
40:07:86:9f:8c:09:77:60:3d:75:40:39:b2:a1:7a:8e:c1:47:
63:21:9d:dc:99:e3:14:99:db:f1:29:45:39:df:97:01:55:a8:
2a:76:74:62:d2:c2:14:1d:4e:b5:09:74:11:68:00:b4:f2:37:
cb:ba:b3:75:65:db:c3:22:00:52:2a:e4:3b:79:fc:36:45:44:
cb:9f:08:e4:d6:3f:51:bb:12:81:31:ef:f8:4e:ab:c1:7f:01:
b5:65:0d:eb:f9:40:fa:40:a2:93:5b:9c:a6:37:4e:53:21:2d:
85:d1:e5:f1:7d:db:f4:c5:d2:77:ae:27:62:0d:46:b9:d0:b1:
59:71:60:c8:63:68:5c:35:1d:71:b8:79:5a:22:e4:31:99:4b:
e0:eb:b2:e2:e8:30:84:40:4b:e8:7b:82:3c:cb:50:05:6b:82:
9f:c8:40:85:50:58:c4:56:f2:ef:2b:12:67:36:c0:ef:70:52:
dc:fa:9b:81:dc:9e:20:54:9d:4c:6b:6c:fe:d0:a3:7e:78:17:
4d:f1:20:14:02:d2:d9:02:9f:f2:ac:84:c4:3e:5e:2d:b7:ad:
5a:dc:90:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 29 21:14:00 2026 by rpki-client