Certificate
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/32C6BEDBCA2F534D41322006E39A6E51B1A9A9D5.cer
File: 32C6BEDBCA2F534D41322006E39A6E51B1A9A9D5.cer (raw, json)
Hash identifier: Is1o0NkF+9xwvduTLoI+3eOCgKjcLfdPmkQQyVIkDGI=
Subject key identifier: 32:C6:BE:DB:CA:2F:53:4D:41:32:20:06:E3:9A:6E:51:B1:A9:A9:D5
Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10
Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710
Certificate serial: 16B8DC72626E3D94E817D1C1E86A595457CBE313
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
Manifest: rsync://rpki-rps.cnnic.cn/repo/A1094815969324302337/0/32C6BEDBCA2F534D41322006E39A6E51B1A9A9D5.mft
caRepository: rsync://rpki-rps.cnnic.cn/repo/A1094815969324302337/0/
Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml
Certificate not before: Fri 10 Apr 2026 02:42:48 +0000
Certificate not after: Fri 09 Apr 2027 02:47:48 +0000
Subordinate resources: IP: 115.174.64.0/19
IP: 124.14.192.0/19
IP: 211.161.60.0/22
IP: 211.162.64.0/20
IP: 211.162.112.0/20
IP: 211.162.192.0/22
IP: 220.112.0.0/18
IP: 220.112.192.0/20
IP: 220.112.224.0/19
IP: 220.113.150.0 -- 220.113.167.255
IP: 220.113.224.0/19
IP: 220.115.32.0/19
IP: 2404:1cc0::/32
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 12:10:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:b8:dc:72:62:6e:3d:94:e8:17:d1:c1:e8:6a:59:54:57:cb:e3:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710
Validity
Not Before: Apr 10 02:42:48 2026 GMT
Not After : Apr 9 02:47:48 2027 GMT
Subject: CN=32C6BEDBCA2F534D41322006E39A6E51B1A9A9D5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:3e:64:44:18:cf:61:83:fa:fc:a5:6b:0d:76:
d4:33:7b:f8:ce:bc:94:e4:0d:3e:7e:48:45:fd:df:
c7:d8:6f:11:c9:fe:0c:6b:5d:1f:42:da:61:3c:2b:
67:f4:cc:8a:b7:9c:e8:6b:8a:b0:06:96:bd:68:a8:
6b:1b:59:e4:b9:1a:cb:c8:07:9b:11:cc:9f:f4:90:
f0:8d:04:d7:86:ab:b3:bd:fd:f9:76:fa:4a:82:be:
9f:df:8a:83:2b:af:61:20:6a:0c:67:b6:fd:21:12:
47:85:60:62:aa:2b:04:6a:43:a9:34:4b:c0:ac:03:
d1:b2:42:f5:b8:9a:10:87:5b:c2:6d:c1:02:a5:16:
09:94:c4:ee:e4:be:11:3d:04:da:d8:75:a1:f1:4a:
79:02:e5:48:1b:8d:98:ad:43:81:a8:aa:09:45:b2:
68:f5:fe:a8:78:02:b1:6d:bb:ea:ad:6f:65:56:78:
c0:04:09:2f:20:66:de:1d:c8:ad:e9:82:50:8d:e8:
01:b3:c0:26:7f:98:c0:10:d2:3f:a0:01:db:8f:a3:
27:30:e1:d5:12:2a:1d:7d:8c:cc:95:b4:b5:ae:66:
23:46:1b:0e:04:9f:db:12:91:aa:f4:ae:2f:9d:67:
15:92:16:a2:0f:3c:32:2e:d8:07:35:d1:89:ce:a2:
0d:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
32:C6:BE:DB:CA:2F:53:4D:41:32:20:06:E3:9A:6E:51:B1:A9:A9:D5
X509v3 Authority Key Identifier:
keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1094815969324302337/0/
RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1094815969324302337/0/32C6BEDBCA2F534D41322006E39A6E51B1A9A9D5.mft
RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
115.174.64.0/19
124.14.192.0/19
211.161.60.0/22
211.162.64.0/20
211.162.112.0/20
211.162.192.0/22
220.112.0.0/18
220.112.192.0/20
220.112.224.0/19
220.113.150.0-220.113.167.255
220.113.224.0/19
220.115.32.0/19
IPv6:
2404:1cc0::/32
Signature Algorithm: sha256WithRSAEncryption
03:ff:1f:0c:f8:4c:25:d7:dc:d4:13:b4:5e:9a:4a:f2:c6:7a:
ae:18:fd:c3:6d:53:52:f7:b1:03:24:6c:50:bf:b0:be:1f:70:
9c:fc:54:8f:b5:d8:81:62:4d:1f:0a:b3:de:fc:88:8c:dd:1e:
0f:06:7b:59:d0:71:78:48:b6:f0:f9:5e:2b:e6:8c:b4:85:d2:
1b:fb:01:c7:21:8d:3b:3e:cf:a6:90:6c:eb:2b:8d:cc:c5:f1:
96:2c:68:25:2d:ca:0b:8b:cf:b5:76:ef:18:27:a9:29:98:5a:
6d:20:0a:fd:e7:24:97:5e:57:63:63:43:58:67:bb:f9:d0:78:
07:e6:9b:85:6c:38:92:87:49:07:54:ca:00:c4:f0:e5:53:9f:
19:c7:6e:43:3e:20:27:47:ff:84:8b:5c:fb:91:cd:ce:3e:1a:
35:fb:81:8a:11:92:76:3e:df:97:c4:25:14:fe:69:ff:d9:1c:
57:8c:e4:97:79:a6:64:a8:45:79:bd:60:a1:56:0d:54:de:03:
89:75:d2:08:66:b1:67:d2:7d:3b:5d:96:8e:8a:67:dc:06:57:
46:13:b4:fc:6c:16:99:8a:48:55:be:df:31:c3:38:03:2f:b5:
23:2d:08:e9:79:e7:ae:6d:f6:6d:26:94:7f:ac:c6:02:b4:67:
80:1d:32:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 09:29:04 2026 by rpki-client