
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4155439EEB77ED19E3031F638A8E633394279977.cer
File: 4155439EEB77ED19E3031F638A8E633394279977.cer (raw, json)
Hash identifier: PRUdcYPa5U/tgI14fdjCCZbryRs5c2I16UUe+nexlxI=
Subject key identifier: 41:55:43:9E:EB:77:ED:19:E3:03:1F:63:8A:8E:63:33:94:27:99:77
Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10
Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710
Certificate serial: 37F4CCF7BF4218F9ADDE13E0F4449CC782668CBE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
Manifest: rsync://rpki-rps.cnnic.cn/repo/A1065579534394851331/0/4155439EEB77ED19E3031F638A8E633394279977.mft
caRepository: rsync://rpki-rps.cnnic.cn/repo/A1065579534394851331/0/
Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml
Certificate not before: Thu 28 May 2026 07:41:17 +0000
Certificate not after: Thu 27 May 2027 07:46:17 +0000
Subordinate resources: AS: 59022
IP: 45.115.244.0/22
IP: 103.56.20.0/22
IP: 2400:ebc0::/32
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 May 2026 15:28:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:f4:cc:f7:bf:42:18:f9:ad:de:13:e0:f4:44:9c:c7:82:66:8c:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710
Validity
Not Before: May 28 07:41:17 2026 GMT
Not After : May 27 07:46:17 2027 GMT
Subject: CN=4155439EEB77ED19E3031F638A8E633394279977
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:a4:9e:fb:7d:6b:00:83:50:d5:95:45:12:2d:
61:84:7d:a1:77:d8:22:6a:54:a7:67:5f:41:47:f9:
eb:45:c4:6c:37:e8:a0:88:6c:2c:94:2b:84:f3:23:
c4:f2:9d:e7:e4:38:e8:af:a0:e0:44:dd:34:23:8d:
77:ed:78:e9:60:de:0e:6c:3b:84:8f:a9:e4:8a:ac:
80:59:69:9d:87:a6:65:2b:c6:60:2c:b2:f4:5f:c8:
b2:6c:6d:b8:85:fa:17:fc:5f:96:82:8b:67:7c:a9:
65:dd:61:87:56:47:37:58:01:d3:67:39:69:0a:54:
53:fd:fa:a3:46:2e:19:77:02:59:9b:f2:d4:31:50:
7e:53:0c:f0:2b:e6:65:37:c4:7c:5a:d7:59:e4:70:
d4:83:70:a8:07:1f:ef:e7:8b:21:b6:2c:e1:c5:58:
25:4c:d2:5a:e7:b0:d0:3b:d4:a8:20:39:d8:91:b6:
7a:e9:7a:4f:a6:13:82:fc:5e:0f:29:f8:64:f4:07:
5f:fe:8b:07:b2:d0:c3:f5:31:1d:87:05:a3:8d:f1:
63:b3:74:f2:2c:1b:ef:cd:99:e9:fe:40:e8:c8:b4:
67:20:09:be:e2:af:b6:cd:f1:ae:53:84:b3:11:12:
bd:33:d1:a6:5d:b9:0c:18:1b:88:81:c1:57:64:e4:
84:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
41:55:43:9E:EB:77:ED:19:E3:03:1F:63:8A:8E:63:33:94:27:99:77
X509v3 Authority Key Identifier:
keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394851331/0/
RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394851331/0/4155439EEB77ED19E3031F638A8E633394279977.mft
RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.115.244.0/22
103.56.20.0/22
IPv6:
2400:ebc0::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
59022
Signature Algorithm: sha256WithRSAEncryption
3a:ea:eb:29:3a:8a:e3:4c:2c:5f:cb:4c:40:0b:ec:49:c4:59:
f4:b5:de:e5:0c:b2:f3:5b:2e:cb:1e:16:8f:ae:ca:2e:4f:d7:
50:eb:7b:f5:7f:9b:1c:b7:cc:d7:34:1b:fd:01:8d:5a:0c:7d:
58:56:4d:a9:5d:a3:98:9e:39:fa:f6:3b:ee:9b:0c:9e:fa:f7:
88:aa:f2:19:e1:8f:c6:27:15:c7:0b:b8:00:db:43:66:96:bf:
25:a7:ef:7e:4c:6e:57:56:b7:ff:03:06:8d:75:68:92:03:ca:
31:94:75:92:7d:fc:78:df:36:39:f6:d2:e6:49:36:b3:74:bc:
fd:cc:4e:2f:4a:91:fc:26:f9:18:18:8d:23:cb:d9:8b:8b:e9:
90:a5:d9:b2:91:62:64:38:3f:12:81:ad:0a:97:34:b8:42:6d:
df:35:1c:d5:c6:3a:37:a4:a6:1a:4d:7f:d7:bc:5b:7b:6f:8d:
5a:31:27:10:8e:08:12:7b:95:cf:4d:1a:07:c3:45:09:84:43:
78:2f:cd:1c:f0:40:db:b5:52:a3:c4:7a:a1:29:f8:bf:1d:66:
8c:83:2c:d4:62:38:19:72:8a:bf:7e:b4:84:9a:16:2e:fc:4c:
0a:50:89:fb:5f:c1:4d:4b:cd:01:26:e1:30:2c:91:c5:ad:28:
4c:66:4f:d1
-----BEGIN CERTIFICATE-----
MIIF2DCCBMCgAwIBAgIUN/TM979CGPmt3hPg9EScx4JmjL4wDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw
M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDUyODA3NDExN1oX
DTI3MDUyNzA3NDYxN1owMzExMC8GA1UEAxMoNDE1NTQzOUVFQjc3RUQxOUUzMDMx
RjYzOEE4RTYzMzM5NDI3OTk3NzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBANCknvt9awCDUNWVRRItYYR9oXfYImpUp2dfQUf560XEbDfooIhsLJQrhPMj
xPKd5+Q46K+g4ETdNCONd+146WDeDmw7hI+p5IqsgFlpnYemZSvGYCyy9F/Ismxt
uIX6F/xfloKLZ3ypZd1hh1ZHN1gB02c5aQpUU/36o0YuGXcCWZvy1DFQflMM8Cvm
ZTfEfFrXWeRw1INwqAcf7+eLIbYs4cVYJUzSWuew0DvUqCA52JG2eul6T6YTgvxe
Dyn4ZPQHX/6LB7LQw/UxHYcFo43xY7N08iwb782Z6f5A6Mi0ZyAJvuKvts3xrlOE
sxESvTPRpl25DBgbiIHBV2TkhE8CAwEAAaOCAsswggLHMA8GA1UdEwEB/wQFMAMB
Af8wHQYDVR0OBBYEFEFVQ57rd+0Z4wMfY4qOYzOUJ5l3MB8GA1UdIwQYMBaAFKVu
hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig
ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw
OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE
NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB
BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu
Y24vcmVwby9BMTA2NTU3OTUzNDM5NDg1MTMzMS8wLzBuBggrBgEFBQcwCoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDY1NTc5NTM0Mzk0ODUxMzMx
LzAvNDE1NTQzOUVFQjc3RUQxOUUzMDMxRjYzOEE4RTYzMzM5NDI3OTk3Ny5tZnQw
OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp
ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwNAYIKwYBBQUH
AQcBAf8EJTAjMBIEAgABMAwDBAItc/QDBAJnOBQwDQQCAAIwBwMFACQA68AwGgYI
KwYBBQUHAQgBAf8ECzAJoAcwBQIDAOaOMA0GCSqGSIb3DQEBCwUAA4IBAQA66usp
OorjTCxfy0xAC+xJxFn0td7lDLLzWy7LHhaPrsouT9dQ63v1f5sct8zXNBv9AY1a
DH1YVk2pXaOYnjn69jvumwye+veIqvIZ4Y/GJxXHC7gA20Nmlr8lp+9+TG5XVrf/
AwaNdWiSA8oxlHWSffx43zY59tLmSTazdLz9zE4vSpH8JvkYGI0jy9mLi+mQpdmy
kWJkOD8Sga0KlzS4Qm3fNRzVxjo3pKYaTX/XvFt7b41aMScQjggSe5XPTRoHw0UJ
hEN4L80c8EDbtVKjxHqhKfi/HWaMgyzUYjgZcoq/frSEmhYu/EwKUIn7X8FNS80B
JuEwLJHFrShMZk/R
-----END CERTIFICATE-----
Generated at Fri May 29 21:13:58 2026 by rpki-client