Certificate
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5047083B4637A3F02DF9DEEBA67BEDDC04FD69DD.cer
File: 5047083B4637A3F02DF9DEEBA67BEDDC04FD69DD.cer (raw, json)
Hash identifier: Wl+ES25XT5F386nTrrcw/kAb7xlZhK+AwpPSC+eMd8w=
Subject key identifier: 50:47:08:3B:46:37:A3:F0:2D:F9:DE:EB:A6:7B:ED:DC:04:FD:69:DD
Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10
Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710
Certificate serial: 3002D59464B101542EEFABE5C1704E39BF0FA6B6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
Manifest: rsync://rpki-rps.cnnic.cn/repo/A1065580055121559554/0/5047083B4637A3F02DF9DEEBA67BEDDC04FD69DD.mft
caRepository: rsync://rpki-rps.cnnic.cn/repo/A1065580055121559554/0/
Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml
Certificate not before: Mon 01 Jun 2026 01:09:56 +0000
Certificate not after: Mon 31 May 2027 01:14:56 +0000
Subordinate resources: AS: 63578
AS: 63708
IP: 43.247.88.0/22
IP: 43.255.84.0/22
IP: 43.255.212.0/22
IP: 45.65.24.0/21
IP: 103.210.160.0/22
IP: 103.210.172.0 -- 103.210.183.255
IP: 103.228.160.0/22
IP: 103.229.212.0/22
IP: 139.5.60.0/22
IP: 160.19.208.0/22
IP: 163.53.168.0/22
IP: 211.150.192.0/18
IP: 211.154.96.0/19
IP: 2404:1f40::/32
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Jun 2026 19:04:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:02:d5:94:64:b1:01:54:2e:ef:ab:e5:c1:70:4e:39:bf:0f:a6:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710
Validity
Not Before: Jun 1 01:09:56 2026 GMT
Not After : May 31 01:14:56 2027 GMT
Subject: CN=5047083B4637A3F02DF9DEEBA67BEDDC04FD69DD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:21:0c:06:33:9e:e8:06:fe:fc:b6:8c:67:25:
ce:1f:a4:c0:0a:eb:f9:e3:ca:9b:c3:04:f0:dd:bc:
50:c9:ec:ec:40:e4:0c:4e:6c:57:5f:56:59:c7:d7:
c5:73:fb:45:0a:83:6a:97:30:80:35:6a:32:1b:dc:
38:11:72:ac:28:d6:0d:94:ee:82:d4:17:cb:5c:41:
0a:45:2d:fd:4e:fc:28:d0:63:91:f0:27:39:f3:51:
a9:b7:55:c4:72:46:e3:68:07:0f:b9:71:04:2e:b8:
51:37:92:d9:7f:39:0f:8b:dc:88:f4:5d:e6:2f:88:
54:f4:9e:00:a7:11:d6:4a:72:cf:58:59:93:dd:d1:
7e:45:51:a4:d7:f6:77:39:6f:45:87:a4:a9:20:7d:
cb:fc:85:cf:0a:5d:b7:21:de:84:dc:46:e1:94:92:
c4:9e:0d:61:69:15:ea:13:27:7c:53:66:3e:21:94:
f1:d3:3e:6c:45:cd:c1:7e:9e:dd:dd:1b:c2:5d:ec:
8e:91:b0:53:c3:56:ff:3e:a5:23:f5:3b:fa:91:3b:
86:41:50:88:bc:04:7a:92:f3:5c:73:86:e6:79:33:
7e:b2:fe:2b:27:65:35:c8:2c:9f:10:8d:21:8e:4a:
ee:a7:ac:64:9a:7a:00:79:46:1a:85:2b:96:a6:6d:
1e:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
50:47:08:3B:46:37:A3:F0:2D:F9:DE:EB:A6:7B:ED:DC:04:FD:69:DD
X509v3 Authority Key Identifier:
keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121559554/0/
RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121559554/0/5047083B4637A3F02DF9DEEBA67BEDDC04FD69DD.mft
RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
43.247.88.0/22
43.255.84.0/22
43.255.212.0/22
45.65.24.0/21
103.210.160.0/22
103.210.172.0-103.210.183.255
103.228.160.0/22
103.229.212.0/22
139.5.60.0/22
160.19.208.0/22
163.53.168.0/22
211.150.192.0/18
211.154.96.0/19
IPv6:
2404:1f40::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
63578
63708
Signature Algorithm: sha256WithRSAEncryption
60:a6:88:de:3b:b2:44:67:19:ac:1f:23:7d:56:34:16:68:80:
88:9c:b0:f3:33:f1:37:55:61:c9:16:86:1f:a1:90:dd:e1:7a:
b7:1c:60:75:27:89:7a:48:cb:a2:df:a4:65:58:bc:8d:98:e0:
23:64:8f:97:53:4f:09:da:b4:25:21:fa:21:4d:5f:83:b8:b7:
62:7a:9c:58:81:d8:62:34:d4:bf:00:42:72:ef:4a:5f:a1:71:
e9:d7:4d:98:bb:18:d8:f9:1d:21:d6:60:47:64:35:19:a1:39:
3d:a8:2e:5c:0e:e4:9e:ba:24:0c:f3:a7:46:38:0e:3c:c1:fa:
3f:76:a6:bb:bf:57:ff:c5:45:c9:c9:ef:ce:e0:3c:29:fd:a7:
49:45:ba:e2:e7:f2:13:88:13:b9:76:d8:bd:30:18:c9:83:f4:
74:66:67:66:05:4c:10:5e:f7:3f:8c:a9:45:70:f6:b4:ed:56:
5a:8a:5b:35:65:b7:bc:43:54:46:d6:a8:03:a6:ff:49:35:8a:
39:f9:e8:3a:50:4d:5e:d6:11:8c:4b:92:dd:ad:78:09:0d:50:
f4:dc:27:1a:47:97:22:21:97:2b:1d:5d:3b:15:3a:4e:05:63:
d1:db:c4:85:54:0f:c2:8e:1d:b1:32:b3:9e:d1:e3:a2:1a:6d:
5b:f5:4b:e7
-----BEGIN CERTIFICATE-----
MIIGJzCCBQ+gAwIBAgIUMALVlGSxAVQu76vlwXBOOb8PprYwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw
M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDYwMTAxMDk1NloX
DTI3MDUzMTAxMTQ1NlowMzExMC8GA1UEAxMoNTA0NzA4M0I0NjM3QTNGMDJERjlE
RUVCQTY3QkVEREMwNEZENjlERDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAOQhDAYznugG/vy2jGclzh+kwArr+ePKm8ME8N28UMns7EDkDE5sV19WWcfX
xXP7RQqDapcwgDVqMhvcOBFyrCjWDZTugtQXy1xBCkUt/U78KNBjkfAnOfNRqbdV
xHJG42gHD7lxBC64UTeS2X85D4vciPRd5i+IVPSeAKcR1kpyz1hZk93RfkVRpNf2
dzlvRYekqSB9y/yFzwpdtyHehNxG4ZSSxJ4NYWkV6hMnfFNmPiGU8dM+bEXNwX6e
3d0bwl3sjpGwU8NW/z6lI/U7+pE7hkFQiLwEepLzXHOG5nkzfrL+KydlNcgsnxCN
IY5K7qesZJp6AHlGGoUrlqZtHksCAwEAAaOCAxowggMWMA8GA1UdEwEB/wQFMAMB
Af8wHQYDVR0OBBYEFFBHCDtGN6PwLfne66Z77dwE/WndMB8GA1UdIwQYMBaAFKVu
hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig
ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw
OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE
NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB
BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu
Y24vcmVwby9BMTA2NTU4MDA1NTEyMTU1OTU1NC8wLzBuBggrBgEFBQcwCoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDY1NTgwMDU1MTIxNTU5NTU0
LzAvNTA0NzA4M0I0NjM3QTNGMDJERjlERUVCQTY3QkVEREMwNEZENjlERC5tZnQw
OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp
ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwfgYIKwYBBQUH
AQcBAf8EbzBtMFwEAgABMFYDBAIr91gDBAIr/1QDBAIr/9QDBAMtQRgDBAJn0qAw
DAMEAmfSrAMEA2fSsAMEAmfkoAMEAmfl1AMEAosFPAMEAqAT0AMEAqM1qAMEBtOW
wAMEBdOaYDANBAIAAjAHAwUAJAQfQDAfBggrBgEFBQcBCAEB/wQQMA6gDDAKAgMA
+FoCAwD43DANBgkqhkiG9w0BAQsFAAOCAQEAYKaI3juyRGcZrB8jfVY0FmiAiJyw
8zPxN1VhyRaGH6GQ3eF6txxgdSeJekjLot+kZVi8jZjgI2SPl1NPCdq0JSH6IU1f
g7i3YnqcWIHYYjTUvwBCcu9KX6Fx6ddNmLsY2PkdIdZgR2Q1GaE5PaguXA7knrok
DPOnRjgOPMH6P3amu79X/8VFycnvzuA8Kf2nSUW64ufyE4gTuXbYvTAYyYP0dGZn
ZgVMEF73P4ypRXD2tO1WWopbNWW3vENURtaoA6b/STWKOfnoOlBNXtYRjEuS3a14
CQ1Q9NwnGkeXIiGXKx1dOxU6TgVj0dvEhVQPwo4dsTKzntHjohptW/VL5w==
-----END CERTIFICATE-----
Generated at Fri Jun 12 03:39:12 2026 by rpki-client