Certificate
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/56BE48FB7406C26DE662EBF89202C679B0854CE8.cer
File: 56BE48FB7406C26DE662EBF89202C679B0854CE8.cer (raw, json)
Hash identifier: RmchrjbjmdN3OhOIgNqMwCJfPwhdcD3Fz8UXrjeCi1s=
Subject key identifier: 56:BE:48:FB:74:06:C2:6D:E6:62:EB:F8:92:02:C6:79:B0:85:4C:E8
Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10
Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710
Certificate serial: 290F803BBFD6F5E1216AE37D7466D21A00A04B68
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
Manifest: rsync://rpki-rps.cnnic.cn/repo/A1089726678676013057/0/56BE48FB7406C26DE662EBF89202C679B0854CE8.mft
caRepository: rsync://rpki-rps.cnnic.cn/repo/A1089726678676013057/0/
Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml
Certificate not before: Mon 14 Sep 2026 03:54:28 +0000
Certificate not after: Mon 13 Sep 2027 03:59:28 +0000
Subordinate resources: AS: 17965
AS: 24136
AS: 24151 -- 24152
AS: 24406
AS: 24408 -- 24409
AS: 58858
IP: 1.2.4.0/24
IP: 1.2.8.0/24
IP: 42.83.128.0/17
IP: 43.254.4.0/22
IP: 103.249.188.0/22
IP: 125.208.32.0/19
IP: 203.99.16.0/22
IP: 203.119.24.0 -- 203.119.35.255
IP: 210.2.4.0/24
IP: 218.241.96.0/19
IP: 2001:dc7::/32
IP: 2001:dd8:1::/48
IP: 2406:2700::/32
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 15 Oct 2026 01:08:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:0f:80:3b:bf:d6:f5:e1:21:6a:e3:7d:74:66:d2:1a:00:a0:4b:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710
Validity
Not Before: Sep 14 03:54:28 2026 GMT
Not After : Sep 13 03:59:28 2027 GMT
Subject: CN=56BE48FB7406C26DE662EBF89202C679B0854CE8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:af:87:de:c8:82:9d:53:a5:f5:a0:fe:2a:df:
d0:02:4c:12:34:21:ed:19:e3:a8:b5:15:39:66:06:
ce:cb:de:1a:32:a8:de:c5:e5:33:6e:56:ce:aa:13:
bf:62:fa:8d:4a:cc:87:bd:f3:3e:7f:15:9b:d2:10:
36:86:63:b7:f5:36:0c:cc:46:d8:b6:10:5e:17:c4:
fb:4a:6c:43:64:0a:2e:2f:b1:87:e1:04:14:34:5c:
2c:f3:7f:04:86:e5:05:22:8f:23:cb:04:ca:b8:56:
25:b9:aa:f8:cb:d6:2a:6a:1f:f3:b8:b5:e6:f1:66:
2b:78:62:76:26:2d:9b:3d:a6:6f:93:06:85:9b:c0:
a2:30:ac:d7:33:44:d3:58:aa:08:19:95:86:4c:cb:
57:f3:3e:56:93:fd:23:9e:32:80:37:98:87:b5:b2:
9d:be:33:3b:e2:b2:3e:54:6a:d6:f4:03:cb:7e:58:
d6:2e:79:ff:83:ac:f9:1f:4b:05:8f:e6:80:39:60:
7c:a0:0b:5a:81:47:17:d9:d1:6f:17:0e:10:d0:7d:
7e:8c:0c:e5:6d:7e:33:bb:ab:bc:d2:88:d2:af:80:
dd:dd:e4:2e:3a:97:9c:26:ad:0a:44:80:a6:74:3a:
f4:1d:72:05:64:29:7c:5a:cb:14:bc:6d:c4:16:01:
c0:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
56:BE:48:FB:74:06:C2:6D:E6:62:EB:F8:92:02:C6:79:B0:85:4C:E8
X509v3 Authority Key Identifier:
keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1089726678676013057/0/
RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1089726678676013057/0/56BE48FB7406C26DE662EBF89202C679B0854CE8.mft
RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
1.2.4.0/24
1.2.8.0/24
42.83.128.0/17
43.254.4.0/22
103.249.188.0/22
125.208.32.0/19
203.99.16.0/22
203.119.24.0-203.119.35.255
210.2.4.0/24
218.241.96.0/19
IPv6:
2001:dc7::/32
2001:dd8:1::/48
2406:2700::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
17965
24136
24151-24152
24406
24408-24409
58858
Signature Algorithm: sha256WithRSAEncryption
29:4d:37:24:4b:99:36:28:e7:f8:1f:62:97:f8:20:e3:e6:a1:
ad:1f:8d:65:b0:1f:29:63:ce:5e:a2:e0:f6:27:7d:56:ab:a9:
be:36:92:f4:6b:7b:7e:60:66:f9:0d:00:56:89:e1:9e:81:69:
89:df:3b:2d:0d:1c:38:40:87:12:3e:d6:d2:5d:db:35:54:81:
5b:ca:94:37:da:d5:ed:db:8c:e5:9a:0b:31:17:00:aa:10:5c:
87:c7:63:5e:33:74:ab:85:c0:6a:d3:ab:47:ef:48:87:9c:3d:
06:7e:4f:78:b4:c8:01:1c:6e:7a:8d:41:eb:a8:45:df:25:9f:
96:77:64:2b:91:09:0b:3c:0e:71:0e:9e:55:06:8e:5f:2b:98:
6f:13:07:c0:43:5e:e2:5d:b9:10:7e:b2:27:a0:a9:2c:8d:37:
7d:d6:2a:9c:a9:a0:47:5a:a6:24:fb:fc:95:73:b1:bc:e6:14:
ec:47:92:07:cb:b7:6d:16:11:2e:9f:65:93:7a:8f:7e:3c:64:
50:c3:0c:de:72:29:c5:94:16:a1:64:99:6f:ac:d8:cc:69:fa:
1d:05:6e:4b:c5:d0:be:17:45:aa:d4:16:28:9c:2f:f5:f9:dd:
8d:36:f1:ff:c2:39:14:72:c6:f4:3d:9f:4f:8d:5f:b8:a7:7c:
56:78:3a:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 19:59:53 2026 by rpki-client