
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5F00140F672D031D0607493A021A46F1A9475AE8.cer
File: 5F00140F672D031D0607493A021A46F1A9475AE8.cer (raw, json)
Hash identifier: JmelvmfAWhQ2hmnpIkwxaQKDzfra7IqoE6l/rLAZuM4=
Subject key identifier: 5F:00:14:0F:67:2D:03:1D:06:07:49:3A:02:1A:46:F1:A9:47:5A:E8
Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10
Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710
Certificate serial: 4A4782CFCE07464E510FE2BC636A24DB3DB66A5B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
Manifest: rsync://rpki-rps.cnnic.cn/repo/A1095881215065456642/0/5F00140F672D031D0607493A021A46F1A9475AE8.mft
caRepository: rsync://rpki-rps.cnnic.cn/repo/A1095881215065456642/0/
Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml
Certificate not before: Mon 13 Apr 2026 01:15:43 +0000
Certificate not after: Mon 12 Apr 2027 01:20:43 +0000
Subordinate resources: AS: 137759
IP: 103.132.212.0/22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 12:10:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:47:82:cf:ce:07:46:4e:51:0f:e2:bc:63:6a:24:db:3d:b6:6a:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710
Validity
Not Before: Apr 13 01:15:43 2026 GMT
Not After : Apr 12 01:20:43 2027 GMT
Subject: CN=5F00140F672D031D0607493A021A46F1A9475AE8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:df:c3:52:27:a3:9a:84:a2:9f:09:6f:d6:d0:
a5:1b:24:8b:37:60:e0:62:8f:da:13:b0:23:f4:38:
e8:95:97:ee:6f:cc:20:ce:72:2f:be:ce:38:b8:70:
6d:aa:d4:ee:1a:86:78:0c:c6:04:3c:1d:67:c2:4e:
b6:01:7d:4e:69:0f:2a:c6:49:ef:4b:10:f6:fe:3b:
8a:a2:77:01:ea:44:ed:e7:ec:6f:d0:ee:74:85:86:
81:0e:a1:47:92:70:e7:e0:c2:1d:53:68:cc:0e:8b:
a1:ef:31:2d:34:6b:3e:a2:a5:3d:e9:34:48:4e:c4:
9f:8e:3e:7b:09:8b:c4:9f:08:33:47:1b:b4:06:93:
8d:a6:60:76:99:04:91:ad:ac:37:bf:0e:88:78:1a:
d2:60:42:b6:dd:e4:64:56:30:3e:e9:bd:3b:bc:1b:
47:2e:ee:9e:73:ce:6b:80:bf:f8:7d:75:4b:e1:9d:
3f:cd:07:32:cd:3e:0d:8c:b1:63:5a:0d:dd:a8:c8:
56:6e:d2:9c:69:0b:f7:bf:bb:07:6a:fa:42:cb:8c:
6a:ec:48:2d:38:0e:7a:9d:06:4e:45:bb:6a:53:ab:
53:e9:fc:5b:90:26:bf:ad:72:7d:3d:cb:cb:99:bc:
de:e2:f6:66:e7:1c:c6:ff:b3:92:85:37:dc:ca:e6:
f0:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
5F:00:14:0F:67:2D:03:1D:06:07:49:3A:02:1A:46:F1:A9:47:5A:E8
X509v3 Authority Key Identifier:
keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1095881215065456642/0/
RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1095881215065456642/0/5F00140F672D031D0607493A021A46F1A9475AE8.mft
RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.132.212.0/22
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
137759
Signature Algorithm: sha256WithRSAEncryption
1f:d8:47:0a:8c:9c:13:83:09:13:32:99:16:69:e2:ca:0b:dd:
63:a6:67:50:7c:6b:97:1c:ac:ba:2c:b1:ff:28:a5:49:d0:a5:
0a:09:d2:69:ff:96:9a:b6:2c:8d:92:62:ff:db:05:55:4f:91:
ce:3f:96:aa:28:30:7c:a5:4e:7d:5b:67:7a:43:71:88:ce:fe:
85:87:a7:41:80:4c:8b:0c:3d:ca:20:4a:e6:a8:3e:d9:0e:ad:
bc:2f:f1:70:ae:e1:ba:56:a5:5b:d2:aa:69:ce:5f:f1:59:21:
22:c7:ca:25:49:80:35:bd:1c:0c:ff:d5:74:f1:71:05:b5:64:
20:01:60:a9:61:d7:7e:60:c7:5b:df:38:7b:78:45:85:ee:94:
22:38:24:8c:da:08:6a:60:2d:6e:90:aa:79:22:1f:ba:1b:22:
c7:d1:64:4e:8a:43:ae:cc:e2:e9:31:56:73:9c:d8:b9:e6:58:
88:7e:95:b0:e4:e7:34:db:51:cb:d6:f2:92:0f:9e:f4:10:c9:
a2:1d:56:fa:b8:b0:e2:a3:cb:ae:93:30:1d:29:28:19:49:d0:
70:77:eb:14:40:e5:05:55:cf:47:a2:4e:be:03:43:8c:fb:bb:
c5:c3:2b:3a:5c:5e:0f:ca:43:9e:35:4c:c8:86:68:ce:ee:59:
ef:bc:85:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 09:29:03 2026 by rpki-client