
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5FC9ED42C0C65E1325089AE613864A6A06CEC140.cer
File: 5FC9ED42C0C65E1325089AE613864A6A06CEC140.cer (raw, json)
Hash identifier: GSTqJKSrcsFAX9GAoMCuze7xhhwbiBWm8pf+H3dHDh4=
Subject key identifier: 5F:C9:ED:42:C0:C6:5E:13:25:08:9A:E6:13:86:4A:6A:06:CE:C1:40
Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10
Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710
Certificate serial: 66892BB5E0EC045E827FB83E5C4A4CBB0DFC1D08
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
Manifest: rsync://rpki-rps.cnnic.cn/repo/A1065582741577531394/0/5FC9ED42C0C65E1325089AE613864A6A06CEC140.mft
caRepository: rsync://rpki-rps.cnnic.cn/repo/A1065582741577531394/0/
Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml
Certificate not before: Thu 28 May 2026 09:01:59 +0000
Certificate not after: Thu 27 May 2027 09:06:59 +0000
Subordinate resources: AS: 131530
IP: 103.98.164.0/22
IP: 2403:fc0::/32
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 May 2026 15:28:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:89:2b:b5:e0:ec:04:5e:82:7f:b8:3e:5c:4a:4c:bb:0d:fc:1d:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710
Validity
Not Before: May 28 09:01:59 2026 GMT
Not After : May 27 09:06:59 2027 GMT
Subject: CN=5FC9ED42C0C65E1325089AE613864A6A06CEC140
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:16:ab:53:1e:54:d1:db:f6:a5:2d:5f:17:9e:
41:3c:46:12:ef:67:36:a3:46:0b:db:45:64:05:81:
82:6f:8d:ae:9f:b4:f7:01:96:18:c8:6c:ca:eb:ad:
77:d5:c1:bc:e6:4f:34:48:54:64:fd:8a:77:6a:44:
01:71:db:29:52:48:58:c1:99:07:20:f8:1e:5d:e2:
e4:bf:53:8f:12:9b:6b:ac:88:c0:d4:6e:e8:62:99:
6e:27:44:34:95:b2:17:2c:cc:2c:4f:91:2f:f0:a9:
64:ff:b4:22:45:7b:41:ad:70:2a:c5:a1:0a:4e:82:
54:d0:35:e0:1b:52:1e:b0:ea:a0:f1:57:8d:69:20:
33:ee:05:19:aa:b4:1c:5a:d2:aa:02:01:24:d8:ea:
ff:ea:cd:73:28:4e:1a:31:2c:c8:bc:3d:45:57:14:
18:b1:df:7e:81:39:8f:b4:d6:c7:b9:2c:f2:49:1e:
7c:da:a8:ba:ed:71:97:99:ea:f1:af:cd:7f:7d:d3:
46:44:c6:cc:e8:c0:2c:b4:9c:70:c4:52:b0:10:1c:
58:28:92:f7:c4:8e:20:03:9e:5d:6f:5e:e6:63:4f:
c4:da:9f:72:a3:d5:0f:3f:ce:69:ab:41:a4:e2:02:
a0:e9:93:c4:c4:c9:98:bd:a5:c7:49:f7:a8:4c:50:
97:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
5F:C9:ED:42:C0:C6:5E:13:25:08:9A:E6:13:86:4A:6A:06:CE:C1:40
X509v3 Authority Key Identifier:
keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577531394/0/
RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577531394/0/5FC9ED42C0C65E1325089AE613864A6A06CEC140.mft
RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.98.164.0/22
IPv6:
2403:fc0::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
131530
Signature Algorithm: sha256WithRSAEncryption
6c:7a:3f:93:53:7a:8e:da:a2:72:4f:28:d0:c9:c4:fc:89:1a:
f6:3c:a3:ae:27:f5:ff:45:a4:c7:b9:de:4f:79:cc:b5:e1:90:
5b:60:e1:20:00:28:9a:cc:14:fd:05:a8:e6:9c:bd:fc:d5:a8:
76:3c:06:31:d0:71:39:00:96:7f:32:a8:68:37:a6:45:df:38:
4f:6c:5f:76:17:47:89:e0:d2:08:c2:82:da:3d:8c:c3:b6:31:
e1:b7:05:7f:3e:80:b2:62:0e:e4:ae:4d:dd:5c:68:f2:f5:48:
60:13:18:02:27:9c:0a:0e:de:f6:63:24:49:0d:1c:a8:57:de:
65:76:94:b8:2f:a3:c3:e7:f0:2f:02:d5:83:ce:b0:3f:d2:29:
4b:9c:95:3f:da:be:b7:c5:5f:cf:a5:cc:ab:0f:62:58:88:70:
f3:c6:e1:fc:e0:63:bf:3b:98:c9:72:80:1b:5c:3a:51:6a:e2:
d2:06:35:fb:30:98:78:fc:7c:f3:19:48:f5:eb:dc:ef:d3:a5:
46:35:44:04:a4:d6:28:56:e7:ae:c0:2c:f4:8c:9d:2e:6b:02:
8e:54:64:84:75:1e:68:b8:12:85:87:63:8b:c8:2c:5c:91:3c:
c7:09:4c:12:43:6b:dd:6b:fa:67:1a:12:56:ef:14:87:87:ad:
50:54:1e:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 29 21:13:51 2026 by rpki-client