
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6826FD4A927A10A458BBFA7C6B9EE467EE15B97B.cer
File: 6826FD4A927A10A458BBFA7C6B9EE467EE15B97B.cer (raw, json)
Hash identifier: pnBBM47zei+RNlh0mnp7OYeS3cPN0xdna1YsNnTOoqk=
Subject key identifier: 68:26:FD:4A:92:7A:10:A4:58:BB:FA:7C:6B:9E:E4:67:EE:15:B9:7B
Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10
Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710
Certificate serial: 68D0E3CBCA42A0547824CCF78DD13766CB11BCF2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
Manifest: rsync://rpki-rps.cnnic.cn/repo/A1065580055121428482/0/6826FD4A927A10A458BBFA7C6B9EE467EE15B97B.mft
caRepository: rsync://rpki-rps.cnnic.cn/repo/A1065580055121428482/0/
Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml
Certificate not before: Thu 28 May 2026 08:02:35 +0000
Certificate not after: Thu 27 May 2027 08:07:35 +0000
Subordinate resources: AS: 45079
IP: 101.52.0.0/16
IP: 2402:6f40::/32
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 May 2026 15:28:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:d0:e3:cb:ca:42:a0:54:78:24:cc:f7:8d:d1:37:66:cb:11:bc:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710
Validity
Not Before: May 28 08:02:35 2026 GMT
Not After : May 27 08:07:35 2027 GMT
Subject: CN=6826FD4A927A10A458BBFA7C6B9EE467EE15B97B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:f4:c3:b9:4c:9b:d0:28:ab:49:16:b4:47:82:
0b:72:d2:6a:92:a5:a0:2e:6d:26:53:5e:d3:d4:ec:
e0:98:32:02:b2:6b:f3:ef:1d:ba:b5:d0:cd:47:e7:
c9:da:cd:02:f9:38:35:be:57:a3:d6:88:7a:89:6a:
19:57:07:af:d3:e9:de:07:43:3e:87:05:33:04:cc:
cb:f2:98:7a:0a:77:2a:b8:38:00:f6:e6:a1:72:ab:
01:6f:2f:61:ee:da:85:1d:ee:7b:49:c1:44:a0:fe:
e5:2c:c2:82:dd:bc:8d:54:3d:ae:cc:6b:36:43:6b:
c0:db:1c:40:e2:a1:5c:84:9d:e5:c7:eb:0b:ed:fa:
c1:09:72:ed:2b:19:dc:aa:f7:69:64:e3:de:59:30:
55:2a:05:d0:84:50:c0:05:46:7b:3f:d3:4e:40:a3:
18:4c:d3:ff:43:b7:3b:55:40:f4:fd:9d:8e:65:41:
2e:c9:53:b9:c5:7f:e3:d2:4c:69:73:88:43:86:4e:
41:f5:23:6a:af:c3:6a:c2:25:7f:9f:b0:5e:2c:73:
34:44:c6:46:84:63:bb:58:91:47:92:33:9e:7c:e6:
3d:85:e4:f2:b2:d6:0b:fd:0e:5a:cf:72:ac:5f:6a:
3c:4b:8a:e6:95:cb:8f:73:d1:86:04:d0:f1:94:7e:
2f:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
68:26:FD:4A:92:7A:10:A4:58:BB:FA:7C:6B:9E:E4:67:EE:15:B9:7B
X509v3 Authority Key Identifier:
keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121428482/0/
RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121428482/0/6826FD4A927A10A458BBFA7C6B9EE467EE15B97B.mft
RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
101.52.0.0/16
IPv6:
2402:6f40::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
45079
Signature Algorithm: sha256WithRSAEncryption
04:5b:83:2a:a3:d7:4f:d9:3a:70:23:32:80:3c:39:4b:ca:d2:
06:55:da:7e:e2:db:21:1a:77:0c:f9:be:f7:58:1b:bd:90:17:
76:75:cc:5d:9e:bb:33:20:db:62:a1:20:b7:14:81:43:96:c9:
76:98:8f:1f:d6:48:f7:96:82:de:1c:0b:14:73:3c:a0:e8:93:
e9:65:9a:a4:ce:ec:22:50:43:19:34:fc:d8:72:5c:c9:de:f0:
92:14:7d:1c:fb:52:c2:88:7a:16:21:ca:f0:11:99:0a:34:22:
e0:53:46:e3:d9:7a:85:35:07:27:5a:67:66:f5:1e:3a:c8:5b:
21:36:13:68:aa:31:c7:a0:88:26:64:f7:54:be:54:7a:0b:01:
45:5a:e1:12:1f:3c:b4:fd:59:c4:a6:46:6a:7c:ae:11:82:fe:
3d:4e:0f:eb:8a:2b:e3:30:9e:dd:23:d1:f4:3a:82:fe:fc:24:
87:b5:9c:a0:c5:14:5c:fe:09:4b:af:e2:b5:fb:9d:83:27:7a:
87:3a:a9:97:0f:3e:79:eb:ad:e1:82:a3:2b:18:71:ae:d6:72:
56:ac:6f:fe:49:f7:41:98:33:b8:fe:ec:61:f4:96:2e:d0:f2:
57:4b:88:52:01:67:05:86:86:60:76:d4:e4:87:24:fe:7c:e7:
32:74:36:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 29 21:14:08 2026 by rpki-client