
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B86BD3FA0FB0B37BAC64D6C8D2D9F6636536E72.cer
File: 6B86BD3FA0FB0B37BAC64D6C8D2D9F6636536E72.cer (raw, json)
Hash identifier: +ET9xn94XeSEbXtNLIps/TbS0SkJdpQ4EJZkSIkGCFA=
Subject key identifier: 6B:86:BD:3F:A0:FB:0B:37:BA:C6:4D:6C:8D:2D:9F:66:36:53:6E:72
Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10
Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710
Certificate serial: 78C452E7C60E1E15CD79D55425C3232CBEB6835D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
Manifest: rsync://rpki-rps.cnnic.cn/repo/A1094551670852943873/0/6B86BD3FA0FB0B37BAC64D6C8D2D9F6636536E72.mft
caRepository: rsync://rpki-rps.cnnic.cn/repo/A1094551670852943873/0/
Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml
Certificate not before: Thu 09 Apr 2026 09:12:35 +0000
Certificate not after: Thu 08 Apr 2027 09:17:35 +0000
Subordinate resources: AS: 137764
IP: 103.98.40.0/22
IP: 103.105.200.0/22
IP: 103.139.212.0/23
IP: 2403:5ec0::/32
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 12:10:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:c4:52:e7:c6:0e:1e:15:cd:79:d5:54:25:c3:23:2c:be:b6:83:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710
Validity
Not Before: Apr 9 09:12:35 2026 GMT
Not After : Apr 8 09:17:35 2027 GMT
Subject: CN=6B86BD3FA0FB0B37BAC64D6C8D2D9F6636536E72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ef:70:85:c1:0a:5a:c5:4e:1c:5d:a5:57:e0:
18:fe:6b:6e:16:87:87:26:db:19:5f:bd:02:b8:2e:
87:3d:6e:e4:5d:1e:14:77:0b:a5:64:ad:16:ec:df:
ee:a6:dc:90:e7:db:24:28:b4:3e:8d:62:ff:7f:98:
ee:6a:a7:3a:3b:f3:91:fd:95:c5:d5:9d:6d:5f:09:
e0:26:1a:f7:c9:a5:0d:e2:8e:6c:aa:c4:4f:18:73:
0f:46:52:35:db:6a:30:aa:0a:ef:fb:1c:e8:5b:cb:
e0:a1:f7:bd:36:cc:ed:61:52:e4:bf:58:05:46:96:
04:03:5d:07:3c:b9:ef:d8:bc:a2:0b:7d:7a:ec:e4:
01:df:18:7e:e5:c6:17:f8:55:f5:0a:72:ac:c2:23:
79:32:91:a2:b7:9d:e6:fc:6f:7b:30:96:6a:63:ab:
c4:77:58:bb:df:b4:74:12:97:68:6b:aa:61:29:c4:
5b:13:c3:e7:62:1e:d4:ed:f2:6c:eb:4c:27:cc:ae:
8c:78:90:31:22:09:b0:c5:98:e2:f5:77:89:64:d7:
8c:f6:3d:dd:ad:51:60:6e:b1:d9:4e:4d:82:6b:ad:
0c:6a:4a:06:04:99:8d:91:5c:a4:37:91:d0:b0:c6:
1c:3f:91:6c:7e:37:2f:76:4d:73:d4:86:b4:62:76:
27:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
6B:86:BD:3F:A0:FB:0B:37:BA:C6:4D:6C:8D:2D:9F:66:36:53:6E:72
X509v3 Authority Key Identifier:
keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1094551670852943873/0/
RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1094551670852943873/0/6B86BD3FA0FB0B37BAC64D6C8D2D9F6636536E72.mft
RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.98.40.0/22
103.105.200.0/22
103.139.212.0/23
IPv6:
2403:5ec0::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
137764
Signature Algorithm: sha256WithRSAEncryption
1c:77:ef:5f:86:2b:7a:10:87:24:fc:0f:11:00:1d:da:1d:21:
16:19:5b:46:2c:bc:30:57:5a:4a:1c:90:48:ef:a1:c8:bc:a9:
33:29:1a:95:e0:4a:d9:34:31:5a:80:71:30:5a:a9:6d:75:5e:
fc:df:a0:a0:1d:4b:38:1a:3d:fc:a1:03:da:82:b5:96:c7:61:
e6:3e:cd:75:65:3d:93:fe:d4:b9:9b:b1:da:98:ff:d5:dc:0e:
e5:3a:0b:b7:13:37:07:9b:37:62:e2:04:3f:99:b6:27:1a:30:
e8:35:7b:ef:03:44:45:d5:9f:d4:2f:89:80:79:78:a0:5e:c1:
c1:b5:da:43:d2:e6:7b:3a:2b:e0:c1:a2:4b:43:99:20:a6:c0:
44:c2:98:98:7e:4b:ba:da:ab:5c:bb:c9:87:d9:1a:55:51:b1:
3a:3e:c5:ed:db:8c:49:66:26:ee:a1:38:f6:23:aa:6c:da:85:
98:e3:46:53:61:db:f9:d2:12:ec:2e:b3:6d:12:0e:3a:5d:7e:
1f:5f:45:e5:30:d6:67:37:5a:b5:77:ad:7b:29:03:28:f9:52:
95:84:30:a4:75:75:fb:fd:60:55:a2:d6:67:fd:68:cf:5d:9f:
c2:1b:71:93:b9:aa:f9:bd:02:eb:83:eb:1f:c5:4d:a6:c4:d8:
b9:53:b0:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 09:29:03 2026 by rpki-client