
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6EC1E34EADEA227095D578E784C85C8FAB3B907E.cer
File: 6EC1E34EADEA227095D578E784C85C8FAB3B907E.cer (raw, json)
Hash identifier: 1WWj+daRz4npLxTwbjPMsnSuj+a3bnofHZ7tTwXksRA=
Subject key identifier: 6E:C1:E3:4E:AD:EA:22:70:95:D5:78:E7:84:C8:5C:8F:AB:3B:90:7E
Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10
Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710
Certificate serial: 373B2CF6E379A73ED2D746818BE13B615FFDB241
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
Manifest: rsync://rpki-rps.cnnic.cn/repo/A1065591683061907458/0/6EC1E34EADEA227095D578E784C85C8FAB3B907E.mft
caRepository: rsync://rpki-rps.cnnic.cn/repo/A1065591683061907458/0/
Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml
Certificate not before: Fri 29 May 2026 06:45:50 +0000
Certificate not after: Fri 28 May 2027 06:50:50 +0000
Subordinate resources: IP: 210.87.72.0/23
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 May 2026 15:28:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:3b:2c:f6:e3:79:a7:3e:d2:d7:46:81:8b:e1:3b:61:5f:fd:b2:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710
Validity
Not Before: May 29 06:45:50 2026 GMT
Not After : May 28 06:50:50 2027 GMT
Subject: CN=6EC1E34EADEA227095D578E784C85C8FAB3B907E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:4b:9b:58:75:43:96:54:9b:4f:31:5d:ae:a6:
07:ad:ab:8f:ce:48:bb:29:c5:6e:aa:77:f1:a5:83:
70:28:e4:0c:74:ef:e3:15:44:4e:5f:5f:9c:2b:8e:
d6:6c:7f:71:52:fb:09:b7:9b:e1:48:b7:53:7c:fb:
dc:d4:f4:a9:fc:13:c2:37:e0:f4:55:73:fe:4c:ed:
aa:64:4b:2a:65:87:d1:13:36:e5:6a:3e:c5:9f:db:
fa:d4:7c:ba:e8:70:b4:cc:a6:ab:28:76:10:9c:76:
4a:76:c1:a3:ae:ef:09:82:40:52:eb:46:2d:c1:b5:
8a:04:4c:2b:ad:13:d3:09:7f:30:82:7a:ed:2b:e5:
09:b8:67:d8:ae:4c:31:b0:85:9e:a0:e4:85:cd:1f:
a4:e4:18:5f:ec:38:fc:d1:bd:29:e2:ce:ab:8f:7d:
13:fb:b4:19:c5:0c:f8:43:fb:9e:58:d8:6b:09:97:
b5:71:2f:79:19:f2:c0:3d:1a:db:d2:58:a1:6a:48:
5f:b4:00:f0:6b:54:e8:45:38:8a:80:90:fa:98:fa:
2d:8a:ee:7c:f3:07:94:0d:a0:cd:92:f7:28:0d:c8:
f3:93:84:9c:bf:91:c3:14:a2:56:8c:ce:a8:51:bb:
09:96:0e:f9:f4:d0:24:13:ac:5f:4f:cb:6e:00:bd:
90:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
6E:C1:E3:4E:AD:EA:22:70:95:D5:78:E7:84:C8:5C:8F:AB:3B:90:7E
X509v3 Authority Key Identifier:
keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591683061907458/0/
RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591683061907458/0/6EC1E34EADEA227095D578E784C85C8FAB3B907E.mft
RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
210.87.72.0/23
Signature Algorithm: sha256WithRSAEncryption
45:50:62:40:0e:52:13:22:59:c9:b4:ea:bc:45:a9:50:ed:37:
0b:9b:b6:59:44:88:2e:67:f6:05:25:27:27:4c:07:5e:77:ca:
ea:d8:67:8a:77:4c:6a:3d:83:43:e3:c5:7b:bd:d5:a6:e6:4d:
26:05:dc:07:4c:f9:48:28:0f:89:2a:4b:51:e2:c0:50:05:c2:
fa:aa:05:e2:b6:99:9f:32:b9:99:34:88:4b:f9:29:b8:9e:62:
01:cb:52:59:e4:d7:bb:0f:68:ba:3a:fa:c8:8e:90:b3:d7:63:
3f:3a:21:ee:64:e6:4c:82:31:70:60:56:af:93:a7:15:69:b0:
a2:f2:f3:51:8f:5e:1b:18:2e:bf:4f:d1:d6:3b:25:f6:f3:fe:
da:e4:b6:f4:45:44:85:37:35:31:f0:a9:9d:25:64:42:7c:f6:
09:63:3d:02:b2:28:3b:fd:28:a6:ee:b7:ca:ea:99:69:37:54:
42:b8:2e:c1:59:aa:db:b1:fa:88:41:ee:7a:0c:61:85:5b:59:
8e:0f:8a:e2:2d:e6:90:ef:55:cc:e4:4c:51:3f:a5:98:27:84:
33:4d:39:13:55:2f:3d:fd:03:a4:8e:08:6d:53:93:d6:81:e9:
a2:af:28:19:d8:a1:fb:f2:37:37:12:80:11:01:39:c7:1c:b8:
59:a4:95:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 29 21:14:09 2026 by rpki-client