Certificate
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer
File: 71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer (raw, json)
Hash identifier: mE+vz/6fCd+19/+r9rIxMpLiB8dA1BOJxpGD4yCWaoo=
Subject key identifier: 71:C9:BF:E4:C8:FD:7E:77:7A:1C:9E:55:DF:A6:0A:3A:C2:9A:25:4E
Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10
Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710
Certificate serial: 10474BF59792B5D26C969E69BD345858D4ECE06E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
Manifest: rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.mft
caRepository: rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/
Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml
Certificate not before: Thu 28 May 2026 07:39:09 +0000
Certificate not after: Thu 27 May 2027 07:44:09 +0000
Subordinate resources: AS: 63567
IP: 43.226.96.0/20
IP: 43.240.0.0/22
IP: 43.241.48.0/22
IP: 43.247.92.0/22
IP: 43.248.80.0/20
IP: 43.248.176.0 -- 43.248.207.255
IP: 103.37.44.0/22
IP: 103.40.12.0/22
IP: 103.45.160.0/22
IP: 103.83.72.0/22
IP: 103.87.180.0/22
IP: 103.98.140.0 -- 103.98.147.255
IP: 103.205.252.0/22
IP: 103.239.244.0/22
IP: 111.223.12.0/22
IP: 2403:3380::/32
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Jun 2026 19:04:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:47:4b:f5:97:92:b5:d2:6c:96:9e:69:bd:34:58:58:d4:ec:e0:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710
Validity
Not Before: May 28 07:39:09 2026 GMT
Not After : May 27 07:44:09 2027 GMT
Subject: CN=71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:ae:d1:9a:06:98:32:16:37:12:ff:14:df:fc:
e9:2d:ae:e7:d9:dd:0b:54:51:b1:d7:2a:64:4e:09:
e3:ba:b0:a8:a9:ef:20:5a:dd:56:4f:77:b2:91:b7:
1d:40:d3:72:7c:1a:4f:d6:e7:a0:0c:6e:28:17:bd:
7f:58:e4:36:28:da:fe:00:58:03:08:41:ca:20:2b:
eb:25:ce:7a:62:de:16:b4:42:74:9e:ea:d6:1c:43:
73:db:65:27:a0:17:f6:be:4e:f6:98:f3:fa:d1:8e:
2c:0f:9c:b4:e8:41:b4:d6:44:0b:cf:65:cb:e0:c3:
7e:67:69:4d:94:ed:bd:6b:58:9c:ca:35:22:fe:5a:
ed:86:da:0d:20:d5:fd:8c:8e:91:b0:8d:7a:21:1e:
9e:a6:61:28:17:72:8f:7d:ce:1a:2f:a4:b4:59:9c:
d2:4c:a3:f0:81:ae:e9:ad:8a:46:aa:b5:bc:f9:10:
9c:7a:6b:ef:25:13:27:a1:2e:a3:48:e1:94:52:fa:
9f:b1:a1:45:9c:31:d9:41:3c:c1:7c:cb:7a:0b:7d:
a9:e1:76:03:c5:b9:8e:5c:04:a2:3b:05:a2:68:78:
8e:45:20:10:f3:c0:52:0b:22:bb:db:24:4a:b7:c2:
59:dd:8d:dd:5a:08:c0:f1:e6:3b:c5:45:9e:77:b9:
3a:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
71:C9:BF:E4:C8:FD:7E:77:7A:1C:9E:55:DF:A6:0A:3A:C2:9A:25:4E
X509v3 Authority Key Identifier:
keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/
RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.mft
RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
43.226.96.0/20
43.240.0.0/22
43.241.48.0/22
43.247.92.0/22
43.248.80.0/20
43.248.176.0-43.248.207.255
103.37.44.0/22
103.40.12.0/22
103.45.160.0/22
103.83.72.0/22
103.87.180.0/22
103.98.140.0-103.98.147.255
103.205.252.0/22
103.239.244.0/22
111.223.12.0/22
IPv6:
2403:3380::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
63567
Signature Algorithm: sha256WithRSAEncryption
31:8f:5a:51:21:2c:9c:56:33:c6:d8:02:0d:ea:ea:2a:59:c2:
e9:99:d2:2b:63:7a:74:23:91:7a:1d:be:03:4a:98:17:86:31:
68:36:0d:1c:b3:b9:19:2a:66:24:8b:4b:b7:6a:43:e9:18:35:
c9:88:53:a4:eb:ff:48:3e:b9:64:50:d4:b1:cd:69:e2:bf:f9:
80:27:3e:1d:1d:72:3a:36:21:2c:1a:8a:94:5a:af:74:d5:68:
de:c4:6b:29:27:3a:5f:3b:6d:2c:a6:0a:09:0c:d2:11:01:d2:
0c:6a:3f:f2:ae:ff:bb:4e:74:3c:36:5a:a4:e2:f9:c5:ab:26:
28:a4:bb:44:cc:a7:ea:83:29:39:6f:77:0f:f6:38:dd:4f:a1:
53:0f:14:9c:5e:0c:d5:5d:ce:ba:22:ce:b7:42:c0:1d:bf:c8:
f3:de:8d:e8:67:b6:68:7f:41:12:19:6a:a1:f3:86:e1:20:e2:
56:5c:06:65:bc:ea:90:bd:5e:63:88:49:43:14:14:9f:0c:17:
55:86:5d:93:c8:98:3e:7f:13:a3:b2:f0:e7:a5:2b:4a:67:b9:
ba:31:5f:14:24:17:18:93:72:96:35:9a:a1:be:36:1c:60:ad:
fa:23:04:0b:7a:09:4f:92:19:3e:34:e9:c8:dc:5b:45:f3:3c:
70:b0:53:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 03:40:49 2026 by rpki-client