
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/83E69C7B79263FFF603292BA2BBC4995A77B7C5D.cer
File: 83E69C7B79263FFF603292BA2BBC4995A77B7C5D.cer (raw, json)
Hash identifier: 5x3SFf/ZrBN0pNJ888tPJe/J6JvNfBVf1Exi/jmBmbc=
Subject key identifier: 83:E6:9C:7B:79:26:3F:FF:60:32:92:BA:2B:BC:49:95:A7:7B:7C:5D
Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10
Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710
Certificate serial: 1CE4ED39307AC31EE6DFF730F43A0E2F1ADE9E97
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
Manifest: rsync://rpki-rps.cnnic.cn/repo/A1094533607986298883/0/83E69C7B79263FFF603292BA2BBC4995A77B7C5D.mft
caRepository: rsync://rpki-rps.cnnic.cn/repo/A1094533607986298883/0/
Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml
Certificate not before: Thu 09 Apr 2026 08:00:49 +0000
Certificate not after: Thu 08 Apr 2027 08:05:49 +0000
Subordinate resources: IP: 202.38.8.0/21
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 12:10:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:e4:ed:39:30:7a:c3:1e:e6:df:f7:30:f4:3a:0e:2f:1a:de:9e:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710
Validity
Not Before: Apr 9 08:00:49 2026 GMT
Not After : Apr 8 08:05:49 2027 GMT
Subject: CN=83E69C7B79263FFF603292BA2BBC4995A77B7C5D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:bb:57:8e:f3:b8:a6:7f:55:02:3f:65:ef:a4:
20:a4:09:b4:86:fb:c7:cd:78:5a:4f:a3:3b:ae:73:
b9:f0:ac:5f:3d:7b:9b:3f:8c:03:67:6a:22:3d:e9:
ee:7c:49:cd:a6:5f:43:41:3d:63:85:5a:ef:2c:7a:
24:19:3a:96:76:a5:35:cc:59:22:30:5e:22:2b:9c:
b5:2f:5f:fb:dc:78:fa:c4:f1:5a:56:72:2f:2f:08:
71:4c:08:c4:b7:0a:e4:d5:20:c1:8f:7a:8e:ad:ea:
b7:d6:27:dd:57:9a:c6:c0:ea:3b:8f:cf:32:3f:d9:
1a:4d:59:29:ab:e9:57:45:fc:3c:e2:cc:c1:09:51:
14:20:c5:eb:99:e5:dd:e4:b7:fa:8e:e7:a5:82:0e:
56:83:9a:1c:ff:ed:6b:cc:f3:67:02:6e:37:83:fc:
e8:6a:b9:ab:f7:fe:30:8a:bc:23:7d:d8:a6:e0:ca:
2e:c7:92:d9:06:e5:a2:88:cb:14:01:16:d8:6c:02:
ce:b7:f5:1c:43:78:78:a1:cf:d3:30:48:d1:64:55:
5f:ed:4f:79:81:9b:58:c1:1a:53:69:14:e7:66:ba:
79:4e:f0:8b:a7:f9:ce:4c:3e:f7:16:ad:67:97:31:
3d:cd:2f:a6:c9:c5:df:81:b2:db:64:54:6a:b3:9b:
f4:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
83:E6:9C:7B:79:26:3F:FF:60:32:92:BA:2B:BC:49:95:A7:7B:7C:5D
X509v3 Authority Key Identifier:
keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1094533607986298883/0/
RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1094533607986298883/0/83E69C7B79263FFF603292BA2BBC4995A77B7C5D.mft
RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.38.8.0/21
Signature Algorithm: sha256WithRSAEncryption
1d:80:d7:d3:bd:53:94:79:6f:f8:21:4c:98:99:e6:b6:0d:c0:
fc:a4:f1:56:ee:82:14:7f:d3:50:90:07:20:53:04:ff:10:f8:
2e:a4:db:11:18:42:fd:a6:8d:13:5a:80:af:03:57:e1:c0:70:
56:49:5d:e7:ab:f7:df:aa:43:01:a8:df:53:55:87:7f:e2:bd:
d1:74:16:6c:60:45:79:cf:ef:ea:5f:0b:9f:eb:f8:b9:30:ba:
50:99:70:cb:34:c3:5d:56:69:6a:c1:bd:d8:e3:dd:6e:71:d8:
1b:b4:91:b0:56:c0:d3:d6:fc:15:1e:73:32:91:f3:e6:77:ea:
7a:6f:c0:cd:a3:ba:97:4b:bd:55:4a:18:e8:d7:65:36:95:8c:
1a:d1:e5:d8:16:76:85:05:2b:35:6b:f8:c3:bb:55:27:ff:2f:
5c:86:c5:24:6a:a6:92:33:e9:ff:fa:ce:70:f6:a3:55:b8:08:
86:69:f3:d7:3f:bd:e9:a9:7b:6b:28:dd:df:38:e3:d6:97:f4:
b4:25:4f:cf:ac:e7:cb:2e:c5:3e:0d:3d:76:92:66:d6:65:74:
38:b1:9c:a7:52:21:a4:df:80:6f:ff:d5:4f:83:fb:d5:00:e6:
16:c3:3a:04:b1:8a:ad:a8:9d:de:ae:65:f8:5d:97:c1:fb:ea:
6a:fc:1c:e8
-----BEGIN CERTIFICATE-----
MIIFpzCCBI+gAwIBAgIUHOTtOTB6wx7m3/cw9DoOLxrenpcwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw
M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDQwOTA4MDA0OVoX
DTI3MDQwODA4MDU0OVowMzExMC8GA1UEAxMoODNFNjlDN0I3OTI2M0ZGRjYwMzI5
MkJBMkJCQzQ5OTVBNzdCN0M1RDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMa7V47zuKZ/VQI/Ze+kIKQJtIb7x814Wk+jO65zufCsXz17mz+MA2dqIj3p
7nxJzaZfQ0E9Y4Va7yx6JBk6lnalNcxZIjBeIiuctS9f+9x4+sTxWlZyLy8IcUwI
xLcK5NUgwY96jq3qt9Yn3VeaxsDqO4/PMj/ZGk1ZKavpV0X8POLMwQlRFCDF65nl
3eS3+o7npYIOVoOaHP/ta8zzZwJuN4P86Gq5q/f+MIq8I33YpuDKLseS2QbloojL
FAEW2GwCzrf1HEN4eKHP0zBI0WRVX+1PeYGbWMEaU2kU52a6eU7wi6f5zkw+9xat
Z5cxPc0vpsnF34Gy22RUarOb9A0CAwEAAaOCApowggKWMA8GA1UdEwEB/wQFMAMB
Af8wHQYDVR0OBBYEFIPmnHt5Jj//YDKSuiu8SZWne3xdMB8GA1UdIwQYMBaAFKVu
hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig
ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw
OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE
NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB
BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu
Y24vcmVwby9BMTA5NDUzMzYwNzk4NjI5ODg4My8wLzBuBggrBgEFBQcwCoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDk0NTMzNjA3OTg2Mjk4ODgz
LzAvODNFNjlDN0I3OTI2M0ZGRjYwMzI5MkJBMkJCQzQ5OTVBNzdCN0M1RC5tZnQw
OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp
ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAPKJggwDQYJKoZIhvcNAQELBQADggEBAB2A19O9
U5R5b/ghTJiZ5rYNwPyk8VbughR/01CQByBTBP8Q+C6k2xEYQv2mjRNagK8DV+HA
cFZJXeer99+qQwGo31NVh3/ivdF0FmxgRXnP7+pfC5/r+LkwulCZcMs0w11WaWrB
vdjj3W5x2Bu0kbBWwNPW/BUeczKR8+Z36npvwM2jupdLvVVKGOjXZTaVjBrR5dgW
doUFKzVr+MO7VSf/L1yGxSRqppIz6f/6znD2o1W4CIZp89c/vempe2so3d8449aX
9LQlT8+s58suxT4NPXaSZtZldDixnKdSIaTfgG//1U+D+9UA5hbDOgSxiq2ond6u
Zfhdl8H76mr8HOg=
-----END CERTIFICATE-----
Generated at Mon Apr 13 09:28:37 2026 by rpki-client