Certificate
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8421F0680EB1B3756485D0F7681F78067E9C172E.cer
File: 8421F0680EB1B3756485D0F7681F78067E9C172E.cer (raw, json)
Hash identifier: Ww14Z2rOkTdKepfkH4vwVIvqbyF5zv2O+0TT24qZFNk=
Subject key identifier: 84:21:F0:68:0E:B1:B3:75:64:85:D0:F7:68:1F:78:06:7E:9C:17:2E
Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10
Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710
Certificate serial: 5CEFD43A5960947D44A3DAD3685D3FF58AB25D20
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
Manifest: rsync://rpki-rps.cnnic.cn/repo/A1065577241947471873/0/8421F0680EB1B3756485D0F7681F78067E9C172E.mft
caRepository: rsync://rpki-rps.cnnic.cn/repo/A1065577241947471873/0/
Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml
Certificate not before: Thu 28 May 2026 07:02:51 +0000
Certificate not after: Thu 27 May 2027 07:07:51 +0000
Subordinate resources: AS: 45061
AS: 63700
AS: 131532
IP: 45.115.44.0/22
IP: 45.116.52.0/22
IP: 45.254.184.0 -- 45.254.199.255
IP: 45.255.64.0/21
IP: 45.255.80.0 -- 45.255.119.255
IP: 45.255.136.0 -- 45.255.151.255
IP: 45.255.160.0/21
IP: 45.255.176.0/21
IP: 45.255.208.0/22
IP: 45.255.216.0 -- 45.255.251.255
IP: 103.13.244.0/22
IP: 103.80.44.0/22
IP: 103.98.228.0/22
IP: 103.251.84.0/22
IP: 114.28.68.0 -- 114.28.79.255
IP: 114.28.128.0/18
IP: 114.141.128.0/18
IP: 118.126.32.0/19
IP: 121.55.0.0/18
IP: 123.199.144.0/20
IP: 160.202.216.0/21
IP: 192.140.128.0/21
IP: 192.140.192.0/20
IP: 202.122.112.0/21
IP: 203.95.112.0/20
IP: 2400:8200::/31
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 May 2026 15:28:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:ef:d4:3a:59:60:94:7d:44:a3:da:d3:68:5d:3f:f5:8a:b2:5d:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710
Validity
Not Before: May 28 07:02:51 2026 GMT
Not After : May 27 07:07:51 2027 GMT
Subject: CN=8421F0680EB1B3756485D0F7681F78067E9C172E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:8d:eb:a8:9d:f9:8d:45:ac:5a:8c:00:5e:43:
cb:29:c8:2c:20:14:bc:ab:64:10:1c:bf:37:37:85:
0b:42:9b:ba:3b:ad:b8:42:62:12:a9:39:d2:56:cd:
67:0c:37:66:c5:cd:b7:33:17:54:06:b8:5c:6e:91:
9e:83:a1:54:e3:ad:0b:9d:22:ab:af:58:75:e9:24:
01:aa:d6:69:77:71:92:f6:3b:a2:c8:01:d3:83:63:
0c:3c:7b:95:07:ec:d5:6f:2d:a2:99:00:09:ca:42:
21:82:f6:06:85:99:4c:5b:96:4d:15:08:00:b7:ae:
ec:92:f5:2e:30:ae:6e:49:3f:1b:6b:94:b8:26:6d:
0d:da:03:3f:ae:29:64:d3:ea:ec:b5:0f:6d:c2:b6:
fa:12:ff:66:8d:40:51:74:80:e3:2d:12:a0:8f:5b:
ce:a9:9f:15:40:80:80:13:db:83:72:11:41:8e:1f:
da:da:1f:04:90:d3:7d:e3:8c:1c:d9:dc:ea:44:90:
fa:97:9b:32:45:c1:f2:83:80:8b:cb:4d:98:4d:6e:
f2:95:d3:47:1d:1f:b8:7d:86:fc:d2:0c:c5:a5:b0:
da:23:72:68:31:34:4f:a8:56:7e:79:da:f1:16:03:
90:12:80:78:21:ca:bb:0a:c3:07:ae:37:b4:3f:d6:
01:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
84:21:F0:68:0E:B1:B3:75:64:85:D0:F7:68:1F:78:06:7E:9C:17:2E
X509v3 Authority Key Identifier:
keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947471873/0/
RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947471873/0/8421F0680EB1B3756485D0F7681F78067E9C172E.mft
RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.115.44.0/22
45.116.52.0/22
45.254.184.0-45.254.199.255
45.255.64.0/21
45.255.80.0-45.255.119.255
45.255.136.0-45.255.151.255
45.255.160.0/21
45.255.176.0/21
45.255.208.0/22
45.255.216.0-45.255.251.255
103.13.244.0/22
103.80.44.0/22
103.98.228.0/22
103.251.84.0/22
114.28.68.0-114.28.79.255
114.28.128.0/18
114.141.128.0/18
118.126.32.0/19
121.55.0.0/18
123.199.144.0/20
160.202.216.0/21
192.140.128.0/21
192.140.192.0/20
202.122.112.0/21
203.95.112.0/20
IPv6:
2400:8200::/31
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
45061
63700
131532
Signature Algorithm: sha256WithRSAEncryption
41:a0:89:26:d2:da:7b:b6:d0:f7:fe:82:2e:c5:66:38:cf:33:
68:39:41:c8:46:aa:b1:37:e9:9e:8b:19:05:92:f5:00:9d:c9:
04:52:9a:93:49:63:7b:13:12:8b:cf:22:f5:5d:6e:77:36:d0:
fc:b1:73:ea:25:76:42:15:66:d8:79:1c:79:16:7f:07:a9:8b:
3d:41:65:74:14:60:eb:89:94:24:f6:18:1e:00:e5:3f:c0:a7:
c2:60:12:f0:cd:74:0d:72:5b:4b:d7:c0:3a:4b:05:76:dd:51:
ab:ad:4e:c0:8c:27:c2:d5:b3:a5:97:14:6e:2f:d5:c1:4f:b8:
a3:71:71:e2:03:f6:c0:95:e7:e4:45:98:a0:0f:9c:d8:3c:cf:
22:c2:8c:f6:22:8b:9c:6a:b6:a4:45:2f:96:2e:9f:eb:53:6c:
8e:51:92:3e:b0:31:94:db:c9:78:87:74:72:e8:bc:f4:16:8a:
6b:f4:f7:9a:d7:27:85:da:9b:c4:9f:50:4e:04:c5:7f:1b:71:
f9:e1:7f:9e:0b:5c:d1:bc:7c:2f:8b:91:94:6b:11:c4:8b:23:
25:13:ea:1b:0c:78:9a:af:ad:ee:a3:3e:41:03:d2:9e:07:de:
40:92:de:84:e2:41:b3:79:b0:e7:9b:95:56:c3:6f:fe:d1:ff:
c3:28:67:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 29 21:13:50 2026 by rpki-client