
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8C1BF16D482831971E03C6723A58EC7298BAC527.cer
File: 8C1BF16D482831971E03C6723A58EC7298BAC527.cer (raw, json)
Hash identifier: 9/3JplxJ4V/0z+dPAvb+Holg90MkAxGMIU3pvY3jE6Q=
Subject key identifier: 8C:1B:F1:6D:48:28:31:97:1E:03:C6:72:3A:58:EC:72:98:BA:C5:27
Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10
Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710
Certificate serial: 0FF5120AE212C13B217A126514B33F062365963A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
Manifest: rsync://rpki-rps.cnnic.cn/repo/A1112627356737994771/0/8C1BF16D482831971E03C6723A58EC7298BAC527.mft
caRepository: rsync://rpki-rps.cnnic.cn/repo/A1112627356737994771/0/
Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml
Certificate not before: Fri 29 May 2026 06:18:55 +0000
Certificate not after: Fri 28 May 2027 06:23:55 +0000
Subordinate resources: AS: 56010
IP: 103.29.136.0/22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 May 2026 15:28:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:f5:12:0a:e2:12:c1:3b:21:7a:12:65:14:b3:3f:06:23:65:96:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710
Validity
Not Before: May 29 06:18:55 2026 GMT
Not After : May 28 06:23:55 2027 GMT
Subject: CN=8C1BF16D482831971E03C6723A58EC7298BAC527
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:68:0b:5b:3d:1a:b6:d8:88:b3:b3:87:53:b9:
21:f7:df:4f:c8:66:d3:26:8a:f4:dd:d5:e0:c2:d4:
f8:7d:52:67:0d:10:ad:d4:4f:09:1e:90:2a:b9:fa:
ae:92:d7:0b:6c:91:96:a6:87:fb:7b:36:15:b5:fe:
9a:ba:84:fb:1d:2f:50:31:96:2c:53:be:79:e1:29:
29:4f:fb:bc:6a:c8:8a:79:bc:5d:81:c5:81:bc:09:
b3:b7:4d:ba:24:01:c5:c1:0f:9b:fe:06:82:c0:6d:
0d:2d:fd:06:0e:60:1b:3f:cb:4f:f3:31:df:25:88:
b5:6e:62:4d:42:7a:f5:9e:3c:00:b3:b3:dc:b7:8f:
4d:b5:1b:44:8a:a7:4a:27:c7:50:ef:d4:96:bc:99:
5b:20:04:00:09:c6:00:84:4e:e7:3e:ca:fe:5a:2f:
85:82:96:5e:0c:e4:ea:83:8e:ee:16:8f:52:0c:5b:
9a:1d:71:33:b5:4e:8f:d5:7d:9a:a8:fc:2f:82:83:
16:c4:9f:01:41:2b:52:52:ac:42:ec:17:b4:35:c4:
bd:8d:03:c4:c5:9d:d2:16:7d:6b:2f:d0:f9:8f:ff:
fb:e8:b1:29:0b:10:5c:96:d6:55:45:67:87:f9:f0:
c3:ab:ba:4a:8a:14:1c:99:65:43:a5:98:c1:ea:75:
f2:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
8C:1B:F1:6D:48:28:31:97:1E:03:C6:72:3A:58:EC:72:98:BA:C5:27
X509v3 Authority Key Identifier:
keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1112627356737994771/0/
RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1112627356737994771/0/8C1BF16D482831971E03C6723A58EC7298BAC527.mft
RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.29.136.0/22
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
56010
Signature Algorithm: sha256WithRSAEncryption
3b:da:89:51:0e:16:37:9d:60:b1:cb:6f:df:60:a9:e9:3b:19:
ff:25:17:cf:95:ff:34:3f:0d:48:63:3c:46:aa:5a:bd:82:98:
cc:38:7c:a8:89:58:77:80:68:00:8d:ae:9d:81:8a:19:53:60:
84:06:a1:81:d5:e5:73:3f:1d:ca:e6:a1:66:7e:ec:35:72:80:
c0:85:ef:55:53:0b:09:09:93:75:dc:52:b2:9b:79:62:b5:a9:
98:ed:97:57:39:34:f2:16:b0:cc:a1:d4:b8:e1:2b:81:89:5f:
19:25:48:c0:8d:52:22:15:14:1d:45:6c:3f:05:f7:63:4a:ed:
e5:dd:ba:4c:e3:04:be:c8:54:0e:2b:03:8f:98:f4:cb:10:18:
1f:b7:8b:9f:8e:fc:b8:fb:c5:ae:db:93:82:0f:e9:2d:7f:e0:
ae:f3:eb:f9:b0:fb:d5:ef:59:ad:b5:5d:09:c7:b5:59:79:fc:
ed:0d:d1:a3:45:3b:11:e9:b5:c7:3f:16:b0:68:7e:e6:e9:c2:
db:9d:fb:da:ee:3e:12:f5:48:51:71:ed:a2:26:57:63:c4:c7:
83:51:fd:42:53:49:ab:44:27:1d:76:34:7c:5d:d2:5f:ba:13:
6f:a9:d9:bd:38:10:8d:ee:c9:92:b7:e1:ab:eb:10:13:2c:d3:
0a:99:a7:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 29 21:12:21 2026 by rpki-client