
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8FAB27452D80D270582E88C3F77F13734A31720D.cer
File: 8FAB27452D80D270582E88C3F77F13734A31720D.cer (raw, json)
Hash identifier: uA85ivc1KQ6Hsb6UJ/16+YBMG5lDEAZ7k/hehek/FRU=
Subject key identifier: 8F:AB:27:45:2D:80:D2:70:58:2E:88:C3:F7:7F:13:73:4A:31:72:0D
Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10
Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710
Certificate serial: 7E90BC79FCAFFB2659DF5B0E1113D43A3F41CC25
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
Manifest: rsync://rpki-rps.cnnic.cn/repo/A1065583221972271107/0/8FAB27452D80D270582E88C3F77F13734A31720D.mft
caRepository: rsync://rpki-rps.cnnic.cn/repo/A1065583221972271107/0/
Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml
Certificate not before: Fri 29 May 2026 01:23:03 +0000
Certificate not after: Fri 28 May 2027 01:28:03 +0000
Subordinate resources: AS: 139148
IP: 103.145.42.0/23
IP: 115.172.32.0/19
IP: 115.174.0.0/18
IP: 115.174.96.0 -- 115.174.255.255
IP: 2405:78c0::/32
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 May 2026 15:28:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:90:bc:79:fc:af:fb:26:59:df:5b:0e:11:13:d4:3a:3f:41:cc:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710
Validity
Not Before: May 29 01:23:03 2026 GMT
Not After : May 28 01:28:03 2027 GMT
Subject: CN=8FAB27452D80D270582E88C3F77F13734A31720D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:85:74:ad:d8:13:c5:14:c7:56:79:00:f3:d7:
f8:8e:0d:5f:a8:d8:f9:e9:05:75:c1:8d:93:1e:39:
dd:ea:fc:f5:72:99:0a:57:cc:7f:0f:f1:87:a6:2a:
38:68:3c:3a:11:98:ec:11:98:50:9a:e8:3d:1c:d2:
58:e0:d9:c5:17:4f:22:63:59:09:44:ed:ca:90:e8:
f3:e0:31:6f:64:aa:3e:a7:84:05:43:5a:5d:8c:e3:
2d:80:51:91:6d:99:2b:11:93:f6:c5:a4:b5:39:30:
4a:13:fd:03:e7:bc:aa:96:fd:84:f8:46:ab:17:1e:
f6:73:6c:32:1f:b0:9e:73:c3:8b:95:b4:40:4a:44:
25:f0:f8:c4:cc:9f:b9:3a:dc:78:7e:05:dd:b6:f6:
59:8f:70:73:e5:9b:a9:19:2f:97:16:db:02:c7:c5:
06:e9:9d:de:c4:e3:1c:76:40:a2:48:19:cd:3f:34:
8c:ae:75:ac:e6:af:a1:e9:90:a7:5a:48:08:8d:e4:
10:3c:dc:23:71:ac:34:47:17:8d:68:90:38:ba:be:
0a:39:9a:54:08:a2:d4:77:ab:bc:a8:02:c9:0a:5d:
75:04:49:f0:e9:48:89:a6:72:8a:e4:10:6f:1d:76:
03:9f:bc:e2:0a:24:f6:c2:51:a5:74:c5:26:20:49:
42:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
8F:AB:27:45:2D:80:D2:70:58:2E:88:C3:F7:7F:13:73:4A:31:72:0D
X509v3 Authority Key Identifier:
keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1065583221972271107/0/
RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1065583221972271107/0/8FAB27452D80D270582E88C3F77F13734A31720D.mft
RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.145.42.0/23
115.172.32.0/19
115.174.0.0/18
115.174.96.0-115.174.255.255
IPv6:
2405:78c0::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
139148
Signature Algorithm: sha256WithRSAEncryption
27:d2:99:cd:e6:14:de:61:25:3e:d9:39:a8:fc:ff:54:49:5b:
f9:78:21:68:f7:07:e2:ab:2a:56:91:84:b7:88:97:f2:d4:e8:
18:dc:4d:55:d3:17:e7:1a:57:a4:1c:4b:61:4a:9b:da:f9:24:
86:1e:fa:bf:59:90:8e:3f:8d:3a:f9:c7:7b:26:ae:10:dc:1d:
7a:df:db:71:34:23:f8:35:9e:8e:0b:c9:68:9d:df:7f:45:10:
25:75:6f:cd:68:83:6d:bf:8e:97:72:b7:82:08:72:3f:f1:65:
d7:ad:b3:86:69:9c:72:ba:f7:c4:fd:5f:20:35:bc:a6:8e:0c:
9b:46:7a:40:79:cd:16:0b:b5:57:8b:ab:6d:fa:c8:3c:0c:31:
b5:84:ed:64:be:ab:ef:20:86:2a:f4:9e:67:0c:1f:ec:88:b5:
bd:e0:4c:75:7f:c5:e8:e7:1c:e6:02:dd:72:ef:f9:cd:e7:c0:
51:e5:a3:3e:b8:fa:9d:74:72:6e:92:4d:44:f5:63:8c:b7:a6:
eb:88:79:bf:a5:3a:93:cc:23:77:c6:2c:aa:4f:ad:90:bd:3a:
f2:3d:2e:3d:39:d9:0f:1d:35:e8:5e:60:05:dd:e8:37:10:5f:
48:27:90:56:0e:7d:05:ac:d5:5a:e4:3a:54:c0:7f:ff:3e:fa:
85:55:4b:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 29 21:13:58 2026 by rpki-client