
Certificate
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/91C6B644DD6D84839ED120FBC00984D60495C8C4.cer
File: 91C6B644DD6D84839ED120FBC00984D60495C8C4.cer (raw, json)
Hash identifier: ljN1yH5wL3lBNn3RhMgwgsxXq5uktDMp9aNqIRq1XrA=
Subject key identifier: 91:C6:B6:44:DD:6D:84:83:9E:D1:20:FB:C0:09:84:D6:04:95:C8:C4
Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10
Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710
Certificate serial: 58F359C396E9434375AD38031A2B949FDDB9234B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
Manifest: rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/91C6B644DD6D84839ED120FBC00984D60495C8C4.mft
caRepository: rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/
Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml
Certificate not before: Tue 30 Jun 2026 07:11:15 +0000
Certificate not after: Tue 29 Jun 2027 07:16:15 +0000
Subordinate resources: AS: 24403 -- 24404
AS: 37967
AS: 38339
AS: 38353
AS: 45099 -- 45100
IP: 42.51.0.0/16
IP: 49.4.132.0 -- 49.4.191.255
IP: 49.5.0.0/16
IP: 58.99.128.0/17
IP: 61.4.82.0/23
IP: 101.36.128.0/17
IP: 106.2.224.0/19
IP: 106.3.32.0 -- 106.3.79.255
IP: 106.3.84.0/22
IP: 106.3.160.0/20
IP: 106.3.208.0 -- 106.3.255.255
IP: 110.173.0.0/21
IP: 110.232.32.0/19
IP: 114.64.0.0 -- 114.66.63.255
IP: 114.66.82.0 -- 114.66.127.255
IP: 114.112.6.0 -- 114.112.13.255
IP: 114.112.16.0/21
IP: 114.112.32.0 -- 114.112.95.255
IP: 114.112.108.0 -- 114.112.135.255
IP: 114.112.152.0 -- 114.112.199.255
IP: 114.112.224.0 -- 114.113.195.255
IP: 114.113.204.0/22
IP: 114.113.216.0/21
IP: 114.113.240.0/20
IP: 116.69.0.0/17
IP: 116.90.80.0/20
IP: 116.196.16.0 -- 116.196.63.255
IP: 116.255.128.0/17
IP: 119.40.0.0/18
IP: 119.57.0.0/16
IP: 119.63.32.0/19
IP: 121.52.208.0/20
IP: 121.58.144.0/20
IP: 121.79.128.0/18
IP: 121.101.208.0/20
IP: 121.201.0.0/17
IP: 122.14.192.0/18
IP: 122.49.0.0/18
IP: 122.102.0.0/20
IP: 122.112.0.0/19
IP: 122.112.64.0/18
IP: 122.115.16.0/20
IP: 122.115.64.0 -- 122.115.223.255
IP: 122.115.240.0/20
IP: 122.198.64.0/22
IP: 122.200.96.0/19
IP: 123.58.96.0/19
IP: 123.108.208.0/20
IP: 124.248.32.0/19
IP: 125.61.128.0/18
IP: 175.26.0.0/16
IP: 180.186.0.0/16
IP: 182.50.0.0/22
IP: 203.80.144.0/20
IP: 203.135.160.0/20
IP: 203.171.224.0/20
IP: 203.191.16.0/20
IP: 210.2.16.0/21
IP: 210.14.128.0/19
IP: 210.56.192.0/19
IP: 210.74.0.0/19
IP: 211.100.96.0/19
IP: 211.102.192.0/20
IP: 218.241.0.0/19
IP: 218.241.64.0/19
IP: 218.245.0.0 -- 218.245.47.255
IP: 219.232.224.0/19
IP: 223.252.128.0/18
IP: 223.252.224.0/19
IP: 2401:e00::/32
IP: 2401:ba00::/32
IP: 2401:be00::/32
IP: 2401:c200::/32
IP: 2401:c600::/32
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 15 Jul 2026 20:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:f3:59:c3:96:e9:43:43:75:ad:38:03:1a:2b:94:9f:dd:b9:23:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710
Validity
Not Before: Jun 30 07:11:15 2026 GMT
Not After : Jun 29 07:16:15 2027 GMT
Subject: CN=91C6B644DD6D84839ED120FBC00984D60495C8C4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:bd:79:8e:87:d3:bc:b1:f4:56:b2:42:af:fd:
63:97:b9:cc:22:50:19:32:c7:c8:d3:2b:22:f2:04:
82:ec:f7:0c:60:e0:12:1a:43:a4:58:52:e2:87:f5:
92:b7:63:a8:85:b8:71:2b:15:a2:48:40:22:ae:5a:
7e:44:9d:58:43:72:24:81:56:40:49:ff:c9:13:3b:
1e:05:cb:a1:12:36:23:39:83:4a:f4:f8:cf:80:6a:
51:02:b1:89:74:e6:bf:17:7f:c3:46:ef:17:df:b4:
a7:e2:b1:4c:66:cb:96:8c:3d:ff:3b:e7:31:30:ba:
ac:27:c0:9e:92:86:00:c3:18:8b:06:84:44:12:c4:
41:dc:b0:67:e7:41:29:aa:1d:b1:8f:87:f6:7b:43:
07:d8:5a:54:86:70:7e:de:2d:cd:51:9e:d4:14:e6:
d7:23:78:23:57:9d:1f:64:84:37:52:4b:24:03:52:
9d:39:53:36:e2:03:56:b7:a7:05:8c:24:83:e0:ab:
50:b5:81:4b:5f:33:a3:23:c0:c5:46:71:4d:77:52:
fc:a8:32:6f:a0:e8:60:04:0a:de:52:4d:55:2b:14:
5a:d3:3b:6c:25:7e:92:bf:c1:3c:8f:0b:91:fe:a6:
d4:74:8a:f5:b6:3a:89:05:70:d2:92:0f:59:ff:29:
85:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
91:C6:B6:44:DD:6D:84:83:9E:D1:20:FB:C0:09:84:D6:04:95:C8:C4
X509v3 Authority Key Identifier:
keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/
RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/91C6B644DD6D84839ED120FBC00984D60495C8C4.mft
RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
42.51.0.0/16
49.4.132.0-49.4.191.255
49.5.0.0/16
58.99.128.0/17
61.4.82.0/23
101.36.128.0/17
106.2.224.0/19
106.3.32.0-106.3.79.255
106.3.84.0/22
106.3.160.0/20
106.3.208.0-106.3.255.255
110.173.0.0/21
110.232.32.0/19
114.64.0.0-114.66.63.255
114.66.82.0-114.66.127.255
114.112.6.0-114.112.13.255
114.112.16.0/21
114.112.32.0-114.112.95.255
114.112.108.0-114.112.135.255
114.112.152.0-114.112.199.255
114.112.224.0-114.113.195.255
114.113.204.0/22
114.113.216.0/21
114.113.240.0/20
116.69.0.0/17
116.90.80.0/20
116.196.16.0-116.196.63.255
116.255.128.0/17
119.40.0.0/18
119.57.0.0/16
119.63.32.0/19
121.52.208.0/20
121.58.144.0/20
121.79.128.0/18
121.101.208.0/20
121.201.0.0/17
122.14.192.0/18
122.49.0.0/18
122.102.0.0/20
122.112.0.0/19
122.112.64.0/18
122.115.16.0/20
122.115.64.0-122.115.223.255
122.115.240.0/20
122.198.64.0/22
122.200.96.0/19
123.58.96.0/19
123.108.208.0/20
124.248.32.0/19
125.61.128.0/18
175.26.0.0/16
180.186.0.0/16
182.50.0.0/22
203.80.144.0/20
203.135.160.0/20
203.171.224.0/20
203.191.16.0/20
210.2.16.0/21
210.14.128.0/19
210.56.192.0/19
210.74.0.0/19
211.100.96.0/19
211.102.192.0/20
218.241.0.0/19
218.241.64.0/19
218.245.0.0-218.245.47.255
219.232.224.0/19
223.252.128.0/18
223.252.224.0/19
IPv6:
2401:e00::/32
2401:ba00::/32
2401:be00::/32
2401:c200::/32
2401:c600::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
24403-24404
37967
38339
38353
45099-45100
Signature Algorithm: sha256WithRSAEncryption
00:02:c8:47:88:db:36:0d:51:eb:be:80:94:6d:87:76:34:61:
f0:09:ac:81:6b:fb:5f:3a:dc:0a:c8:6b:d1:9f:2f:9a:b5:fc:
38:1e:d9:0f:67:8c:b6:d4:e5:d6:eb:3c:84:3d:97:85:1d:54:
d6:b3:16:e3:e1:ba:28:17:be:85:68:cc:8f:97:c8:73:bc:01:
22:69:aa:5e:85:8f:45:0d:dd:1f:80:4f:04:f2:cf:2f:87:e3:
94:95:9c:15:46:7b:ac:a0:e4:6e:93:e6:97:73:d8:c3:a5:1d:
b3:85:d3:37:c9:8e:f8:ed:78:2a:8b:9c:94:03:bf:36:03:25:
b0:45:94:e1:63:ea:a0:c4:fb:17:3d:2a:81:3b:77:43:e3:2f:
50:fc:88:ad:40:b6:07:79:26:69:71:63:18:1b:f7:ea:51:b1:
96:8e:90:c6:17:19:a2:e1:65:49:cb:69:ed:73:11:0d:73:08:
8b:25:56:a2:3c:e1:e5:49:62:a0:bf:de:08:96:54:d2:5b:15:
72:51:92:6e:ca:94:12:bc:75:57:c0:bb:4a:4e:4d:3e:e8:e6:
a6:03:cd:aa:c1:7a:9b:fe:bf:8b:c3:9e:57:30:46:5c:f7:e9:
99:6f:96:23:0e:f5:24:4d:a2:91:04:4f:0f:de:2c:c9:d3:14:
58:93:ad:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 14 19:12:41 2026 by rpki-client