
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/98C47DED77ACF5B82046A51EC38CF9EBBF9F0914.cer
File: 98C47DED77ACF5B82046A51EC38CF9EBBF9F0914.cer (raw, json)
Hash identifier: zxcWyCFXVKmKFrlZrdP6OOWo00LC3vk8AbPClFQguW8=
Subject key identifier: 98:C4:7D:ED:77:AC:F5:B8:20:46:A5:1E:C3:8C:F9:EB:BF:9F:09:14
Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10
Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710
Certificate serial: 19894490228D55DD78A07FDD2004300349E71DED
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
Manifest: rsync://rpki-rps.cnnic.cn/repo/A1118725505982398491/0/98C47DED77ACF5B82046A51EC38CF9EBBF9F0914.mft
caRepository: rsync://rpki-rps.cnnic.cn/repo/A1118725505982398491/0/
Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml
Certificate not before: Mon 15 Jun 2026 02:10:47 +0000
Certificate not after: Mon 14 Jun 2027 02:15:47 +0000
Subordinate resources: IP: 210.75.49.0 -- 210.75.51.255
IP: 210.75.55.0 -- 210.75.56.255
IP: 210.75.61.0 -- 210.75.63.255
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 15 Jul 2026 20:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:89:44:90:22:8d:55:dd:78:a0:7f:dd:20:04:30:03:49:e7:1d:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710
Validity
Not Before: Jun 15 02:10:47 2026 GMT
Not After : Jun 14 02:15:47 2027 GMT
Subject: CN=98C47DED77ACF5B82046A51EC38CF9EBBF9F0914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:43:16:fd:97:26:ba:d2:71:29:47:20:86:bc:
06:b3:33:a9:5a:23:35:aa:57:86:70:ec:f2:18:ef:
c6:03:fe:fa:7d:50:3f:1b:be:92:77:2a:bf:eb:0a:
fc:d7:dc:bd:af:c8:7d:69:51:fa:e4:89:76:3c:ca:
c1:fb:0b:26:7d:bc:66:4f:d4:ef:33:84:ab:8d:e6:
b3:e9:77:3f:84:5c:75:0e:d3:52:ba:b8:cd:51:63:
6c:03:8b:e6:0d:02:29:68:ad:2f:a1:2b:fd:75:9a:
90:97:8e:91:4b:af:99:50:af:31:62:98:c1:68:9d:
c8:06:8d:4a:40:91:0b:00:ea:a3:38:d9:76:3c:a5:
60:98:41:6e:72:20:a1:18:03:08:dc:53:17:a1:78:
98:09:d9:7d:a3:60:b0:b0:fa:3b:95:df:e9:20:18:
23:fc:4b:6e:99:5f:38:df:2d:29:d4:77:09:c6:8e:
6c:8b:a3:c8:91:01:c8:a5:c9:1b:f6:86:b6:e2:93:
bb:f4:38:0a:1a:7a:5e:4e:8e:28:f1:1b:7b:c0:01:
d9:a0:35:1b:95:a7:63:64:33:64:c4:33:c7:ac:77:
d1:12:41:83:10:ae:f5:88:96:9a:20:2d:54:ab:d2:
71:e1:a2:49:eb:df:a2:39:99:9b:cd:06:94:ba:69:
ce:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
98:C4:7D:ED:77:AC:F5:B8:20:46:A5:1E:C3:8C:F9:EB:BF:9F:09:14
X509v3 Authority Key Identifier:
keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1118725505982398491/0/
RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1118725505982398491/0/98C47DED77ACF5B82046A51EC38CF9EBBF9F0914.mft
RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
210.75.49.0-210.75.51.255
210.75.55.0-210.75.56.255
210.75.61.0-210.75.63.255
Signature Algorithm: sha256WithRSAEncryption
05:47:4e:ee:04:e9:eb:3c:fb:24:7b:b7:c8:1c:42:f3:b9:07:
41:25:95:7f:b4:ac:82:f8:10:7b:b1:37:2e:f3:38:e3:38:ee:
5a:fd:35:2d:62:95:b6:e7:f2:c7:f3:e9:5d:39:7e:f6:09:68:
1c:28:eb:0b:5a:45:78:4d:2b:56:dc:a4:df:e8:4e:3a:fb:27:
08:16:ae:47:47:56:04:b4:e5:1e:4f:d8:ca:2b:0a:f0:c0:fa:
27:b6:a6:2b:23:61:74:5d:82:36:74:11:54:b4:c6:41:8f:1e:
c4:1b:f7:3c:ae:18:a9:54:e8:68:da:7e:dd:6c:b0:cc:97:1c:
ed:dd:7e:03:1b:7d:4f:bc:a5:6f:a7:2c:8e:61:4d:66:2e:9d:
c9:50:e1:91:95:24:ea:34:6f:ad:a1:2d:47:bd:98:e2:a7:c7:
73:a3:a4:8b:63:63:97:5b:29:db:0b:d3:f9:29:b7:10:69:71:
33:75:63:bc:87:6f:3b:0c:69:74:51:31:14:fb:08:a1:7c:c8:
19:2d:dd:9b:ee:15:88:f6:4c:19:1b:f4:cf:13:d7:19:86:1f:
18:85:84:3a:2c:28:4f:fa:84:66:b7:96:02:3e:f7:6b:c7:2f:
12:be:05:46:c9:aa:0b:aa:4d:0d:86:d2:b4:73:86:68:8a:a1:
a6:9c:7e:eb
-----BEGIN CERTIFICATE-----
MIIFyzCCBLOgAwIBAgIUGYlEkCKNVd14oH/dIAQwA0nnHe0wDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw
M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDYxNTAyMTA0N1oX
DTI3MDYxNDAyMTU0N1owMzExMC8GA1UEAxMoOThDNDdERUQ3N0FDRjVCODIwNDZB
NTFFQzM4Q0Y5RUJCRjlGMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBANVDFv2XJrrScSlHIIa8BrMzqVojNapXhnDs8hjvxgP++n1QPxu+kncqv+sK
/Nfcva/IfWlR+uSJdjzKwfsLJn28Zk/U7zOEq43ms+l3P4RcdQ7TUrq4zVFjbAOL
5g0CKWitL6Er/XWakJeOkUuvmVCvMWKYwWidyAaNSkCRCwDqozjZdjylYJhBbnIg
oRgDCNxTF6F4mAnZfaNgsLD6O5Xf6SAYI/xLbplfON8tKdR3CcaObIujyJEByKXJ
G/aGtuKTu/Q4Chp6Xk6OKPEbe8AB2aA1G5WnY2QzZMQzx6x30RJBgxCu9YiWmiAt
VKvSceGiSevfojmZm80GlLppzssCAwEAAaOCAr4wggK6MA8GA1UdEwEB/wQFMAMB
Af8wHQYDVR0OBBYEFJjEfe13rPW4IEalHsOM+eu/nwkUMB8GA1UdIwQYMBaAFKVu
hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig
ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw
OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE
NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB
BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu
Y24vcmVwby9BMTExODcyNTUwNTk4MjM5ODQ5MS8wLzBuBggrBgEFBQcwCoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMTE4NzI1NTA1OTgyMzk4NDkx
LzAvOThDNDdERUQ3N0FDRjVCODIwNDZBNTFFQzM4Q0Y5RUJCRjlGMDkxNC5tZnQw
OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp
ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwQwYIKwYBBQUH
AQcBAf8ENDAyMDAEAgABMCowDAMEANJLMQMEAtJLMDAMAwQA0ks3AwQA0ks4MAwD
BADSSz0DBAbSSwAwDQYJKoZIhvcNAQELBQADggEBAAVHTu4E6es8+yR7t8gcQvO5
B0EllX+0rIL4EHuxNy7zOOM47lr9NS1ilbbn8sfz6V05fvYJaBwo6wtaRXhNK1bc
pN/oTjr7JwgWrkdHVgS05R5P2MorCvDA+ie2pisjYXRdgjZ0EVS0xkGPHsQb9zyu
GKlU6Gjaft1ssMyXHO3dfgMbfU+8pW+nLI5hTWYunclQ4ZGVJOo0b62hLUe9mOKn
x3OjpItjY5dbKdsL0/kptxBpcTN1Y7yHbzsMaXRRMRT7CKF8yBkt3ZvuFYj2TBkb
9M8T1xmGHxiFhDosKE/6hGa3lgI+92vHLxK+BUbJqguqTQ2G0rRzhmiKoaacfus=
-----END CERTIFICATE-----
Generated at Tue Jul 14 19:08:52 2026 by rpki-client