Certificate
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9CDD899429A14223F030EC28602F57FC4CAC8F60.cer
File: 9CDD899429A14223F030EC28602F57FC4CAC8F60.cer (raw, json)
Hash identifier: wUJNaBgrDzDdVpIc2eot3tO7rAwlUdhWYuD9JyHjTFk=
Subject key identifier: 9C:DD:89:94:29:A1:42:23:F0:30:EC:28:60:2F:57:FC:4C:AC:8F:60
Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10
Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710
Certificate serial: 0F6FFF844C63DAE6115A26D665AA0A108966044A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
Manifest: rsync://rpki-rps.cnnic.cn/repo/A1117472653142196251/0/9CDD899429A14223F030EC28602F57FC4CAC8F60.mft
caRepository: rsync://rpki-rps.cnnic.cn/repo/A1117472653142196251/0/
Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml
Certificate not before: Thu 11 Jun 2026 15:14:23 +0000
Certificate not after: Thu 10 Jun 2027 15:19:23 +0000
Subordinate resources: AS: 59025
IP: 43.241.208.0 -- 43.241.239.255
IP: 45.122.60.0 -- 45.122.95.255
IP: 45.122.104.0 -- 45.122.119.255
IP: 45.122.160.0/19
IP: 45.123.44.0 -- 45.123.75.255
IP: 45.123.164.0 -- 45.123.187.255
IP: 101.236.0.0/16
IP: 103.37.136.0 -- 103.37.167.255
IP: 103.62.160.0 -- 103.62.195.255
IP: 103.62.212.0 -- 103.62.227.255
IP: 103.63.32.0/19
IP: 103.63.160.0 -- 103.63.187.255
IP: 103.63.192.0/22
IP: 103.192.8.0 -- 103.192.31.255
IP: 2402:4f80::/32
IP: 2405:480::/32
IP: 2405:580::/32
IP: 2405:680::/32
IP: 2405:780::/32
IP: 2405:880::/32
IP: 2405:980::/32
IP: 2405:a80::/32
IP: 2405:b80::/32
IP: 2405:c80::/32
IP: 2405:d80::/32
IP: 2405:e80::/32
IP: 2405:f80::/32
IP: 2405:1080::/32
IP: 2405:1180::/32
IP: 2405:1280::/32
IP: 2405:1380::/32
IP: 2405:1480::/32
IP: 2405:1580::/32
IP: 2405:1680::/32
IP: 2405:1c80::/32
IP: 2405:1d80::/32
IP: 2405:1e80::/32
IP: 2405:1f80::/32
IP: 2405:2080::/32
IP: 2405:2180::/32
IP: 2405:2280::/32
IP: 2405:2380::/32
IP: 2405:2480::/32
IP: 2405:2580::/32
IP: 2405:2680::/32
IP: 2405:2780::/32
IP: 2405:2880::/32
IP: 2405:2980::/32
IP: 2405:2a80::/32
IP: 2405:2b80::/32
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Jun 2026 19:04:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:6f:ff:84:4c:63:da:e6:11:5a:26:d6:65:aa:0a:10:89:66:04:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710
Validity
Not Before: Jun 11 15:14:23 2026 GMT
Not After : Jun 10 15:19:23 2027 GMT
Subject: CN=9CDD899429A14223F030EC28602F57FC4CAC8F60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:0f:9f:53:28:dd:1c:6c:13:e9:2c:6c:e4:71:
19:37:b0:34:94:88:b6:28:f7:b4:2f:81:8f:94:d4:
0f:5e:19:21:63:f0:b3:e3:24:85:78:fa:97:ac:d8:
4c:83:b5:79:63:8b:d0:56:78:09:70:dd:a6:e1:90:
cb:4a:43:ab:43:a1:c0:fe:eb:0d:fa:8e:b0:81:38:
59:f9:c2:63:ec:73:79:34:4f:40:3b:8d:18:1a:ea:
82:b0:8c:2c:91:37:99:80:30:f6:00:77:a1:3d:4f:
60:e6:c4:45:c3:34:5e:3c:fb:24:63:cc:56:e5:07:
93:39:16:9b:8d:ce:03:a1:7a:dc:51:e9:33:bb:59:
97:b0:67:07:3d:c2:75:b9:8f:19:07:e4:a5:1a:5e:
9b:3a:dd:9b:cb:02:1d:31:09:f2:07:e2:fa:61:f6:
ce:0b:ba:34:15:29:79:ae:d9:c8:2e:f4:78:42:66:
fe:ca:e8:bf:3d:1c:92:dd:e7:79:0e:5c:da:36:7c:
d9:0e:12:f7:b2:da:29:fb:43:4e:6d:d3:fa:c6:a2:
21:30:48:62:b8:89:e7:4d:b0:16:eb:2e:4d:77:9d:
09:21:aa:a9:32:26:03:8b:3e:f8:93:cd:a3:70:a3:
2b:ed:23:ce:13:a7:42:bb:60:cb:f3:a4:ae:c2:e7:
79:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
9C:DD:89:94:29:A1:42:23:F0:30:EC:28:60:2F:57:FC:4C:AC:8F:60
X509v3 Authority Key Identifier:
keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1117472653142196251/0/
RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1117472653142196251/0/9CDD899429A14223F030EC28602F57FC4CAC8F60.mft
RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
43.241.208.0-43.241.239.255
45.122.60.0-45.122.95.255
45.122.104.0-45.122.119.255
45.122.160.0/19
45.123.44.0-45.123.75.255
45.123.164.0-45.123.187.255
101.236.0.0/16
103.37.136.0-103.37.167.255
103.62.160.0-103.62.195.255
103.62.212.0-103.62.227.255
103.63.32.0/19
103.63.160.0-103.63.187.255
103.63.192.0/22
103.192.8.0-103.192.31.255
IPv6:
2402:4f80::/32
2405:480::/32
2405:580::/32
2405:680::/32
2405:780::/32
2405:880::/32
2405:980::/32
2405:a80::/32
2405:b80::/32
2405:c80::/32
2405:d80::/32
2405:e80::/32
2405:f80::/32
2405:1080::/32
2405:1180::/32
2405:1280::/32
2405:1380::/32
2405:1480::/32
2405:1580::/32
2405:1680::/32
2405:1c80::/32
2405:1d80::/32
2405:1e80::/32
2405:1f80::/32
2405:2080::/32
2405:2180::/32
2405:2280::/32
2405:2380::/32
2405:2480::/32
2405:2580::/32
2405:2680::/32
2405:2780::/32
2405:2880::/32
2405:2980::/32
2405:2a80::/32
2405:2b80::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
59025
Signature Algorithm: sha256WithRSAEncryption
07:e2:fb:9e:09:bd:97:b3:98:11:2c:78:21:43:63:47:4d:39:
3b:35:de:da:62:04:e9:54:4b:7c:ee:0c:aa:37:d6:01:45:6a:
2e:63:63:e4:40:fb:d3:8f:f5:1f:22:65:31:0f:77:7f:e5:da:
1e:da:8c:ae:4f:9d:82:1a:b6:ac:83:8a:1c:04:e7:82:ca:99:
49:ca:08:de:c7:7a:70:b3:cb:00:68:d0:e4:13:55:91:24:76:
9f:e8:36:e3:20:2a:51:f1:be:83:b1:a9:da:87:3b:7d:76:54:
d7:1b:07:88:67:b0:a5:a2:b4:c1:25:ee:5b:1c:89:4c:6e:2b:
4a:28:d2:40:9e:33:87:10:22:92:9d:aa:54:52:40:ee:33:22:
d8:80:6d:e3:d1:23:57:a7:c1:a0:b2:5e:6d:7f:14:3f:de:bc:
61:c6:8d:19:20:78:82:a8:f1:bc:0b:41:38:d7:ef:96:ea:e2:
d1:c8:b3:d4:80:07:97:76:bf:19:8b:4b:5f:6b:81:85:f1:29:
2e:27:67:cc:fa:d5:dc:ca:12:8e:da:b5:a2:dc:2c:a4:c2:a1:
db:43:92:0e:9d:96:83:a7:3d:c4:f4:9b:96:19:f9:db:48:9e:
5f:03:f0:e1:d0:c0:97:2c:3e:9a:1c:db:1b:2c:2f:b4:73:8f:
a2:47:96:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 03:33:25 2026 by rpki-client