Certificate
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/ADD79A90613C9FA2ED1294C77FDBB0874B4BD426.cer
File: ADD79A90613C9FA2ED1294C77FDBB0874B4BD426.cer (raw, json)
Hash identifier: yMrsfXvhvB2V8MjCZNgr36tkaF54Umgj45EVWrJngpA=
Subject key identifier: AD:D7:9A:90:61:3C:9F:A2:ED:12:94:C7:7F:DB:B0:87:4B:4B:D4:26
Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10
Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710
Certificate serial: 7EC114112CFC5BADD7FEDD56F5DDAEFDE8236DB1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
Manifest: rsync://rpki-rps.cnnic.cn/repo/A1065577241947144193/0/ADD79A90613C9FA2ED1294C77FDBB0874B4BD426.mft
caRepository: rsync://rpki-rps.cnnic.cn/repo/A1065577241947144193/0/
Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml
Certificate not before: Thu 28 May 2026 06:46:09 +0000
Certificate not after: Thu 27 May 2027 06:51:09 +0000
Subordinate resources: AS: 17962
IP: 36.36.0.0/16
IP: 103.12.184.0/22
IP: 111.221.128.0 -- 111.222.255.255
IP: 115.44.0.0/15
IP: 116.76.0.0/15
IP: 180.200.252.0/22
IP: 203.88.32.0/19
IP: 211.148.192.0/19
IP: 219.232.160.0/19
IP: 219.234.96.0/19
IP: 222.125.0.0/16
IP: 222.248.0.0/16
IP: 223.212.0.0/15
IP: 2400:ee00::/32
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 May 2026 15:28:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:c1:14:11:2c:fc:5b:ad:d7:fe:dd:56:f5:dd:ae:fd:e8:23:6d:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710
Validity
Not Before: May 28 06:46:09 2026 GMT
Not After : May 27 06:51:09 2027 GMT
Subject: CN=ADD79A90613C9FA2ED1294C77FDBB0874B4BD426
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:7e:eb:5d:a0:94:40:70:6c:b9:d3:c8:e2:a4:
08:81:60:d7:7b:56:f9:10:66:48:38:d2:fd:b9:b4:
83:49:08:78:25:7e:1e:23:71:47:1f:0d:eb:b6:ef:
c7:cb:71:9e:6a:06:c9:cd:8c:a5:64:f0:a6:2f:ce:
e2:af:99:53:65:e8:8d:51:9c:63:a9:8b:01:1e:7c:
20:9c:5b:73:74:d1:f6:be:f7:7d:b5:4e:3b:14:10:
4f:11:6d:16:a7:7c:02:44:2b:32:9e:37:ab:24:8e:
60:a8:b7:f2:e7:5f:0c:a1:1c:37:44:af:90:27:0d:
6c:23:94:d4:e9:0f:fe:03:d9:e2:34:8b:dd:5f:91:
25:57:00:25:0a:4d:c5:dc:1d:16:7e:92:53:6c:1d:
b6:74:d4:bb:59:84:bd:d5:da:a0:40:54:7c:3d:b9:
a3:48:b9:49:33:38:94:81:b2:c3:fb:df:34:40:84:
f4:9a:06:b5:e5:c0:79:4e:73:ac:f2:9c:32:db:45:
e4:b7:b6:e6:a7:01:56:33:01:ae:ac:e0:dc:cc:03:
d0:4e:19:0c:c0:d9:e5:ad:ab:1c:4c:4d:b3:cd:eb:
4c:39:08:0b:04:cb:0b:e3:b6:91:7a:ac:f0:0c:1f:
c8:05:24:fb:14:31:16:a6:e1:27:38:2d:4d:12:69:
0b:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
AD:D7:9A:90:61:3C:9F:A2:ED:12:94:C7:7F:DB:B0:87:4B:4B:D4:26
X509v3 Authority Key Identifier:
keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947144193/0/
RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947144193/0/ADD79A90613C9FA2ED1294C77FDBB0874B4BD426.mft
RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
36.36.0.0/16
103.12.184.0/22
111.221.128.0-111.222.255.255
115.44.0.0/15
116.76.0.0/15
180.200.252.0/22
203.88.32.0/19
211.148.192.0/19
219.232.160.0/19
219.234.96.0/19
222.125.0.0/16
222.248.0.0/16
223.212.0.0/15
IPv6:
2400:ee00::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
17962
Signature Algorithm: sha256WithRSAEncryption
62:ba:87:1c:d4:af:06:94:47:f9:9a:3c:cb:2f:81:23:ad:cc:
f4:66:dc:92:41:a0:7f:15:1d:51:6e:46:a2:71:43:a6:a6:ca:
c5:97:d0:b6:87:a8:b7:cd:4b:6c:5d:58:37:38:81:cb:de:59:
87:b8:a5:74:66:b4:5d:2c:29:70:0f:c9:03:2e:74:4f:ff:df:
02:b0:e8:37:14:ea:08:af:b6:9d:23:8a:7e:be:eb:07:7f:99:
a7:09:26:f2:db:cc:3d:64:8a:4f:3a:74:8c:07:4e:c8:91:3e:
cf:6d:34:c9:ca:a3:6d:59:92:81:ac:4e:15:fe:2c:c5:a0:20:
cb:03:49:0f:08:27:6a:4a:14:2d:13:3f:de:07:97:97:cb:3e:
90:a4:ec:61:d9:27:b7:3e:2b:db:2f:cc:de:f7:92:ef:d2:12:
fa:cc:91:ce:a5:19:7e:b8:32:68:82:2f:eb:89:79:1f:1f:ae:
f1:49:d1:94:6f:b9:ae:95:e5:0a:6a:88:9f:c0:61:85:f1:7a:
01:7f:72:ff:e2:93:2d:fd:6d:16:b2:e7:1f:d7:96:be:09:91:
f7:d7:af:60:f7:a9:bd:3c:8d:e5:17:3e:f3:36:3f:0f:dc:5a:
41:59:1c:1f:36:c7:27:f3:98:11:48:ab:ad:34:80:49:10:20:
36:c5:b2:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 29 21:13:08 2026 by rpki-client