Certificate
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.cer
File: CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.cer (raw, json)
Hash identifier: 0yEqffel5qv+7K01RNiZLlgWMFhHC3eXKVuBbsesr90=
Subject key identifier: CD:D5:5F:3D:78:FC:75:75:3F:F9:C6:C8:26:A7:D8:1A:A5:EB:EE:B7
Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10
Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710
Certificate serial: 145A9ED172E47C59CAACB98D8EA96FCC7D058818
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
Manifest: rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.mft
caRepository: rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/
Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml
Certificate not before: Wed 27 May 2026 07:31:18 +0000
Certificate not after: Wed 26 May 2027 07:36:18 +0000
Subordinate resources: AS: 7641
AS: 146821
AS: 146838
IP: 42.204.0.0/14
IP: 103.8.204.0/22
IP: 112.128.0.0/14
IP: 117.124.0.0/14
IP: 150.242.52.0/22
IP: 211.89.0.0/16
IP: 211.146.0.0/16
IP: 211.156.128.0/19
IP: 223.160.0.0/14
IP: 2403:600::/32
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 May 2026 15:28:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:5a:9e:d1:72:e4:7c:59:ca:ac:b9:8d:8e:a9:6f:cc:7d:05:88:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710
Validity
Not Before: May 27 07:31:18 2026 GMT
Not After : May 26 07:36:18 2027 GMT
Subject: CN=CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:66:2f:e5:16:83:65:fd:dd:4b:c6:c9:a8:a2:
2b:26:db:dc:1f:fe:74:ad:49:05:42:fe:2e:a1:de:
00:4f:37:cd:8e:33:ef:40:0d:29:72:5c:0c:09:7d:
72:6d:b8:d1:20:f1:21:e0:62:5b:0c:17:b1:8f:4b:
c0:46:9c:e0:e9:a9:6c:56:5c:97:0e:5b:78:41:a3:
09:76:6b:2a:e2:55:f3:ee:cd:59:08:85:5b:35:80:
a7:8f:3a:7e:69:93:fd:25:2a:3e:d1:fd:93:e7:93:
91:9f:db:0e:ca:1f:fc:df:ab:f6:32:7b:50:28:bb:
8c:42:23:a6:1d:72:3e:79:a2:77:d6:be:50:b1:5f:
d2:b9:77:b5:69:db:a5:75:7e:de:0a:40:c7:69:ea:
b9:41:e0:45:20:8a:41:9b:eb:3c:45:4a:ff:48:1f:
6e:5b:ab:dc:49:b5:4d:54:23:c2:11:d6:ec:0a:af:
30:a4:97:9f:4b:34:5f:0e:d9:65:d2:96:82:e6:da:
51:a2:17:89:bf:7a:a6:bd:b7:b2:8a:54:33:d1:ce:
6e:5d:5e:89:4c:06:51:4d:55:52:df:37:71:ef:5e:
b7:75:e9:1f:c3:62:d8:0b:79:96:a7:fb:a4:e4:54:
fa:7d:5b:b2:4d:0f:c9:2d:f2:82:7a:5f:0b:2f:63:
03:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
CD:D5:5F:3D:78:FC:75:75:3F:F9:C6:C8:26:A7:D8:1A:A5:EB:EE:B7
X509v3 Authority Key Identifier:
keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/
RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.mft
RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
42.204.0.0/14
103.8.204.0/22
112.128.0.0/14
117.124.0.0/14
150.242.52.0/22
211.89.0.0/16
211.146.0.0/16
211.156.128.0/19
223.160.0.0/14
IPv6:
2403:600::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
7641
146821
146838
Signature Algorithm: sha256WithRSAEncryption
7d:b8:9b:48:37:03:d8:cf:85:0c:e3:42:61:7a:d0:db:16:b9:
7d:4b:cc:50:39:81:b0:0c:3b:f9:95:60:4a:9a:98:1d:c9:b2:
ab:76:67:83:ca:7d:b6:b0:67:97:0d:5f:6b:40:70:5f:9a:0a:
25:64:31:37:98:a8:14:e8:28:7d:43:a9:ae:47:97:c7:19:45:
50:c8:cb:09:46:21:25:2f:b8:6d:f7:e1:25:c4:fd:75:5e:aa:
d5:ed:6c:ec:08:c8:73:a3:62:20:ff:67:22:50:2d:7a:51:36:
17:01:b3:03:fd:24:e8:8d:3a:e6:30:20:d1:df:49:f9:2e:9a:
49:e0:5a:b7:9f:a9:40:b8:0e:93:e3:05:11:8a:65:05:50:f2:
0c:51:70:07:fb:ff:4a:ec:a1:d6:e5:13:bd:c2:ea:5f:05:06:
7c:ba:35:86:2d:71:f7:bc:2d:ba:cf:9f:82:c9:46:15:15:88:
82:c6:ad:0c:6a:53:a2:61:bf:0b:b2:eb:43:e2:bf:03:e5:8d:
dc:b8:67:f4:da:85:a0:46:80:6c:a1:45:04:2c:0e:93:3e:ed:
5a:56:80:2b:c9:65:47:18:da:da:62:02:4f:bc:4f:50:64:26:
21:62:8e:f8:ae:19:f5:22:8d:93:f7:33:7d:e3:db:5f:de:98:
c8:0e:6c:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 29 21:12:51 2026 by rpki-client