Certificate
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.cer
File: CF214CDEDC584B3B010FC3A6D0D3DB897219B594.cer (raw, json)
Hash identifier: RGbOd4QKto5zlEgAgerVosyXnxyyoCRvFhUAGiPL9b4=
Subject key identifier: CF:21:4C:DE:DC:58:4B:3B:01:0F:C3:A6:D0:D3:DB:89:72:19:B5:94
Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10
Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710
Certificate serial: 099AA91F15C0C3BBAC31CCDDFC08855AF3E53CF1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
Manifest: rsync://rpki-rps.cnnic.cn/repo/A1065574560142852097/0/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.mft
caRepository: rsync://rpki-rps.cnnic.cn/repo/A1065574560142852097/0/
Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml
Certificate not before: Wed 27 May 2026 07:31:32 +0000
Certificate not after: Wed 26 May 2027 07:36:32 +0000
Subordinate resources: AS: 17429
IP: 1.88.0.0/14
IP: 43.247.236.0/22
IP: 58.30.0.0/15
IP: 101.240.0.0/14
IP: 103.238.48.0/22
IP: 180.77.0.0 -- 180.79.255.255
IP: 211.99.128.0/19
IP: 218.246.96.0/19
IP: 219.236.0.0/15
IP: 2403:4300::/32
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 May 2026 15:28:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:9a:a9:1f:15:c0:c3:bb:ac:31:cc:dd:fc:08:85:5a:f3:e5:3c:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710
Validity
Not Before: May 27 07:31:32 2026 GMT
Not After : May 26 07:36:32 2027 GMT
Subject: CN=CF214CDEDC584B3B010FC3A6D0D3DB897219B594
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:3c:a2:9b:d7:db:c1:bf:31:8d:ab:66:a1:81:
03:fc:04:51:ec:c6:b1:be:17:53:c1:fb:78:bb:b7:
bf:16:05:fc:9e:42:20:6e:a2:cf:ec:99:1b:1e:39:
34:d9:d4:cc:f3:8f:5a:64:73:b6:53:e9:4b:61:14:
f1:a6:95:10:2a:e4:90:3e:1c:e9:32:a8:d5:d3:59:
bf:60:05:15:79:96:7e:cf:ed:46:d1:a4:25:f8:58:
57:bd:14:57:97:59:a8:81:d7:42:c6:8e:13:c4:79:
b7:1e:3d:6a:d6:8e:52:25:77:38:8b:60:a3:77:f3:
8a:f0:99:86:82:6e:de:e3:18:91:cd:39:7c:54:9c:
d4:1b:42:d9:f8:89:25:45:c5:1d:09:67:7c:d7:3f:
67:46:c4:53:77:62:fc:02:a6:2f:d9:d6:29:23:9a:
05:63:56:af:aa:64:ab:c4:cf:08:20:66:c3:96:79:
b0:b1:f0:f6:04:2f:f1:82:d8:4b:2d:14:82:d2:9f:
3c:56:5d:b6:a2:59:3a:43:eb:ea:46:a8:8d:1b:50:
d4:f7:20:71:34:b6:e1:cb:ac:e8:75:a5:bf:42:0d:
71:ea:4f:67:f9:2e:f8:3a:1f:34:9f:88:f1:6e:07:
2f:bf:bb:28:cc:d2:df:cf:78:46:15:c2:19:f7:70:
67:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
CF:21:4C:DE:DC:58:4B:3B:01:0F:C3:A6:D0:D3:DB:89:72:19:B5:94
X509v3 Authority Key Identifier:
keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1065574560142852097/0/
RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1065574560142852097/0/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.mft
RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
1.88.0.0/14
43.247.236.0/22
58.30.0.0/15
101.240.0.0/14
103.238.48.0/22
180.77.0.0-180.79.255.255
211.99.128.0/19
218.246.96.0/19
219.236.0.0/15
IPv6:
2403:4300::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
17429
Signature Algorithm: sha256WithRSAEncryption
48:db:82:85:e5:84:4c:d6:48:5c:3b:d9:5f:d6:97:1a:a6:15:
38:2a:d9:1f:50:22:86:be:7f:9f:60:0a:0e:83:92:be:83:c8:
28:bd:7f:31:93:9e:ce:99:b8:38:96:26:01:67:2f:44:00:3f:
de:fd:7f:02:49:7e:a4:fd:a5:ba:2a:90:7e:e6:e8:8f:44:17:
b7:aa:2e:64:5f:51:0e:5e:22:35:14:46:45:4f:71:e9:42:62:
df:0c:77:aa:16:ea:f3:38:3f:12:57:90:71:43:6b:fb:52:f9:
72:ce:f8:cf:7c:97:0a:61:86:b3:fa:77:95:6b:c9:50:58:7a:
73:04:93:1b:e1:ed:ab:58:ee:66:34:40:67:60:3e:ce:e9:74:
b9:62:e6:ae:3d:8b:2f:b1:50:b8:18:84:b5:30:e3:56:8a:b0:
f5:8c:53:0a:67:35:cf:e8:52:99:7b:69:08:20:41:b9:a7:ee:
5b:6e:29:4d:88:c1:cf:78:e3:d7:c3:df:6c:9a:3d:9d:d4:1d:
a0:0e:46:40:5c:fd:47:92:23:30:d5:fb:3c:16:2b:b3:70:ef:
23:b5:1b:fa:c0:b2:90:ac:12:0a:f2:b0:4b:fc:35:ee:60:e1:
2d:43:fb:71:e3:69:2c:bc:ab:1b:82:fc:53:7c:f1:79:09:2a:
ef:5e:cf:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 29 21:13:06 2026 by rpki-client