Certificate
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DE4E698BE0CCA328A00235C5E644FC8A5EA12E09.cer
File: DE4E698BE0CCA328A00235C5E644FC8A5EA12E09.cer (raw, json)
Hash identifier: nV4Vo77e4hlOUOHqppaFZ+1xWdlfdaJPIDVOqeBeDc8=
Subject key identifier: DE:4E:69:8B:E0:CC:A3:28:A0:02:35:C5:E6:44:FC:8A:5E:A1:2E:09
Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10
Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710
Certificate serial: 7102CDD325FCDCDA0FC8DDB9EC2C6470D1579D42
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
Manifest: rsync://rpki-rps.cnnic.cn/repo/A1071007010226438146/0/DE4E698BE0CCA328A00235C5E644FC8A5EA12E09.mft
caRepository: rsync://rpki-rps.cnnic.cn/repo/A1071007010226438146/0/
Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml
Certificate not before: Tue 03 Feb 2026 09:59:23 +0000
Certificate not after: Tue 02 Feb 2027 10:04:23 +0000
Subordinate resources: IP: 43.230.68.0/22
IP: 60.206.0.0 -- 60.206.11.255
IP: 60.206.16.0 -- 60.207.255.255
IP: 103.49.96.0/22
IP: 115.183.0.0/16
IP: 118.144.0.0/18
IP: 118.144.96.0 -- 118.144.255.255
IP: 202.130.0.0/19
IP: 210.75.96.0/19
IP: 211.147.8.0/21
IP: 211.155.248.0/21
IP: 211.167.224.0/19
IP: 218.241.128.0 -- 218.241.151.255
IP: 218.241.160.0 -- 218.241.255.255
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 23 Feb 2026 09:42:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:02:cd:d3:25:fc:dc:da:0f:c8:dd:b9:ec:2c:64:70:d1:57:9d:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710
Validity
Not Before: Feb 3 09:59:23 2026 GMT
Not After : Feb 2 10:04:23 2027 GMT
Subject: CN=DE4E698BE0CCA328A00235C5E644FC8A5EA12E09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:b2:92:60:c9:d2:00:bb:91:e1:c7:e9:ff:a3:
96:b6:de:b4:a2:ff:91:aa:be:e3:45:2e:1d:aa:2e:
bc:72:96:b7:8e:cb:af:70:5a:e5:80:15:ce:79:05:
34:92:7d:77:b5:51:b1:91:4b:96:f9:64:79:4d:75:
77:56:65:b8:3f:66:fd:ec:2e:12:08:1b:ac:14:67:
55:f2:86:30:d8:db:d2:df:67:4d:c3:5c:6d:3a:75:
f7:ba:28:b0:cf:39:2d:ba:91:16:1e:5d:be:40:ec:
41:51:3a:07:10:f7:c7:b3:86:45:83:b7:bd:3a:5c:
c1:41:b9:69:c1:b0:d9:9f:72:dc:3c:65:9e:34:7c:
ba:04:0e:b9:c4:2e:40:31:3c:2a:af:6f:51:3d:00:
fa:07:9c:94:ed:67:89:d5:29:b3:d4:f6:b8:ea:80:
8c:20:03:07:a6:6f:a9:25:82:a4:92:8d:4f:ae:e1:
46:02:e9:a2:1e:ba:cd:8d:89:91:9e:3d:e7:47:82:
68:c9:6a:e2:af:33:00:92:b6:b6:5b:19:dd:92:53:
08:06:98:b7:e4:e3:0d:c8:2f:13:5c:e0:12:86:b3:
0a:db:af:44:2d:30:3f:0a:50:2a:00:ca:d5:23:e7:
bb:5c:55:7e:49:43:10:97:6a:7a:a6:4b:a1:24:cd:
50:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
DE:4E:69:8B:E0:CC:A3:28:A0:02:35:C5:E6:44:FC:8A:5E:A1:2E:09
X509v3 Authority Key Identifier:
keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1071007010226438146/0/
RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1071007010226438146/0/DE4E698BE0CCA328A00235C5E644FC8A5EA12E09.mft
RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
43.230.68.0/22
60.206.0.0-60.206.11.255
60.206.16.0-60.207.255.255
103.49.96.0/22
115.183.0.0/16
118.144.0.0/18
118.144.96.0-118.144.255.255
202.130.0.0/19
210.75.96.0/19
211.147.8.0/21
211.155.248.0/21
211.167.224.0/19
218.241.128.0-218.241.151.255
218.241.160.0-218.241.255.255
Signature Algorithm: sha256WithRSAEncryption
61:9d:8a:6a:9d:fc:21:78:0b:40:bd:d8:46:fd:5d:60:de:52:
74:2e:1f:10:63:22:3a:27:3b:df:7a:86:5c:82:dd:ba:d1:df:
94:dc:f8:3e:ae:e7:04:39:33:c3:d2:e0:01:84:f1:0f:a8:84:
ea:d8:24:03:09:97:2c:0e:34:b9:62:39:a4:b2:b4:2b:3c:12:
b3:56:0f:e3:0a:85:6a:54:11:e3:86:eb:23:b9:bd:f8:29:e3:
44:59:6e:62:53:71:f7:1a:86:a0:4a:52:05:76:38:12:7d:9a:
93:67:fc:8c:79:9c:ed:45:ff:bb:f4:3c:29:2a:ca:50:c4:11:
ea:2d:69:b1:c5:2e:13:d7:b2:6e:83:74:79:5b:6f:b8:d2:d5:
d6:ab:ce:d4:84:17:63:23:79:04:68:ca:8f:bf:46:c9:c2:20:
49:c0:fb:6b:b6:95:ca:d6:81:13:a4:03:d5:a9:e8:10:b6:a2:
ec:d1:7c:55:e1:47:ee:5a:fc:d9:34:7e:d6:04:2e:1f:d8:d8:
94:e1:58:50:7d:20:41:ab:3c:d1:c4:f6:b7:87:62:fe:63:b3:
ba:40:73:39:84:e0:42:cf:2a:3a:df:6e:d0:18:40:c2:85:ee:
1e:96:21:2f:73:07:92:d6:90:07:7f:b9:cc:58:19:7e:0b:72:
15:55:3b:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 00:55:54 2026 by rpki-client