Certificate
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DE4E698BE0CCA328A00235C5E644FC8A5EA12E09.cer
File: DE4E698BE0CCA328A00235C5E644FC8A5EA12E09.cer (raw, json)
Hash identifier: RF1p1hSxGxDylNPLo1c1be4LP9TacVtzKZNuAkkvYjs=
Subject key identifier: DE:4E:69:8B:E0:CC:A3:28:A0:02:35:C5:E6:44:FC:8A:5E:A1:2E:09
Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10
Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710
Certificate serial: 34D1C72750EBB215FEF95713C3A461D75A838FE9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
Manifest: rsync://rpki-rps.cnnic.cn/repo/A1071007010226438146/0/DE4E698BE0CCA328A00235C5E644FC8A5EA12E09.mft
caRepository: rsync://rpki-rps.cnnic.cn/repo/A1071007010226438146/0/
Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml
Certificate not before: Fri 29 May 2026 07:14:07 +0000
Certificate not after: Fri 28 May 2027 07:19:07 +0000
Subordinate resources: IP: 43.230.68.0/22
IP: 60.206.0.0 -- 60.206.11.255
IP: 60.206.16.0 -- 60.207.255.255
IP: 103.49.96.0/22
IP: 115.183.0.0/16
IP: 118.144.0.0/18
IP: 118.144.96.0 -- 118.144.255.255
IP: 202.130.0.0/19
IP: 210.75.96.0/19
IP: 211.147.8.0/21
IP: 211.155.248.0/21
IP: 211.167.224.0/19
IP: 218.241.128.0 -- 218.241.151.255
IP: 218.241.160.0 -- 218.241.255.255
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 May 2026 15:28:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:d1:c7:27:50:eb:b2:15:fe:f9:57:13:c3:a4:61:d7:5a:83:8f:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710
Validity
Not Before: May 29 07:14:07 2026 GMT
Not After : May 28 07:19:07 2027 GMT
Subject: CN=DE4E698BE0CCA328A00235C5E644FC8A5EA12E09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:b2:92:60:c9:d2:00:bb:91:e1:c7:e9:ff:a3:
96:b6:de:b4:a2:ff:91:aa:be:e3:45:2e:1d:aa:2e:
bc:72:96:b7:8e:cb:af:70:5a:e5:80:15:ce:79:05:
34:92:7d:77:b5:51:b1:91:4b:96:f9:64:79:4d:75:
77:56:65:b8:3f:66:fd:ec:2e:12:08:1b:ac:14:67:
55:f2:86:30:d8:db:d2:df:67:4d:c3:5c:6d:3a:75:
f7:ba:28:b0:cf:39:2d:ba:91:16:1e:5d:be:40:ec:
41:51:3a:07:10:f7:c7:b3:86:45:83:b7:bd:3a:5c:
c1:41:b9:69:c1:b0:d9:9f:72:dc:3c:65:9e:34:7c:
ba:04:0e:b9:c4:2e:40:31:3c:2a:af:6f:51:3d:00:
fa:07:9c:94:ed:67:89:d5:29:b3:d4:f6:b8:ea:80:
8c:20:03:07:a6:6f:a9:25:82:a4:92:8d:4f:ae:e1:
46:02:e9:a2:1e:ba:cd:8d:89:91:9e:3d:e7:47:82:
68:c9:6a:e2:af:33:00:92:b6:b6:5b:19:dd:92:53:
08:06:98:b7:e4:e3:0d:c8:2f:13:5c:e0:12:86:b3:
0a:db:af:44:2d:30:3f:0a:50:2a:00:ca:d5:23:e7:
bb:5c:55:7e:49:43:10:97:6a:7a:a6:4b:a1:24:cd:
50:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
DE:4E:69:8B:E0:CC:A3:28:A0:02:35:C5:E6:44:FC:8A:5E:A1:2E:09
X509v3 Authority Key Identifier:
keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1071007010226438146/0/
RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1071007010226438146/0/DE4E698BE0CCA328A00235C5E644FC8A5EA12E09.mft
RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
43.230.68.0/22
60.206.0.0-60.206.11.255
60.206.16.0-60.207.255.255
103.49.96.0/22
115.183.0.0/16
118.144.0.0/18
118.144.96.0-118.144.255.255
202.130.0.0/19
210.75.96.0/19
211.147.8.0/21
211.155.248.0/21
211.167.224.0/19
218.241.128.0-218.241.151.255
218.241.160.0-218.241.255.255
Signature Algorithm: sha256WithRSAEncryption
0c:23:a2:40:d2:54:44:a1:9e:ce:8e:1d:98:21:1e:f7:89:e8:
d6:85:ac:7e:a5:83:75:44:2a:12:7c:8b:93:f0:8e:50:df:63:
d2:9e:d1:81:35:95:29:12:65:17:0c:23:46:de:ff:99:f9:0f:
e8:6f:a8:dd:5c:d2:49:5e:a3:5f:ab:c9:e2:cf:e8:e0:c6:07:
37:e9:61:84:7d:c0:a7:13:6d:d0:c8:42:0c:59:53:7a:15:e8:
ff:bd:91:99:fa:cc:9b:65:25:66:9b:2f:b9:b8:e4:cc:35:94:
e9:65:9c:ff:c2:f3:7c:6e:10:2b:ec:55:de:9f:e7:ab:3c:1e:
68:9d:71:6b:9d:6e:79:45:11:16:02:71:dc:4e:6d:4b:d2:7c:
e5:63:11:19:95:cf:3e:a2:01:34:a7:fe:d8:40:4c:70:6d:20:
ba:78:0e:ed:d5:00:d6:94:9e:1f:bb:ac:af:15:6f:27:69:bb:
4d:41:67:85:3d:9c:ea:e8:a5:6d:cd:19:a3:32:24:50:32:b1:
2d:9a:b4:bc:88:37:e6:fc:d1:71:f6:3c:25:f5:ea:2e:82:22:
5f:91:4b:dc:b4:5c:2b:1b:04:bf:df:8e:6f:6f:b4:74:f0:b8:
59:46:3c:4b:1f:cf:72:eb:44:07:e5:0b:95:eb:8a:cb:71:77:
79:1a:9a:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 29 21:14:07 2026 by rpki-client