Certificate
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EC9E1C840C8705E754C2E3FF32A44FB9D78101D4.cer
File: EC9E1C840C8705E754C2E3FF32A44FB9D78101D4.cer (raw, json)
Hash identifier: 8YIXtL/ICB5Q5uqyGaXdkHBXSRC+TAubkTYvAg5Ar3Q=
Subject key identifier: EC:9E:1C:84:0C:87:05:E7:54:C2:E3:FF:32:A4:4F:B9:D7:81:01:D4
Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10
Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710
Certificate serial: 372E208D1B970240B19FF70E51BF4927285DD1DD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
Manifest: rsync://rpki-rps.cnnic.cn/repo/A1065579796714487809/0/EC9E1C840C8705E754C2E3FF32A44FB9D78101D4.mft
caRepository: rsync://rpki-rps.cnnic.cn/repo/A1065579796714487809/0/
Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml
Certificate not before: Thu 28 May 2026 07:48:49 +0000
Certificate not after: Thu 27 May 2027 07:53:49 +0000
Subordinate resources: AS: 58854
IP: 27.0.132.0/22
IP: 43.242.72.0/22
IP: 45.119.60.0/22
IP: 45.126.120.0/22
IP: 103.27.4.0/22
IP: 103.59.112.0/22
IP: 103.64.156.0/22
IP: 103.64.212.0/22
IP: 103.73.136.0/21
IP: 103.81.8.0/22
IP: 103.81.16.0/21
IP: 103.105.60.0/22
IP: 103.236.252.0/22
IP: 150.242.96.0/22
IP: 211.155.96.0/19
IP: 2400:60c0::/32
IP: 2400:73c0::/32
IP: 2400:74c0::/32
IP: 2402:2bc0::/32
IP: 2402:d980::/32
IP: 2407:7d00::/32
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 May 2026 15:28:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:2e:20:8d:1b:97:02:40:b1:9f:f7:0e:51:bf:49:27:28:5d:d1:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710
Validity
Not Before: May 28 07:48:49 2026 GMT
Not After : May 27 07:53:49 2027 GMT
Subject: CN=EC9E1C840C8705E754C2E3FF32A44FB9D78101D4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:04:64:62:37:b1:a2:7d:4a:93:80:b9:58:b7:
a9:1e:0d:03:06:37:32:86:16:d0:61:f4:90:e2:f3:
02:94:c2:77:a5:bb:f4:d4:d5:8c:f0:d3:2b:ac:df:
40:fa:1d:80:0a:f1:34:3c:27:21:42:2f:f8:bc:e5:
58:cc:b1:b2:ad:0b:74:67:b1:45:fd:ff:08:a0:e8:
44:71:2b:49:97:82:01:17:7c:24:2e:c4:7d:ba:25:
61:2b:54:37:82:1d:9c:11:c4:76:b2:d5:7f:77:a7:
ab:e0:8f:4b:23:0d:72:e1:44:3b:0a:75:98:7d:e2:
0a:9c:77:0d:23:b3:91:03:4d:89:ba:b2:14:e6:6e:
7d:ea:f6:48:12:e6:9c:25:99:01:0f:bd:3d:1d:7c:
67:15:2e:a8:af:9a:fd:f8:8f:69:e9:36:a5:b0:ca:
6d:d3:74:ef:39:86:d8:64:a9:c6:36:b1:89:47:6e:
fd:fa:f1:b5:0e:1d:f7:a0:92:46:c9:3e:49:67:2f:
d4:98:39:39:da:fb:28:3a:0c:8e:da:c2:bc:42:cd:
9a:4c:be:46:97:52:e7:27:5c:ab:c5:d9:73:a4:7c:
07:3d:91:2c:a7:44:7d:dd:0b:21:1f:14:59:ee:b1:
a4:f9:2e:bc:36:41:9d:4c:45:46:ff:d9:09:9e:23:
a6:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
EC:9E:1C:84:0C:87:05:E7:54:C2:E3:FF:32:A4:4F:B9:D7:81:01:D4
X509v3 Authority Key Identifier:
keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714487809/0/
RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714487809/0/EC9E1C840C8705E754C2E3FF32A44FB9D78101D4.mft
RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
27.0.132.0/22
43.242.72.0/22
45.119.60.0/22
45.126.120.0/22
103.27.4.0/22
103.59.112.0/22
103.64.156.0/22
103.64.212.0/22
103.73.136.0/21
103.81.8.0/22
103.81.16.0/21
103.105.60.0/22
103.236.252.0/22
150.242.96.0/22
211.155.96.0/19
IPv6:
2400:60c0::/32
2400:73c0::/32
2400:74c0::/32
2402:2bc0::/32
2402:d980::/32
2407:7d00::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
58854
Signature Algorithm: sha256WithRSAEncryption
23:92:c9:15:7f:a2:ec:96:ab:5a:ac:ad:f4:da:fc:04:36:fe:
c0:3c:86:65:76:4d:4a:25:a8:e2:78:10:75:af:cb:62:89:a6:
2c:e2:d5:2a:76:9d:09:a5:f5:93:61:e8:3f:cc:7c:ff:5f:75:
93:30:e4:3c:ff:c7:55:0b:cb:5d:98:fb:54:f0:84:60:00:33:
51:2d:88:45:27:5c:3b:31:9a:b2:d6:8e:3c:ed:93:9d:79:bb:
d4:10:10:9c:e8:e9:57:fe:18:f8:c9:95:0a:94:1b:b7:b6:0d:
e4:4d:41:54:d3:0b:a0:14:43:16:59:b5:f0:cd:fc:70:7e:52:
c5:09:83:8f:cc:b7:1b:73:9a:69:0d:24:fc:ba:57:e2:21:6c:
95:9a:20:6f:76:45:fa:71:c1:07:06:0a:7c:6c:66:d3:fb:e4:
d5:24:b8:06:4d:86:be:0a:41:8f:6c:86:f0:27:ff:15:67:25:
83:37:b8:c8:bd:bf:d3:83:d9:e0:05:d4:66:bd:b2:a2:4a:34:
ea:d4:3f:ae:33:ae:e4:86:4b:7e:19:dd:0a:38:50:0d:6a:30:
99:3e:4f:65:45:5b:61:9c:8d:08:89:22:cc:38:83:d1:e6:7a:
17:37:bc:01:01:c0:81:dc:0e:93:1c:3b:16:1a:b4:0c:fd:87:
4f:22:c4:2f
-----BEGIN CERTIFICATE-----
MIIGTDCCBTSgAwIBAgIUNy4gjRuXAkCxn/cOUb9JJyhd0d0wDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw
M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDUyODA3NDg0OVoX
DTI3MDUyNzA3NTM0OVowMzExMC8GA1UEAxMoRUM5RTFDODQwQzg3MDVFNzU0QzJF
M0ZGMzJBNDRGQjlENzgxMDFENDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMAEZGI3saJ9SpOAuVi3qR4NAwY3MoYW0GH0kOLzApTCd6W79NTVjPDTK6zf
QPodgArxNDwnIUIv+LzlWMyxsq0LdGexRf3/CKDoRHErSZeCARd8JC7EfbolYStU
N4IdnBHEdrLVf3enq+CPSyMNcuFEOwp1mH3iCpx3DSOzkQNNibqyFOZufer2SBLm
nCWZAQ+9PR18ZxUuqK+a/fiPaek2pbDKbdN07zmG2GSpxjaxiUdu/frxtQ4d96CS
Rsk+SWcv1Jg5Odr7KDoMjtrCvELNmky+RpdS5ydcq8XZc6R8Bz2RLKdEfd0LIR8U
We6xpPkuvDZBnUxFRv/ZCZ4jprMCAwEAAaOCAz8wggM7MA8GA1UdEwEB/wQFMAMB
Af8wHQYDVR0OBBYEFOyeHIQMhwXnVMLj/zKkT7nXgQHUMB8GA1UdIwQYMBaAFKVu
hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig
ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw
OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE
NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB
BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu
Y24vcmVwby9BMTA2NTU3OTc5NjcxNDQ4NzgwOS8wLzBuBggrBgEFBQcwCoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDY1NTc5Nzk2NzE0NDg3ODA5
LzAvRUM5RTFDODQwQzg3MDVFNzU0QzJFM0ZGMzJBNDRGQjlENzgxMDFENC5tZnQw
OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp
ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwgacGCCsGAQUF
BwEHAQH/BIGXMIGUMGAEAgABMFoDBAIbAIQDBAIr8kgDBAItdzwDBAItfngDBAJn
GwQDBAJnO3ADBAJnQJwDBAJnQNQDBANnSYgDBAJnUQgDBANnURADBAJnaTwDBAJn
7PwDBAKW8mADBAXTm2AwMAQCAAIwKgMFACQAYMADBQAkAHPAAwUAJAB0wAMFACQC
K8ADBQAkAtmAAwUAJAd9ADAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMA5eYwDQYJ
KoZIhvcNAQELBQADggEBACOSyRV/ouyWq1qsrfTa/AQ2/sA8hmV2TUolqOJ4EHWv
y2KJpizi1Sp2nQml9ZNh6D/MfP9fdZMw5Dz/x1ULy12Y+1TwhGAAM1EtiEUnXDsx
mrLWjjztk515u9QQEJzo6Vf+GPjJlQqUG7e2DeRNQVTTC6AUQxZZtfDN/HB+UsUJ
g4/MtxtzmmkNJPy6V+IhbJWaIG92RfpxwQcGCnxsZtP75NUkuAZNhr4KQY9shvAn
/xVnJYM3uMi9v9OD2eAF1Ga9sqJKNOrUP64zruSGS34Z3Qo4UA1qMJk+T2VFW2Gc
jQiJIsw4g9Hmehc3vAEBwIHcDpMcOxYatAz9h08ixC8=
-----END CERTIFICATE-----
Generated at Fri May 29 21:13:59 2026 by rpki-client