
Certificate
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F6FB05F40E211EA9D8D385A6E01D76ACFEABE9E2.cer
File: F6FB05F40E211EA9D8D385A6E01D76ACFEABE9E2.cer (raw, json)
Hash identifier: 3b8HKyUG06BLFThwwbaR4bIuKhCFjjXKQFMLb+WIBlY=
Subject key identifier: F6:FB:05:F4:0E:21:1E:A9:D8:D3:85:A6:E0:1D:76:AC:FE:AB:E9:E2
Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10
Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710
Certificate serial: 546E76F7651AE2002C5F9ACA431190F10FDE4D0C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
Manifest: rsync://rpki-rps.cnnic.cn/repo/A1108630512513056787/0/F6FB05F40E211EA9D8D385A6E01D76ACFEABE9E2.mft
caRepository: rsync://rpki-rps.cnnic.cn/repo/A1108630512513056787/0/
Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml
Certificate not before: Mon 17 Aug 2026 03:19:43 +0000
Certificate not after: Mon 16 Aug 2027 03:24:43 +0000
Subordinate resources: AS: 59008
IP: 101.254.0.0/16
IP: 103.52.40.0/22
IP: 124.68.64.0/18
IP: 211.147.208.0/20
IP: 211.157.96.0/19
IP: 218.244.160.0/19
IP: 218.246.32.0/20
IP: 218.246.52.0 -- 218.246.63.255
IP: 221.122.0.0/16
IP: 221.123.128.0/17
IP: 2400:b700::/32
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 22 Aug 2026 15:13:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:6e:76:f7:65:1a:e2:00:2c:5f:9a:ca:43:11:90:f1:0f:de:4d:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710
Validity
Not Before: Aug 17 03:19:43 2026 GMT
Not After : Aug 16 03:24:43 2027 GMT
Subject: CN=F6FB05F40E211EA9D8D385A6E01D76ACFEABE9E2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:74:9b:6c:62:2f:27:c9:e3:1e:15:89:0b:8c:
1a:16:ef:c8:7f:e0:21:5a:ae:24:06:76:9c:8a:55:
8d:fd:97:40:91:e0:8a:74:8c:0a:8c:47:43:44:02:
56:1c:b1:56:11:af:53:da:66:58:17:6e:dc:a5:ca:
0b:31:37:9c:10:d2:e9:d7:76:e3:d2:01:b3:31:f8:
f8:c3:d4:4c:53:dc:cb:bf:70:06:56:0b:8d:28:97:
c8:ee:48:36:c0:2d:aa:a4:6c:f7:6d:10:72:88:72:
9e:7e:a6:31:cb:79:67:47:74:fb:3b:b3:1a:31:18:
e2:72:71:4c:1c:ae:2f:1e:5f:95:f7:4a:87:ed:7a:
8b:c4:16:7b:97:07:2b:41:73:38:21:fa:64:12:7b:
73:dd:10:12:2b:61:9f:e1:26:95:90:5e:03:06:b6:
a8:6a:5d:b7:3b:c7:11:69:04:81:38:93:59:e5:5c:
2b:df:4a:d2:64:6e:2a:f1:a4:f2:a4:e5:5e:f1:2b:
78:cc:b9:dd:1e:51:99:83:95:d4:8a:e1:c4:a6:4a:
1d:84:68:15:21:4b:14:1e:94:a8:bf:60:b6:ae:ae:
a8:fd:92:da:66:e4:9f:41:57:5b:5e:fe:9b:b8:8c:
09:85:70:ec:cf:eb:92:db:35:0e:bf:8b:54:a3:6d:
73:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
F6:FB:05:F4:0E:21:1E:A9:D8:D3:85:A6:E0:1D:76:AC:FE:AB:E9:E2
X509v3 Authority Key Identifier:
keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1108630512513056787/0/
RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1108630512513056787/0/F6FB05F40E211EA9D8D385A6E01D76ACFEABE9E2.mft
RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
101.254.0.0/16
103.52.40.0/22
124.68.64.0/18
211.147.208.0/20
211.157.96.0/19
218.244.160.0/19
218.246.32.0/20
218.246.52.0-218.246.63.255
221.122.0.0/16
221.123.128.0/17
IPv6:
2400:b700::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
59008
Signature Algorithm: sha256WithRSAEncryption
56:b8:ff:00:63:a6:92:3c:1b:6f:cf:aa:41:86:53:3b:c2:42:
84:58:dd:cd:f7:e1:18:be:13:8f:a1:e9:07:cb:44:08:97:ca:
a3:90:b2:3a:ac:02:c9:03:23:b9:c2:ec:b9:e6:60:11:5a:a0:
ff:51:17:c5:fe:1f:c9:ac:81:b6:79:f4:a0:fd:55:39:a2:0c:
66:60:a1:76:09:df:e4:5a:7b:24:49:f2:a0:8f:3a:6b:5f:d0:
8e:4c:e0:b2:cb:a3:ab:65:4e:05:d9:4f:b4:a8:d8:ac:50:79:
88:c9:0c:64:a5:fc:c5:88:1c:73:20:43:00:dd:aa:15:e0:b3:
5c:8f:73:d6:73:75:9a:15:83:71:cc:ca:59:b5:a5:68:da:de:
d6:3b:45:83:7e:48:38:06:c1:15:51:43:e9:2b:b5:86:c2:e6:
41:57:ef:55:47:a9:ee:2a:f9:c1:cb:ba:fd:61:e0:7d:c4:cb:
41:cb:b2:28:25:86:c3:81:6c:26:9d:94:89:03:b4:c9:b9:0f:
23:d0:9a:af:ac:e2:f8:9a:b5:2a:6c:f8:61:6a:b7:48:15:f4:
02:98:e8:78:03:68:0a:83:21:1d:86:c6:5b:11:19:b7:50:d9:
d9:42:68:76:57:35:6f:ca:eb:34:d0:a8:df:66:1a:b4:98:58:
d6:4d:51:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 00:06:10 2026 by rpki-client