Certificate
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F6FB05F40E211EA9D8D385A6E01D76ACFEABE9E2.cer
File: F6FB05F40E211EA9D8D385A6E01D76ACFEABE9E2.cer (raw, json)
Hash identifier: GmA5bxDKXVHpDdUdK+acTJQ4LPcJtr/fwncwhWC50AQ=
Subject key identifier: F6:FB:05:F4:0E:21:1E:A9:D8:D3:85:A6:E0:1D:76:AC:FE:AB:E9:E2
Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10
Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710
Certificate serial: 512726D0FDFF5C43D305C8B50F8236F401123605
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
Manifest: rsync://rpki-rps.cnnic.cn/repo/A1108630512513056787/0/F6FB05F40E211EA9D8D385A6E01D76ACFEABE9E2.mft
caRepository: rsync://rpki-rps.cnnic.cn/repo/A1108630512513056787/0/
Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml
Certificate not before: Mon 18 May 2026 05:36:53 +0000
Certificate not after: Mon 17 May 2027 05:41:53 +0000
Subordinate resources: AS: 59008
IP: 101.254.0.0/16
IP: 103.52.40.0/22
IP: 119.90.0.0/17
IP: 124.68.64.0/18
IP: 211.147.208.0/20
IP: 211.157.96.0/19
IP: 218.244.160.0/19
IP: 218.246.32.0/20
IP: 218.246.52.0 -- 218.246.63.255
IP: 221.122.0.0/16
IP: 221.123.128.0/17
IP: 2400:b700::/32
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 24 May 2026 02:27:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:27:26:d0:fd:ff:5c:43:d3:05:c8:b5:0f:82:36:f4:01:12:36:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710
Validity
Not Before: May 18 05:36:53 2026 GMT
Not After : May 17 05:41:53 2027 GMT
Subject: CN=F6FB05F40E211EA9D8D385A6E01D76ACFEABE9E2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:74:9b:6c:62:2f:27:c9:e3:1e:15:89:0b:8c:
1a:16:ef:c8:7f:e0:21:5a:ae:24:06:76:9c:8a:55:
8d:fd:97:40:91:e0:8a:74:8c:0a:8c:47:43:44:02:
56:1c:b1:56:11:af:53:da:66:58:17:6e:dc:a5:ca:
0b:31:37:9c:10:d2:e9:d7:76:e3:d2:01:b3:31:f8:
f8:c3:d4:4c:53:dc:cb:bf:70:06:56:0b:8d:28:97:
c8:ee:48:36:c0:2d:aa:a4:6c:f7:6d:10:72:88:72:
9e:7e:a6:31:cb:79:67:47:74:fb:3b:b3:1a:31:18:
e2:72:71:4c:1c:ae:2f:1e:5f:95:f7:4a:87:ed:7a:
8b:c4:16:7b:97:07:2b:41:73:38:21:fa:64:12:7b:
73:dd:10:12:2b:61:9f:e1:26:95:90:5e:03:06:b6:
a8:6a:5d:b7:3b:c7:11:69:04:81:38:93:59:e5:5c:
2b:df:4a:d2:64:6e:2a:f1:a4:f2:a4:e5:5e:f1:2b:
78:cc:b9:dd:1e:51:99:83:95:d4:8a:e1:c4:a6:4a:
1d:84:68:15:21:4b:14:1e:94:a8:bf:60:b6:ae:ae:
a8:fd:92:da:66:e4:9f:41:57:5b:5e:fe:9b:b8:8c:
09:85:70:ec:cf:eb:92:db:35:0e:bf:8b:54:a3:6d:
73:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
F6:FB:05:F4:0E:21:1E:A9:D8:D3:85:A6:E0:1D:76:AC:FE:AB:E9:E2
X509v3 Authority Key Identifier:
keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1108630512513056787/0/
RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1108630512513056787/0/F6FB05F40E211EA9D8D385A6E01D76ACFEABE9E2.mft
RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
101.254.0.0/16
103.52.40.0/22
119.90.0.0/17
124.68.64.0/18
211.147.208.0/20
211.157.96.0/19
218.244.160.0/19
218.246.32.0/20
218.246.52.0-218.246.63.255
221.122.0.0/16
221.123.128.0/17
IPv6:
2400:b700::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
59008
Signature Algorithm: sha256WithRSAEncryption
0b:13:1b:1c:4f:8b:89:d2:fa:ee:cc:ba:d2:64:ab:16:f0:39:
2e:e2:0d:b7:25:63:b6:59:66:f1:d1:14:81:73:c0:10:8c:5c:
94:da:73:66:bd:d6:84:b4:d6:90:7c:b5:27:50:41:92:27:12:
7a:5c:17:7d:f4:d3:8f:a6:66:74:b5:20:2a:7b:67:7d:15:fb:
7b:f0:a6:a3:1a:35:f3:20:1c:6a:a5:2d:46:eb:62:e2:0e:93:
df:fb:1d:33:d0:88:fe:0e:03:d5:72:4e:ac:e2:96:94:96:a9:
e9:5b:6b:61:a1:4a:a9:a3:0b:16:e6:27:de:a9:14:35:94:b0:
18:f2:da:42:1d:23:06:65:fe:1c:44:20:1a:2e:06:d0:94:e9:
b4:6b:bf:a0:58:ed:d2:61:ed:f4:77:80:07:0f:8c:2e:ac:ad:
14:2c:7d:c3:91:b3:85:8b:65:2a:49:43:38:19:19:ef:a2:fe:
84:fd:9e:d2:53:0e:36:6c:a5:27:50:4b:51:e7:07:02:74:a4:
d8:41:45:e4:48:8f:f3:c8:39:49:e8:07:4f:31:cc:4e:0e:f4:
da:5c:3d:bc:e2:d6:02:0e:88:67:1a:75:0d:c3:21:5f:39:73:
04:8a:ba:c5:f9:06:14:1c:71:90:c6:ad:7f:c1:e3:73:c3:8c:
7f:68:08:7a
-----BEGIN CERTIFICATE-----
MIIGFDCCBPygAwIBAgIUUScm0P3/XEPTBci1D4I29AESNgUwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw
M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDUxODA1MzY1M1oX
DTI3MDUxNzA1NDE1M1owMzExMC8GA1UEAxMoRjZGQjA1RjQwRTIxMUVBOUQ4RDM4
NUE2RTAxRDc2QUNGRUFCRTlFMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMJ0m2xiLyfJ4x4ViQuMGhbvyH/gIVquJAZ2nIpVjf2XQJHginSMCoxHQ0QC
VhyxVhGvU9pmWBdu3KXKCzE3nBDS6dd249IBszH4+MPUTFPcy79wBlYLjSiXyO5I
NsAtqqRs920Qcohynn6mMct5Z0d0+zuzGjEY4nJxTByuLx5flfdKh+16i8QWe5cH
K0FzOCH6ZBJ7c90QEithn+EmlZBeAwa2qGpdtzvHEWkEgTiTWeVcK99K0mRuKvGk
8qTlXvEreMy53R5RmYOV1IrhxKZKHYRoFSFLFB6UqL9gtq6uqP2S2mbkn0FXW17+
m7iMCYVw7M/rkts1Dr+LVKNtc6kCAwEAAaOCAwcwggMDMA8GA1UdEwEB/wQFMAMB
Af8wHQYDVR0OBBYEFPb7BfQOIR6p2NOFpuAddqz+q+niMB8GA1UdIwQYMBaAFKVu
hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig
ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw
OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE
NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB
BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu
Y24vcmVwby9BMTEwODYzMDUxMjUxMzA1Njc4Ny8wLzBuBggrBgEFBQcwCoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMTA4NjMwNTEyNTEzMDU2Nzg3
LzAvRjZGQjA1RjQwRTIxMUVBOUQ4RDM4NUE2RTAxRDc2QUNGRUFCRTlFMi5tZnQw
OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp
ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwcAYIKwYBBQUH
AQcBAf8EYTBfME4EAgABMEgDAwBl/gMEAmc0KAMEB3daAAMEBnxEQAMEBNOT0AME
BdOdYAMEBdr0oAMEBNr2IDAMAwQC2vY0AwQG2vYAAwMA3XoDBAfde4AwDQQCAAIw
BwMFACQAtwAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDAOaAMA0GCSqGSIb3DQEB
CwUAA4IBAQALExscT4uJ0vruzLrSZKsW8Dku4g23JWO2WWbx0RSBc8AQjFyU2nNm
vdaEtNaQfLUnUEGSJxJ6XBd99NOPpmZ0tSAqe2d9Fft78KajGjXzIBxqpS1G62Li
DpPf+x0z0Ij+DgPVck6s4paUlqnpW2thoUqpowsW5ifeqRQ1lLAY8tpCHSMGZf4c
RCAaLgbQlOm0a7+gWO3SYe30d4AHD4wurK0ULH3DkbOFi2UqSUM4GRnvov6E/Z7S
Uw42bKUnUEtR5wcCdKTYQUXkSI/zyDlJ6AdPMcxODvTaXD284tYCDohnGnUNwyFf
OXMEirrF+QYUHHGQxq1/weNzw4x/aAh6
-----END CERTIFICATE-----
Generated at Sat May 23 03:45:32 2026 by rpki-client