Certificate
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FCFC30E6FF346C4B57938E5745FC717D99DA3675.cer
File: FCFC30E6FF346C4B57938E5745FC717D99DA3675.cer (raw, json)
Hash identifier: rJLKs6Y75NL8Q96+Ho2chBg+kzph7aVtUqfrJsSiSeQ=
Subject key identifier: FC:FC:30:E6:FF:34:6C:4B:57:93:8E:57:45:FC:71:7D:99:DA:36:75
Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10
Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710
Certificate serial: 71654EEE0C4120E7EEEF3580DAD9E658AF647ADD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
Manifest: rsync://rpki-rps.cnnic.cn/repo/A1123785436171337765/0/FCFC30E6FF346C4B57938E5745FC717D99DA3675.mft
caRepository: rsync://rpki-rps.cnnic.cn/repo/A1123785436171337765/0/
Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml
Certificate not before: Mon 29 Jun 2026 01:17:08 +0000
Certificate not after: Mon 28 Jun 2027 01:22:08 +0000
Subordinate resources: AS: 17968
IP: 60.252.0.0/16
IP: 61.47.128.0/18
IP: 114.196.0.0/15
IP: 125.58.128.0/17
IP: 175.46.0.0/15
IP: 203.90.128.0 -- 203.90.223.255
IP: 218.97.192.0/19
IP: 218.244.192.0/20
IP: 218.246.160.0/19
IP: 219.235.64.0/18
IP: 2400:fe00::/32
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 15 Jul 2026 20:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:65:4e:ee:0c:41:20:e7:ee:ef:35:80:da:d9:e6:58:af:64:7a:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710
Validity
Not Before: Jun 29 01:17:08 2026 GMT
Not After : Jun 28 01:22:08 2027 GMT
Subject: CN=FCFC30E6FF346C4B57938E5745FC717D99DA3675
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:a0:07:51:89:52:9f:05:8d:1d:25:8c:bb:39:
46:c1:64:b8:87:24:c8:bf:3a:c0:19:84:b7:0f:ec:
a6:b6:47:3e:b1:b4:3f:69:87:3b:2c:aa:f6:1e:88:
06:2f:00:13:87:85:63:a6:a7:05:5c:75:99:77:9d:
12:89:62:28:4d:57:03:3d:71:f2:fb:7b:aa:af:af:
af:0d:fb:27:cd:25:f3:f6:72:83:fb:9b:f5:3f:1a:
75:3c:23:70:a0:eb:05:fc:1d:98:87:ed:8d:bd:df:
53:b4:9c:7f:38:ac:07:64:69:f2:9d:37:d8:fe:d7:
51:77:7c:59:c6:6d:d6:41:11:8a:9d:b7:15:43:49:
1f:af:78:33:34:a7:d5:0b:a9:03:17:60:59:36:7f:
4e:e0:dc:62:e3:45:dc:65:fe:cf:ad:dd:94:68:4b:
a1:5f:6d:22:dd:9a:a1:28:a7:2e:ff:4c:10:5f:7f:
f6:7a:82:9a:f8:a7:e7:ec:ef:9d:06:a5:b1:9f:d4:
dc:e5:32:05:9c:5d:97:76:1c:a5:9b:4d:6d:e7:da:
c4:db:e6:4c:5f:5a:90:80:2d:75:aa:4c:40:ce:08:
b6:0f:f5:e1:d1:11:32:74:ca:e9:28:01:3d:7a:0e:
ee:13:e8:36:f2:be:35:99:f2:06:f2:0b:5e:a0:59:
1d:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
FC:FC:30:E6:FF:34:6C:4B:57:93:8E:57:45:FC:71:7D:99:DA:36:75
X509v3 Authority Key Identifier:
keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1123785436171337765/0/
RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1123785436171337765/0/FCFC30E6FF346C4B57938E5745FC717D99DA3675.mft
RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
60.252.0.0/16
61.47.128.0/18
114.196.0.0/15
125.58.128.0/17
175.46.0.0/15
203.90.128.0-203.90.223.255
218.97.192.0/19
218.244.192.0/20
218.246.160.0/19
219.235.64.0/18
IPv6:
2400:fe00::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
17968
Signature Algorithm: sha256WithRSAEncryption
95:a0:b8:04:2d:b8:a3:4b:aa:03:0a:17:f3:15:4b:ad:bb:ba:
02:eb:0c:a0:15:26:1b:55:1b:f8:f2:f5:36:3c:cc:59:aa:a2:
94:90:2b:f6:6d:60:9f:9e:89:70:3b:60:f9:94:36:26:b4:18:
f9:cf:bd:92:70:91:cd:61:d3:6f:69:a1:b1:79:6f:ef:04:a6:
10:af:96:17:28:f9:3c:cd:f7:ba:33:df:1a:48:cd:32:1a:e8:
30:29:b9:84:f7:a1:ed:b6:6e:2e:b1:c8:52:66:da:7f:0a:b7:
94:24:9b:83:c4:b9:e3:28:fe:e5:cc:ae:54:e9:a5:94:fa:f5:
a4:06:c7:7f:5f:c6:76:eb:e3:bb:10:a4:3e:11:d1:9f:16:ba:
e7:32:4e:65:1f:03:4a:b2:43:a6:93:c3:07:72:a8:9e:56:c7:
9a:f3:dc:b7:d9:19:3f:b6:c1:90:c1:33:bd:d1:4b:74:83:86:
b7:95:bf:62:6a:30:29:16:0d:0f:78:a5:56:b3:ae:19:39:23:
a8:db:11:bd:b2:69:4a:69:7d:9a:20:96:fb:3d:56:c6:1a:86:
09:f4:2e:e3:99:0f:a1:05:8b:d4:d4:04:b7:fa:5f:5f:bd:e2:
0c:ba:73:80:05:67:77:f8:e2:d4:c1:a8:82:a1:aa:c8:f2:c8:
cb:36:b6:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 14 19:08:53 2026 by rpki-client