
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/0/12292A8CE4276ED3C82E79BA376F7A0363A06716.cer
File: 12292A8CE4276ED3C82E79BA376F7A0363A06716.cer (raw, json)
Hash identifier: Cd5V+vogjaxa2I8O2dPHO4Pv8Vxpk8/tjbaONiSkg2I=
Subject key identifier: 12:29:2A:8C:E4:27:6E:D3:C8:2E:79:BA:37:6F:7A:03:63:A0:67:16
Authority key identifier: CB:02:14:A5:C4:04:D6:F8:40:43:3B:12:0C:AC:BB:5B:8C:59:E6:13
Certificate issuer: /CN=A9162E3D0001/serialNumber=CB0214A5C404D6F840433B120CACBB5B8C59E613
Certificate serial: 630AC6D94783393068B6351C1D9F6D1441701608
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
Manifest: rsync://rpki-rps.cnnic.cn/repo/A1065591195721662465/0/12292A8CE4276ED3C82E79BA376F7A0363A06716.mft
caRepository: rsync://rpki-rps.cnnic.cn/repo/A1065591195721662465/0/
Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml
Certificate not before: Fri 29 May 2026 08:13:01 +0000
Certificate not after: Fri 28 May 2027 08:18:01 +0000
Subordinate resources: IP: 144.79.118.0/23
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 17:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:0a:c6:d9:47:83:39:30:68:b6:35:1c:1d:9f:6d:14:41:70:16:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0001, serialNumber=CB0214A5C404D6F840433B120CACBB5B8C59E613
Validity
Not Before: May 29 08:13:01 2026 GMT
Not After : May 28 08:18:01 2027 GMT
Subject: CN=12292A8CE4276ED3C82E79BA376F7A0363A06716
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:04:b6:09:4a:22:16:79:7e:9b:6d:ea:3e:94:
51:d0:e8:d7:81:89:23:c1:12:bd:8f:a1:f2:7f:55:
2c:1f:0b:62:ae:d5:e1:26:1b:f0:7e:4f:b7:63:c7:
4f:90:c6:e5:2a:5b:85:ef:9d:c6:18:b1:7e:7f:76:
c1:a1:37:61:ab:35:70:5c:bb:98:e4:08:81:29:ce:
db:12:e0:b1:00:4e:33:ea:7e:62:c5:7e:c4:9a:c0:
37:6b:07:b8:82:1b:77:95:76:e5:79:6d:8c:e7:41:
1a:c7:2a:61:b8:dd:d7:a7:04:c4:50:0d:87:1e:68:
17:af:22:e5:15:b9:ae:27:ef:c4:a5:9d:5e:68:08:
f4:35:c5:29:82:c5:3c:e1:81:a0:e9:2b:e0:fb:6f:
30:ad:ca:46:6d:11:c8:a5:06:d2:11:48:2f:a0:3e:
55:7f:5c:cf:ba:cb:6c:0e:ff:19:b5:12:61:81:92:
49:c7:a5:62:b1:09:d1:92:b3:9b:44:57:d1:e5:e8:
84:87:5b:93:b6:bd:b4:f5:c6:3e:57:5d:e8:3e:71:
91:3d:47:62:63:56:77:e1:84:bb:e0:89:a7:1b:f0:
bc:7c:45:b4:ee:88:f2:ae:78:eb:75:c4:db:30:a0:
1f:34:df:99:4e:3b:6a:e2:7b:6a:be:8f:97:79:cc:
59:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
12:29:2A:8C:E4:27:6E:D3:C8:2E:79:BA:37:6F:7A:03:63:A0:67:16
X509v3 Authority Key Identifier:
keyid:CB:02:14:A5:C4:04:D6:F8:40:43:3B:12:0C:AC:BB:5B:8C:59:E6:13
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721662465/0/
RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721662465/0/12292A8CE4276ED3C82E79BA376F7A0363A06716.mft
RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
144.79.118.0/23
Signature Algorithm: sha256WithRSAEncryption
7d:ea:e2:14:09:d2:6b:ee:73:0b:95:73:9b:3a:16:d7:8a:61:
96:8b:3a:be:65:38:c7:b0:75:0c:e5:40:b3:dd:8e:4d:71:e8:
04:10:b8:dc:fd:72:b1:86:35:36:d7:cb:b0:c1:04:00:98:f9:
2d:18:b9:a1:2d:7f:d2:8c:01:db:22:82:58:33:de:45:83:cc:
14:ce:e7:74:72:f5:23:ba:08:e1:23:de:b6:04:6b:3f:57:19:
d0:cf:0e:56:10:00:ba:65:c3:7e:ba:b8:ae:57:c8:4d:35:cd:
6c:17:8e:02:dc:be:53:72:ac:49:1a:39:a9:25:7d:19:7b:5f:
dd:a8:35:c5:91:65:6a:d4:fe:6c:90:59:bc:24:39:0a:e2:ce:
02:ce:df:5f:1f:3b:dd:8d:22:11:60:17:d0:5e:a8:ac:b5:05:
06:2c:9b:b5:e8:32:57:9c:e3:98:a7:7f:b8:c7:59:b3:64:66:
8e:10:dc:dd:40:0e:da:10:fd:eb:4d:9a:43:00:66:18:c8:8f:
67:11:87:d2:dc:d5:9d:7a:c9:7b:ae:5e:e4:84:f7:3b:32:18:
f9:e9:6b:0a:71:b0:65:be:d0:be:25:13:e8:9b:eb:e6:07:eb:
d6:2e:1e:66:8b:43:50:2e:78:79:e0:58:85:35:2b:26:1d:2e:
63:fb:21:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 07:11:55 2026 by rpki-client