
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/0/C6FDEF6CA2BD7C82F8944A88D7138B63E40C2EAF.cer
File: C6FDEF6CA2BD7C82F8944A88D7138B63E40C2EAF.cer (raw, json)
Hash identifier: Phmh5VPIzxOU6YHa3ia5DIoMxatvaXhpwNuA33AfJkE=
Subject key identifier: C6:FD:EF:6C:A2:BD:7C:82:F8:94:4A:88:D7:13:8B:63:E4:0C:2E:AF
Authority key identifier: CB:02:14:A5:C4:04:D6:F8:40:43:3B:12:0C:AC:BB:5B:8C:59:E6:13
Certificate issuer: /CN=A9162E3D0001/serialNumber=CB0214A5C404D6F840433B120CACBB5B8C59E613
Certificate serial: 3C9F0C245018E3C7484B80540E2572DA140847B9
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
Manifest: rsync://rpki-rps.cnnic.cn/repo/A1117287030460514331/0/C6FDEF6CA2BD7C82F8944A88D7138B63E40C2EAF.mft
caRepository: rsync://rpki-rps.cnnic.cn/repo/A1117287030460514331/0/
Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml
Certificate not before: Thu 11 Jun 2026 02:54:47 +0000
Certificate not after: Thu 10 Jun 2027 02:59:47 +0000
Subordinate resources: IP: 144.79.42.0/23
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 17:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:9f:0c:24:50:18:e3:c7:48:4b:80:54:0e:25:72:da:14:08:47:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0001, serialNumber=CB0214A5C404D6F840433B120CACBB5B8C59E613
Validity
Not Before: Jun 11 02:54:47 2026 GMT
Not After : Jun 10 02:59:47 2027 GMT
Subject: CN=C6FDEF6CA2BD7C82F8944A88D7138B63E40C2EAF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:c2:6f:4e:2e:cb:b5:ce:56:db:e7:1e:df:59:
e8:a2:04:a5:53:7d:21:9f:60:57:80:9f:95:18:ca:
6f:19:13:36:1c:fd:ed:2f:a0:af:5a:c6:7a:c2:31:
f0:fb:42:fd:c8:8b:08:10:95:8d:b4:0f:41:e5:0e:
9b:79:5e:e6:bf:fa:40:7e:0e:af:7a:ea:f4:a0:11:
c7:fc:f2:71:95:b2:87:c2:e4:93:76:15:f5:2b:14:
28:c2:14:91:22:9a:46:b1:79:d8:dc:1a:e4:d5:5e:
6c:67:0a:ee:a5:14:23:ae:38:30:d8:40:8c:cb:96:
fc:02:34:70:4e:2b:70:d4:ad:68:5c:2c:21:d7:26:
04:fe:dd:9d:36:56:77:00:40:74:47:13:10:92:f1:
c2:f7:d1:63:c9:7b:47:09:a4:e6:4e:f8:e7:3f:3a:
a3:25:52:2b:78:7b:ca:f5:69:a3:8e:70:c2:7d:58:
b6:36:86:5b:11:16:14:10:79:9c:30:ea:c2:97:52:
cb:bc:8f:95:7c:14:85:53:04:f9:83:57:f0:27:f8:
63:29:b9:34:8e:a0:a3:9e:7a:10:46:8c:c5:da:d1:
78:62:50:a8:3e:a7:32:20:d3:70:6b:c6:aa:c7:38:
08:74:84:d9:f8:ad:8c:7f:b0:70:d6:a1:db:09:47:
8c:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
C6:FD:EF:6C:A2:BD:7C:82:F8:94:4A:88:D7:13:8B:63:E4:0C:2E:AF
X509v3 Authority Key Identifier:
keyid:CB:02:14:A5:C4:04:D6:F8:40:43:3B:12:0C:AC:BB:5B:8C:59:E6:13
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1117287030460514331/0/
RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1117287030460514331/0/C6FDEF6CA2BD7C82F8944A88D7138B63E40C2EAF.mft
RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
144.79.42.0/23
Signature Algorithm: sha256WithRSAEncryption
c0:d5:8c:05:c8:0c:28:bb:6b:f0:b0:dd:f7:d9:55:49:f3:ca:
43:ce:d8:38:4a:49:05:2c:03:5d:d3:7f:41:9c:57:57:61:d6:
9b:ff:1e:29:b6:54:6c:d1:82:49:cb:cd:37:6c:de:6b:50:e0:
e6:63:eb:8e:b5:98:c3:39:6d:7f:10:fb:7f:66:83:7a:33:95:
5c:35:c6:42:f2:1a:5b:cd:fe:1a:cd:ce:45:aa:be:13:b3:23:
04:0e:db:14:c4:7c:f9:25:60:93:0e:b7:30:3a:a4:f6:61:55:
e9:8a:0b:b1:61:c8:d7:10:85:08:b2:a0:fb:04:f8:2d:ff:5e:
8e:63:3b:a9:21:8d:c9:4e:18:92:c2:0d:dc:62:f2:7b:b9:a8:
39:18:72:65:0c:2b:83:3d:26:e9:49:ee:80:e2:a2:1b:69:ef:
be:d2:06:67:4b:bd:bd:cf:e0:ea:18:25:b5:96:71:b6:80:3c:
a1:dd:78:07:b2:02:84:71:7d:e2:04:60:03:f6:9c:d5:35:c4:
0d:4d:1c:c5:6b:d4:35:c6:33:ef:74:e0:57:77:2b:9a:1e:eb:
9d:e6:3e:e6:90:a8:cd:30:9c:e3:7b:4d:b3:16:f9:97:6e:bc:
d4:5b:d3:a8:05:d0:be:6e:43:31:b9:69:87:1a:05:d0:14:da:
59:c4:a4:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 03:58:58 2026 by rpki-client