Certificate
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1065E9E54D1C1537CE34B5EE445B93476EFDD00F.cer
File: 1065E9E54D1C1537CE34B5EE445B93476EFDD00F.cer (raw, json)
Hash identifier: qHwlU3Fe3e2nQsXCHQoUmryVLqtErxvXCkwBYrH9g2c=
Subject key identifier: 10:65:E9:E5:4D:1C:15:37:CE:34:B5:EE:44:5B:93:47:6E:FD:D0:0F
Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10
Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710
Certificate serial: 30F4443A51BA782623793D56BC54BDDE17C860B4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
Manifest: rsync://rpki-rps.cnnic.cn/repo/A1096727752351940609/0/1065E9E54D1C1537CE34B5EE445B93476EFDD00F.mft
caRepository: rsync://rpki-rps.cnnic.cn/repo/A1096727752351940609/0/
Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml
Certificate not before: Wed 15 Apr 2026 09:19:33 +0000
Certificate not after: Wed 14 Apr 2027 09:24:33 +0000
Subordinate resources: AS: 139172
IP: 43.225.120.0/22
IP: 43.242.80.0/22
IP: 103.31.56.0/22
IP: 103.31.168.0/22
IP: 103.44.80.0/22
IP: 103.214.240.0/21
IP: 103.218.192.0 -- 103.218.215.255
IP: 103.244.68.0 -- 103.244.79.255
IP: 2402:9b80::/32
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 17 Apr 2026 17:57:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:f4:44:3a:51:ba:78:26:23:79:3d:56:bc:54:bd:de:17:c8:60:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710
Validity
Not Before: Apr 15 09:19:33 2026 GMT
Not After : Apr 14 09:24:33 2027 GMT
Subject: CN=1065E9E54D1C1537CE34B5EE445B93476EFDD00F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:a5:29:e7:8b:5c:df:ca:60:04:c9:92:44:4b:
67:42:34:a3:ca:5e:dc:ce:37:34:7f:7d:7d:d5:55:
87:04:5a:d9:4f:25:19:3c:57:25:c2:2c:b5:12:b8:
30:1d:81:8b:c9:23:89:6a:ae:08:bf:b2:4e:6a:ae:
1a:99:de:76:8a:17:c6:f6:33:95:c1:19:97:ee:fe:
df:ae:c3:4c:b1:d9:98:25:73:4c:91:25:cd:ea:40:
28:25:17:cc:4d:64:f8:be:02:8a:04:78:e8:e8:08:
0c:70:33:67:df:1d:7c:98:3e:e6:55:18:ce:0b:e6:
64:d3:80:ae:59:cd:89:73:c4:3c:db:0b:f3:36:4c:
a1:ad:d9:a1:1c:28:17:03:e8:7c:bb:03:64:76:d0:
7c:77:6b:2e:73:a9:5f:c0:a3:d8:01:5f:e4:87:bc:
74:f5:f4:19:ff:a9:80:e6:29:49:64:f0:64:7e:75:
d0:1c:3e:18:7a:a1:c5:c6:a7:96:80:b8:e2:03:c8:
ed:2d:69:84:10:6f:0e:53:9b:5c:66:ec:ba:8f:d1:
e4:a9:ed:fc:6c:ca:af:0e:98:40:3b:98:c8:4d:08:
7d:00:f1:cb:72:d5:87:59:d3:6e:df:ad:6e:c3:47:
fa:37:84:21:e6:4e:ee:c1:66:53:2c:17:59:8b:24:
13:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
10:65:E9:E5:4D:1C:15:37:CE:34:B5:EE:44:5B:93:47:6E:FD:D0:0F
X509v3 Authority Key Identifier:
keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1096727752351940609/0/
RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1096727752351940609/0/1065E9E54D1C1537CE34B5EE445B93476EFDD00F.mft
RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
43.225.120.0/22
43.242.80.0/22
103.31.56.0/22
103.31.168.0/22
103.44.80.0/22
103.214.240.0/21
103.218.192.0-103.218.215.255
103.244.68.0-103.244.79.255
IPv6:
2402:9b80::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
139172
Signature Algorithm: sha256WithRSAEncryption
1c:8e:30:a9:6d:47:40:cb:93:e6:19:08:16:19:77:e8:86:ca:
a0:ac:c6:56:c1:6f:aa:46:71:bf:38:0f:94:8b:da:95:a3:cc:
59:ad:8d:58:10:82:99:0c:d5:9b:61:95:d0:ff:c2:ab:12:79:
66:c8:5e:f7:8a:98:c1:01:c6:b8:8c:35:89:b3:00:3f:5b:72:
d1:68:83:97:1c:07:70:98:d8:06:82:81:d6:79:da:7d:99:62:
d1:9a:a4:bc:83:8b:65:47:c7:24:47:c0:17:5e:f8:db:6f:29:
71:06:73:3e:79:f8:29:36:7b:53:69:56:4f:8c:5c:10:3c:6a:
fa:ae:24:64:08:7c:86:4c:3a:da:6e:c5:ae:d8:1a:c2:01:0e:
85:0e:e0:3e:a5:86:20:b2:2e:cf:7d:c2:36:b3:78:41:b1:a2:
f9:ab:6d:86:a4:b9:d3:46:cf:af:09:5b:ff:ed:fa:36:be:28:
e8:05:16:59:5d:9d:69:d2:d2:8c:17:d4:e4:8c:85:d4:6d:13:
1f:e1:0f:4a:9e:87:50:2c:0f:aa:8c:ac:2e:be:08:fe:ac:ce:
2d:b1:39:cb:d6:37:4e:46:ed:31:dd:94:7e:28:d0:2d:d4:1f:
e7:75:a6:73:6e:1f:f1:ba:e9:65:de:2a:82:96:6f:90:8a:31:
56:25:ec:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 16 23:54:37 2026 by rpki-client