Certificate

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18841C63CD89383303F1BA048085C2212B03B0BD.cer
File:                     18841C63CD89383303F1BA048085C2212B03B0BD.cer (raw, json)
Hash identifier:          K2CI4ypu1BRrgmuWxRKBxx33HKiGRTdRYjuuAxpQjgs=
Subject key identifier:   18:84:1C:63:CD:89:38:33:03:F1:BA:04:80:85:C2:21:2B:03:B0:BD
Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10
Certificate issuer:       /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710
Certificate serial:       63A15B2864EF45C4AE2FB515BB3A798E9923936C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
Manifest:                 rsync://rpki-rps.cnnic.cn/repo/A1065585911217586179/0/18841C63CD89383303F1BA048085C2212B03B0BD.mft
caRepository:             rsync://rpki-rps.cnnic.cn/repo/A1065585911217586179/0/
Notify URL:               https://rrdp-rps.cnnic.cn/rrdp/notification.xml
Certificate not before:   Mon 01 Jun 2026 01:40:20 +0000
Certificate not after:    Mon 31 May 2027 01:45:20 +0000
Subordinate resources:    AS: 38372
                          IP: 112.73.0.0/16
                          IP: 119.38.128.0/18
                          IP: 120.31.0.0/16
                          IP: 2402:3240::/32
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Jun 2026 23:15:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:a1:5b:28:64:ef:45:c4:ae:2f:b5:15:bb:3a:79:8e:99:23:93:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710
        Validity
            Not Before: Jun  1 01:40:20 2026 GMT
            Not After : May 31 01:45:20 2027 GMT
        Subject: CN=18841C63CD89383303F1BA048085C2212B03B0BD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:f8:29:4e:79:37:18:5b:3e:12:26:35:8c:8d:
                    b0:4d:9a:f3:3f:76:01:16:ba:9c:cf:3f:5f:18:9f:
                    7c:8e:6e:00:e8:9d:ad:cd:62:97:b9:b9:91:ea:a4:
                    3b:11:3f:fa:ab:a6:0e:21:31:71:b7:8c:f6:7b:a4:
                    bb:e6:35:ad:d5:23:be:7e:19:19:b3:f0:1e:96:d1:
                    f0:9e:9e:26:39:0c:ea:f8:e7:04:ca:7f:c3:50:e0:
                    39:37:ab:e5:d9:e7:f5:75:af:5c:ea:9b:6c:6b:6b:
                    82:03:46:33:05:de:61:f8:e5:e8:40:63:14:44:f5:
                    ab:95:dc:5c:ca:92:f7:54:c2:2d:af:f7:c4:0a:9d:
                    8e:eb:e9:03:70:1f:98:c1:df:a9:d6:31:25:f3:68:
                    fa:85:bc:52:c4:b1:f4:5e:57:6f:d0:3c:48:09:a5:
                    df:96:b7:77:f5:ac:62:5e:3f:bb:6c:aa:d9:9b:c5:
                    a3:38:32:ce:cc:99:22:a2:f6:a1:3e:ce:7f:4c:e5:
                    df:da:6c:f9:af:f7:26:cd:bb:af:42:eb:f3:a3:0b:
                    5f:2b:c1:a5:a0:fc:5d:6c:96:a2:12:2a:40:4c:f6:
                    dd:26:b6:78:eb:16:8f:08:50:c0:8f:31:e4:a4:fd:
                    2b:41:b5:dc:e7:0b:f8:23:4b:7b:d6:1b:ce:69:35:
                    69:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                18:84:1C:63:CD:89:38:33:03:F1:BA:04:80:85:C2:21:2B:03:B0:BD
            X509v3 Authority Key Identifier:
                keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217586179/0/
                RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217586179/0/18841C63CD89383303F1BA048085C2212B03B0BD.mft
                RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  112.73.0.0/16
                  119.38.128.0/18
                  120.31.0.0/16
                IPv6:
                  2402:3240::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  38372

    Signature Algorithm: sha256WithRSAEncryption
         56:3d:95:5a:e7:44:a5:99:bb:f8:0c:6d:62:5b:1e:3e:fd:37:
         cd:d5:42:64:7e:c3:42:db:15:01:18:d2:a1:dc:9d:80:f2:01:
         23:89:f3:b1:17:f3:2e:48:86:52:36:af:81:25:ac:2e:95:8d:
         5b:7a:d6:3e:e6:a1:e0:d2:b9:cc:aa:b4:2f:5c:00:7b:7d:4f:
         4f:68:9b:9e:ae:15:8f:26:36:2b:22:bd:da:40:bf:54:b8:3f:
         75:92:01:dc:13:5e:0f:3a:f0:e0:35:39:9a:94:ab:10:c4:a3:
         21:b9:50:d7:c3:b4:02:e3:ff:83:b6:8a:7e:53:be:be:9f:50:
         ac:f2:aa:45:72:28:cf:12:64:72:c8:5b:30:1f:cf:6e:74:78:
         21:65:36:21:8a:a8:b9:0b:65:0b:c2:a2:b0:ba:35:60:55:47:
         36:db:ba:35:ff:da:ce:4a:04:36:d3:f9:fd:d0:a2:66:29:de:
         13:74:fd:20:32:db:89:b1:6e:ff:1e:4f:30:9d:81:5c:f7:23:
         a3:b6:d9:8f:a2:81:a4:98:7e:f7:4d:ab:b5:35:89:d7:6c:96:
         28:61:77:27:f5:df:76:6d:39:ca:f6:85:2b:e2:18:08:b4:57:
         64:b5:5d:71:78:cd:ae:f8:06:f3:bd:f3:a2:15:af:e4:45:5e:
         e8:b5:07:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:37:17 2026 by rpki-client