
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18841C63CD89383303F1BA048085C2212B03B0BD.cer
File: 18841C63CD89383303F1BA048085C2212B03B0BD.cer (raw, json)
Hash identifier: K2CI4ypu1BRrgmuWxRKBxx33HKiGRTdRYjuuAxpQjgs=
Subject key identifier: 18:84:1C:63:CD:89:38:33:03:F1:BA:04:80:85:C2:21:2B:03:B0:BD
Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10
Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710
Certificate serial: 63A15B2864EF45C4AE2FB515BB3A798E9923936C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
Manifest: rsync://rpki-rps.cnnic.cn/repo/A1065585911217586179/0/18841C63CD89383303F1BA048085C2212B03B0BD.mft
caRepository: rsync://rpki-rps.cnnic.cn/repo/A1065585911217586179/0/
Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml
Certificate not before: Mon 01 Jun 2026 01:40:20 +0000
Certificate not after: Mon 31 May 2027 01:45:20 +0000
Subordinate resources: AS: 38372
IP: 112.73.0.0/16
IP: 119.38.128.0/18
IP: 120.31.0.0/16
IP: 2402:3240::/32
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Jun 2026 23:15:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:a1:5b:28:64:ef:45:c4:ae:2f:b5:15:bb:3a:79:8e:99:23:93:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710
Validity
Not Before: Jun 1 01:40:20 2026 GMT
Not After : May 31 01:45:20 2027 GMT
Subject: CN=18841C63CD89383303F1BA048085C2212B03B0BD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:f8:29:4e:79:37:18:5b:3e:12:26:35:8c:8d:
b0:4d:9a:f3:3f:76:01:16:ba:9c:cf:3f:5f:18:9f:
7c:8e:6e:00:e8:9d:ad:cd:62:97:b9:b9:91:ea:a4:
3b:11:3f:fa:ab:a6:0e:21:31:71:b7:8c:f6:7b:a4:
bb:e6:35:ad:d5:23:be:7e:19:19:b3:f0:1e:96:d1:
f0:9e:9e:26:39:0c:ea:f8:e7:04:ca:7f:c3:50:e0:
39:37:ab:e5:d9:e7:f5:75:af:5c:ea:9b:6c:6b:6b:
82:03:46:33:05:de:61:f8:e5:e8:40:63:14:44:f5:
ab:95:dc:5c:ca:92:f7:54:c2:2d:af:f7:c4:0a:9d:
8e:eb:e9:03:70:1f:98:c1:df:a9:d6:31:25:f3:68:
fa:85:bc:52:c4:b1:f4:5e:57:6f:d0:3c:48:09:a5:
df:96:b7:77:f5:ac:62:5e:3f:bb:6c:aa:d9:9b:c5:
a3:38:32:ce:cc:99:22:a2:f6:a1:3e:ce:7f:4c:e5:
df:da:6c:f9:af:f7:26:cd:bb:af:42:eb:f3:a3:0b:
5f:2b:c1:a5:a0:fc:5d:6c:96:a2:12:2a:40:4c:f6:
dd:26:b6:78:eb:16:8f:08:50:c0:8f:31:e4:a4:fd:
2b:41:b5:dc:e7:0b:f8:23:4b:7b:d6:1b:ce:69:35:
69:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
18:84:1C:63:CD:89:38:33:03:F1:BA:04:80:85:C2:21:2B:03:B0:BD
X509v3 Authority Key Identifier:
keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217586179/0/
RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217586179/0/18841C63CD89383303F1BA048085C2212B03B0BD.mft
RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
112.73.0.0/16
119.38.128.0/18
120.31.0.0/16
IPv6:
2402:3240::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
38372
Signature Algorithm: sha256WithRSAEncryption
56:3d:95:5a:e7:44:a5:99:bb:f8:0c:6d:62:5b:1e:3e:fd:37:
cd:d5:42:64:7e:c3:42:db:15:01:18:d2:a1:dc:9d:80:f2:01:
23:89:f3:b1:17:f3:2e:48:86:52:36:af:81:25:ac:2e:95:8d:
5b:7a:d6:3e:e6:a1:e0:d2:b9:cc:aa:b4:2f:5c:00:7b:7d:4f:
4f:68:9b:9e:ae:15:8f:26:36:2b:22:bd:da:40:bf:54:b8:3f:
75:92:01:dc:13:5e:0f:3a:f0:e0:35:39:9a:94:ab:10:c4:a3:
21:b9:50:d7:c3:b4:02:e3:ff:83:b6:8a:7e:53:be:be:9f:50:
ac:f2:aa:45:72:28:cf:12:64:72:c8:5b:30:1f:cf:6e:74:78:
21:65:36:21:8a:a8:b9:0b:65:0b:c2:a2:b0:ba:35:60:55:47:
36:db:ba:35:ff:da:ce:4a:04:36:d3:f9:fd:d0:a2:66:29:de:
13:74:fd:20:32:db:89:b1:6e:ff:1e:4f:30:9d:81:5c:f7:23:
a3:b6:d9:8f:a2:81:a4:98:7e:f7:4d:ab:b5:35:89:d7:6c:96:
28:61:77:27:f5:df:76:6d:39:ca:f6:85:2b:e2:18:08:b4:57:
64:b5:5d:71:78:cd:ae:f8:06:f3:bd:f3:a2:15:af:e4:45:5e:
e8:b5:07:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:37:17 2026 by rpki-client