
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/62BCBF9185437A0BC98EF8D6C45F4B0ECB56C163.cer
File: 62BCBF9185437A0BC98EF8D6C45F4B0ECB56C163.cer (raw, json)
Hash identifier: cvIfyOtagxXqO4uB2TzEslLF94xcWnARoJI+z43X6ds=
Subject key identifier: 62:BC:BF:91:85:43:7A:0B:C9:8E:F8:D6:C4:5F:4B:0E:CB:56:C1:63
Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10
Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710
Certificate serial: 7D4E28717C94F625C76646EEAE7EDEEA9FC7A005
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
Manifest: rsync://rpki-rps.cnnic.cn/repo/A1097062473040658435/0/62BCBF9185437A0BC98EF8D6C45F4B0ECB56C163.mft
caRepository: rsync://rpki-rps.cnnic.cn/repo/A1097062473040658435/0/
Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml
Certificate not before: Thu 16 Apr 2026 07:29:37 +0000
Certificate not after: Thu 15 Apr 2027 07:34:37 +0000
Subordinate resources: IP: 103.2.108.0/22
IP: 103.29.16.0/22
IP: 103.72.172.0/22
IP: 103.204.232.0/22
IP: 103.234.20.0/22
IP: 150.242.184.0/22
IP: 202.181.28.0/22
IP: 2404:a80::/32
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 17:12:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:4e:28:71:7c:94:f6:25:c7:66:46:ee:ae:7e:de:ea:9f:c7:a0:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710
Validity
Not Before: Apr 16 07:29:37 2026 GMT
Not After : Apr 15 07:34:37 2027 GMT
Subject: CN=62BCBF9185437A0BC98EF8D6C45F4B0ECB56C163
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:4d:22:9a:32:7b:e9:4c:c0:4a:38:a0:63:88:
d8:b0:a1:02:a1:2a:2f:67:9b:8e:d3:c0:70:03:e7:
a9:f4:90:14:af:2a:0e:45:13:ca:2c:0c:f2:5c:cd:
5d:9f:2d:bf:00:41:6a:b7:de:43:d8:32:c4:bb:26:
41:b9:6f:a9:c6:8d:78:49:de:68:71:7a:9c:ce:c2:
c7:ed:6a:6f:55:70:82:98:3f:6c:96:06:a3:83:f7:
38:5e:bc:84:da:29:cf:3f:9d:9d:80:6a:61:51:f7:
ce:6c:b7:1c:3d:84:f1:81:6c:f2:07:e6:55:b0:f5:
91:8c:0b:2a:82:96:6f:35:c5:ad:dc:28:d2:d2:39:
44:f0:75:fd:fa:72:63:34:45:ea:29:e7:84:76:93:
4f:ef:54:99:86:41:64:f0:d8:ad:06:cc:63:15:93:
c5:95:74:53:44:02:8f:54:54:9e:a2:43:7c:c4:c4:
94:ba:e7:94:40:b7:d8:5a:84:c6:44:e4:71:96:44:
47:63:b6:c9:d9:49:00:70:53:e3:87:16:3c:7c:ff:
28:d2:e3:c2:f4:5f:b2:11:7f:55:c9:5d:e5:dd:cf:
22:dd:28:58:ac:e8:18:30:2d:e0:5b:e4:2a:bc:9a:
81:fb:c0:7e:5c:7e:4a:15:cc:76:b3:3a:89:90:56:
61:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
62:BC:BF:91:85:43:7A:0B:C9:8E:F8:D6:C4:5F:4B:0E:CB:56:C1:63
X509v3 Authority Key Identifier:
keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1097062473040658435/0/
RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1097062473040658435/0/62BCBF9185437A0BC98EF8D6C45F4B0ECB56C163.mft
RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.2.108.0/22
103.29.16.0/22
103.72.172.0/22
103.204.232.0/22
103.234.20.0/22
150.242.184.0/22
202.181.28.0/22
IPv6:
2404:a80::/32
Signature Algorithm: sha256WithRSAEncryption
83:6e:94:78:03:d5:d4:65:1c:25:3f:96:02:71:63:64:4a:44:
10:62:ba:e9:11:7b:6b:30:24:30:46:71:7b:59:a0:3f:c4:e3:
be:71:a5:32:8f:17:8b:55:0e:fc:35:ba:5f:d0:0a:c2:27:3e:
bc:8c:75:08:63:9e:cc:b4:96:09:e9:de:50:b7:e0:4e:f3:18:
13:b0:5c:c1:39:ec:d8:bf:21:25:8c:ae:3c:3b:e1:fe:0e:f7:
3a:c5:0e:38:18:48:cd:3e:63:3b:2a:40:b5:a5:e3:eb:fc:46:
d0:45:19:40:1d:c0:c7:2e:7e:be:03:96:5b:0f:47:ba:ba:3e:
ee:54:24:0d:36:38:10:18:a9:8a:7d:51:49:ab:43:8f:21:cf:
ae:d3:b7:f9:10:23:b1:39:5a:6d:ef:7c:5e:57:dc:05:fc:ff:
96:06:53:0f:3b:42:a0:63:25:66:f1:b4:0d:25:10:9d:99:6b:
93:b3:bf:38:39:b9:5d:f6:82:e6:10:a3:85:e7:6d:c2:4f:bc:
e3:5a:6c:2e:02:9c:3d:f5:53:0d:9b:6a:7f:5e:c8:b2:91:99:
18:e6:9e:d7:83:20:f6:73:34:a2:5c:74:6b:3b:67:94:ec:14:
83:79:72:46:a6:02:09:28:dd:e1:a3:c5:0d:93:43:f4:89:b1:
f4:f4:dd:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:25:40 2026 by rpki-client