
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/632A01C4F1D5C990BF6B363A67894CC7D69E478B.cer
File: 632A01C4F1D5C990BF6B363A67894CC7D69E478B.cer (raw, json)
Hash identifier: yCTloN35+Jj2uD7s92s/3W6l+fiEphHEg+UYpEKOfDo=
Subject key identifier: 63:2A:01:C4:F1:D5:C9:90:BF:6B:36:3A:67:89:4C:C7:D6:9E:47:8B
Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10
Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710
Certificate serial: 13BC48E794A90A92799EC68704F4A9D8D818CED0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
Manifest: rsync://rpki-rps.cnnic.cn/repo/A1065585389265485825/0/632A01C4F1D5C990BF6B363A67894CC7D69E478B.mft
caRepository: rsync://rpki-rps.cnnic.cn/repo/A1065585389265485825/0/
Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml
Certificate not before: Fri 29 May 2026 01:36:20 +0000
Certificate not after: Fri 28 May 2027 01:41:20 +0000
Subordinate resources: AS: 146806
IP: 42.201.8.0 -- 42.201.31.255
IP: 45.250.152.0/22
IP: 103.79.228.0/23
IP: 103.219.64.0/22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 16:02:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:bc:48:e7:94:a9:0a:92:79:9e:c6:87:04:f4:a9:d8:d8:18:ce:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710
Validity
Not Before: May 29 01:36:20 2026 GMT
Not After : May 28 01:41:20 2027 GMT
Subject: CN=632A01C4F1D5C990BF6B363A67894CC7D69E478B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:22:ef:40:49:ce:8a:8c:3c:1e:eb:53:5f:b3:
fd:02:10:76:fd:91:92:a6:4a:09:e3:73:1b:0a:f1:
dd:02:7c:19:c8:94:7b:f2:1a:34:67:1c:83:01:2d:
fa:aa:6a:a9:53:aa:e3:ff:c2:79:a1:73:1d:ad:5a:
3f:44:cc:7e:9f:6a:39:21:88:c4:54:54:d6:fb:45:
37:40:d0:cc:b1:5f:41:44:10:5e:d7:62:3b:5d:7a:
88:2f:d8:4d:66:89:40:3b:ac:c6:52:fe:e1:84:fe:
4a:c1:d8:eb:75:ff:45:c5:a1:74:f2:d1:80:67:04:
fb:c7:a3:4b:9c:ff:0c:9c:71:28:9e:d9:43:27:6f:
be:ff:fa:5b:73:c3:9b:82:f5:57:95:c7:7e:ba:c9:
dd:c7:1b:36:ba:4d:7b:54:43:7d:9a:0d:8e:c0:42:
4a:c4:9b:98:d4:61:a2:78:ea:83:61:1f:e0:ff:82:
a8:a8:84:22:11:06:e5:f5:3d:8d:a0:58:2d:f5:49:
9c:11:1b:8a:0e:f6:e2:64:79:b6:cb:70:28:84:6a:
0e:ec:8f:76:71:07:19:c4:bd:7c:b0:c2:08:b4:5e:
b7:8c:4e:aa:0a:40:fa:4c:81:3c:ac:94:37:ff:18:
f9:e4:48:2a:53:d4:e9:0f:4e:02:83:53:fb:f5:3b:
24:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
63:2A:01:C4:F1:D5:C9:90:BF:6B:36:3A:67:89:4C:C7:D6:9E:47:8B
X509v3 Authority Key Identifier:
keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265485825/0/
RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265485825/0/632A01C4F1D5C990BF6B363A67894CC7D69E478B.mft
RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
42.201.8.0-42.201.31.255
45.250.152.0/22
103.79.228.0/23
103.219.64.0/22
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
146806
Signature Algorithm: sha256WithRSAEncryption
21:77:af:7a:1a:52:f6:0c:f1:ad:92:e0:ae:67:11:50:ce:eb:
d5:92:d9:c6:c6:ae:51:a1:b9:88:76:29:67:2d:11:24:01:4c:
86:48:b1:4e:a7:b0:9d:6a:29:33:e6:a0:d2:6a:83:2d:4a:87:
74:6f:62:cb:14:d7:7e:18:bb:11:3e:00:96:d5:18:e9:e9:4e:
4e:95:69:03:3a:ec:65:e8:e5:9e:d3:d3:3d:08:c8:6a:64:39:
ad:d7:e3:54:3e:20:59:cb:6c:53:ae:89:d6:e5:b6:a0:3a:d5:
f3:9c:1e:15:71:15:55:92:30:97:ec:2d:7f:f1:30:9b:66:6f:
47:58:f4:4e:aa:9e:85:d9:c0:40:a5:1c:50:55:91:b5:13:65:
0b:f6:d2:78:af:78:7f:71:4e:a7:64:f4:ad:32:e9:9d:92:b3:
25:86:53:ff:86:04:d0:a8:da:6a:e5:61:ca:61:88:e9:60:16:
6f:f1:94:1d:8c:65:b8:de:8f:85:90:2d:ee:1a:e1:8a:f1:ed:
54:ae:99:88:b7:9c:fd:c9:76:77:9e:52:62:c4:65:a3:58:ee:
3e:e0:be:71:b9:fd:84:bf:53:3f:f2:1b:ed:99:8b:69:82:21:
03:cb:19:ef:e2:df:4c:89:e6:79:82:eb:bf:88:fa:ff:81:5f:
79:17:0f:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 05:27:52 2026 by rpki-client