Certificate

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/82611B8148EDC9354240ABCE432147501DAE52D1.cer
File:                     82611B8148EDC9354240ABCE432147501DAE52D1.cer (raw, json)
Hash identifier:          PnCoWcon7swXyfg8w/88lddD0jIc4R6ocFZ+Wbk0cxQ=
Subject key identifier:   82:61:1B:81:48:ED:C9:35:42:40:AB:CE:43:21:47:50:1D:AE:52:D1
Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10
Certificate issuer:       /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710
Certificate serial:       16FB4E63CE89D6FB77DA537E7AB3E421F2C89EEA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
Manifest:                 rsync://rpki-rps.cnnic.cn/repo/A1117335108752244761/0/82611B8148EDC9354240ABCE432147501DAE52D1.mft
caRepository:             rsync://rpki-rps.cnnic.cn/repo/A1117335108752244761/0/
Notify URL:               https://rrdp-rps.cnnic.cn/rrdp/notification.xml
Certificate not before:   Thu 11 Jun 2026 06:05:50 +0000
Certificate not after:    Thu 10 Jun 2027 06:10:50 +0000
Subordinate resources:    IP: 43.247.228.0/22
                          IP: 103.238.44.0/22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Jun 2026 16:02:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:fb:4e:63:ce:89:d6:fb:77:da:53:7e:7a:b3:e4:21:f2:c8:9e:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710
        Validity
            Not Before: Jun 11 06:05:50 2026 GMT
            Not After : Jun 10 06:10:50 2027 GMT
        Subject: CN=82611B8148EDC9354240ABCE432147501DAE52D1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:56:54:31:28:13:07:2b:ef:0d:7d:32:e6:7c:
                    c6:5d:1e:a6:16:e5:9a:eb:b7:db:d1:48:5c:de:91:
                    86:cc:65:db:bb:19:62:3a:a8:44:45:a2:49:e1:09:
                    a2:54:1f:e4:2a:a7:4b:fb:c1:69:f0:95:b0:ad:b9:
                    b4:3d:38:e4:ef:83:96:29:19:86:18:59:65:44:f5:
                    92:65:6d:be:0e:76:2d:d2:f3:07:99:1b:05:e6:81:
                    b2:14:e4:99:57:43:cc:9f:f0:5c:cc:fb:60:68:89:
                    dc:13:2a:11:33:c5:17:13:eb:ab:9a:cc:0c:4a:ec:
                    cd:67:a8:54:b4:b6:22:3e:10:5d:1c:fe:61:6d:06:
                    09:5c:9e:2c:6b:29:3c:e2:ca:97:a6:a7:20:c1:40:
                    a1:12:27:eb:f3:c2:4f:06:ba:7d:68:7a:3e:1d:cc:
                    bb:49:94:e7:01:e3:52:78:c7:80:e1:7e:a6:5f:47:
                    30:ad:8c:be:07:ac:87:26:63:17:c8:8e:04:57:45:
                    a5:ac:68:39:6a:9a:93:70:39:0a:09:3b:87:41:4a:
                    d8:01:fe:c1:dc:f7:d3:1e:1f:17:4a:35:49:07:2f:
                    39:ab:f1:53:0c:40:4c:fc:4e:ae:24:0a:da:92:89:
                    02:f4:5e:e0:df:42:6e:a2:0a:ac:46:18:ac:81:d9:
                    24:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                82:61:1B:81:48:ED:C9:35:42:40:AB:CE:43:21:47:50:1D:AE:52:D1
            X509v3 Authority Key Identifier:
                keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1117335108752244761/0/
                RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1117335108752244761/0/82611B8148EDC9354240ABCE432147501DAE52D1.mft
                RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.247.228.0/22
                  103.238.44.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8c:6e:e5:69:48:17:53:8b:49:72:6a:d6:54:1b:95:99:c1:b5:
         a3:a6:0f:4d:91:03:fd:da:1a:0a:b4:7f:94:98:39:47:06:04:
         9a:47:f8:ac:6f:87:b0:b3:5e:a0:cd:4c:99:8e:f2:da:a8:9b:
         f0:30:ea:fc:e1:9a:0d:92:3e:c9:5b:e1:25:5e:7a:56:22:d3:
         08:c0:2c:49:e1:65:1c:19:1c:b6:a8:d0:60:38:e4:ff:2e:8c:
         37:85:13:8e:e6:c8:02:5a:04:e2:02:0b:94:cf:fd:cb:91:e0:
         a1:0e:6d:61:35:9b:d4:d7:72:a2:31:02:99:4d:32:ab:de:ec:
         e9:5d:14:97:8c:29:4f:42:3d:f4:3f:ab:a9:68:d5:de:01:5e:
         84:42:f4:25:7a:c3:09:7d:6f:7f:39:2f:32:bb:ef:2b:48:86:
         2b:cc:4d:77:6a:ea:d1:fa:48:12:2c:7f:b3:1e:1d:72:56:82:
         d1:60:f2:22:19:8c:21:7f:6f:56:ae:bc:98:79:26:d4:54:2f:
         42:2b:8b:76:0a:ec:4a:7b:24:13:22:86:db:30:d5:22:1c:44:
         a8:49:59:33:e6:c3:55:d0:c3:97:1b:82:f3:6e:09:54:60:a6:
         8b:be:bf:d7:a2:db:a2:fd:0b:85:2e:a5:4d:b6:f8:b0:02:12:
         aa:67:b0:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 05:40:25 2026 by rpki-client