
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/82611B8148EDC9354240ABCE432147501DAE52D1.cer
File: 82611B8148EDC9354240ABCE432147501DAE52D1.cer (raw, json)
Hash identifier: PnCoWcon7swXyfg8w/88lddD0jIc4R6ocFZ+Wbk0cxQ=
Subject key identifier: 82:61:1B:81:48:ED:C9:35:42:40:AB:CE:43:21:47:50:1D:AE:52:D1
Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10
Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710
Certificate serial: 16FB4E63CE89D6FB77DA537E7AB3E421F2C89EEA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
Manifest: rsync://rpki-rps.cnnic.cn/repo/A1117335108752244761/0/82611B8148EDC9354240ABCE432147501DAE52D1.mft
caRepository: rsync://rpki-rps.cnnic.cn/repo/A1117335108752244761/0/
Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml
Certificate not before: Thu 11 Jun 2026 06:05:50 +0000
Certificate not after: Thu 10 Jun 2027 06:10:50 +0000
Subordinate resources: IP: 43.247.228.0/22
IP: 103.238.44.0/22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 16:02:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:fb:4e:63:ce:89:d6:fb:77:da:53:7e:7a:b3:e4:21:f2:c8:9e:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710
Validity
Not Before: Jun 11 06:05:50 2026 GMT
Not After : Jun 10 06:10:50 2027 GMT
Subject: CN=82611B8148EDC9354240ABCE432147501DAE52D1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:56:54:31:28:13:07:2b:ef:0d:7d:32:e6:7c:
c6:5d:1e:a6:16:e5:9a:eb:b7:db:d1:48:5c:de:91:
86:cc:65:db:bb:19:62:3a:a8:44:45:a2:49:e1:09:
a2:54:1f:e4:2a:a7:4b:fb:c1:69:f0:95:b0:ad:b9:
b4:3d:38:e4:ef:83:96:29:19:86:18:59:65:44:f5:
92:65:6d:be:0e:76:2d:d2:f3:07:99:1b:05:e6:81:
b2:14:e4:99:57:43:cc:9f:f0:5c:cc:fb:60:68:89:
dc:13:2a:11:33:c5:17:13:eb:ab:9a:cc:0c:4a:ec:
cd:67:a8:54:b4:b6:22:3e:10:5d:1c:fe:61:6d:06:
09:5c:9e:2c:6b:29:3c:e2:ca:97:a6:a7:20:c1:40:
a1:12:27:eb:f3:c2:4f:06:ba:7d:68:7a:3e:1d:cc:
bb:49:94:e7:01:e3:52:78:c7:80:e1:7e:a6:5f:47:
30:ad:8c:be:07:ac:87:26:63:17:c8:8e:04:57:45:
a5:ac:68:39:6a:9a:93:70:39:0a:09:3b:87:41:4a:
d8:01:fe:c1:dc:f7:d3:1e:1f:17:4a:35:49:07:2f:
39:ab:f1:53:0c:40:4c:fc:4e:ae:24:0a:da:92:89:
02:f4:5e:e0:df:42:6e:a2:0a:ac:46:18:ac:81:d9:
24:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
82:61:1B:81:48:ED:C9:35:42:40:AB:CE:43:21:47:50:1D:AE:52:D1
X509v3 Authority Key Identifier:
keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1117335108752244761/0/
RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1117335108752244761/0/82611B8148EDC9354240ABCE432147501DAE52D1.mft
RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
43.247.228.0/22
103.238.44.0/22
Signature Algorithm: sha256WithRSAEncryption
8c:6e:e5:69:48:17:53:8b:49:72:6a:d6:54:1b:95:99:c1:b5:
a3:a6:0f:4d:91:03:fd:da:1a:0a:b4:7f:94:98:39:47:06:04:
9a:47:f8:ac:6f:87:b0:b3:5e:a0:cd:4c:99:8e:f2:da:a8:9b:
f0:30:ea:fc:e1:9a:0d:92:3e:c9:5b:e1:25:5e:7a:56:22:d3:
08:c0:2c:49:e1:65:1c:19:1c:b6:a8:d0:60:38:e4:ff:2e:8c:
37:85:13:8e:e6:c8:02:5a:04:e2:02:0b:94:cf:fd:cb:91:e0:
a1:0e:6d:61:35:9b:d4:d7:72:a2:31:02:99:4d:32:ab:de:ec:
e9:5d:14:97:8c:29:4f:42:3d:f4:3f:ab:a9:68:d5:de:01:5e:
84:42:f4:25:7a:c3:09:7d:6f:7f:39:2f:32:bb:ef:2b:48:86:
2b:cc:4d:77:6a:ea:d1:fa:48:12:2c:7f:b3:1e:1d:72:56:82:
d1:60:f2:22:19:8c:21:7f:6f:56:ae:bc:98:79:26:d4:54:2f:
42:2b:8b:76:0a:ec:4a:7b:24:13:22:86:db:30:d5:22:1c:44:
a8:49:59:33:e6:c3:55:d0:c3:97:1b:82:f3:6e:09:54:60:a6:
8b:be:bf:d7:a2:db:a2:fd:0b:85:2e:a5:4d:b6:f8:b0:02:12:
aa:67:b0:4e
-----BEGIN CERTIFICATE-----
MIIFrTCCBJWgAwIBAgIUFvtOY86J1vt32lN+erPkIfLInuowDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw
M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDYxMTA2MDU1MFoX
DTI3MDYxMDA2MTA1MFowMzExMC8GA1UEAxMoODI2MTFCODE0OEVEQzkzNTQyNDBB
QkNFNDMyMTQ3NTAxREFFNTJEMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALpWVDEoEwcr7w19MuZ8xl0ephblmuu329FIXN6Rhsxl27sZYjqoREWiSeEJ
olQf5CqnS/vBafCVsK25tD045O+DlikZhhhZZUT1kmVtvg52LdLzB5kbBeaBshTk
mVdDzJ/wXMz7YGiJ3BMqETPFFxPrq5rMDErszWeoVLS2Ij4QXRz+YW0GCVyeLGsp
POLKl6anIMFAoRIn6/PCTwa6fWh6Ph3Mu0mU5wHjUnjHgOF+pl9HMK2MvgeshyZj
F8iOBFdFpaxoOWqak3A5Cgk7h0FK2AH+wdz30x4fF0o1SQcvOavxUwxATPxOriQK
2pKJAvRe4N9CbqIKrEYYrIHZJJMCAwEAAaOCAqAwggKcMA8GA1UdEwEB/wQFMAMB
Af8wHQYDVR0OBBYEFIJhG4FI7ck1QkCrzkMhR1AdrlLRMB8GA1UdIwQYMBaAFKVu
hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig
ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw
OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE
NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB
BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu
Y24vcmVwby9BMTExNzMzNTEwODc1MjI0NDc2MS8wLzBuBggrBgEFBQcwCoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMTE3MzM1MTA4NzUyMjQ0NzYx
LzAvODI2MTFCODE0OEVEQzkzNTQyNDBBQkNFNDMyMTQ3NTAxREFFNTJEMS5tZnQw
OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp
ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwJQYIKwYBBQUH
AQcBAf8EFjAUMBIEAgABMAwDBAIr9+QDBAJn7iwwDQYJKoZIhvcNAQELBQADggEB
AIxu5WlIF1OLSXJq1lQblZnBtaOmD02RA/3aGgq0f5SYOUcGBJpH+Kxvh7CzXqDN
TJmO8tqom/Aw6vzhmg2SPslb4SVeelYi0wjALEnhZRwZHLao0GA45P8ujDeFE47m
yAJaBOICC5TP/cuR4KEObWE1m9TXcqIxAplNMqve7OldFJeMKU9CPfQ/q6lo1d4B
XoRC9CV6wwl9b385LzK77ytIhivMTXdq6tH6SBIsf7MeHXJWgtFg8iIZjCF/b1au
vJh5JtRUL0Iri3YK7Ep7JBMihtsw1SIcRKhJWTPmw1XQw5cbgvNuCVRgpou+v9ei
26L9C4UupU22+LACEqpnsE4=
-----END CERTIFICATE-----
Generated at Sun Jun 14 05:40:25 2026 by rpki-client