
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A162689F28161D4D4C3DF339D95097D5EF647370.cer
File: A162689F28161D4D4C3DF339D95097D5EF647370.cer (raw, json)
Hash identifier: 2DHNiH1SsWLwD65nQ1edypxqpnk4th1m+b4eq5HMhBk=
Subject key identifier: A1:62:68:9F:28:16:1D:4D:4C:3D:F3:39:D9:50:97:D5:EF:64:73:70
Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10
Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710
Certificate serial: 78B35A2E39DA2556A8BDADE439D004A645D0095B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
Manifest: rsync://rpki-rps.cnnic.cn/repo/A1065582330346930177/0/A162689F28161D4D4C3DF339D95097D5EF647370.mft
caRepository: rsync://rpki-rps.cnnic.cn/repo/A1065582330346930177/0/
Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml
Certificate not before: Thu 05 Feb 2026 01:40:48 +0000
Certificate not after: Thu 04 Feb 2027 01:45:48 +0000
Subordinate resources: AS: 131536
IP: 124.14.0.0 -- 124.14.23.255
IP: 124.14.52.0/22
IP: 211.161.96.0 -- 211.161.107.255
IP: 211.161.192.0/19
IP: 211.161.240.0/20
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 02 Mar 2026 09:28:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:b3:5a:2e:39:da:25:56:a8:bd:ad:e4:39:d0:04:a6:45:d0:09:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710
Validity
Not Before: Feb 5 01:40:48 2026 GMT
Not After : Feb 4 01:45:48 2027 GMT
Subject: CN=A162689F28161D4D4C3DF339D95097D5EF647370
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:23:67:98:a8:66:8a:7a:34:25:fb:f6:e3:c1:
a3:88:67:36:f8:2b:07:3b:97:95:e6:7a:20:0b:21:
7e:07:5d:9d:60:c0:eb:27:29:1a:a7:5d:b9:16:28:
43:6f:ea:17:5e:e1:42:61:02:3b:20:7a:5f:5a:1b:
bf:45:67:ad:d3:2a:5c:dc:d2:18:51:26:60:ff:23:
eb:a5:3d:51:7f:93:b6:1a:cd:82:18:0e:57:3e:54:
82:9e:f8:f4:39:af:fe:c9:73:43:92:da:1a:ac:25:
84:08:f7:45:7e:dc:fe:a3:1a:5d:ee:7f:11:58:b0:
20:c2:4e:79:d1:3a:f9:0a:e7:bf:96:b4:41:bf:99:
f8:27:3e:ff:f3:1a:c8:25:ea:07:1a:b7:66:f8:a7:
7c:e4:43:88:03:6a:55:32:75:eb:ab:31:9a:f9:03:
04:9a:f8:73:7f:dd:77:cf:12:e5:52:a2:e4:4e:28:
f1:ba:e3:ad:4c:99:23:3e:26:fb:8f:02:b5:fd:e0:
05:41:4b:9a:25:57:43:a0:2f:24:7b:98:cf:8e:a2:
56:f9:f4:c8:63:00:2e:c1:6c:0f:f7:a4:cd:aa:b6:
b3:81:6b:f9:52:d3:aa:f6:41:5d:17:a5:1f:c9:d6:
ff:23:ed:6d:e1:da:37:9b:b5:d6:b5:7e:df:45:ab:
b9:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
A1:62:68:9F:28:16:1D:4D:4C:3D:F3:39:D9:50:97:D5:EF:64:73:70
X509v3 Authority Key Identifier:
keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330346930177/0/
RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330346930177/0/A162689F28161D4D4C3DF339D95097D5EF647370.mft
RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
124.14.0.0-124.14.23.255
124.14.52.0/22
211.161.96.0-211.161.107.255
211.161.192.0/19
211.161.240.0/20
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
131536
Signature Algorithm: sha256WithRSAEncryption
4a:70:db:ca:0d:46:23:5e:0e:5a:30:c0:48:23:df:7d:61:4c:
09:4a:e4:ff:7a:98:e7:92:39:ac:41:d6:78:e7:e0:82:85:95:
2a:8d:6c:2c:37:19:94:68:18:7e:a1:75:fa:1d:7e:16:c2:1b:
10:14:bb:ae:4f:ac:da:07:ff:eb:24:91:44:c7:14:8c:1f:2d:
40:6f:fb:d6:51:9f:85:ae:95:a4:16:9d:96:0d:7e:12:bf:5a:
aa:5f:4d:5a:a3:eb:aa:c5:e2:e4:f1:d1:53:5a:19:7f:5d:9f:
07:96:5b:3a:5e:24:97:f2:5d:76:3b:bb:74:b9:b0:03:f3:62:
49:1e:38:d5:c8:08:d2:61:d5:4b:e4:fc:f0:27:15:82:58:64:
9f:d3:77:93:f6:12:51:ca:23:a1:a9:7d:98:62:6e:5a:84:6c:
96:db:52:81:09:7a:5f:0c:e8:fa:2d:53:c5:2b:44:d1:a4:be:
04:e1:cb:95:c1:c4:54:7d:9e:9c:2b:f4:7d:6b:30:e9:30:26:
1f:20:14:42:76:ed:c8:42:3c:a2:3e:b6:5d:98:f1:49:27:31:
f3:13:c7:65:a6:f8:99:c3:52:0a:ca:41:68:c8:7b:c9:e0:c1:
91:3e:e4:04:19:de:77:93:a0:70:af:77:85:c6:86:2d:1d:0c:
11:9b:05:e9
-----BEGIN CERTIFICATE-----
MIIF6jCCBNKgAwIBAgIUeLNaLjnaJVaova3kOdAEpkXQCVswDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAwwMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw
M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDIwNTAxNDA0OFoX
DTI3MDIwNDAxNDU0OFowMzExMC8GA1UEAxMoQTE2MjY4OUYyODE2MUQ0RDRDM0RG
MzM5RDk1MDk3RDVFRjY0NzM3MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAJUjZ5ioZop6NCX79uPBo4hnNvgrBzuXleZ6IAshfgddnWDA6ycpGqdduRYo
Q2/qF17hQmECOyB6X1obv0VnrdMqXNzSGFEmYP8j66U9UX+TthrNghgOVz5Ugp74
9Dmv/slzQ5LaGqwlhAj3RX7c/qMaXe5/EViwIMJOedE6+Qrnv5a0Qb+Z+Cc+//Ma
yCXqBxq3ZvinfORDiANqVTJ166sxmvkDBJr4c3/dd88S5VKi5E4o8brjrUyZIz4m
+48Ctf3gBUFLmiVXQ6AvJHuYz46iVvn0yGMALsFsD/ekzaq2s4Fr+VLTqvZBXRel
H8nW/yPtbeHaN5u11rV+30WrubcCAwEAAaOCAt0wggLZMA8GA1UdEwEB/wQFMAMB
Af8wHQYDVR0OBBYEFKFiaJ8oFh1NTD3zOdlQl9XvZHNwMB8GA1UdIwQYMBaAFKVu
hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig
ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw
OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE
NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB
BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu
Y24vcmVwby9BMTA2NTU4MjMzMDM0NjkzMDE3Ny8wLzBuBggrBgEFBQcwCoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDY1NTgyMzMwMzQ2OTMwMTc3
LzAvQTE2MjY4OUYyODE2MUQ0RDRDM0RGMzM5RDk1MDk3RDVFRjY0NzM3MC5tZnQw
OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp
ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwRgYIKwYBBQUH
AQcBAf8ENzA1MDMEAgABMC0wCwMDAXwOAwQDfA4QAwQCfA40MAwDBAXToWADBALT
oWgDBAXTocADBATTofAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDAgHQMA0GCSqG
SIb3DQEBCwUAA4IBAQBKcNvKDUYjXg5aMMBII999YUwJSuT/epjnkjmsQdZ45+CC
hZUqjWwsNxmUaBh+oXX6HX4WwhsQFLuuT6zaB//rJJFExxSMHy1Ab/vWUZ+FrpWk
Fp2WDX4Sv1qqX01ao+uqxeLk8dFTWhl/XZ8Hlls6XiSX8l12O7t0ubAD82JJHjjV
yAjSYdVL5PzwJxWCWGSf03eT9hJRyiOhqX2YYm5ahGyW21KBCXpfDOj6LVPFK0TR
pL4E4cuVwcRUfZ6cK/R9azDpMCYfIBRCdu3IQjyiPrZdmPFJJzHzE8dlpviZw1IK
ykFoyHvJ4MGRPuQEGd53k6Bwr3eFxoYtHQwRmwXp
-----END CERTIFICATE-----
Generated at Sun Mar 1 21:04:53 2026 by rpki-client