
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B1AF6997E9C42EA086D8EAA6B71FF567AF25B0E1.cer
File: B1AF6997E9C42EA086D8EAA6B71FF567AF25B0E1.cer (raw, json)
Hash identifier: RA0+LEyPCm824b4sAkdGaYEjM2kyik0rGBNvpyKoWLM=
Subject key identifier: B1:AF:69:97:E9:C4:2E:A0:86:D8:EA:A6:B7:1F:F5:67:AF:25:B0:E1
Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10
Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710
Certificate serial: 01AD71DE9DD86B0254B76296492DF28EE0039A8A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
Manifest: rsync://rpki-rps.cnnic.cn/repo/A1113660812506955797/0/B1AF6997E9C42EA086D8EAA6B71FF567AF25B0E1.mft
caRepository: rsync://rpki-rps.cnnic.cn/repo/A1113660812506955797/0/
Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml
Certificate not before: Mon 01 Jun 2026 02:45:29 +0000
Certificate not after: Mon 31 May 2027 02:50:29 +0000
Subordinate resources: AS: 131555
IP: 103.100.0.0/22
IP: 2401:b6c0::/32
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 16:02:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:ad:71:de:9d:d8:6b:02:54:b7:62:96:49:2d:f2:8e:e0:03:9a:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710
Validity
Not Before: Jun 1 02:45:29 2026 GMT
Not After : May 31 02:50:29 2027 GMT
Subject: CN=B1AF6997E9C42EA086D8EAA6B71FF567AF25B0E1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:b0:f3:ab:1f:24:52:0d:b5:3d:a8:74:4d:4f:
8b:5a:e8:84:48:be:a7:08:c6:f7:9a:35:f6:05:5b:
f1:98:b3:5a:4e:2b:94:7a:1f:57:d3:1a:65:c0:49:
00:28:9e:0b:0d:e5:56:e9:ed:97:f5:3d:32:f0:f8:
bc:8d:fb:af:40:97:0f:5b:63:9d:14:f5:97:8a:57:
65:36:78:c1:5d:62:f5:01:de:de:60:63:99:dc:79:
a8:d3:58:79:2a:ad:b8:34:a4:9a:0b:25:bb:70:c4:
65:eb:7b:1f:1b:d8:17:1f:ea:c0:f6:49:77:9d:dd:
73:62:c4:8b:40:a6:56:41:75:9e:5b:b9:4a:c1:73:
ff:ac:5c:08:c4:5b:d3:86:c2:88:77:4e:03:2a:1d:
e9:19:75:43:ef:57:f4:9d:df:53:aa:6d:b2:30:3e:
98:b2:39:57:50:e8:96:0c:9d:c8:2a:72:06:90:a5:
0c:3d:40:c0:91:30:15:e6:c4:dc:2f:61:3a:97:08:
d6:34:a0:7a:ed:e8:8a:9e:dd:57:9d:b6:91:dc:1b:
4c:65:2d:69:3c:49:0b:72:b5:47:86:ff:c3:67:e2:
dc:9e:f8:f6:9a:16:4a:1b:5c:d5:ee:18:11:09:8a:
eb:a1:58:1f:22:33:0f:19:2b:cc:7c:f8:ca:a4:85:
e4:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
B1:AF:69:97:E9:C4:2E:A0:86:D8:EA:A6:B7:1F:F5:67:AF:25:B0:E1
X509v3 Authority Key Identifier:
keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1113660812506955797/0/
RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1113660812506955797/0/B1AF6997E9C42EA086D8EAA6B71FF567AF25B0E1.mft
RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.100.0.0/22
IPv6:
2401:b6c0::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
131555
Signature Algorithm: sha256WithRSAEncryption
16:f8:23:c7:69:82:ba:49:ff:7a:b8:a2:8f:66:6c:f7:18:09:
ca:a7:96:7d:6f:0e:ec:5f:75:65:47:48:c6:5e:36:e2:5f:a0:
f1:02:d3:e5:29:36:d3:9e:1c:6c:5e:ed:72:48:32:89:dd:09:
ac:42:3f:62:7c:e6:b3:1d:a0:bc:95:74:ba:b0:be:b9:eb:9d:
e1:51:b9:f4:28:91:45:a6:14:aa:2b:fb:e2:b4:57:7f:b4:a3:
50:3b:5b:42:6e:57:e4:30:32:fb:a3:f8:f8:84:29:65:94:97:
6a:b3:7e:d1:5a:49:b7:f2:80:13:6e:b4:94:6d:4d:99:6a:d9:
15:a2:85:22:a8:65:a4:a2:a5:96:fd:2d:9c:84:72:97:25:b8:
3e:81:1a:89:c9:fd:8b:31:58:f0:55:32:67:2e:d5:5d:22:85:
90:58:94:69:ae:e9:ce:a3:44:33:46:60:9a:c6:64:30:e5:9f:
0e:34:1f:35:7d:d4:29:1a:d7:16:20:6c:3b:9e:a6:77:e2:4a:
86:5e:81:0f:4e:c4:e6:97:7f:24:ea:88:19:70:a6:ce:df:2a:
bf:3d:96:bb:a6:28:ab:04:5e:12:27:02:9a:4a:6b:cb:d9:2f:
1c:1e:65:c6:bc:27:b0:7b:05:64:4d:97:ea:d0:14:5e:ce:46:
8b:6e:b0:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 05:40:15 2026 by rpki-client