
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B8AFB696C15ABC4FFEFB3EB1EA10EFD49319E559.cer
File: B8AFB696C15ABC4FFEFB3EB1EA10EFD49319E559.cer (raw, json)
Hash identifier: /70McDr01MXyPWiRUUeXX0iKCinbbfUXItlZZQFpxEs=
Subject key identifier: B8:AF:B6:96:C1:5A:BC:4F:FE:FB:3E:B1:EA:10:EF:D4:93:19:E5:59
Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10
Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710
Certificate serial: 0C751914B996892C99951B23878E8D7DD1F78B81
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
Manifest: rsync://rpki-rps.cnnic.cn/repo/A1134692662507470893/0/B8AFB696C15ABC4FFEFB3EB1EA10EFD49319E559.mft
caRepository: rsync://rpki-rps.cnnic.cn/repo/A1134692662507470893/0/
Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml
Certificate not before: Wed 29 Jul 2026 03:38:33 +0000
Certificate not after: Wed 28 Jul 2027 03:43:33 +0000
Subordinate resources: AS: 56006
AS: 59068
IP: 101.49.192.0/18
IP: 103.142.96.0/23
IP: 2405:3140::/32
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 22:45:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:75:19:14:b9:96:89:2c:99:95:1b:23:87:8e:8d:7d:d1:f7:8b:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710
Validity
Not Before: Jul 29 03:38:33 2026 GMT
Not After : Jul 28 03:43:33 2027 GMT
Subject: CN=B8AFB696C15ABC4FFEFB3EB1EA10EFD49319E559
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:ff:8c:6d:59:41:d9:49:10:68:a4:86:02:ec:
d1:ff:36:6b:98:d0:ac:df:a5:70:9b:af:f2:36:3b:
b7:6b:a2:1b:ae:30:43:18:68:33:97:18:ad:de:5f:
9e:21:b0:f4:96:a3:52:04:b2:89:37:74:5f:c3:45:
c8:68:60:24:ae:6e:80:21:aa:65:8b:1b:f1:fa:ee:
1c:00:65:ec:14:f8:7e:1a:9b:01:ff:68:11:e6:c3:
94:e2:f0:09:ee:e3:94:72:01:7a:08:ae:27:e3:ed:
49:79:84:5a:1e:bf:d3:22:71:b4:2c:4e:3e:bc:8a:
e2:5f:28:47:1f:fb:b4:c7:51:49:10:b8:f9:d6:4a:
6b:87:28:f0:05:08:53:e7:bd:36:3f:c8:c8:15:dc:
80:d6:c6:2c:e7:94:73:a3:9a:05:16:c3:58:18:80:
25:8b:ca:8e:74:0a:da:7e:8a:5a:7c:d8:1d:5b:f7:
4d:8f:99:5f:27:65:fe:49:3c:ff:6f:f7:01:3e:93:
05:a7:10:aa:8a:a1:22:a8:22:9f:fe:d6:28:d7:7a:
bf:f6:c2:c6:b2:f2:1a:77:13:50:35:04:44:da:aa:
3b:02:02:52:50:d1:2b:51:a1:52:94:1a:52:b3:93:
f3:93:f6:02:37:ed:0a:d0:99:ec:9f:da:93:9e:e0:
84:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
B8:AF:B6:96:C1:5A:BC:4F:FE:FB:3E:B1:EA:10:EF:D4:93:19:E5:59
X509v3 Authority Key Identifier:
keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1134692662507470893/0/
RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1134692662507470893/0/B8AFB696C15ABC4FFEFB3EB1EA10EFD49319E559.mft
RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
101.49.192.0/18
103.142.96.0/23
IPv6:
2405:3140::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
56006
59068
Signature Algorithm: sha256WithRSAEncryption
06:0e:48:6d:c7:8b:fe:dd:22:cd:fd:59:9b:c5:6a:73:24:30:
31:dc:e2:17:b1:08:ad:d9:be:e5:ea:35:d6:00:cb:90:14:66:
ed:bf:d0:3b:75:58:ae:9e:02:9d:e2:74:b0:7f:cd:7a:66:9f:
c5:05:7b:5f:22:71:c1:59:28:6d:2b:df:51:4e:24:79:d2:1e:
1a:4c:62:78:40:f3:e7:ee:02:33:4c:4c:51:02:8c:da:df:e0:
83:65:e4:ca:01:d8:af:7f:f3:5b:19:78:e1:92:9e:0d:d6:f4:
18:dd:89:fb:1e:19:66:11:6c:a2:43:09:88:d8:84:c9:de:d1:
fa:44:24:f6:c2:a8:bc:95:59:05:eb:e4:63:76:70:6f:52:58:
be:dc:9f:dd:39:54:36:94:c4:bd:90:e5:4e:de:fe:d3:e4:d4:
f0:b4:f5:6b:84:ac:a6:2a:90:94:59:1c:24:d1:f2:d6:07:5d:
e3:18:48:0c:b0:6c:87:c1:f4:a5:d1:d1:a1:1e:93:06:70:23:
86:a0:51:6c:be:ee:7d:6c:4f:e4:83:2b:cd:e7:a4:f1:b8:d5:
5d:8d:e2:ef:d0:6f:f6:3a:6a:8a:c2:d4:7d:65:66:ab:46:2b:
76:59:ff:1e:b0:11:fb:9a:94:86:41:8a:af:5e:ea:a6:cf:a3:
aa:64:4b:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 21:53:16 2026 by rpki-client