
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BCAF99574819590D7B82611FFD862F69D879E4F4.cer
File: BCAF99574819590D7B82611FFD862F69D879E4F4.cer (raw, json)
Hash identifier: GpYXt8I7LvfK9cMBzM3MBAlMFQIxha5Y7KEIXu3yBzI=
Subject key identifier: BC:AF:99:57:48:19:59:0D:7B:82:61:1F:FD:86:2F:69:D8:79:E4:F4
Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10
Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710
Certificate serial: 72FC7BF83C470D02EFD1B6300287B0445E252A67
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
Manifest: rsync://rpki-rps.cnnic.cn/repo/A1065583221972336643/0/BCAF99574819590D7B82611FFD862F69D879E4F4.mft
caRepository: rsync://rpki-rps.cnnic.cn/repo/A1065583221972336643/0/
Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml
Certificate not before: Fri 29 May 2026 01:24:47 +0000
Certificate not after: Fri 28 May 2027 01:29:47 +0000
Subordinate resources: AS: 139138
IP: 103.150.164.0/23
IP: 2406:b640::/32
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 16:02:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:fc:7b:f8:3c:47:0d:02:ef:d1:b6:30:02:87:b0:44:5e:25:2a:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710
Validity
Not Before: May 29 01:24:47 2026 GMT
Not After : May 28 01:29:47 2027 GMT
Subject: CN=BCAF99574819590D7B82611FFD862F69D879E4F4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:2e:8b:f4:f0:f1:5b:f2:41:f4:98:b9:f3:8b:
48:8a:14:d7:ba:97:98:8d:47:51:64:c7:91:16:ed:
bd:02:9b:21:fd:f4:6f:64:e4:3c:33:d1:e4:44:26:
f8:98:00:c9:bb:3d:13:2f:bf:8f:d1:38:15:2f:bd:
e5:f3:c2:9b:58:d3:cd:20:5a:c0:f3:1a:34:29:95:
ef:18:36:3e:91:7d:98:f6:43:1f:29:5b:7b:e3:dd:
1d:08:ef:9d:6f:82:50:11:68:de:5e:63:a9:49:f5:
f8:db:b4:6d:33:03:b1:d0:79:3e:19:32:f3:21:de:
82:60:ed:7c:44:27:a1:48:87:0f:ca:c6:eb:42:80:
a8:2d:57:77:07:9c:d4:65:17:18:be:41:41:25:d8:
6f:2f:2d:f0:8c:24:dd:4e:fb:85:af:47:46:16:4b:
c3:f7:e4:ce:16:1d:2d:ad:f0:23:51:cf:ed:9a:cb:
48:2f:41:02:2e:35:89:68:ad:bb:24:e1:af:72:14:
74:a9:87:df:43:4b:98:d8:93:0b:89:a7:a3:01:85:
f4:d7:81:69:dc:d3:a7:37:b2:75:fa:87:de:e4:39:
5e:1e:3b:dc:86:79:fb:4f:c0:d3:01:7c:54:f7:8a:
3c:8f:60:06:12:f9:fb:c8:3d:cf:89:c9:2b:bb:f8:
46:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
BC:AF:99:57:48:19:59:0D:7B:82:61:1F:FD:86:2F:69:D8:79:E4:F4
X509v3 Authority Key Identifier:
keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1065583221972336643/0/
RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1065583221972336643/0/BCAF99574819590D7B82611FFD862F69D879E4F4.mft
RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.150.164.0/23
IPv6:
2406:b640::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
139138
Signature Algorithm: sha256WithRSAEncryption
67:71:0e:1a:6c:df:b9:a5:2f:63:64:f8:d2:12:49:21:09:cd:
72:e0:72:10:b6:ea:fe:c9:39:49:2d:93:6e:d0:0b:fd:5a:b5:
fa:6b:cf:30:fb:a3:48:a1:29:6a:a9:28:50:8c:04:6c:78:40:
51:f6:97:6c:62:45:a0:b7:b6:1e:c1:2c:1a:90:44:3b:e0:cc:
2f:9d:2d:52:90:11:ab:5a:77:ac:5e:9e:7c:61:c3:87:15:39:
24:26:2b:51:b6:58:6a:2b:01:4a:67:20:f7:3b:97:65:a4:55:
ce:46:fc:eb:f4:e2:38:93:d2:b6:0d:99:16:87:92:05:06:cc:
fb:11:e5:8f:ff:f1:27:e9:8a:ef:1f:84:a0:06:ce:a5:f2:9d:
c2:76:e7:10:04:45:95:41:1f:6e:b6:37:b8:87:d0:92:a2:9d:
89:95:7f:c7:13:2b:8d:69:40:95:74:a7:a0:03:d1:99:55:6a:
f7:e6:5e:79:6e:49:49:e9:e6:63:04:c0:f2:39:90:52:d2:39:
5b:f5:67:58:1c:44:23:34:c3:5e:fa:6c:9c:27:ab:6c:89:1b:
1a:80:a3:2b:ce:5f:73:56:08:72:2a:2c:c5:d0:56:60:f5:8c:
98:0d:a1:db:67:ed:de:de:34:6e:f4:4e:69:23:d9:38:0d:18:
b9:62:de:8a
-----BEGIN CERTIFICATE-----
MIIF0jCCBLqgAwIBAgIUcvx7+DxHDQLv0bYwAoewRF4lKmcwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw
M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDUyOTAxMjQ0N1oX
DTI3MDUyODAxMjk0N1owMzExMC8GA1UEAxMoQkNBRjk5NTc0ODE5NTkwRDdCODI2
MTFGRkQ4NjJGNjlEODc5RTRGNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMwui/Tw8VvyQfSYufOLSIoU17qXmI1HUWTHkRbtvQKbIf30b2TkPDPR5EQm
+JgAybs9Ey+/j9E4FS+95fPCm1jTzSBawPMaNCmV7xg2PpF9mPZDHylbe+PdHQjv
nW+CUBFo3l5jqUn1+Nu0bTMDsdB5Phky8yHegmDtfEQnoUiHD8rG60KAqC1Xdwec
1GUXGL5BQSXYby8t8Iwk3U77ha9HRhZLw/fkzhYdLa3wI1HP7ZrLSC9BAi41iWit
uyThr3IUdKmH30NLmNiTC4mnowGF9NeBadzTpzeydfqH3uQ5Xh473IZ5+0/A0wF8
VPeKPI9gBhL5+8g9z4nJK7v4RlsCAwEAAaOCAsUwggLBMA8GA1UdEwEB/wQFMAMB
Af8wHQYDVR0OBBYEFLyvmVdIGVkNe4JhH/2GL2nYeeT0MB8GA1UdIwQYMBaAFKVu
hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig
ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw
OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE
NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB
BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu
Y24vcmVwby9BMTA2NTU4MzIyMTk3MjMzNjY0My8wLzBuBggrBgEFBQcwCoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDY1NTgzMjIxOTcyMzM2NjQz
LzAvQkNBRjk5NTc0ODE5NTkwRDdCODI2MTFGRkQ4NjJGNjlEODc5RTRGNC5tZnQw
OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp
ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUH
AQcBAf8EHzAdMAwEAgABMAYDBAFnlqQwDQQCAAIwBwMFACQGtkAwGgYIKwYBBQUH
AQgBAf8ECzAJoAcwBQIDAh+CMA0GCSqGSIb3DQEBCwUAA4IBAQBncQ4abN+5pS9j
ZPjSEkkhCc1y4HIQtur+yTlJLZNu0Av9WrX6a88w+6NIoSlqqShQjARseEBR9pds
YkWgt7YewSwakEQ74MwvnS1SkBGrWnesXp58YcOHFTkkJitRtlhqKwFKZyD3O5dl
pFXORvzr9OI4k9K2DZkWh5IFBsz7EeWP//En6YrvH4SgBs6l8p3CducQBEWVQR9u
tje4h9CSop2JlX/HEyuNaUCVdKegA9GZVWr35l55bklJ6eZjBMDyOZBS0jlb9WdY
HEQjNMNe+mycJ6tsiRsagKMrzl9zVghyKizF0FZg9YyYDaHbZ+3e3jRu9E5pI9k4
DRi5Yt6K
-----END CERTIFICATE-----
Generated at Sun Jun 14 03:40:32 2026 by rpki-client