Certificate
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C1C48F9593D6A19DBD3FACA9C6EFA5B55AD3F398.cer
File: C1C48F9593D6A19DBD3FACA9C6EFA5B55AD3F398.cer (raw, json)
Hash identifier: az4hZn6LXBiwx8pmVt09W0vzsM0kal1STP3+rumOn+k=
Subject key identifier: C1:C4:8F:95:93:D6:A1:9D:BD:3F:AC:A9:C6:EF:A5:B5:5A:D3:F3:98
Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10
Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710
Certificate serial: 555A04C030B88D048F739979B516AF6BE9F1086C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
Manifest: rsync://rpki-rps.cnnic.cn/repo/A1095978316885655555/0/C1C48F9593D6A19DBD3FACA9C6EFA5B55AD3F398.mft
caRepository: rsync://rpki-rps.cnnic.cn/repo/A1095978316885655555/0/
Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml
Certificate not before: Mon 13 Apr 2026 07:41:34 +0000
Certificate not after: Mon 12 Apr 2027 07:46:34 +0000
Subordinate resources: AS: 63647
AS: 146773
IP: 43.240.136.0/22
IP: 43.241.76.0/22
IP: 43.242.84.0/22
IP: 43.254.172.0/22
IP: 43.255.200.0/22
IP: 103.25.20.0/22
IP: 103.25.36.0/22
IP: 103.60.236.0/22
IP: 103.111.172.0/22
IP: 103.213.64.0/19
IP: 103.213.160.0/19
IP: 103.233.162.0/23
IP: 103.239.192.0/22
IP: 103.240.16.0/22
IP: 103.240.244.0/22
IP: 103.248.224.0/22
IP: 116.214.64.0/20
IP: 150.242.76.0/22
IP: 203.174.96.0/19
IP: 223.223.184.0/21
IP: 2400:a860::/32
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 17:12:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:5a:04:c0:30:b8:8d:04:8f:73:99:79:b5:16:af:6b:e9:f1:08:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710
Validity
Not Before: Apr 13 07:41:34 2026 GMT
Not After : Apr 12 07:46:34 2027 GMT
Subject: CN=C1C48F9593D6A19DBD3FACA9C6EFA5B55AD3F398
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:58:69:c4:f3:94:7c:5c:45:e3:b7:51:fe:00:
4f:a1:6f:1f:50:77:45:f5:9a:d0:f2:3b:88:9e:22:
a4:a5:7f:e9:ae:49:22:87:c6:91:2d:fa:f3:b1:2d:
d7:cc:60:05:9f:24:6f:55:f0:f8:35:b5:ca:57:df:
19:88:3b:f7:8b:8e:8e:fa:5a:d0:74:93:44:96:24:
3c:d3:ee:7b:2a:12:44:1a:65:70:59:92:0a:cb:cd:
69:41:de:b0:93:24:3c:59:58:c5:89:6b:1f:5f:5c:
99:ef:0f:a0:36:e3:8f:52:86:b6:44:9d:eb:2d:0d:
7f:b0:52:80:e0:ac:08:c0:99:fe:59:a5:91:3b:69:
4c:c3:42:f1:ad:42:c8:91:8c:ff:ff:cf:c4:7c:57:
64:cc:8f:43:15:16:9c:f1:c9:34:9a:54:0a:26:75:
3b:aa:f7:59:63:2b:bf:c5:fd:dd:57:e0:fb:c7:ef:
10:b0:de:49:62:00:6d:02:c0:d6:0f:f4:30:cf:29:
f0:7d:44:55:f5:7c:6b:94:e5:fe:93:ff:cc:47:27:
30:b5:b8:fa:7a:82:b6:ff:96:72:44:8c:f8:91:c4:
0a:75:dc:60:7e:a4:d8:4e:6a:8b:8d:e6:5c:5a:77:
42:92:6d:29:72:db:dd:68:ab:a5:2c:59:38:e6:36:
7d:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
C1:C4:8F:95:93:D6:A1:9D:BD:3F:AC:A9:C6:EF:A5:B5:5A:D3:F3:98
X509v3 Authority Key Identifier:
keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1095978316885655555/0/
RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1095978316885655555/0/C1C48F9593D6A19DBD3FACA9C6EFA5B55AD3F398.mft
RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
43.240.136.0/22
43.241.76.0/22
43.242.84.0/22
43.254.172.0/22
43.255.200.0/22
103.25.20.0/22
103.25.36.0/22
103.60.236.0/22
103.111.172.0/22
103.213.64.0/19
103.213.160.0/19
103.233.162.0/23
103.239.192.0/22
103.240.16.0/22
103.240.244.0/22
103.248.224.0/22
116.214.64.0/20
150.242.76.0/22
203.174.96.0/19
223.223.184.0/21
IPv6:
2400:a860::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
63647
146773
Signature Algorithm: sha256WithRSAEncryption
29:8a:12:eb:66:21:fa:39:9c:2e:8d:0b:96:15:d9:09:e5:2d:
49:62:7d:a0:86:37:89:09:82:5d:a0:bb:e9:55:86:fd:4d:3b:
41:86:f7:1d:72:cc:f4:bc:48:85:a3:93:25:d2:e1:4a:fb:32:
d5:93:45:2d:82:11:d6:eb:d1:c9:2f:24:50:27:04:04:7e:64:
89:19:39:e7:d5:a5:6e:6a:ac:08:91:fb:91:fa:2e:3d:c3:f8:
a8:36:b3:ba:d0:e4:04:a7:ed:8e:33:97:79:05:1c:ca:42:f7:
22:f3:98:57:18:05:2e:a9:35:96:f1:0c:f4:14:da:7c:8e:3b:
1f:3f:1a:c7:b3:4a:a4:ec:b3:e4:bc:57:21:ce:ea:59:fc:01:
fc:f9:e0:cd:c7:7a:5f:8d:d1:44:99:0c:8b:14:9a:9b:23:bb:
f0:3b:a5:62:29:b8:9c:44:78:38:99:fc:b4:d0:4a:db:e3:a1:
a5:20:58:42:9a:d1:9f:1e:4c:d6:33:11:a2:d9:79:26:71:60:
22:6b:b9:22:2a:df:be:db:2e:90:1d:8b:3b:41:d4:6a:1c:dd:
5b:3c:46:7a:84:5e:63:94:8f:7c:da:e1:27:58:e9:2d:0d:57:
2f:eb:ff:13:c6:e3:d6:d3:bd:3c:f2:ed:d0:d8:50:54:0c:de:
57:82:d1:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 22:56:48 2026 by rpki-client