Certificate
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C89881B315F7E21BA948CF9CB11D1AC422106426.cer
File: C89881B315F7E21BA948CF9CB11D1AC422106426.cer (raw, json)
Hash identifier: /Ntfn3OBNCx0L7o79HMPGg4Fb7icGKU7EwJDfusVV5A=
Subject key identifier: C8:98:81:B3:15:F7:E2:1B:A9:48:CF:9C:B1:1D:1A:C4:22:10:64:26
Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10
Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710
Certificate serial: 78185490DCE722AC86C47F97742649EFF3E0E3C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
Manifest: rsync://rpki-rps.cnnic.cn/repo/A1096632062997168131/0/C89881B315F7E21BA948CF9CB11D1AC422106426.mft
caRepository: rsync://rpki-rps.cnnic.cn/repo/A1096632062997168131/0/
Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml
Certificate not before: Wed 15 Apr 2026 02:59:19 +0000
Certificate not after: Wed 14 Apr 2027 03:04:19 +0000
Subordinate resources: AS: 55994
IP: 43.240.124.0 -- 43.240.131.255
IP: 43.240.192.0/21
IP: 43.240.244.0 -- 43.241.3.255
IP: 43.249.144.0/22
IP: 43.254.44.0/22
IP: 43.254.52.0/22
IP: 43.254.104.0/22
IP: 43.254.144.0/21
IP: 45.251.152.0 -- 45.251.227.255
IP: 45.252.88.0 -- 45.252.99.255
IP: 45.252.108.0 -- 45.252.119.255
IP: 45.252.156.0 -- 45.252.163.255
IP: 45.252.228.0/22
IP: 103.6.220.0/22
IP: 103.20.248.0/22
IP: 103.21.116.0/22
IP: 103.36.132.0 -- 103.36.139.255
IP: 103.36.168.0/21
IP: 103.40.232.0/22
IP: 103.220.120.0 -- 103.220.155.255
IP: 103.220.160.0 -- 103.220.203.255
IP: 103.221.100.0/22
IP: 103.221.108.0 -- 103.221.131.255
IP: 103.221.136.0/22
IP: 103.238.140.0/22
IP: 103.238.180.0 -- 103.238.187.255
IP: 150.129.252.0/22
IP: 2403:a100::/32
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 17:12:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:18:54:90:dc:e7:22:ac:86:c4:7f:97:74:26:49:ef:f3:e0:e3:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710
Validity
Not Before: Apr 15 02:59:19 2026 GMT
Not After : Apr 14 03:04:19 2027 GMT
Subject: CN=C89881B315F7E21BA948CF9CB11D1AC422106426
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:d5:eb:55:15:e9:a8:0d:6d:cb:45:3a:ad:6b:
ca:10:8d:18:9b:50:e5:a9:96:75:bc:6f:10:39:e1:
c6:3c:ef:99:f3:e5:d6:5b:0b:00:67:6e:c5:99:af:
39:b7:7f:e3:2f:12:e5:ac:2f:be:2c:6b:3d:8f:77:
01:a1:6c:fb:66:90:a7:bb:6f:7a:11:84:cf:f8:0b:
ee:00:12:72:43:9b:5a:bb:18:17:7b:07:3b:85:f7:
bd:56:2f:69:f9:62:cd:d5:6a:7d:b2:ba:ca:75:8c:
f0:36:ff:3d:0e:ef:81:82:dc:ce:4d:89:d8:65:28:
07:b6:ca:cf:e4:cd:30:c9:05:ab:84:53:f1:6d:ac:
0b:c9:f2:23:03:34:f9:0e:20:95:4d:46:60:84:81:
90:de:36:97:f5:dd:b2:64:72:d5:9d:17:cb:86:59:
4e:91:ee:77:80:85:ff:28:84:cb:a3:da:4b:ef:55:
cf:a0:10:92:d8:40:d3:78:3f:38:66:4b:8d:56:87:
d6:13:64:7d:c4:d7:f9:1b:68:88:ff:c6:41:86:0e:
9e:a2:52:f1:61:87:f3:11:00:40:c7:12:0a:02:0d:
e2:fc:a3:5e:af:00:b3:e5:d2:78:78:ba:ef:ad:76:
6e:3e:92:e7:39:ca:fb:29:43:b7:9f:f4:00:43:34:
1f:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
C8:98:81:B3:15:F7:E2:1B:A9:48:CF:9C:B1:1D:1A:C4:22:10:64:26
X509v3 Authority Key Identifier:
keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1096632062997168131/0/
RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1096632062997168131/0/C89881B315F7E21BA948CF9CB11D1AC422106426.mft
RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
43.240.124.0-43.240.131.255
43.240.192.0/21
43.240.244.0-43.241.3.255
43.249.144.0/22
43.254.44.0/22
43.254.52.0/22
43.254.104.0/22
43.254.144.0/21
45.251.152.0-45.251.227.255
45.252.88.0-45.252.99.255
45.252.108.0-45.252.119.255
45.252.156.0-45.252.163.255
45.252.228.0/22
103.6.220.0/22
103.20.248.0/22
103.21.116.0/22
103.36.132.0-103.36.139.255
103.36.168.0/21
103.40.232.0/22
103.220.120.0-103.220.155.255
103.220.160.0-103.220.203.255
103.221.100.0/22
103.221.108.0-103.221.131.255
103.221.136.0/22
103.238.140.0/22
103.238.180.0-103.238.187.255
150.129.252.0/22
IPv6:
2403:a100::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
55994
Signature Algorithm: sha256WithRSAEncryption
2d:42:8f:a4:52:78:a0:91:50:b9:2e:df:23:27:90:b6:fb:1a:
7a:d0:e8:af:29:67:d0:28:85:ea:e2:f8:64:ec:7c:c7:d9:50:
85:96:4d:46:93:e3:f0:f6:07:b1:23:cd:53:05:69:5b:53:e3:
45:ae:d0:62:0a:c3:2e:20:81:11:a6:4a:dd:20:1e:7c:27:67:
e5:dc:72:ae:b6:62:63:90:b6:e7:76:89:0e:d5:ca:7f:c6:24:
59:07:7e:91:4c:27:b8:39:b3:f0:2f:ed:d1:7e:49:19:c6:59:
8b:44:23:e6:d1:62:fb:7a:a0:6a:b4:b8:a5:a3:41:aa:44:69:
5b:3e:32:96:06:40:c1:e7:9b:5e:c6:a3:9f:9f:2d:32:44:2b:
7b:67:07:09:31:d1:f8:dd:7a:92:2e:c5:7f:eb:59:b6:f6:de:
01:5c:a6:c4:75:ac:8b:00:f7:df:45:ef:8c:cc:13:03:b3:e2:
c2:17:d8:34:77:d7:a6:26:1f:ba:5a:54:88:fd:41:85:a2:81:
25:de:18:28:ae:2f:9d:fc:5c:f5:5a:39:15:f9:ca:f0:3c:5b:
5e:02:ea:c7:70:2e:18:92:1b:55:8d:80:5e:ad:e0:a9:f1:a9:
c2:12:c2:99:5f:21:be:4a:bd:0d:0f:d6:52:9e:07:36:7f:8e:
18:45:7d:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:33:07 2026 by rpki-client