
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E806B187EFD214F2E1BEFE61EF956FD5C9405E64.cer
File: E806B187EFD214F2E1BEFE61EF956FD5C9405E64.cer (raw, json)
Hash identifier: aNCOqZE4Jp7FjnQQcC30xK6R0CsLSWuT6Gzf7Xrz28A=
Subject key identifier: E8:06:B1:87:EF:D2:14:F2:E1:BE:FE:61:EF:95:6F:D5:C9:40:5E:64
Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10
Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710
Certificate serial: 111331AD42AF6C12FA2169EDFF0DFFAAB97C201A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
Manifest: rsync://rpki-rps.cnnic.cn/repo/A1097412865305870337/1/E806B187EFD214F2E1BEFE61EF956FD5C9405E64.mft
caRepository: rsync://rpki-rps.cnnic.cn/repo/A1097412865305870337/1/
Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml
Certificate not before: Fri 17 Apr 2026 06:41:59 +0000
Certificate not after: Fri 16 Apr 2027 06:46:59 +0000
Subordinate resources: AS: 23840
IP: 43.225.252.0/22
IP: 103.44.224.0/22
IP: 211.156.48.0/20
IP: 2402:32e0::/32
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 17:12:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:13:31:ad:42:af:6c:12:fa:21:69:ed:ff:0d:ff:aa:b9:7c:20:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710
Validity
Not Before: Apr 17 06:41:59 2026 GMT
Not After : Apr 16 06:46:59 2027 GMT
Subject: CN=E806B187EFD214F2E1BEFE61EF956FD5C9405E64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:a7:eb:77:d7:43:58:25:0c:1e:4a:a3:9c:dd:
b8:02:42:6d:39:ba:6c:94:eb:01:0f:f7:58:86:08:
76:51:55:ca:ba:1e:04:47:56:96:8f:8f:41:77:81:
c0:a2:30:7f:eb:06:18:40:ce:19:3b:b0:ee:1a:9e:
5b:48:5f:2d:8c:89:3d:52:77:e3:f0:98:3b:e9:7f:
ba:49:a6:2e:88:3b:7c:75:7c:26:bb:dd:58:e3:79:
b2:4a:03:f0:cd:00:94:92:11:f6:13:90:cb:34:50:
48:ed:46:be:22:ec:6a:04:65:24:e2:a6:b1:46:a7:
ac:ab:43:f4:81:5e:a9:d0:9d:9d:fe:23:15:ce:5c:
c7:a0:a1:89:94:ad:14:b6:41:b6:d4:1f:4e:d6:fb:
1d:d5:a3:3b:d4:5b:a6:59:3d:3d:bc:d5:58:83:db:
a8:49:19:d7:70:40:89:f6:c1:7b:7f:9c:27:ad:c7:
1d:65:ce:fb:0f:6a:f7:24:ce:af:a1:35:69:9c:4a:
a1:ab:fb:6e:cd:73:73:6d:75:09:3d:57:f6:b9:50:
5e:80:c5:b5:7a:06:f8:bc:7c:e4:37:71:36:ff:79:
d1:1e:b1:8e:b8:32:eb:3a:4b:d6:80:99:76:aa:45:
62:46:4d:46:c2:a7:8f:af:02:6f:a7:60:a2:ef:9d:
6c:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
E8:06:B1:87:EF:D2:14:F2:E1:BE:FE:61:EF:95:6F:D5:C9:40:5E:64
X509v3 Authority Key Identifier:
keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1097412865305870337/1/
RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1097412865305870337/1/E806B187EFD214F2E1BEFE61EF956FD5C9405E64.mft
RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
43.225.252.0/22
103.44.224.0/22
211.156.48.0/20
IPv6:
2402:32e0::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
23840
Signature Algorithm: sha256WithRSAEncryption
3c:a2:1a:b9:3a:90:c2:3c:94:65:55:79:0d:94:48:0c:34:c4:
51:3a:b5:af:67:60:d0:c8:24:76:ae:f3:eb:05:b5:ed:4b:ec:
41:63:b0:cd:49:b3:9b:c5:74:73:22:e0:d5:d2:f3:f8:ad:db:
7e:3b:91:be:8d:cb:f0:94:2f:c0:b0:85:ab:d3:11:f5:bd:2a:
5f:0e:fa:c6:23:08:37:36:95:27:ea:7e:b3:87:53:96:b4:34:
32:8f:f3:b0:a4:90:46:09:6b:49:61:3b:f0:ac:d1:c5:29:3d:
dd:29:59:74:f5:f2:78:cf:06:65:7f:47:0b:02:3b:dc:54:dc:
05:a8:3f:ce:7b:eb:ec:4b:22:12:15:3c:33:7e:89:ee:14:11:
90:bf:88:15:e4:66:dc:84:96:d7:3d:be:01:92:b1:6d:c6:d3:
a9:ab:63:f6:cb:71:75:0e:9c:f7:bd:26:09:ad:0f:63:b7:e0:
99:2e:a9:0a:85:c1:b5:d0:df:27:84:b2:b4:d0:eb:58:ba:1b:
e9:b7:87:98:b6:ae:1e:c8:22:b2:24:d8:16:e2:7d:0c:e7:22:
3c:39:b0:ee:8e:68:36:cb:63:02:76:10:ff:1e:2a:52:0e:7d:
cd:18:7b:a8:7a:37:22:c6:ce:a3:bb:47:f7:69:d3:25:58:c3:
43:6c:8c:d5
-----BEGIN CERTIFICATE-----
MIIF3TCCBMWgAwIBAgIUERMxrUKvbBL6IWnt/w3/qrl8IBowDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw
M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDQxNzA2NDE1OVoX
DTI3MDQxNjA2NDY1OVowMzExMC8GA1UEAxMoRTgwNkIxODdFRkQyMTRGMkUxQkVG
RTYxRUY5NTZGRDVDOTQwNUU2NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMOn63fXQ1glDB5Ko5zduAJCbTm6bJTrAQ/3WIYIdlFVyroeBEdWlo+PQXeB
wKIwf+sGGEDOGTuw7hqeW0hfLYyJPVJ34/CYO+l/ukmmLog7fHV8JrvdWON5skoD
8M0AlJIR9hOQyzRQSO1GviLsagRlJOKmsUanrKtD9IFeqdCdnf4jFc5cx6ChiZSt
FLZBttQfTtb7HdWjO9Rbplk9PbzVWIPbqEkZ13BAifbBe3+cJ63HHWXO+w9q9yTO
r6E1aZxKoav7bs1zc211CT1X9rlQXoDFtXoG+Lx85DdxNv950R6xjrgy6zpL1oCZ
dqpFYkZNRsKnj68Cb6dgou+dbCcCAwEAAaOCAtAwggLMMA8GA1UdEwEB/wQFMAMB
Af8wHQYDVR0OBBYEFOgGsYfv0hTy4b7+Ye+Vb9XJQF5kMB8GA1UdIwQYMBaAFKVu
hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig
ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw
OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE
NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB
BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu
Y24vcmVwby9BMTA5NzQxMjg2NTMwNTg3MDMzNy8xLzBuBggrBgEFBQcwCoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDk3NDEyODY1MzA1ODcwMzM3
LzEvRTgwNkIxODdFRkQyMTRGMkUxQkVGRTYxRUY5NTZGRDVDOTQwNUU2NC5tZnQw
OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp
ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwOgYIKwYBBQUH
AQcBAf8EKzApMBgEAgABMBIDBAIr4fwDBAJnLOADBATTnDAwDQQCAAIwBwMFACQC
MuAwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAICXSAwDQYJKoZIhvcNAQELBQADggEB
ADyiGrk6kMI8lGVVeQ2USAw0xFE6ta9nYNDIJHau8+sFte1L7EFjsM1Js5vFdHMi
4NXS8/it2347kb6Ny/CUL8CwhavTEfW9Kl8O+sYjCDc2lSfqfrOHU5a0NDKP87Ck
kEYJa0lhO/Cs0cUpPd0pWXT18njPBmV/RwsCO9xU3AWoP8576+xLIhIVPDN+ie4U
EZC/iBXkZtyEltc9vgGSsW3G06mrY/bLcXUOnPe9JgmtD2O34JkuqQqFwbXQ3yeE
srTQ61i6G+m3h5i2rh7IIrIk2BbifQznIjw5sO6OaDbLYwJ2EP8eKlIOfc0Ye6h6
NyLGzqO7R/dp0yVYw0NsjNU=
-----END CERTIFICATE-----
Generated at Fri Apr 17 22:46:11 2026 by rpki-client