
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/2/5F03D029EEFFBD03C33647A75C2C54E9A81DD38C.cer
File: 5F03D029EEFFBD03C33647A75C2C54E9A81DD38C.cer (raw, json)
Hash identifier: G6gmGz0JGvm3XGbG9KIc4KxqDJjHz9X9sG7X4BSDSVE=
Subject key identifier: 5F:03:D0:29:EE:FF:BD:03:C3:36:47:A7:5C:2C:54:E9:A8:1D:D3:8C
Authority key identifier: 87:B5:14:67:54:9F:FC:5A:02:26:09:DB:AB:96:19:75:D1:FB:A4:B3
Certificate issuer: /CN=A9162E3D0001/serialNumber=87B51467549FFC5A022609DBAB961975D1FBA4B3
Certificate serial: 7E849B20C6D2884A1C4D5D44EC57EFD70176A78B
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/h7UUZ1Sf_FoCJgnbq5YZddH7pLM.cer
Manifest: rsync://rpki-rps.cnnic.cn/repo/A1116910113051901977/0/5F03D029EEFFBD03C33647A75C2C54E9A81DD38C.mft
caRepository: rsync://rpki-rps.cnnic.cn/repo/A1116910113051901977/0/
Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml
Certificate not before: Wed 10 Jun 2026 01:57:05 +0000
Certificate not after: Wed 09 Jun 2027 02:02:05 +0000
Subordinate resources: IP: 57.176.0.0/15
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/2/87B51467549FFC5A022609DBAB961975D1FBA4B3.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/2/87B51467549FFC5A022609DBAB961975D1FBA4B3.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/h7UUZ1Sf_FoCJgnbq5YZddH7pLM.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 14:44:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:84:9b:20:c6:d2:88:4a:1c:4d:5d:44:ec:57:ef:d7:01:76:a7:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0001, serialNumber=87B51467549FFC5A022609DBAB961975D1FBA4B3
Validity
Not Before: Jun 10 01:57:05 2026 GMT
Not After : Jun 9 02:02:05 2027 GMT
Subject: CN=5F03D029EEFFBD03C33647A75C2C54E9A81DD38C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:aa:26:f9:82:fb:c0:d7:2f:1c:1a:d8:2b:0f:
67:9f:f9:85:e3:54:3d:07:3d:1b:53:a1:92:1c:7d:
b4:ca:5c:0a:e7:58:a4:2b:42:2e:25:fc:5d:fd:d4:
80:f8:00:83:69:d6:a5:dd:c8:53:58:30:ea:59:95:
13:f7:1a:1c:97:87:52:22:9f:5f:8f:f1:f5:ff:78:
51:4c:0f:18:4f:a0:70:f1:2b:4d:47:7b:8a:26:1c:
04:3f:62:70:6d:8f:04:52:d8:07:92:1c:3c:a9:c6:
0e:6d:13:78:4d:d4:5a:cc:9a:0e:90:d2:14:df:b7:
da:5a:a5:dc:a1:3b:2c:60:88:a9:16:9f:7c:ca:50:
d4:90:39:78:e6:f4:18:48:f6:3a:81:d5:6b:7f:4e:
1a:ef:93:88:a2:13:4d:69:4e:18:5f:aa:4c:39:65:
01:cc:49:43:6f:10:e4:a5:78:d8:18:6e:b4:05:c3:
05:d0:b3:bc:eb:17:b3:fb:eb:b9:00:2e:97:38:e9:
ca:ba:81:f1:08:19:3e:05:0a:bd:be:d7:37:10:32:
f9:63:20:a2:5e:ae:a4:e8:93:b3:6d:f0:69:03:74:
03:a6:71:9d:9f:37:2f:fc:15:9a:74:41:34:0d:f6:
64:1f:28:96:39:30:f0:8d:d1:d3:73:62:bd:c4:b4:
e6:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
5F:03:D0:29:EE:FF:BD:03:C3:36:47:A7:5C:2C:54:E9:A8:1D:D3:8C
X509v3 Authority Key Identifier:
keyid:87:B5:14:67:54:9F:FC:5A:02:26:09:DB:AB:96:19:75:D1:FB:A4:B3
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/2/87B51467549FFC5A022609DBAB961975D1FBA4B3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/h7UUZ1Sf_FoCJgnbq5YZddH7pLM.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1116910113051901977/0/
RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1116910113051901977/0/5F03D029EEFFBD03C33647A75C2C54E9A81DD38C.mft
RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
57.176.0.0/15
Signature Algorithm: sha256WithRSAEncryption
a7:8c:f7:ee:ae:eb:ed:98:51:3a:8e:9f:37:23:34:a9:2d:fd:
7f:ed:c8:6c:7e:de:88:22:ab:fa:25:33:f0:1c:f4:2b:cf:7a:
40:ee:75:1f:68:2c:dc:c4:84:63:d8:57:6c:cf:ac:df:45:e1:
97:5e:e1:10:76:ce:ba:cc:01:6f:f8:86:d9:30:9f:32:5a:7a:
18:b5:49:ac:b8:55:c3:ab:ba:b8:f3:f4:0e:34:74:6e:dc:50:
56:43:ba:27:14:54:66:bf:74:db:43:95:42:33:b2:3e:2d:0c:
5e:d6:bf:3b:ba:f3:3e:d2:f9:ec:56:30:6b:8e:dd:d4:2b:b0:
b5:fa:94:2b:0c:9c:87:72:d5:72:f9:7f:3f:16:a4:0e:63:f8:
5b:c3:13:b5:2f:25:fe:da:e0:03:12:ad:8f:5b:e5:4e:3b:e0:
44:b1:d4:65:50:e0:10:56:a6:c7:a6:fd:2c:f2:b2:d6:82:c5:
80:b4:49:48:f1:15:b6:04:0e:b9:32:ec:2b:f2:16:8a:c4:64:
3c:2e:cf:49:c2:6f:51:20:e3:ee:f4:0b:d5:81:53:61:e6:83:
70:db:7b:c2:f9:18:9c:f7:58:7d:fd:1c:65:84:23:5a:f5:4b:
95:ec:33:05:42:21:2d:2d:20:2d:83:6a:d5:b5:da:37:04:50:
d2:96:c6:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 01:01:47 2026 by rpki-client