Certificate
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E3E0C774E3B2BC58790E7499837A4155C1A869E6.cer
File: E3E0C774E3B2BC58790E7499837A4155C1A869E6.cer (raw, json)
Hash identifier: PXVQPpZ51Y6agQkKsBc0HnIuCaOkq63As/Xse7VgoV4=
Subject key identifier: E3:E0:C7:74:E3:B2:BC:58:79:0E:74:99:83:7A:41:55:C1:A8:69:E6
Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10
Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710
Certificate serial: 41A1347617BFF28A0C76ABAD43D647F14FBC1AF9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
Manifest: rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/E3E0C774E3B2BC58790E7499837A4155C1A869E6.mft
caRepository: rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/
Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml
Certificate not before: Thu 24 Sep 2026 00:04:47 +0000
Certificate not after: Thu 23 Sep 2027 00:09:47 +0000
Subordinate resources: IP: 103.64.24.0/21
IP: 103.64.140.0 -- 103.64.147.255
IP: 103.64.152.0/22
IP: 103.64.208.0/22
IP: 103.67.100.0 -- 103.67.151.255
IP: 103.67.212.0/22
IP: 103.222.112.0 -- 103.222.143.255
IP: 103.222.216.0 -- 103.222.235.255
IP: 103.222.240.0/22
IP: 103.223.80.0 -- 103.223.103.255
IP: 103.223.124.0/22
IP: 103.251.128.0/22
IP: 121.46.0.0/18
IP: 121.46.128.0/18
IP: 2406:5880::/32
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 15 Oct 2026 01:08:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:a1:34:76:17:bf:f2:8a:0c:76:ab:ad:43:d6:47:f1:4f:bc:1a:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710
Validity
Not Before: Sep 24 00:04:47 2026 GMT
Not After : Sep 23 00:09:47 2027 GMT
Subject: CN=E3E0C774E3B2BC58790E7499837A4155C1A869E6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:ea:63:5d:34:c8:d1:a9:b1:73:21:45:a0:6c:
4a:e1:75:50:96:65:ba:04:b4:e8:3d:f7:0e:bc:68:
b6:0c:b8:10:94:11:54:6c:03:e7:b2:5c:77:b0:62:
c4:37:4d:ae:b6:78:2b:f6:dc:c9:15:fd:59:1a:e4:
ac:2d:0d:76:a3:c4:9b:7d:a3:88:4a:32:f1:86:19:
1b:9a:1c:72:1a:e7:35:a6:e0:21:27:0a:9a:fa:04:
f8:f7:b4:d5:61:73:59:08:b4:2b:9a:b9:03:a3:d2:
d0:aa:c0:43:59:c0:7f:0f:b4:c2:39:b1:24:36:33:
16:14:fc:48:4b:56:6e:c3:96:11:cd:c1:d4:f9:b3:
2d:7e:93:6e:27:02:fe:f3:3c:47:f8:4f:4b:01:e5:
c9:04:62:2b:bf:98:35:ba:16:1e:1e:b3:06:63:76:
fe:d7:de:7a:81:a2:8b:6f:a4:63:ec:14:0c:ec:45:
f4:b8:b4:21:e8:38:17:e3:55:11:33:cd:e0:96:5b:
ab:d1:35:6a:36:20:4d:15:58:79:4c:b0:4a:36:ce:
32:ca:20:f4:ac:99:f8:e2:dd:ff:f7:bd:a0:6f:8a:
46:fd:db:a0:17:4a:22:34:12:99:29:85:84:1c:bc:
1f:33:c3:e7:26:82:8f:3a:ad:b2:1e:98:e9:61:81:
ab:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
E3:E0:C7:74:E3:B2:BC:58:79:0E:74:99:83:7A:41:55:C1:A8:69:E6
X509v3 Authority Key Identifier:
keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/
RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/E3E0C774E3B2BC58790E7499837A4155C1A869E6.mft
RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.64.24.0/21
103.64.140.0-103.64.147.255
103.64.152.0/22
103.64.208.0/22
103.67.100.0-103.67.151.255
103.67.212.0/22
103.222.112.0-103.222.143.255
103.222.216.0-103.222.235.255
103.222.240.0/22
103.223.80.0-103.223.103.255
103.223.124.0/22
103.251.128.0/22
121.46.0.0/18
121.46.128.0/18
IPv6:
2406:5880::/32
Signature Algorithm: sha256WithRSAEncryption
7e:ca:00:b0:73:4f:25:9c:f1:92:fc:c6:88:39:9c:26:c6:4d:
22:53:78:71:ba:84:7c:29:ed:84:7c:06:98:f0:38:70:72:db:
6a:19:b7:e8:4b:42:b1:86:66:d8:9f:7d:76:98:9a:98:8a:fa:
1e:57:3c:7b:cc:c4:eb:60:b2:5d:81:72:37:31:69:0a:c9:41:
e2:88:99:7c:dc:79:d8:cc:4e:66:b3:5e:b4:23:5a:77:b8:5b:
77:42:64:72:cd:df:bf:2e:86:31:78:ec:43:40:bf:51:68:78:
1c:6b:25:a3:e8:6c:db:8e:7d:5d:ac:71:99:89:e3:04:43:84:
ed:70:4e:4d:07:fc:fb:bf:de:f4:0a:3d:53:30:6e:a7:d8:41:
12:d5:47:37:84:c1:f7:4c:7c:a8:ea:52:31:9a:a4:b3:86:3c:
c9:43:b9:eb:d2:64:fd:c8:61:99:88:d3:d4:bc:1c:90:b6:29:
15:e2:31:e7:27:8c:90:ab:55:05:d1:56:9b:ad:4c:96:aa:81:
bb:16:da:0e:9c:28:d8:6d:e3:7a:bd:80:c0:3d:a3:00:df:a8:
42:d7:42:a4:54:18:33:a3:8b:01:ce:e5:f4:f0:6b:0f:f2:e1:
fe:2a:a1:34:d6:ed:7a:41:71:64:06:2c:ae:69:c8:e9:b6:31:
a6:68:de:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 17:27:09 2026 by rpki-client