Certificate

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/0/E3993DB092F827CDCF711046B493411A00A72701.cer
File:                     E3993DB092F827CDCF711046B493411A00A72701.cer (raw, json)
Hash identifier:          LK4Fgrfxi3CUDod9X0zOIxvGTj56n4Cj+/a+kNlklaQ=
Subject key identifier:   E3:99:3D:B0:92:F8:27:CD:CF:71:10:46:B4:93:41:1A:00:A7:27:01
Authority key identifier: CB:02:14:A5:C4:04:D6:F8:40:43:3B:12:0C:AC:BB:5B:8C:59:E6:13
Certificate issuer:       /CN=A9162E3D0001/serialNumber=CB0214A5C404D6F840433B120CACBB5B8C59E613
Certificate serial:       53BDC37776D0BCABAE674F2C688B2209AD481CE6
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
Manifest:                 rsync://rpki-rps.cnnic.cn/repo/A1065588335524839425/1/E3993DB092F827CDCF711046B493411A00A72701.mft
caRepository:             rsync://rpki-rps.cnnic.cn/repo/A1065588335524839425/1/
Notify URL:               https://rrdp-rps.cnnic.cn/rrdp/notification.xml
Certificate not before:   Mon 01 Jun 2026 01:47:33 +0000
Certificate not after:    Mon 31 May 2027 01:52:33 +0000
Subordinate resources:    IP: 138.252.72.0/23
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Jun 2026 17:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:bd:c3:77:76:d0:bc:ab:ae:67:4f:2c:68:8b:22:09:ad:48:1c:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9162E3D0001, serialNumber=CB0214A5C404D6F840433B120CACBB5B8C59E613
        Validity
            Not Before: Jun  1 01:47:33 2026 GMT
            Not After : May 31 01:52:33 2027 GMT
        Subject: CN=E3993DB092F827CDCF711046B493411A00A72701
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:eb:f4:21:87:eb:6a:82:4f:e1:60:05:62:45:
                    80:5d:5e:b5:bd:50:40:6d:6c:1e:b8:99:82:59:5a:
                    bf:cb:6f:34:0b:a3:71:74:bd:21:4a:c3:7e:ad:04:
                    88:7f:db:47:9f:7a:55:0e:e9:48:07:35:ba:8c:32:
                    1d:41:21:a7:23:5e:43:98:25:77:d6:2c:d7:ff:97:
                    0c:81:e6:94:52:42:d2:b6:2e:dd:42:b7:24:06:85:
                    a2:38:c2:2e:b1:a4:60:23:14:5f:2c:d4:6e:00:70:
                    04:32:37:06:f2:13:2a:ce:86:82:ac:55:d7:ae:52:
                    dd:b7:2c:96:57:64:ba:e8:c7:01:b9:90:b0:37:71:
                    b7:85:f1:44:2c:fc:b6:7c:71:2f:55:9c:f2:47:9f:
                    34:25:54:6f:28:31:b4:df:b2:2d:27:47:90:94:ef:
                    45:c2:34:29:c7:15:46:87:67:4e:34:22:15:ce:a5:
                    46:f3:48:61:b0:67:34:2c:9f:05:80:07:c7:7d:a0:
                    ff:e0:86:93:cd:eb:98:5f:8d:62:7a:fe:b3:20:ee:
                    81:e9:4b:89:0c:ef:56:07:6e:1a:11:8c:d9:bf:7e:
                    b9:a0:de:a7:0f:30:11:9a:ff:c7:da:ef:2e:3c:8d:
                    36:8c:29:df:dc:62:82:e2:a1:67:42:2d:13:b0:91:
                    5c:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                E3:99:3D:B0:92:F8:27:CD:CF:71:10:46:B4:93:41:1A:00:A7:27:01
            X509v3 Authority Key Identifier:
                keyid:CB:02:14:A5:C4:04:D6:F8:40:43:3B:12:0C:AC:BB:5B:8C:59:E6:13

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335524839425/1/
                RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335524839425/1/E3993DB092F827CDCF711046B493411A00A72701.mft
                RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.252.72.0/23

    Signature Algorithm: sha256WithRSAEncryption
         c1:c7:91:7c:f3:98:b3:58:57:6a:5c:20:fc:47:89:93:21:00:
         28:d3:a5:ca:6e:6b:65:c6:6d:9c:2c:b8:2e:84:63:75:e2:54:
         b9:f8:ae:9b:ee:1e:44:44:a7:3d:c0:c0:87:97:0c:73:b6:99:
         f2:08:30:d6:5b:53:11:a5:da:a2:3b:d3:49:31:be:74:92:4e:
         a7:bb:2c:8c:0a:5a:22:37:fe:b3:32:cc:b1:19:8e:9f:da:13:
         d3:71:ba:19:01:fe:58:c6:cc:50:9d:62:37:5e:39:3d:89:4c:
         fe:28:77:46:f8:0f:63:be:ad:a4:a4:d0:fa:c9:7e:2e:b9:89:
         dc:58:56:32:4e:66:61:23:5f:96:db:c3:95:16:bc:c9:e9:5c:
         3c:57:50:c2:1f:29:a7:e4:cb:de:ca:9c:8e:99:ce:34:24:c3:
         57:cd:83:ec:f6:8b:17:54:5c:52:c0:25:55:a2:4f:fb:a4:73:
         f7:8e:ac:9c:84:7d:bf:3b:57:91:52:a5:2c:12:15:b2:f2:d6:
         e3:36:84:bc:0c:c1:58:3e:76:b9:b4:6e:1f:f4:73:b2:22:9b:
         f5:07:0e:a9:39:1d:3d:52:35:f4:a9:7a:af:58:5f:b4:0c:a1:
         87:5b:5a:eb:28:1f:ea:d8:3f:8e:01:58:a0:88:88:fc:49:bf:
         46:03:b0:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 04:05:02 2026 by rpki-client