
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/0/E3993DB092F827CDCF711046B493411A00A72701.cer
File: E3993DB092F827CDCF711046B493411A00A72701.cer (raw, json)
Hash identifier: LK4Fgrfxi3CUDod9X0zOIxvGTj56n4Cj+/a+kNlklaQ=
Subject key identifier: E3:99:3D:B0:92:F8:27:CD:CF:71:10:46:B4:93:41:1A:00:A7:27:01
Authority key identifier: CB:02:14:A5:C4:04:D6:F8:40:43:3B:12:0C:AC:BB:5B:8C:59:E6:13
Certificate issuer: /CN=A9162E3D0001/serialNumber=CB0214A5C404D6F840433B120CACBB5B8C59E613
Certificate serial: 53BDC37776D0BCABAE674F2C688B2209AD481CE6
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
Manifest: rsync://rpki-rps.cnnic.cn/repo/A1065588335524839425/1/E3993DB092F827CDCF711046B493411A00A72701.mft
caRepository: rsync://rpki-rps.cnnic.cn/repo/A1065588335524839425/1/
Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml
Certificate not before: Mon 01 Jun 2026 01:47:33 +0000
Certificate not after: Mon 31 May 2027 01:52:33 +0000
Subordinate resources: IP: 138.252.72.0/23
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 17:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:bd:c3:77:76:d0:bc:ab:ae:67:4f:2c:68:8b:22:09:ad:48:1c:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0001, serialNumber=CB0214A5C404D6F840433B120CACBB5B8C59E613
Validity
Not Before: Jun 1 01:47:33 2026 GMT
Not After : May 31 01:52:33 2027 GMT
Subject: CN=E3993DB092F827CDCF711046B493411A00A72701
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:eb:f4:21:87:eb:6a:82:4f:e1:60:05:62:45:
80:5d:5e:b5:bd:50:40:6d:6c:1e:b8:99:82:59:5a:
bf:cb:6f:34:0b:a3:71:74:bd:21:4a:c3:7e:ad:04:
88:7f:db:47:9f:7a:55:0e:e9:48:07:35:ba:8c:32:
1d:41:21:a7:23:5e:43:98:25:77:d6:2c:d7:ff:97:
0c:81:e6:94:52:42:d2:b6:2e:dd:42:b7:24:06:85:
a2:38:c2:2e:b1:a4:60:23:14:5f:2c:d4:6e:00:70:
04:32:37:06:f2:13:2a:ce:86:82:ac:55:d7:ae:52:
dd:b7:2c:96:57:64:ba:e8:c7:01:b9:90:b0:37:71:
b7:85:f1:44:2c:fc:b6:7c:71:2f:55:9c:f2:47:9f:
34:25:54:6f:28:31:b4:df:b2:2d:27:47:90:94:ef:
45:c2:34:29:c7:15:46:87:67:4e:34:22:15:ce:a5:
46:f3:48:61:b0:67:34:2c:9f:05:80:07:c7:7d:a0:
ff:e0:86:93:cd:eb:98:5f:8d:62:7a:fe:b3:20:ee:
81:e9:4b:89:0c:ef:56:07:6e:1a:11:8c:d9:bf:7e:
b9:a0:de:a7:0f:30:11:9a:ff:c7:da:ef:2e:3c:8d:
36:8c:29:df:dc:62:82:e2:a1:67:42:2d:13:b0:91:
5c:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
E3:99:3D:B0:92:F8:27:CD:CF:71:10:46:B4:93:41:1A:00:A7:27:01
X509v3 Authority Key Identifier:
keyid:CB:02:14:A5:C4:04:D6:F8:40:43:3B:12:0C:AC:BB:5B:8C:59:E6:13
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335524839425/1/
RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335524839425/1/E3993DB092F827CDCF711046B493411A00A72701.mft
RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.252.72.0/23
Signature Algorithm: sha256WithRSAEncryption
c1:c7:91:7c:f3:98:b3:58:57:6a:5c:20:fc:47:89:93:21:00:
28:d3:a5:ca:6e:6b:65:c6:6d:9c:2c:b8:2e:84:63:75:e2:54:
b9:f8:ae:9b:ee:1e:44:44:a7:3d:c0:c0:87:97:0c:73:b6:99:
f2:08:30:d6:5b:53:11:a5:da:a2:3b:d3:49:31:be:74:92:4e:
a7:bb:2c:8c:0a:5a:22:37:fe:b3:32:cc:b1:19:8e:9f:da:13:
d3:71:ba:19:01:fe:58:c6:cc:50:9d:62:37:5e:39:3d:89:4c:
fe:28:77:46:f8:0f:63:be:ad:a4:a4:d0:fa:c9:7e:2e:b9:89:
dc:58:56:32:4e:66:61:23:5f:96:db:c3:95:16:bc:c9:e9:5c:
3c:57:50:c2:1f:29:a7:e4:cb:de:ca:9c:8e:99:ce:34:24:c3:
57:cd:83:ec:f6:8b:17:54:5c:52:c0:25:55:a2:4f:fb:a4:73:
f7:8e:ac:9c:84:7d:bf:3b:57:91:52:a5:2c:12:15:b2:f2:d6:
e3:36:84:bc:0c:c1:58:3e:76:b9:b4:6e:1f:f4:73:b2:22:9b:
f5:07:0e:a9:39:1d:3d:52:35:f4:a9:7a:af:58:5f:b4:0c:a1:
87:5b:5a:eb:28:1f:ea:d8:3f:8e:01:58:a0:88:88:fc:49:bf:
46:03:b0:c4
-----BEGIN CERTIFICATE-----
MIIFpzCCBI+gAwIBAgIUU73Dd3bQvKuuZ08saIsiCa1IHOYwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhDQjAyMTRBNUM0
MDRENkY4NDA0MzNCMTIwQ0FDQkI1QjhDNTlFNjEzMB4XDTI2MDYwMTAxNDczM1oX
DTI3MDUzMTAxNTIzM1owMzExMC8GA1UEAxMoRTM5OTNEQjA5MkY4MjdDRENGNzEx
MDQ2QjQ5MzQxMUEwMEE3MjcwMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALzr9CGH62qCT+FgBWJFgF1etb1QQG1sHriZgllav8tvNAujcXS9IUrDfq0E
iH/bR596VQ7pSAc1uowyHUEhpyNeQ5gld9Ys1/+XDIHmlFJC0rYu3UK3JAaFojjC
LrGkYCMUXyzUbgBwBDI3BvITKs6GgqxV165S3bcslldkuujHAbmQsDdxt4XxRCz8
tnxxL1Wc8kefNCVUbygxtN+yLSdHkJTvRcI0KccVRodnTjQiFc6lRvNIYbBnNCyf
BYAHx32g/+CGk83rmF+NYnr+syDugelLiQzvVgduGhGM2b9+uaDepw8wEZr/x9rv
LjyNNowp39xiguKhZ0ItE7CRXAcCAwEAAaOCApowggKWMA8GA1UdEwEB/wQFMAMB
Af8wHQYDVR0OBBYEFOOZPbCS+CfNz3EQRrSTQRoApycBMB8GA1UdIwQYMBaAFMsC
FKXEBNb4QEM7Egysu1uMWeYTMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig
ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw
OTA2NzU3MTUvMC9DQjAyMTRBNUM0MDRENkY4NDA0MzNCMTIwQ0FDQkI1QjhDNTlF
NjEzLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CM0EyNEYyMDFENjYxMUUyOEFDODgzN0M3
MkZEMUZGMi95d0lVcGNRRTF2aEFRenNTREt5N1c0eFo1aE0uY2VyMIIBAQYIKwYB
BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu
Y24vcmVwby9BMTA2NTU4ODMzNTUyNDgzOTQyNS8xLzBuBggrBgEFBQcwCoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDY1NTg4MzM1NTI0ODM5NDI1
LzEvRTM5OTNEQjA5MkY4MjdDRENGNzExMDQ2QjQ5MzQxMUEwMEE3MjcwMS5tZnQw
OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp
ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAGK/EgwDQYJKoZIhvcNAQELBQADggEBAMHHkXzz
mLNYV2pcIPxHiZMhACjTpcpua2XGbZwsuC6EY3XiVLn4rpvuHkREpz3AwIeXDHO2
mfIIMNZbUxGl2qI700kxvnSSTqe7LIwKWiI3/rMyzLEZjp/aE9NxuhkB/ljGzFCd
YjdeOT2JTP4od0b4D2O+raSk0PrJfi65idxYVjJOZmEjX5bbw5UWvMnpXDxXUMIf
Kafky97KnI6ZzjQkw1fNg+z2ixdUXFLAJVWiT/ukc/eOrJyEfb87V5FSpSwSFbLy
1uM2hLwMwVg+drm0bh/0c7Iim/UHDqk5HT1SNfSpeq9YX7QMoYdbWusoH+rYP44B
WKCIiPxJv0YDsMQ=
-----END CERTIFICATE-----
Generated at Sun Jun 14 04:05:02 2026 by rpki-client