Certificate
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3D01CD6928DDE8D26AC96265F1F904C72F1A12B8.cer
File: 3D01CD6928DDE8D26AC96265F1F904C72F1A12B8.cer (raw, json)
Hash identifier: 3PtUVJerX24Lo8vK/XYTm3I/bHfyeTdCkBsrIQdw1m4=
Subject key identifier: 3D:01:CD:69:28:DD:E8:D2:6A:C9:62:65:F1:F9:04:C7:2F:1A:12:B8
Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10
Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710
Certificate serial: 0D81BB95E1BCE74C01B2F919AF0159FF99A5902B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
Manifest: rsync://rpki-rps.cnnic.cn/repo/A1065585389265420289/0/3D01CD6928DDE8D26AC96265F1F904C72F1A12B8.mft
caRepository: rsync://rpki-rps.cnnic.cn/repo/A1065585389265420289/0/
Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml
Certificate not before: Tue 02 Jun 2026 09:22:34 +0000
Certificate not after: Tue 01 Jun 2027 09:27:34 +0000
Subordinate resources: AS: 146772
IP: 43.254.128.0/22
IP: 45.126.100.0/22
IP: 45.248.108.0/22
IP: 45.250.180.0 -- 45.250.187.255
IP: 45.251.0.0/22
IP: 103.73.244.0 -- 103.73.251.255
IP: 103.161.254.0/23
IP: 103.166.52.0/23
IP: 103.191.242.0/23
IP: 103.203.100.0/22
IP: 103.216.252.0/22
IP: 103.219.84.0 -- 103.219.91.255
IP: 103.219.100.0/22
IP: 103.236.232.0/22
IP: 103.249.12.0/22
IP: 103.249.192.0/22
IP: 115.31.68.0/22
IP: 124.14.24.0 -- 124.14.51.255
IP: 211.161.108.0/22
IP: 2405:80::/32
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 16:02:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:81:bb:95:e1:bc:e7:4c:01:b2:f9:19:af:01:59:ff:99:a5:90:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710
Validity
Not Before: Jun 2 09:22:34 2026 GMT
Not After : Jun 1 09:27:34 2027 GMT
Subject: CN=3D01CD6928DDE8D26AC96265F1F904C72F1A12B8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:7e:36:a3:8a:f7:8d:26:68:78:d3:05:34:f2:
b8:27:bd:f0:7f:63:98:19:ca:af:dd:a8:4e:cb:2d:
7d:b6:49:17:d2:f8:76:84:e2:1f:40:4d:88:0b:96:
63:bf:5c:49:a6:a8:73:37:ba:1d:dc:24:24:b4:e1:
6f:f4:85:e6:96:63:da:d5:f8:f9:76:cd:96:a2:e4:
ca:84:01:d6:ab:69:86:c5:1b:41:2d:07:6a:27:fd:
d1:5a:cc:a0:5d:3a:e0:30:2c:85:26:0f:b3:44:12:
2a:5b:9d:61:03:ad:71:5c:1b:97:14:bd:6b:6b:b3:
ee:b5:51:4c:c5:56:e2:8d:d2:fa:9a:2c:c7:b9:b3:
3b:70:83:c3:2c:f0:0b:b1:a8:71:21:f5:63:fb:d1:
b2:cf:09:00:e5:27:2e:28:7a:fb:fb:a9:17:53:ba:
51:b9:39:dd:77:3d:3a:47:ad:aa:1d:05:ed:6e:c1:
0f:a9:61:25:92:8e:31:88:a4:a6:59:4f:9e:a1:f2:
c6:04:39:1b:27:4f:80:15:29:49:8b:fc:54:1c:3a:
0c:6e:21:53:3d:fb:c9:2f:2d:8c:44:83:d5:cf:a7:
ce:f3:db:08:03:5b:08:03:6a:23:af:28:b8:ae:00:
c3:dc:c6:91:3b:f2:9f:70:6e:7e:96:61:ea:bd:a5:
e7:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
3D:01:CD:69:28:DD:E8:D2:6A:C9:62:65:F1:F9:04:C7:2F:1A:12:B8
X509v3 Authority Key Identifier:
keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265420289/0/
RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265420289/0/3D01CD6928DDE8D26AC96265F1F904C72F1A12B8.mft
RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
43.254.128.0/22
45.126.100.0/22
45.248.108.0/22
45.250.180.0-45.250.187.255
45.251.0.0/22
103.73.244.0-103.73.251.255
103.161.254.0/23
103.166.52.0/23
103.191.242.0/23
103.203.100.0/22
103.216.252.0/22
103.219.84.0-103.219.91.255
103.219.100.0/22
103.236.232.0/22
103.249.12.0/22
103.249.192.0/22
115.31.68.0/22
124.14.24.0-124.14.51.255
211.161.108.0/22
IPv6:
2405:80::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
146772
Signature Algorithm: sha256WithRSAEncryption
2a:69:1c:64:ec:60:55:a5:f0:9f:3d:ac:d3:59:fe:85:91:af:
33:8d:56:76:5c:1b:b4:a2:3c:a3:46:ee:12:80:d5:66:08:bb:
41:e2:46:be:82:b7:90:bc:2b:19:dc:d5:d9:09:c1:52:fc:e4:
6f:7d:48:85:98:05:5f:bd:e3:1c:89:7c:ca:3c:55:fb:57:4b:
47:21:71:99:22:eb:1b:21:fd:2b:cf:4c:b7:5e:0a:9b:f1:ac:
54:55:ae:8c:c2:23:bd:99:bb:b1:0a:ea:03:df:5e:24:78:67:
88:20:f6:3c:47:b2:97:23:13:5c:6d:12:23:9e:d7:f1:a3:8d:
63:81:cb:61:09:8a:e0:80:e7:0c:02:59:f9:c9:c9:70:f1:00:
50:c1:60:75:33:7e:23:d1:ec:b1:44:2f:75:5b:46:f0:3e:90:
ee:f3:1c:c2:9d:a1:66:3a:d7:d6:df:54:be:00:60:73:01:d2:
56:c8:90:24:22:90:6d:96:45:3c:6d:17:5b:85:5f:c4:25:b5:
81:08:a3:29:fa:d6:3a:9e:2c:71:ca:72:2b:ba:2a:7c:13:ab:
49:f8:c6:ea:18:13:9e:58:1b:dc:2d:26:1d:ac:d6:ff:7c:dd:
67:04:26:39:41:2c:38:a7:da:0c:08:89:51:94:13:ef:87:b2:
04:c7:95:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 02:17:38 2026 by rpki-client