Certificate
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E3E0C774E3B2BC58790E7499837A4155C1A869E6.cer
File: E3E0C774E3B2BC58790E7499837A4155C1A869E6.cer (raw, json)
Hash identifier: 55hfxbDaS0Et7/LEvMpBhdT2fbbX8Wd8kDUNKnVPSSY=
Subject key identifier: E3:E0:C7:74:E3:B2:BC:58:79:0E:74:99:83:7A:41:55:C1:A8:69:E6
Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10
Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710
Certificate serial: 15C5B7E676FE129582FFD0946AC4AB18862C686E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
Manifest: rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/E3E0C774E3B2BC58790E7499837A4155C1A869E6.mft
caRepository: rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/
Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml
Certificate not before: Tue 14 Apr 2026 03:30:57 +0000
Certificate not after: Tue 13 Apr 2027 03:35:57 +0000
Subordinate resources: AS: 58844
IP: 103.64.24.0/21
IP: 103.64.140.0 -- 103.64.147.255
IP: 103.64.152.0/22
IP: 103.64.208.0/22
IP: 103.67.100.0 -- 103.67.151.255
IP: 103.67.212.0/22
IP: 103.222.112.0 -- 103.222.143.255
IP: 103.222.216.0 -- 103.222.235.255
IP: 103.222.240.0/22
IP: 103.223.16.0/20
IP: 103.223.64.0 -- 103.223.103.255
IP: 103.223.124.0/22
IP: 103.251.128.0/22
IP: 121.46.0.0/18
IP: 121.46.128.0/18
IP: 2406:5880::/32
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 17:12:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:c5:b7:e6:76:fe:12:95:82:ff:d0:94:6a:c4:ab:18:86:2c:68:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710
Validity
Not Before: Apr 14 03:30:57 2026 GMT
Not After : Apr 13 03:35:57 2027 GMT
Subject: CN=E3E0C774E3B2BC58790E7499837A4155C1A869E6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:ea:63:5d:34:c8:d1:a9:b1:73:21:45:a0:6c:
4a:e1:75:50:96:65:ba:04:b4:e8:3d:f7:0e:bc:68:
b6:0c:b8:10:94:11:54:6c:03:e7:b2:5c:77:b0:62:
c4:37:4d:ae:b6:78:2b:f6:dc:c9:15:fd:59:1a:e4:
ac:2d:0d:76:a3:c4:9b:7d:a3:88:4a:32:f1:86:19:
1b:9a:1c:72:1a:e7:35:a6:e0:21:27:0a:9a:fa:04:
f8:f7:b4:d5:61:73:59:08:b4:2b:9a:b9:03:a3:d2:
d0:aa:c0:43:59:c0:7f:0f:b4:c2:39:b1:24:36:33:
16:14:fc:48:4b:56:6e:c3:96:11:cd:c1:d4:f9:b3:
2d:7e:93:6e:27:02:fe:f3:3c:47:f8:4f:4b:01:e5:
c9:04:62:2b:bf:98:35:ba:16:1e:1e:b3:06:63:76:
fe:d7:de:7a:81:a2:8b:6f:a4:63:ec:14:0c:ec:45:
f4:b8:b4:21:e8:38:17:e3:55:11:33:cd:e0:96:5b:
ab:d1:35:6a:36:20:4d:15:58:79:4c:b0:4a:36:ce:
32:ca:20:f4:ac:99:f8:e2:dd:ff:f7:bd:a0:6f:8a:
46:fd:db:a0:17:4a:22:34:12:99:29:85:84:1c:bc:
1f:33:c3:e7:26:82:8f:3a:ad:b2:1e:98:e9:61:81:
ab:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
E3:E0:C7:74:E3:B2:BC:58:79:0E:74:99:83:7A:41:55:C1:A8:69:E6
X509v3 Authority Key Identifier:
keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/
RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/E3E0C774E3B2BC58790E7499837A4155C1A869E6.mft
RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.64.24.0/21
103.64.140.0-103.64.147.255
103.64.152.0/22
103.64.208.0/22
103.67.100.0-103.67.151.255
103.67.212.0/22
103.222.112.0-103.222.143.255
103.222.216.0-103.222.235.255
103.222.240.0/22
103.223.16.0/20
103.223.64.0-103.223.103.255
103.223.124.0/22
103.251.128.0/22
121.46.0.0/18
121.46.128.0/18
IPv6:
2406:5880::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
58844
Signature Algorithm: sha256WithRSAEncryption
52:ad:dd:6f:bd:43:03:43:87:c9:70:22:a5:09:74:df:ab:63:
68:e7:2f:43:9e:0f:74:af:86:58:f0:44:7b:fd:89:be:2c:48:
32:cc:7a:6e:6c:0b:45:c1:18:f2:7e:67:11:13:82:f1:fa:8d:
83:ae:95:cd:38:cb:ae:84:46:cd:fd:1f:a4:00:10:5a:45:aa:
95:82:f1:2d:e4:ea:5b:b9:86:96:4b:46:40:31:e0:10:46:71:
aa:7b:5c:0e:72:5b:f6:33:08:12:77:79:d7:14:0f:3f:45:2c:
f0:5b:ba:fa:4d:4c:6d:ce:fe:b8:8e:f4:dc:ea:0f:47:57:c9:
fb:d4:9d:e0:21:29:39:9c:f4:41:e0:14:6d:d7:51:ae:79:83:
aa:3a:85:d8:98:9f:06:5b:65:28:94:ee:b4:07:55:0e:58:0a:
04:6c:79:bc:81:5e:70:b5:72:f6:74:ba:e7:b1:ad:da:ac:6e:
1b:83:95:35:52:28:65:62:b1:dd:16:8d:3d:1a:50:b6:a8:af:
dc:ff:ee:97:b2:d5:bc:13:42:2f:46:f2:c3:4d:0a:ca:fe:b3:
95:93:2e:3e:80:12:83:17:9a:6b:2e:9e:39:e5:a5:35:09:e7:
b0:30:a9:53:fa:7d:3e:84:e9:e8:45:a3:db:22:15:8c:69:76:
73:4d:f7:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:38:21 2026 by rpki-client