Certificate

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/305CF9A41DCC6E06CE9CA73352325EFC4D34331C.cer
File:                     305CF9A41DCC6E06CE9CA73352325EFC4D34331C.cer (raw, json)
Hash identifier:          IGvpPY47dtQSpFgISplOMyvICfHF63Qz0g1GNlcpn2U=
Subject key identifier:   30:5C:F9:A4:1D:CC:6E:06:CE:9C:A7:33:52:32:5E:FC:4D:34:33:1C
Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10
Certificate issuer:       /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710
Certificate serial:       14C3B88B5FBD2D6D20832B7278CDBB6FCF4AC740
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
Manifest:                 rsync://rpki-rps.cnnic.cn/repo/A1111857844975566867/0/305CF9A41DCC6E06CE9CA73352325EFC4D34331C.mft
caRepository:             rsync://rpki-rps.cnnic.cn/repo/A1111857844975566867/0/
Notify URL:               https://rrdp-rps.cnnic.cn/rrdp/notification.xml
Certificate not before:   Thu 25 Jun 2026 01:19:02 +0000
Certificate not after:    Thu 24 Jun 2027 01:24:02 +0000
Subordinate resources:    IP: 43.224.80.0/22
                          IP: 103.214.48.0/22
                          IP: 144.48.64.0/22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 15 Jul 2026 20:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:c3:b8:8b:5f:bd:2d:6d:20:83:2b:72:78:cd:bb:6f:cf:4a:c7:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710
        Validity
            Not Before: Jun 25 01:19:02 2026 GMT
            Not After : Jun 24 01:24:02 2027 GMT
        Subject: CN=305CF9A41DCC6E06CE9CA73352325EFC4D34331C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:97:16:94:05:89:7a:5d:68:4e:78:fe:43:ff:
                    30:1d:1a:51:ee:68:07:c7:b6:56:92:4f:02:d7:e3:
                    73:3f:51:1e:4b:99:3f:7f:38:47:fe:ff:9e:2c:b7:
                    b0:33:1d:32:4f:16:d5:c4:99:60:ab:a6:7a:3e:a6:
                    0f:e6:a1:f7:14:8e:8b:54:99:de:37:a8:b0:86:8f:
                    20:a7:f5:84:d0:f8:8b:05:5c:7f:bc:e0:6f:b5:bd:
                    94:55:36:ea:66:fc:4e:a8:c1:fa:4f:21:56:5b:5c:
                    49:2f:9b:13:75:af:9c:ef:99:60:76:7b:64:b3:c7:
                    32:74:91:cf:65:63:5d:09:c1:e5:bb:8e:63:62:ea:
                    39:e1:57:9c:9f:54:8e:0a:10:aa:27:e9:7e:98:c0:
                    98:86:45:a9:80:3f:08:c9:8d:f4:c4:43:b5:a3:2f:
                    72:ef:17:da:cd:41:b2:ef:1a:95:c2:3d:5d:9b:07:
                    65:1e:50:dc:e4:ed:cc:ae:63:eb:da:c5:df:0a:7f:
                    e7:b6:7e:f0:09:59:98:5c:65:56:b0:04:e5:7b:92:
                    e1:55:1b:a2:e2:37:66:dc:c6:6f:a1:cc:8a:c2:9b:
                    58:02:32:35:18:7d:49:97:b7:01:fe:ea:99:a2:74:
                    99:aa:71:05:bd:68:a5:e0:6e:30:85:3a:ac:1f:ae:
                    84:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                30:5C:F9:A4:1D:CC:6E:06:CE:9C:A7:33:52:32:5E:FC:4D:34:33:1C
            X509v3 Authority Key Identifier:
                keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1111857844975566867/0/
                RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1111857844975566867/0/305CF9A41DCC6E06CE9CA73352325EFC4D34331C.mft
                RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.224.80.0/22
                  103.214.48.0/22
                  144.48.64.0/22

    Signature Algorithm: sha256WithRSAEncryption
         61:30:85:c3:77:15:9e:30:15:cc:f8:fb:66:29:2c:5f:bf:ce:
         41:01:fe:94:39:a9:b5:50:fe:b7:f0:d0:87:40:f9:36:ab:fb:
         bd:b9:76:90:83:09:b7:f0:27:d8:93:02:e5:df:b9:36:29:5f:
         85:89:51:43:70:93:bf:3b:6f:35:54:cf:8e:9e:d2:f5:36:c6:
         27:6c:c7:0b:59:a8:7d:fc:64:15:c7:ce:51:88:e2:3a:ec:18:
         42:5e:56:02:83:cd:02:9d:69:ab:9c:03:95:94:b6:95:00:d3:
         c5:74:a5:7a:a1:3f:f7:fc:0e:28:a3:ff:8d:16:9c:cb:85:3b:
         8b:d6:c9:bf:7f:2b:c2:4e:63:87:0e:22:33:63:00:61:c4:89:
         f4:f0:73:95:e3:67:69:01:f5:f3:17:a9:86:77:12:80:37:1e:
         37:a2:86:c0:17:b4:44:04:1d:32:c4:50:7a:71:16:a5:25:5c:
         1b:b6:57:14:3a:5b:70:41:9a:88:d9:e8:8a:47:1c:7d:ec:39:
         d5:0c:00:f8:2b:83:a0:cb:f3:a3:fa:b1:7e:82:00:2a:49:33:
         0c:a2:47:34:b4:dd:a0:b8:e3:d5:e0:36:35:4c:85:19:7f:88:
         d7:7e:97:f2:d3:25:9d:5c:86:69:6a:6c:52:03:77:5d:2a:98:
         92:cb:70:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 14 19:11:05 2026 by rpki-client