$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/0/3AF3039AB5BC634C0747D8322F28313D0968683C.cer File: 3AF3039AB5BC634C0747D8322F28313D0968683C.cer (raw, json) Hash identifier: yr4UOnAM85wI7cvSDSnajZ3AVTcDoUtkDXB9Id+ApAE= Subject key identifier: 3A:F3:03:9A:B5:BC:63:4C:07:47:D8:32:2F:28:31:3D:09:68:68:3C Authority key identifier: CB:02:14:A5:C4:04:D6:F8:40:43:3B:12:0C:AC:BB:5B:8C:59:E6:13 Certificate issuer: /CN=A9162E3D0001/serialNumber=CB0214A5C404D6F840433B120CACBB5B8C59E613 Certificate serial: 0A79B975A645CB1386085BC3DC9925B28EB5C95D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1110083775733235733/0/3AF3039AB5BC634C0747D8322F28313D0968683C.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1110083775733235733/0/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Fri 22 May 2026 05:56:54 +0000 Certificate not after: Fri 21 May 2027 06:01:54 +0000 Subordinate resources: IP: 165.101.208.0/23 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 13:26:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:79:b9:75:a6:45:cb:13:86:08:5b:c3:dc:99:25:b2:8e:b5:c9:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=CB0214A5C404D6F840433B120CACBB5B8C59E613 Validity Not Before: May 22 05:56:54 2026 GMT Not After : May 21 06:01:54 2027 GMT Subject: CN=3AF3039AB5BC634C0747D8322F28313D0968683C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:5f:5c:23:e7:21:23:01:54:a1:97:b0:2e:f7: bb:29:99:0e:8d:4e:15:37:55:03:e7:cf:90:e3:77: 1e:cb:5b:0b:9d:15:a3:7c:c7:56:8f:c9:e9:0d:1f: 65:c7:97:ed:36:64:98:ea:fc:b9:74:23:78:ef:34: 8b:56:63:4d:92:fd:92:69:62:39:e5:2e:c2:0f:65: 91:22:2d:82:34:dd:25:1f:60:6f:8b:3c:59:e2:69: ef:c5:62:0e:82:5e:05:65:cf:0a:27:40:12:89:c0: c8:ca:0f:f1:fa:9f:2f:72:d4:00:60:90:1f:23:19: e0:73:b6:e0:e8:e8:b6:6d:15:5d:15:bb:57:9a:68: 02:ec:91:9f:d4:f7:b9:60:4f:1d:c7:42:4d:87:2c: 1a:f4:1f:d0:d4:e8:72:2d:98:c9:81:7e:1a:94:cc: bd:59:8f:82:ae:10:1a:01:f3:5b:f0:57:cc:c8:47: ca:ae:d3:a4:a2:f0:bc:4b:0c:b1:d7:99:b6:2c:ec: 63:5f:64:7d:b5:b8:0a:89:4d:95:75:a9:14:63:64: 3c:4d:13:0e:36:8b:1e:25:6e:f8:84:4a:65:cc:07: 2a:20:61:60:6b:74:ec:51:73:4f:c7:74:dd:71:59: 1c:03:b1:48:16:03:88:2c:e9:c3:f2:a8:e5:01:43: 27:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 3A:F3:03:9A:B5:BC:63:4C:07:47:D8:32:2F:28:31:3D:09:68:68:3C X509v3 Authority Key Identifier: keyid:CB:02:14:A5:C4:04:D6:F8:40:43:3B:12:0C:AC:BB:5B:8C:59:E6:13 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1110083775733235733/0/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1110083775733235733/0/3AF3039AB5BC634C0747D8322F28313D0968683C.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 165.101.208.0/23 Signature Algorithm: sha256WithRSAEncryption 6a:a6:41:d8:78:4b:10:3f:d3:21:89:2c:47:74:8b:89:7e:fa: 9c:f7:67:54:da:04:c0:71:11:a7:b2:1e:70:4f:33:bf:bc:72: 98:95:24:0f:81:f9:47:8e:f8:11:e9:53:92:e2:a3:bc:35:44: 48:01:39:a5:a6:d0:aa:86:80:2c:dc:9d:5f:78:83:6f:a3:68: 38:53:a9:c7:98:42:67:c4:ee:63:5c:30:e2:d6:32:b4:5f:5d: a6:c9:f7:c1:41:f4:d4:79:99:3a:45:8b:bc:73:1c:12:e6:53: 77:51:96:df:42:62:d3:07:87:07:2f:cd:fa:21:98:cf:28:ce: 83:04:15:80:d4:a5:42:65:62:5c:0f:ee:06:90:21:78:84:fc: f5:e0:7a:58:d7:b7:09:1f:63:47:a5:6d:c5:6c:1e:ab:ba:f0: a0:b1:c6:e4:96:cc:60:7c:e2:1e:3a:c9:a7:c1:da:96:f1:45: 7a:70:c8:52:ae:36:d1:41:b5:40:13:e7:66:25:ee:d5:bb:6d: 51:a6:da:df:fc:06:5f:77:3d:1a:c7:4b:eb:76:d2:15:34:3e: 70:60:ae:3c:17:d8:36:40:9a:a9:52:4e:83:ea:2b:c5:1d:63: 06:e5:64:b6:87:6e:49:de:ac:6e:bc:08:a6:57:13:5b:13:8e: 1f:d9:17:1e -----BEGIN CERTIFICATE----- MIIFpzCCBI+gAwIBAgIUCnm5daZFyxOGCFvD3Jklso61yV0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhDQjAyMTRBNUM0 MDRENkY4NDA0MzNCMTIwQ0FDQkI1QjhDNTlFNjEzMB4XDTI2MDUyMjA1NTY1NFoX DTI3MDUyMTA2MDE1NFowMzExMC8GA1UEAxMoM0FGMzAzOUFCNUJDNjM0QzA3NDdE ODMyMkYyODMxM0QwOTY4NjgzQzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALlfXCPnISMBVKGXsC73uymZDo1OFTdVA+fPkON3HstbC50Vo3zHVo/J6Q0f ZceX7TZkmOr8uXQjeO80i1ZjTZL9kmliOeUuwg9lkSItgjTdJR9gb4s8WeJp78Vi DoJeBWXPCidAEonAyMoP8fqfL3LUAGCQHyMZ4HO24Ojotm0VXRW7V5poAuyRn9T3 uWBPHcdCTYcsGvQf0NToci2YyYF+GpTMvVmPgq4QGgHzW/BXzMhHyq7TpKLwvEsM sdeZtizsY19kfbW4ColNlXWpFGNkPE0TDjaLHiVu+IRKZcwHKiBhYGt07FFzT8d0 3XFZHAOxSBYDiCzpw/Ko5QFDJ+UCAwEAAaOCApowggKWMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFDrzA5q1vGNMB0fYMi8oMT0JaGg8MB8GA1UdIwQYMBaAFMsC FKXEBNb4QEM7Egysu1uMWeYTMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMC9DQjAyMTRBNUM0MDRENkY4NDA0MzNCMTIwQ0FDQkI1QjhDNTlF NjEzLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CM0EyNEYyMDFENjYxMUUyOEFDODgzN0M3 MkZEMUZGMi95d0lVcGNRRTF2aEFRenNTREt5N1c0eFo1aE0uY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTExMDA4Mzc3NTczMzIzNTczMy8wLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMTEwMDgzNzc1NzMzMjM1NzMz LzAvM0FGMzAzOUFCNUJDNjM0QzA3NDdEODMyMkYyODMxM0QwOTY4NjgzQy5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAGlZdAwDQYJKoZIhvcNAQELBQADggEBAGqmQdh4 SxA/0yGJLEd0i4l++pz3Z1TaBMBxEaeyHnBPM7+8cpiVJA+B+UeO+BHpU5Lio7w1 REgBOaWm0KqGgCzcnV94g2+jaDhTqceYQmfE7mNcMOLWMrRfXabJ98FB9NR5mTpF i7xzHBLmU3dRlt9CYtMHhwcvzfohmM8ozoMEFYDUpUJlYlwP7gaQIXiE/PXgeljX twkfY0elbcVsHqu68KCxxuSWzGB84h46yafB2pbxRXpwyFKuNtFBtUAT52Yl7tW7 bVGm2t/8Bl93PRrHS+t20hU0PnBgrjwX2DZAmqlSToPqK8UdYwblZLaHbknerG68 CKZXE1sTjh/ZFx4= -----END CERTIFICATE-----Generated at Sat May 30 01:57:18 2026 by rpki-client