$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/0/98319A3BC8F8CFD4FBB38C731DBFEC10AC053601.cer File: 98319A3BC8F8CFD4FBB38C731DBFEC10AC053601.cer (raw, json) Hash identifier: QCoRSfdruUJY79gg+ZbMK7/KVlFVbJtfW0oSykQpOB0= Subject key identifier: 98:31:9A:3B:C8:F8:CF:D4:FB:B3:8C:73:1D:BF:EC:10:AC:05:36:01 Authority key identifier: CB:02:14:A5:C4:04:D6:F8:40:43:3B:12:0C:AC:BB:5B:8C:59:E6:13 Certificate issuer: /CN=A9162E3D0001/serialNumber=CB0214A5C404D6F840433B120CACBB5B8C59E613 Certificate serial: 0CF92968BB0AC6FCCC92D444F71F0BFB2250BED5 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1068363599790997506/1/98319A3BC8F8CFD4FBB38C731DBFEC10AC053601.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1068363599790997506/1/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Mon 01 Jun 2026 02:05:20 +0000 Certificate not after: Mon 31 May 2027 02:10:20 +0000 Subordinate resources: IP: 170.179.0.0/16 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Jun 2026 13:43:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:f9:29:68:bb:0a:c6:fc:cc:92:d4:44:f7:1f:0b:fb:22:50:be:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=CB0214A5C404D6F840433B120CACBB5B8C59E613 Validity Not Before: Jun 1 02:05:20 2026 GMT Not After : May 31 02:10:20 2027 GMT Subject: CN=98319A3BC8F8CFD4FBB38C731DBFEC10AC053601 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:e2:2e:69:ad:89:30:8f:d6:73:41:b1:e6:f3: f5:cc:fc:57:29:61:8d:35:8a:35:12:9f:d1:af:df: 6f:4d:52:a1:d4:61:8f:08:06:3f:ce:46:87:03:44: 3e:e1:b1:ff:f1:5d:84:0e:ef:60:8c:d1:c3:00:21: 49:03:9a:31:ea:e9:09:d6:fa:92:cb:0a:17:97:6e: 4c:2b:e9:31:22:55:a9:68:9f:75:3d:bf:bb:35:6b: 3f:3b:77:1d:ab:d8:b3:6f:a6:7a:3c:85:65:fa:41: 54:68:fd:6d:18:ca:8c:68:33:74:27:f9:9e:03:31: 76:7c:a9:dc:1c:4f:4b:af:f2:a2:59:84:15:a5:55: 52:50:a3:46:e2:98:10:d7:c7:1c:4e:70:31:5a:66: 8d:66:29:59:9e:13:69:6e:a1:89:d4:5d:43:73:c4: 08:d9:18:d6:00:cf:5e:21:a1:9b:06:34:5e:67:98: 72:fd:16:01:64:2b:0a:02:20:cf:9d:f0:af:7f:54: b9:7f:8d:27:94:95:63:e0:4e:1a:3a:40:6f:bf:33: c8:a3:0a:a3:93:e7:67:4b:cb:97:bc:ee:06:8c:db: 74:37:a6:3c:5a:d7:60:e6:d1:b4:5e:8b:35:ff:fe: b8:84:58:17:9e:98:37:f6:bb:f4:05:ef:51:5e:33: 5d:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 98:31:9A:3B:C8:F8:CF:D4:FB:B3:8C:73:1D:BF:EC:10:AC:05:36:01 X509v3 Authority Key Identifier: keyid:CB:02:14:A5:C4:04:D6:F8:40:43:3B:12:0C:AC:BB:5B:8C:59:E6:13 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1068363599790997506/1/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1068363599790997506/1/98319A3BC8F8CFD4FBB38C731DBFEC10AC053601.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 170.179.0.0/16 Signature Algorithm: sha256WithRSAEncryption 6b:38:88:b2:cb:7f:e0:75:c9:51:3e:78:1d:68:d0:bf:3d:d0: cc:3d:8e:07:09:98:7a:64:7e:1b:97:e3:b0:3f:e7:5a:b7:e6: 89:0b:6d:9a:e5:0a:84:b5:9e:ac:14:8b:bc:c8:86:3a:3e:18: e0:6b:8f:e5:76:a2:99:93:4f:3d:9c:39:4a:0e:84:8b:7f:4a: e3:37:93:41:80:5b:d9:55:2e:33:4e:04:d5:2d:d3:4c:a1:fd: 08:a6:3d:7d:56:fc:cf:e1:28:c4:41:5c:12:82:3e:c1:37:72: 70:3a:e1:a1:09:9c:15:ca:2d:20:49:c5:5f:65:b4:10:c4:ec: d2:20:8d:84:c7:b7:f6:f5:a2:b5:62:c5:66:41:f0:3a:49:2b: 80:9e:1c:8d:3c:aa:9e:94:e0:ca:0b:60:5d:63:6a:44:d4:55: fe:39:5f:9a:13:ea:35:34:7c:68:7a:4d:c6:e3:99:3f:c3:6d: d0:42:bc:2a:39:ea:86:0a:6c:fa:3e:d8:ec:68:fa:22:10:b9: c0:09:46:40:97:42:29:f5:2c:48:22:4d:7b:10:ae:7d:2b:83: ac:41:33:26:39:3e:ab:fe:03:46:36:78:ec:db:1c:d7:c4:d5: 82:82:16:6d:5b:32:20:ce:ae:23:49:fa:85:ce:b0:61:ca:6f: cc:af:dd:74 -----BEGIN CERTIFICATE----- MIIFpjCCBI6gAwIBAgIUDPkpaLsKxvzMktRE9x8L+yJQvtUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhDQjAyMTRBNUM0 MDRENkY4NDA0MzNCMTIwQ0FDQkI1QjhDNTlFNjEzMB4XDTI2MDYwMTAyMDUyMFoX DTI3MDUzMTAyMTAyMFowMzExMC8GA1UEAxMoOTgzMTlBM0JDOEY4Q0ZENEZCQjM4 QzczMURCRkVDMTBBQzA1MzYwMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAN3iLmmtiTCP1nNBsebz9cz8VylhjTWKNRKf0a/fb01SodRhjwgGP85GhwNE PuGx//FdhA7vYIzRwwAhSQOaMerpCdb6kssKF5duTCvpMSJVqWifdT2/uzVrPzt3 HavYs2+mejyFZfpBVGj9bRjKjGgzdCf5ngMxdnyp3BxPS6/yolmEFaVVUlCjRuKY ENfHHE5wMVpmjWYpWZ4TaW6hidRdQ3PECNkY1gDPXiGhmwY0XmeYcv0WAWQrCgIg z53wr39UuX+NJ5SVY+BOGjpAb78zyKMKo5PnZ0vLl7zuBozbdDemPFrXYObRtF6L Nf/+uIRYF56YN/a79AXvUV4zXcsCAwEAAaOCApkwggKVMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFJgxmjvI+M/U+7OMcx2/7BCsBTYBMB8GA1UdIwQYMBaAFMsC FKXEBNb4QEM7Egysu1uMWeYTMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMC9DQjAyMTRBNUM0MDRENkY4NDA0MzNCMTIwQ0FDQkI1QjhDNTlF NjEzLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CM0EyNEYyMDFENjYxMUUyOEFDODgzN0M3 MkZEMUZGMi95d0lVcGNRRTF2aEFRenNTREt5N1c0eFo1aE0uY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTA2ODM2MzU5OTc5MDk5NzUwNi8xLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDY4MzYzNTk5NzkwOTk3NTA2 LzEvOTgzMTlBM0JDOEY4Q0ZENEZCQjM4QzczMURCRkVDMTBBQzA1MzYwMS5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUH AQcBAf8EDzANMAsEAgABMAUDAwCqszANBgkqhkiG9w0BAQsFAAOCAQEAaziIsst/ 4HXJUT54HWjQvz3QzD2OBwmYemR+G5fjsD/nWrfmiQttmuUKhLWerBSLvMiGOj4Y 4GuP5XaimZNPPZw5Sg6Ei39K4zeTQYBb2VUuM04E1S3TTKH9CKY9fVb8z+EoxEFc EoI+wTdycDrhoQmcFcotIEnFX2W0EMTs0iCNhMe39vWitWLFZkHwOkkrgJ4cjTyq npTgygtgXWNqRNRV/jlfmhPqNTR8aHpNxuOZP8Nt0EK8Kjnqhgps+j7Y7Gj6IhC5 wAlGQJdCKfUsSCJNexCufSuDrEEzJjk+q/4DRjZ47Nsc18TVgoIWbVsyIM6uI0n6 hc6wYcpvzK/ddA== -----END CERTIFICATE-----Generated at Thu Jun 4 14:11:14 2026 by rpki-client