$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/320188B3FA38DA0F4192F7201AD7D377656BF5C0.cer File: 320188B3FA38DA0F4192F7201AD7D377656BF5C0.cer (raw, json) Hash identifier: NDwjGcvBvRCFSa72HOTAJkcWxmIuvdhm65IoPQbl8lE= Subject key identifier: 32:01:88:B3:FA:38:DA:0F:41:92:F7:20:1A:D7:D3:77:65:6B:F5:C0 Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Certificate serial: 5C175CEDB1F119002486DC31686FD72D0692E76D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1112680023891902481/0/320188B3FA38DA0F4192F7201AD7D377656BF5C0.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1112680023891902481/0/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Fri 29 May 2026 09:48:11 +0000 Certificate not after: Fri 28 May 2027 09:53:11 +0000 Subordinate resources: AS: 63621 IP: 45.253.60.0/22 IP: 103.222.184.0/22 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 15:28:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:17:5c:ed:b1:f1:19:00:24:86:dc:31:68:6f:d7:2d:06:92:e7:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Validity Not Before: May 29 09:48:11 2026 GMT Not After : May 28 09:53:11 2027 GMT Subject: CN=320188B3FA38DA0F4192F7201AD7D377656BF5C0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:67:3d:bd:dd:3f:f3:8a:69:86:1e:a3:c8:4b: 6b:b6:e5:5b:95:05:69:94:73:0b:fd:c1:b0:f2:57: a8:48:f3:8b:ca:8d:bf:ea:08:60:84:da:67:80:e2: 56:73:8f:49:92:8f:86:e2:ad:0e:59:6d:15:74:b0: 8e:13:ae:ad:d7:88:ec:0a:34:df:14:fa:ef:c1:86: 14:2a:52:46:9c:a8:4c:25:3a:da:1f:9e:a4:5d:f5: 7b:ec:f7:c5:a4:9c:1b:9a:06:e1:33:83:9b:64:88: 93:ec:46:a2:d6:8d:2f:39:a3:1d:4a:75:bb:94:73: 7b:c5:49:fe:56:5f:0e:9b:93:53:ed:a9:0c:b3:02: 50:97:07:44:ce:5c:de:7d:5b:03:63:a4:fa:46:f2: 07:ae:8a:d8:af:0f:38:47:53:e7:2f:af:cf:ef:da: a3:d0:28:d1:2f:a8:90:6d:64:ae:c2:a5:2a:da:6e: 67:5f:90:2a:a8:46:9a:e1:17:35:84:f2:5d:6a:6a: ea:b3:6d:3e:b6:f1:5b:7e:43:40:01:eb:de:74:ce: 83:0e:eb:f3:46:a0:66:0e:28:41:b4:79:38:a2:43: 4f:ce:8e:50:82:b1:36:df:b4:cd:0b:88:b1:c0:76: 67:6c:d5:c9:a0:06:c0:fc:a1:1c:b1:9b:cc:d5:06: c2:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 32:01:88:B3:FA:38:DA:0F:41:92:F7:20:1A:D7:D3:77:65:6B:F5:C0 X509v3 Authority Key Identifier: keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1112680023891902481/0/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1112680023891902481/0/320188B3FA38DA0F4192F7201AD7D377656BF5C0.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.253.60.0/22 103.222.184.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 63621 Signature Algorithm: sha256WithRSAEncryption 73:7a:f8:25:96:32:1c:53:7d:09:22:4b:fc:ba:31:d0:51:ec: 29:fe:1e:d0:93:65:a1:d5:32:dc:12:4c:7e:7f:9b:79:83:0d: f9:07:0d:60:f6:49:5f:f4:41:18:4b:b1:04:38:ad:5e:61:2a: 85:2c:f1:22:63:a7:5c:b3:72:a5:ad:a3:44:fa:92:de:53:fb: e5:ab:5e:8f:68:68:67:a2:50:0c:3d:ee:16:fd:5c:be:67:24: 08:0f:5b:15:cc:04:fd:e7:38:82:a2:42:d3:d6:07:94:ff:75: 5c:b8:7f:9c:24:15:a3:bc:97:11:4b:a6:21:c9:e8:c6:22:f6: 4a:18:66:97:4c:57:43:d6:0b:41:28:be:13:1c:17:19:8c:89: 36:95:82:58:b5:ce:fc:43:29:38:2d:e5:2d:de:87:d2:2a:73: db:9b:18:70:f4:a4:90:22:38:61:fa:b2:3d:3b:36:c1:74:37: ae:0c:c9:84:f1:66:aa:f0:9e:5e:55:83:ac:f8:6b:ba:62:51: f2:2c:9e:89:3b:be:2c:d7:7b:4f:13:4e:75:a1:14:e3:2f:cd: d4:82:b1:9e:66:9f:d5:c3:f3:e8:44:dc:99:99:b2:8c:13:35: 79:57:2c:35:6d:0b:85:bd:4d:cf:dc:10:d4:69:cf:bd:91:84: eb:52:f0:ca -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUXBdc7bHxGQAkhtwxaG/XLQaS520wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDUyOTA5NDgxMVoX DTI3MDUyODA5NTMxMVowMzExMC8GA1UEAxMoMzIwMTg4QjNGQTM4REEwRjQxOTJG NzIwMUFEN0QzNzc2NTZCRjVDMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKVnPb3dP/OKaYYeo8hLa7blW5UFaZRzC/3BsPJXqEjzi8qNv+oIYITaZ4Di VnOPSZKPhuKtDlltFXSwjhOurdeI7Ao03xT678GGFCpSRpyoTCU62h+epF31e+z3 xaScG5oG4TODm2SIk+xGotaNLzmjHUp1u5Rze8VJ/lZfDpuTU+2pDLMCUJcHRM5c 3n1bA2Ok+kbyB66K2K8POEdT5y+vz+/ao9Ao0S+okG1krsKlKtpuZ1+QKqhGmuEX NYTyXWpq6rNtPrbxW35DQAHr3nTOgw7r80agZg4oQbR5OKJDT86OUIKxNt+0zQuI scB2Z2zVyaAGwPyhHLGbzNUGwpkCAwEAAaOCArwwggK4MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFDIBiLP6ONoPQZL3IBrX03dla/XAMB8GA1UdIwQYMBaAFKVu hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTExMjY4MDAyMzg5MTkwMjQ4MS8wLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMTEyNjgwMDIzODkxOTAyNDgx LzAvMzIwMTg4QjNGQTM4REEwRjQxOTJGNzIwMUFEN0QzNzc2NTZCRjVDMC5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwJQYIKwYBBQUH AQcBAf8EFjAUMBIEAgABMAwDBAIt/TwDBAJn3rgwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDAPiFMA0GCSqGSIb3DQEBCwUAA4IBAQBzevglljIcU30JIkv8ujHQUewp /h7Qk2Wh1TLcEkx+f5t5gw35Bw1g9klf9EEYS7EEOK1eYSqFLPEiY6dcs3KlraNE +pLeU/vlq16PaGhnolAMPe4W/Vy+ZyQID1sVzAT95ziCokLT1geU/3VcuH+cJBWj vJcRS6YhyejGIvZKGGaXTFdD1gtBKL4THBcZjIk2lYJYtc78Qyk4LeUt3ofSKnPb mxhw9KSQIjhh+rI9OzbBdDeuDMmE8Waq8J5eVYOs+Gu6YlHyLJ6JO74s13tPE051 oRTjL83UgrGeZp/Vw/PoRNyZmbKMEzV5Vyw1bQuFvU3P3BDUac+9kYTrUvDK -----END CERTIFICATE-----Generated at Fri May 29 21:11:22 2026 by rpki-client