$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/33326972ADEFF29B1F5FA14927CBEBEDA33B4C18.cer File: 33326972ADEFF29B1F5FA14927CBEBEDA33B4C18.cer (raw, json) Hash identifier: 4ahMlJC/t+rk+NNx/ulWMaL3iKhY4zSQ3QLR2bROuR0= Subject key identifier: 33:32:69:72:AD:EF:F2:9B:1F:5F:A1:49:27:CB:EB:ED:A3:3B:4C:18 Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Certificate serial: 683C43F7546D9E67E7C4355B6A296BF240CF440D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1109303545804357649/0/33326972ADEFF29B1F5FA14927CBEBEDA33B4C18.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1109303545804357649/0/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Wed 20 May 2026 02:11:16 +0000 Certificate not after: Wed 19 May 2027 02:16:16 +0000 Subordinate resources: IP: 103.149.244.0/23 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 15:28:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:3c:43:f7:54:6d:9e:67:e7:c4:35:5b:6a:29:6b:f2:40:cf:44:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Validity Not Before: May 20 02:11:16 2026 GMT Not After : May 19 02:16:16 2027 GMT Subject: CN=33326972ADEFF29B1F5FA14927CBEBEDA33B4C18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:94:c2:b6:b5:54:45:bb:1d:9f:ba:d0:3d:ed: 5a:ed:ed:5b:34:8e:d1:67:ac:fb:84:bc:d2:7f:bf: ba:36:25:85:37:b8:d5:b3:b5:15:bf:6b:b2:eb:16: e4:d5:47:4d:9a:26:53:56:2c:c1:23:0f:cf:f0:7b: 64:36:c7:6c:d4:57:be:cf:b6:7b:e0:a4:fe:a0:2e: 5c:dd:08:27:b5:40:05:bb:80:21:9f:16:4e:d4:40: be:1f:f6:75:9b:0a:8e:87:34:c0:6c:4f:06:ad:86: 1b:10:cf:a2:20:53:e8:e9:53:a5:c3:b6:f5:b2:a8: 7d:e7:64:12:34:c6:64:29:bb:49:29:70:0e:21:5b: 4d:2b:de:6d:35:2a:02:86:9e:9e:12:82:54:61:7e: 22:80:f1:54:8b:19:72:68:81:7c:88:69:f9:41:fa: d8:88:c8:fa:f7:7d:b0:0a:18:72:12:ac:50:a4:54: b7:44:75:86:83:2a:61:74:76:60:18:09:74:99:f2: ec:18:dc:b6:b2:b5:da:03:ce:f3:c5:49:6c:b2:e2: 5c:13:5a:22:c7:8e:b1:73:30:c2:21:26:ec:4b:d3: 4c:4a:6b:1e:30:75:f0:7c:d0:15:69:46:3b:82:ff: 0f:c7:8f:b7:08:d6:0b:f1:e6:f7:10:c5:0b:66:ec: 2e:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 33:32:69:72:AD:EF:F2:9B:1F:5F:A1:49:27:CB:EB:ED:A3:3B:4C:18 X509v3 Authority Key Identifier: keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1109303545804357649/0/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1109303545804357649/0/33326972ADEFF29B1F5FA14927CBEBEDA33B4C18.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.149.244.0/23 Signature Algorithm: sha256WithRSAEncryption 0c:69:52:2c:73:b7:d4:bd:5a:2e:f6:21:e0:76:78:78:05:2b: 74:18:ab:15:2f:5b:9c:67:17:37:ae:2e:a4:4c:06:d1:16:1d: d5:3a:29:fe:3d:4f:fa:29:98:72:06:36:7c:b7:ca:dc:9b:d7: eb:ea:22:84:22:a8:73:34:93:a6:f9:b9:c5:29:43:d7:82:72: a0:10:1f:2d:db:24:54:3c:31:c6:25:ef:96:85:99:c8:ee:36: 68:79:f5:18:0b:f7:4f:4c:92:16:38:12:94:2e:79:87:13:3e: 95:96:8f:c6:f6:f2:0e:f2:15:e3:90:a1:2e:e1:46:ea:56:57: 7f:3c:b9:16:7e:b6:da:9b:69:8f:2f:5f:4b:80:49:f4:a4:15: e6:d3:14:79:8d:1a:dd:d9:79:f2:81:4f:66:39:cc:77:a5:da: 65:8e:1f:c7:f8:38:dc:4d:4e:cc:b9:b9:62:7a:2f:ab:dd:1e: 93:3e:37:ea:78:60:a4:64:10:df:f4:9f:90:a0:da:c6:eb:bd: 3a:a7:50:4d:39:cc:24:bb:c4:92:2e:ce:0e:7e:f5:e8:74:a7: 1c:d8:42:90:62:43:41:fb:82:2b:39:f1:d0:3f:15:94:44:f3: b0:ac:e9:8b:7f:b2:f0:08:f5:60:e1:99:f7:4c:aa:4b:3c:82: 5f:2b:5e:45 -----BEGIN CERTIFICATE----- MIIFpzCCBI+gAwIBAgIUaDxD91RtnmfnxDVbailr8kDPRA0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDUyMDAyMTExNloX DTI3MDUxOTAyMTYxNlowMzExMC8GA1UEAxMoMzMzMjY5NzJBREVGRjI5QjFGNUZB MTQ5MjdDQkVCRURBMzNCNEMxODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANSUwra1VEW7HZ+60D3tWu3tWzSO0Wes+4S80n+/ujYlhTe41bO1Fb9rsusW 5NVHTZomU1YswSMPz/B7ZDbHbNRXvs+2e+Ck/qAuXN0IJ7VABbuAIZ8WTtRAvh/2 dZsKjoc0wGxPBq2GGxDPoiBT6OlTpcO29bKofedkEjTGZCm7SSlwDiFbTSvebTUq AoaenhKCVGF+IoDxVIsZcmiBfIhp+UH62IjI+vd9sAoYchKsUKRUt0R1hoMqYXR2 YBgJdJny7BjctrK12gPO88VJbLLiXBNaIseOsXMwwiEm7EvTTEprHjB18HzQFWlG O4L/D8ePtwjWC/Hm9xDFC2bsLgMCAwEAAaOCApowggKWMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFDMyaXKt7/KbH1+hSSfL6+2jO0wYMB8GA1UdIwQYMBaAFKVu hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTEwOTMwMzU0NTgwNDM1NzY0OS8wLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMTA5MzAzNTQ1ODA0MzU3NjQ5 LzAvMzMzMjY5NzJBREVGRjI5QjFGNUZBMTQ5MjdDQkVCRURBMzNCNEMxOC5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAFnlfQwDQYJKoZIhvcNAQELBQADggEBAAxpUixz t9S9Wi72IeB2eHgFK3QYqxUvW5xnFzeuLqRMBtEWHdU6Kf49T/opmHIGNny3ytyb 1+vqIoQiqHM0k6b5ucUpQ9eCcqAQHy3bJFQ8McYl75aFmcjuNmh59RgL909MkhY4 EpQueYcTPpWWj8b28g7yFeOQoS7hRupWV388uRZ+ttqbaY8vX0uASfSkFebTFHmN Gt3ZefKBT2Y5zHel2mWOH8f4ONxNTsy5uWJ6L6vdHpM+N+p4YKRkEN/0n5Cg2sbr vTqnUE05zCS7xJIuzg5+9eh0pxzYQpBiQ0H7gis58dA/FZRE87Cs6Yt/svAI9WDh mfdMqks8gl8rXkU= -----END CERTIFICATE-----Generated at Fri May 29 21:11:49 2026 by rpki-client