$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/335692178DD0300DC3B374F86B473CB008656DCF.cer File: 335692178DD0300DC3B374F86B473CB008656DCF.cer (raw, json) Hash identifier: 1LfqDUWJKKNvLiw5vGTyK9KDfzKZd1pfPeCLWiO1grU= Subject key identifier: 33:56:92:17:8D:D0:30:0D:C3:B3:74:F8:6B:47:3C:B0:08:65:6D:CF Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Certificate serial: 30900AA29D575F60A3206CDC852BD5D3A5D2D334 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1065582330347257857/0/335692178DD0300DC3B374F86B473CB008656DCF.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1065582330347257857/0/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Thu 28 May 2026 08:44:34 +0000 Certificate not after: Thu 27 May 2027 08:49:34 +0000 Subordinate resources: AS: 137768 IP: 103.131.36.0/22 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 15:28:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:90:0a:a2:9d:57:5f:60:a3:20:6c:dc:85:2b:d5:d3:a5:d2:d3:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Validity Not Before: May 28 08:44:34 2026 GMT Not After : May 27 08:49:34 2027 GMT Subject: CN=335692178DD0300DC3B374F86B473CB008656DCF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:c8:a7:e0:6e:04:fa:ec:f1:fe:bc:de:96:51: 96:4d:01:e9:ce:b2:43:ce:74:65:ab:6a:f0:e8:de: 5f:38:75:f7:b0:6c:cd:c9:89:ed:d6:80:8f:a6:cd: 64:fd:61:d0:42:1d:af:07:28:27:03:8c:f6:a9:07: 35:86:86:60:e5:13:e6:8e:cd:b4:39:b7:61:2d:24: 8b:13:da:ca:3e:00:45:5f:e3:da:c3:0e:00:af:ee: 0a:33:5f:27:6a:95:41:cb:97:b4:f3:93:25:34:47: 98:78:7b:4a:02:6d:bf:c1:19:fe:8e:46:b9:20:02: ac:40:30:53:2a:36:fd:b9:df:93:cd:75:ec:16:22: ee:e6:3f:33:a6:1a:84:85:48:09:25:26:4a:85:aa: 59:5d:bc:b2:7f:b7:6b:49:96:b9:3c:39:14:a2:50: af:19:e5:fb:ed:97:31:8f:cd:f8:5e:97:9b:2f:0f: 39:45:ea:03:0a:9d:3c:49:e7:29:c3:c9:c4:11:8e: 7a:d0:81:41:ef:56:9c:3f:63:e3:0c:8b:f7:8c:06: f1:1e:ec:9f:1b:85:92:30:f5:33:9e:bc:12:b3:0d: 8c:78:ec:92:30:07:2c:f8:f1:20:72:bf:e6:24:45: 38:ae:4b:d4:56:3c:55:f5:72:3b:ca:df:09:6f:5b: 90:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 33:56:92:17:8D:D0:30:0D:C3:B3:74:F8:6B:47:3C:B0:08:65:6D:CF X509v3 Authority Key Identifier: keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330347257857/0/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330347257857/0/335692178DD0300DC3B374F86B473CB008656DCF.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.131.36.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 137768 Signature Algorithm: sha256WithRSAEncryption 55:84:85:8d:32:58:df:a5:81:12:33:7f:46:1a:92:51:de:73: 09:2b:89:dc:54:1b:25:7a:ed:6e:95:d9:65:cd:b2:1c:03:fe: 80:06:b8:fa:e4:5d:d7:b6:5d:0b:9b:b2:25:55:09:42:a4:84: 0d:e7:3e:9f:33:80:41:e4:ea:aa:2f:05:6d:9b:d4:0f:33:72: ed:fb:23:58:a7:2e:2a:ea:4b:fc:82:fa:7e:f9:ab:53:85:02: 7e:b9:9d:c2:9f:c4:93:93:3b:16:74:55:0c:91:5c:19:43:1b: 7f:61:59:d7:c9:ad:b0:25:11:f4:d0:bf:a0:be:ec:87:c4:53: 23:ab:ca:54:46:55:45:ae:43:30:90:18:34:42:b5:1f:fb:9b: 75:77:b4:7c:23:16:da:2d:21:90:ae:8f:7e:5a:a6:f6:83:d4: 52:b7:b1:37:83:95:15:81:62:3d:b8:16:5f:b7:0f:ae:5d:9d: c5:a7:3d:05:35:11:13:90:41:d5:a6:1f:0f:fe:a8:53:1d:81: e5:da:39:2e:d9:fb:13:16:77:59:6b:f1:43:27:bf:45:44:a9: 26:07:e7:40:f0:3e:2f:a2:00:33:91:36:c0:a0:32:ff:71:9e: 5c:d1:9d:9c:d2:d1:51:8d:5d:3b:02:75:f5:cc:82:8b:60:5a: 04:c8:f6:2d -----BEGIN CERTIFICATE----- MIIFwzCCBKugAwIBAgIUMJAKop1XX2CjIGzchSvV06XS0zQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDUyODA4NDQzNFoX DTI3MDUyNzA4NDkzNFowMzExMC8GA1UEAxMoMzM1NjkyMTc4REQwMzAwREMzQjM3 NEY4NkI0NzNDQjAwODY1NkRDRjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALPIp+BuBPrs8f683pZRlk0B6c6yQ850Zatq8OjeXzh197BszcmJ7daAj6bN ZP1h0EIdrwcoJwOM9qkHNYaGYOUT5o7NtDm3YS0kixPayj4ARV/j2sMOAK/uCjNf J2qVQcuXtPOTJTRHmHh7SgJtv8EZ/o5GuSACrEAwUyo2/bnfk8117BYi7uY/M6Ya hIVICSUmSoWqWV28sn+3a0mWuTw5FKJQrxnl++2XMY/N+F6Xmy8POUXqAwqdPEnn KcPJxBGOetCBQe9WnD9j4wyL94wG8R7snxuFkjD1M568ErMNjHjskjAHLPjxIHK/ 5iRFOK5L1FY8VfVyO8rfCW9bkCkCAwEAAaOCArYwggKyMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFDNWkheN0DANw7N0+GtHPLAIZW3PMB8GA1UdIwQYMBaAFKVu hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTA2NTU4MjMzMDM0NzI1Nzg1Ny8wLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDY1NTgyMzMwMzQ3MjU3ODU3 LzAvMzM1NjkyMTc4REQwMzAwREMzQjM3NEY4NkI0NzNDQjAwODY1NkRDRi5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAJngyQwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQID AhooMA0GCSqGSIb3DQEBCwUAA4IBAQBVhIWNMljfpYESM39GGpJR3nMJK4ncVBsl eu1uldllzbIcA/6ABrj65F3Xtl0Lm7IlVQlCpIQN5z6fM4BB5OqqLwVtm9QPM3Lt +yNYpy4q6kv8gvp++atThQJ+uZ3Cn8STkzsWdFUMkVwZQxt/YVnXya2wJRH00L+g vuyHxFMjq8pURlVFrkMwkBg0QrUf+5t1d7R8IxbaLSGQro9+Wqb2g9RSt7E3g5UV gWI9uBZftw+uXZ3Fpz0FNRETkEHVph8P/qhTHYHl2jku2fsTFndZa/FDJ79FRKkm B+dA8D4vogAzkTbAoDL/cZ5c0Z2c0tFRjV07AnX1zIKLYFoEyPYt -----END CERTIFICATE-----Generated at Fri May 29 21:13:18 2026 by rpki-client