$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/34792F5FA94D005EB8C9704B96BE16835CB06819.cer File: 34792F5FA94D005EB8C9704B96BE16835CB06819.cer (raw, json) Hash identifier: GJdU0I6X665QM8D0Heb7ZMTvhuYrjoRcoWfVA5+ZG9Q= Subject key identifier: 34:79:2F:5F:A9:4D:00:5E:B8:C9:70:4B:96:BE:16:83:5C:B0:68:19 Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Certificate serial: 238BFA812BF8138A0B6FC06673C6E410D8B8A038 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1110083775733235733/1/34792F5FA94D005EB8C9704B96BE16835CB06819.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1110083775733235733/1/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Fri 22 May 2026 05:56:54 +0000 Certificate not after: Fri 21 May 2027 06:01:54 +0000 Subordinate resources: AS: 151229 IP: 2402:18a0::/32 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 15:28:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:8b:fa:81:2b:f8:13:8a:0b:6f:c0:66:73:c6:e4:10:d8:b8:a0:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Validity Not Before: May 22 05:56:54 2026 GMT Not After : May 21 06:01:54 2027 GMT Subject: CN=34792F5FA94D005EB8C9704B96BE16835CB06819 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:d6:5c:c4:23:31:58:6f:48:5b:80:fc:c9:9b: 87:c8:a3:77:14:b1:6f:a9:2a:bc:a3:54:5a:4e:1d: bd:55:0a:7b:61:3a:e0:1a:6f:98:ea:93:e6:d5:ae: 88:40:d0:d1:88:f4:31:ba:37:a9:9e:59:0d:da:3e: 49:86:04:94:4b:08:6a:46:0f:19:4f:e6:68:38:cf: 8f:c2:1e:31:5b:e6:2e:f1:eb:60:c6:db:b6:50:5e: 37:43:b0:82:3e:f7:06:22:0f:9f:ef:18:20:ce:84: ee:2d:dc:78:8a:67:e3:c3:9a:c0:d2:70:70:91:78: 09:d3:f9:6d:12:dd:78:fc:eb:fc:ea:ce:68:9d:c7: 2f:f3:97:48:c7:89:48:e1:bf:a3:13:d6:e8:80:ed: b7:df:4a:dc:68:6c:7a:b2:87:c4:bf:eb:a6:73:59: ba:a7:3a:df:a6:77:be:96:34:74:20:c4:a0:56:1a: e3:11:63:a4:43:43:93:e7:c6:32:17:71:a9:a1:71: 03:1e:53:5e:10:37:70:2e:1d:c2:dd:6c:68:f8:84: 6b:66:55:43:0d:05:d2:c2:d9:18:0a:9a:ba:e7:62: 14:fb:8e:97:46:84:cc:0c:1d:c5:8f:d8:68:58:0e: f8:97:89:b0:12:8d:8a:81:0a:a4:12:f5:8e:fe:9d: 9b:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 34:79:2F:5F:A9:4D:00:5E:B8:C9:70:4B:96:BE:16:83:5C:B0:68:19 X509v3 Authority Key Identifier: keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1110083775733235733/1/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1110083775733235733/1/34792F5FA94D005EB8C9704B96BE16835CB06819.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2402:18a0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 151229 Signature Algorithm: sha256WithRSAEncryption 6d:41:c2:da:bb:b2:d0:52:72:e7:ef:a6:86:9f:d8:87:07:6e: aa:5a:bc:5d:09:b7:ef:81:c7:ea:7a:46:81:2d:da:51:60:47: 43:04:5e:b4:28:a3:db:10:ef:29:4e:82:98:bd:2d:0b:7a:dd: dd:51:50:36:13:04:f5:be:d5:4d:a0:ac:2b:71:2d:bc:14:e4: 53:dc:08:9b:cd:49:99:61:95:46:d5:39:6d:d2:05:e0:90:6d: 56:df:a0:97:41:de:26:3d:62:4f:4f:f3:2d:76:c0:f3:0a:4d: 13:e6:65:7b:84:2a:6c:d4:e0:b6:16:5f:01:ec:49:5c:46:3c: 2a:f6:22:8f:9a:14:5c:8d:63:10:bc:b9:65:c5:17:cf:6a:98: 87:4d:65:98:5f:f0:32:ac:9a:a1:ca:a9:dd:f4:c1:6d:18:b2: f3:7d:7b:57:19:82:da:c4:9f:30:53:82:66:ba:ec:98:67:fc: ec:f1:18:77:52:1b:ad:dd:bd:85:40:3b:e7:14:75:79:81:d6: 9b:7a:54:66:a1:00:93:42:6c:50:ea:0c:f6:fa:e8:48:c9:de: c8:98:8f:4d:ac:f7:1c:6c:38:62:08:77:e4:57:19:1e:85:cf: ef:83:ee:95:1f:94:e3:cc:57:17:80:e5:ca:f8:23:f4:a4:89: 7d:7c:8c:c8 -----BEGIN CERTIFICATE----- MIIFxDCCBKygAwIBAgIUI4v6gSv4E4oLb8Bmc8bkENi4oDgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDUyMjA1NTY1NFoX DTI3MDUyMTA2MDE1NFowMzExMC8GA1UEAxMoMzQ3OTJGNUZBOTREMDA1RUI4Qzk3 MDRCOTZCRTE2ODM1Q0IwNjgxOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALjWXMQjMVhvSFuA/Mmbh8ijdxSxb6kqvKNUWk4dvVUKe2E64BpvmOqT5tWu iEDQ0Yj0Mbo3qZ5ZDdo+SYYElEsIakYPGU/maDjPj8IeMVvmLvHrYMbbtlBeN0Ow gj73BiIPn+8YIM6E7i3ceIpn48OawNJwcJF4CdP5bRLdePzr/OrOaJ3HL/OXSMeJ SOG/oxPW6IDtt99K3GhserKHxL/rpnNZuqc636Z3vpY0dCDEoFYa4xFjpENDk+fG MhdxqaFxAx5TXhA3cC4dwt1saPiEa2ZVQw0F0sLZGAqauudiFPuOl0aEzAwdxY/Y aFgO+JeJsBKNioEKpBL1jv6dmw0CAwEAAaOCArcwggKzMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFDR5L1+pTQBeuMlwS5a+FoNcsGgZMB8GA1UdIwQYMBaAFKVu hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTExMDA4Mzc3NTczMzIzNTczMy8xLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMTEwMDgzNzc1NzMzMjM1NzMz LzEvMzQ3OTJGNUZBOTREMDA1RUI4Qzk3MDRCOTZCRTE2ODM1Q0IwNjgxOS5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUH AQcBAf8EETAPMA0EAgACMAcDBQAkAhigMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwJOvTANBgkqhkiG9w0BAQsFAAOCAQEAbUHC2ruy0FJy5++mhp/Yhwduqlq8XQm3 74HH6npGgS3aUWBHQwRetCij2xDvKU6CmL0tC3rd3VFQNhME9b7VTaCsK3EtvBTk U9wIm81JmWGVRtU5bdIF4JBtVt+gl0HeJj1iT0/zLXbA8wpNE+Zle4QqbNTgthZf AexJXEY8KvYij5oUXI1jELy5ZcUXz2qYh01lmF/wMqyaocqp3fTBbRiy8317VxmC 2sSfMFOCZrrsmGf87PEYd1Ibrd29hUA75xR1eYHWm3pUZqEAk0JsUOoM9vroSMne yJiPTaz3HGw4Ygh35FcZHoXP74PulR+U48xXF4Dlyvgj9KSJfXyMyA== -----END CERTIFICATE-----Generated at Fri May 29 21:11:48 2026 by rpki-client