$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3685DAC8828B3EB4989761422A77AA7B265F96CE.cer File: 3685DAC8828B3EB4989761422A77AA7B265F96CE.cer (raw, json) Hash identifier: SFtL8m1Nqd0bcIV6eSW0b4BynZay/JszmpWSYJyL/n4= Subject key identifier: 36:85:DA:C8:82:8B:3E:B4:98:97:61:42:2A:77:AA:7B:26:5F:96:CE Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Certificate serial: 2B07D6E366A31852AD40887A8883EEAD8EF55619 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/0/3685DAC8828B3EB4989761422A77AA7B265F96CE.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/0/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Fri 29 May 2026 08:56:21 +0000 Certificate not after: Fri 28 May 2027 09:01:21 +0000 Subordinate resources: AS: 59078 IP: 43.242.52.0/22 IP: 101.48.0.0/16 IP: 103.235.84.0/22 IP: 2402:e7c0::/32 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 15:28:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:07:d6:e3:66:a3:18:52:ad:40:88:7a:88:83:ee:ad:8e:f5:56:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Validity Not Before: May 29 08:56:21 2026 GMT Not After : May 28 09:01:21 2027 GMT Subject: CN=3685DAC8828B3EB4989761422A77AA7B265F96CE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:31:1d:f9:85:65:24:75:c5:4e:77:87:38:4d: 6f:15:e9:2b:26:25:93:21:f6:fe:9a:05:35:59:f5: d0:7d:ed:52:50:91:9c:0c:38:a2:fa:a7:e4:a7:a3: 4e:54:1d:b8:49:2a:bf:68:f9:60:2d:76:89:fd:a7: 0d:f3:bb:04:3b:55:02:5e:b5:40:a4:52:59:61:d1: 2e:4f:71:6c:b8:97:7a:9f:c4:47:11:90:e6:de:d2: 53:66:4d:31:6f:a1:e5:76:d1:9f:0c:79:bd:3d:70: 49:76:50:a1:35:fa:6c:af:68:74:4c:a6:73:84:50: d5:d7:67:d6:26:15:11:50:f1:dc:bd:05:e2:52:6f: 2e:49:65:65:5f:97:35:bf:46:dd:3f:99:5a:2e:a2: 16:cb:bc:1c:4a:25:12:48:5e:a8:b3:fb:cc:23:ed: 96:85:69:17:55:43:8a:55:45:42:02:f5:8c:3e:99: 4d:9c:bd:4f:46:5e:7b:16:84:4a:f8:2f:f2:10:b5: 55:ab:13:d6:84:43:8d:15:6f:76:bf:76:c1:10:bb: dc:12:33:b0:46:c2:9b:a3:6c:c0:84:4a:a9:bd:b3: 70:41:fe:ac:18:3d:e8:f3:44:ee:02:ab:14:78:ac: a3:4d:59:b0:24:d3:d3:29:84:80:82:f1:a8:45:76: aa:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 36:85:DA:C8:82:8B:3E:B4:98:97:61:42:2A:77:AA:7B:26:5F:96:CE X509v3 Authority Key Identifier: keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/0/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/0/3685DAC8828B3EB4989761422A77AA7B265F96CE.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.242.52.0/22 101.48.0.0/16 103.235.84.0/22 IPv6: 2402:e7c0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 59078 Signature Algorithm: sha256WithRSAEncryption 4a:3e:6d:84:1a:5e:4f:12:15:be:95:b6:0b:fd:ee:89:81:89: 30:2a:89:b0:fa:1f:cf:c5:6b:8e:76:dd:ec:e4:26:51:a6:6b: 5e:44:76:f5:b3:55:5e:7a:dc:f8:eb:f8:ba:a7:02:76:25:09: 57:00:c6:d5:af:f4:38:12:69:bd:0e:a0:70:73:b1:f1:20:1e: e7:18:bc:67:12:8d:50:a4:6e:b7:d5:52:68:a0:8c:b4:64:e6: 9f:92:2b:9c:d2:d5:12:f8:f2:00:76:2e:1b:5b:55:0b:c7:bd: ff:9c:26:87:6b:e0:73:45:c0:55:3a:3a:7d:52:44:d7:e8:cc: 99:44:1a:7c:df:96:e3:ba:63:29:da:7f:e8:73:c3:4b:ae:f4: 01:44:32:fb:8f:b0:4e:7d:c0:22:1b:ff:bb:e6:62:fc:2e:e5: 84:34:60:f6:06:a3:21:cd:2a:f7:13:87:90:ef:42:f9:7b:f7: 68:5a:60:8a:ed:4b:ce:3f:87:60:17:c7:50:1e:4a:29:6d:a2: 38:b2:69:60:bc:21:da:72:bb:d8:dc:04:08:ac:ae:26:80:82: 90:13:a5:ac:3b:0f:8f:9f:3d:7d:2a:e7:80:cc:8d:6f:1a:6d: 76:0a:95:5f:be:88:1f:0e:b8:e4:6b:53:73:a0:4a:d3:26:4a: b3:b2:f8:71 -----BEGIN CERTIFICATE----- MIIF3TCCBMWgAwIBAgIUKwfW42ajGFKtQIh6iIPurY71VhkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDUyOTA4NTYyMVoX DTI3MDUyODA5MDEyMVowMzExMC8GA1UEAxMoMzY4NURBQzg4MjhCM0VCNDk4OTc2 MTQyMkE3N0FBN0IyNjVGOTZDRTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKoxHfmFZSR1xU53hzhNbxXpKyYlkyH2/poFNVn10H3tUlCRnAw4ovqn5Kej TlQduEkqv2j5YC12if2nDfO7BDtVAl61QKRSWWHRLk9xbLiXep/ERxGQ5t7SU2ZN MW+h5XbRnwx5vT1wSXZQoTX6bK9odEymc4RQ1ddn1iYVEVDx3L0F4lJvLkllZV+X Nb9G3T+ZWi6iFsu8HEolEkheqLP7zCPtloVpF1VDilVFQgL1jD6ZTZy9T0ZeexaE Svgv8hC1VasT1oRDjRVvdr92wRC73BIzsEbCm6NswIRKqb2zcEH+rBg96PNE7gKr FHiso01ZsCTT0ymEgILxqEV2qh8CAwEAAaOCAtAwggLMMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFDaF2siCiz60mJdhQip3qnsmX5bOMB8GA1UdIwQYMBaAFKVu hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTA2NTU3OTUzNDM5NDUyMzY1MS8wLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDY1NTc5NTM0Mzk0NTIzNjUx LzAvMzY4NURBQzg4MjhCM0VCNDk4OTc2MTQyMkE3N0FBN0IyNjVGOTZDRS5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwOQYIKwYBBQUH AQcBAf8EKjAoMBcEAgABMBEDBAIr8jQDAwBlMAMEAmfrVDANBAIAAjAHAwUAJALn wDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMA5sYwDQYJKoZIhvcNAQELBQADggEB AEo+bYQaXk8SFb6Vtgv97omBiTAqibD6H8/Fa4523ezkJlGma15EdvWzVV563Pjr +LqnAnYlCVcAxtWv9DgSab0OoHBzsfEgHucYvGcSjVCkbrfVUmigjLRk5p+SK5zS 1RL48gB2LhtbVQvHvf+cJodr4HNFwFU6On1SRNfozJlEGnzfluO6Yynaf+hzw0uu 9AFEMvuPsE59wCIb/7vmYvwu5YQ0YPYGoyHNKvcTh5DvQvl792haYIrtS84/h2AX x1AeSiltojiyaWC8Idpyu9jcBAisriaAgpATpaw7D4+fPX0q54DMjW8abXYKlV++ iB8OuORrU3OgStMmSrOy+HE= -----END CERTIFICATE-----Generated at Fri May 29 21:13:25 2026 by rpki-client