$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3789349FBAB7B9C74B292EDF5849BA368344B348.cer File: 3789349FBAB7B9C74B292EDF5849BA368344B348.cer (raw, json) Hash identifier: 1KMu0FSW9bEArJN2ru8+W0jwoSEyEydwUbLiEzarH3c= Subject key identifier: 37:89:34:9F:BA:B7:B9:C7:4B:29:2E:DF:58:49:BA:36:83:44:B3:48 Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Certificate serial: 2F73170ADC2A98789DD14A6B6321B487B7D6C58A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1114469232214540311/0/3789349FBAB7B9C74B292EDF5849BA368344B348.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1114469232214540311/0/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Wed 03 Jun 2026 08:17:52 +0000 Certificate not after: Wed 02 Jun 2027 08:22:52 +0000 Subordinate resources: IP: 43.247.248.0/22 IP: 103.230.212.0/22 IP: 116.193.16.0/20 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Jun 2026 04:35:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:73:17:0a:dc:2a:98:78:9d:d1:4a:6b:63:21:b4:87:b7:d6:c5:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Validity Not Before: Jun 3 08:17:52 2026 GMT Not After : Jun 2 08:22:52 2027 GMT Subject: CN=3789349FBAB7B9C74B292EDF5849BA368344B348 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:d4:06:95:15:67:b7:0f:35:59:ee:38:68:45: f9:7c:50:b2:3d:b6:af:5b:7d:b3:21:71:09:d3:b6: b1:df:01:2b:76:1d:3c:ba:e5:3f:ba:15:d5:84:03: f4:66:1b:7f:a5:ce:b5:f0:59:d4:84:92:4c:a9:7e: ea:cc:c6:a9:ca:d8:4e:93:3d:06:26:0c:4f:46:10: bd:81:fc:4d:86:53:1f:ff:b8:d5:80:79:4a:2f:38: c8:9f:a6:cf:e8:6a:d3:ff:87:bf:60:7a:72:aa:17: 9d:4c:a7:9f:b9:db:25:2e:b1:39:d9:57:3f:4c:91: 7f:b9:f1:b0:75:3b:c8:98:c6:06:d3:95:12:03:47: 8f:14:6f:42:55:76:f8:40:68:ab:97:9a:da:fc:bb: 0b:66:3a:72:1e:d8:74:33:ab:74:7e:7e:e6:e0:c8: 5c:6e:40:47:21:ba:8d:db:ad:6f:bf:7f:5f:6e:e9: 85:e9:32:2f:70:86:04:c6:6b:6b:c5:4e:12:1c:6d: ea:1f:b3:15:83:fa:bf:72:91:a7:94:ec:43:f4:c2: b3:5b:54:fd:89:b8:c0:cd:cd:0e:a4:f2:cf:c7:15: 30:de:07:da:3a:ca:1c:ff:b1:6d:bc:2b:7c:ad:97: bd:25:a8:9d:8f:7e:a0:8e:b9:dc:e8:67:20:bb:34: 72:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 37:89:34:9F:BA:B7:B9:C7:4B:29:2E:DF:58:49:BA:36:83:44:B3:48 X509v3 Authority Key Identifier: keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1114469232214540311/0/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1114469232214540311/0/3789349FBAB7B9C74B292EDF5849BA368344B348.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.247.248.0/22 103.230.212.0/22 116.193.16.0/20 Signature Algorithm: sha256WithRSAEncryption 61:3b:53:22:92:8c:3a:b9:a0:d7:76:32:c4:b1:fd:45:27:78: 7a:c9:71:5d:00:a4:06:df:14:a5:df:59:2e:ba:72:e5:14:a4: b0:da:0b:17:7e:d4:93:e1:35:86:ea:42:69:1a:d3:0b:e7:3c: 3f:f7:8b:c3:5b:61:ba:da:fc:76:aa:47:01:b7:0d:ba:5b:07: 0e:6b:7c:ae:ec:37:19:a8:f4:ea:d3:f8:7d:fe:b5:9a:7d:05: ba:a4:88:cb:e8:35:52:c7:19:48:d7:d1:b5:b3:cb:fe:4b:83: 33:5b:ea:a0:74:cf:45:6e:6d:62:2b:d3:39:f2:9e:58:c1:df: 96:ba:ee:a2:09:90:9e:57:a5:60:a9:cc:56:9e:a8:0d:85:82: 22:e5:cc:a5:98:e7:98:80:dc:9c:d8:d1:bd:c5:65:30:1b:4e: ff:86:3a:f0:82:f6:27:77:cc:68:51:f5:9e:d9:5a:fc:5d:93: 36:58:e9:9d:b9:42:c5:0f:2f:44:c7:8c:fa:be:19:7b:04:76: 09:9f:bd:fd:7f:e7:db:81:b9:84:80:f5:93:16:f5:85:29:09: 95:67:e4:f2:40:53:7a:6f:9d:e7:00:4c:48:1c:73:7e:8d:81: 3e:76:ba:ff:34:c7:80:4f:50:49:84:73:4a:1a:8c:f4:51:4e: b1:57:80:57 -----BEGIN CERTIFICATE----- MIIFszCCBJugAwIBAgIUL3MXCtwqmHid0UprYyG0h7fWxYowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDYwMzA4MTc1MloX DTI3MDYwMjA4MjI1MlowMzExMC8GA1UEAxMoMzc4OTM0OUZCQUI3QjlDNzRCMjky RURGNTg0OUJBMzY4MzQ0QjM0ODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMTUBpUVZ7cPNVnuOGhF+XxQsj22r1t9syFxCdO2sd8BK3YdPLrlP7oV1YQD 9GYbf6XOtfBZ1ISSTKl+6szGqcrYTpM9BiYMT0YQvYH8TYZTH/+41YB5Si84yJ+m z+hq0/+Hv2B6cqoXnUynn7nbJS6xOdlXP0yRf7nxsHU7yJjGBtOVEgNHjxRvQlV2 +EBoq5ea2vy7C2Y6ch7YdDOrdH5+5uDIXG5ARyG6jdutb79/X27phekyL3CGBMZr a8VOEhxt6h+zFYP6v3KRp5TsQ/TCs1tU/Ym4wM3NDqTyz8cVMN4H2jrKHP+xbbwr fK2XvSWonY9+oI653OhnILs0ck0CAwEAAaOCAqYwggKiMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFDeJNJ+6t7nHSyku31hJujaDRLNIMB8GA1UdIwQYMBaAFKVu hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTExNDQ2OTIzMjIxNDU0MDMxMS8wLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMTE0NDY5MjMyMjE0NTQwMzEx LzAvMzc4OTM0OUZCQUI3QjlDNzRCMjkyRURGNTg0OUJBMzY4MzQ0QjM0OC5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwKwYIKwYBBQUH AQcBAf8EHDAaMBgEAgABMBIDBAIr9/gDBAJn5tQDBAR0wRAwDQYJKoZIhvcNAQEL BQADggEBAGE7UyKSjDq5oNd2MsSx/UUneHrJcV0ApAbfFKXfWS66cuUUpLDaCxd+ 1JPhNYbqQmka0wvnPD/3i8NbYbra/HaqRwG3DbpbBw5rfK7sNxmo9OrT+H3+tZp9 BbqkiMvoNVLHGUjX0bWzy/5LgzNb6qB0z0VubWIr0znynljB35a67qIJkJ5XpWCp zFaeqA2FgiLlzKWY55iA3JzY0b3FZTAbTv+GOvCC9id3zGhR9Z7ZWvxdkzZY6Z25 QsUPL0THjPq+GXsEdgmfvf1/59uBuYSA9ZMW9YUpCZVn5PJAU3pvnecATEgcc36N gT52uv80x4BPUEmEc0oajPRRTrFXgFc= -----END CERTIFICATE-----Generated at Fri Jun 12 03:33:39 2026 by rpki-client