$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3E5989F72DCA1979D1DD9663C575ED15BFA198D5.cer File: 3E5989F72DCA1979D1DD9663C575ED15BFA198D5.cer (raw, json) Hash identifier: snE0I/kYfqArTAGmHpOXjOZlS4zwgMWGH95gwRuSxHY= Subject key identifier: 3E:59:89:F7:2D:CA:19:79:D1:DD:96:63:C5:75:ED:15:BF:A1:98:D5 Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Certificate serial: 2078BDD73AD0735910A34D9DE4F8AF184D6F653C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1107564169642639379/0/3E5989F72DCA1979D1DD9663C575ED15BFA198D5.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1107564169642639379/0/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Fri 15 May 2026 06:59:36 +0000 Certificate not after: Fri 14 May 2027 07:04:36 +0000 Subordinate resources: AS: 37936 IP: 36.51.0.0/16 IP: 2400:89c0::/32 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 15:28:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:78:bd:d7:3a:d0:73:59:10:a3:4d:9d:e4:f8:af:18:4d:6f:65:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Validity Not Before: May 15 06:59:36 2026 GMT Not After : May 14 07:04:36 2027 GMT Subject: CN=3E5989F72DCA1979D1DD9663C575ED15BFA198D5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:05:de:41:5d:77:5c:47:d6:a5:f8:b6:f6:8f: af:33:7c:6d:ff:a6:6d:8b:c0:e3:5b:aa:61:01:44: f1:ac:21:bb:02:e4:c1:b9:5d:9b:23:11:98:fa:c4: 20:cd:8d:90:2e:4b:86:63:71:4d:dc:be:fe:7f:bf: 1f:ee:ca:02:81:d5:a9:da:f5:62:94:e3:97:71:d9: 74:77:7e:48:45:2a:5b:64:8e:55:ba:88:c6:ff:4c: db:16:3d:14:01:d9:65:ba:b7:03:9c:0c:2e:3e:21: 8f:db:bf:6c:1a:be:de:e1:60:f9:ec:a8:ae:f9:68: 29:fc:2c:3d:f8:58:4c:41:c6:ff:18:3b:49:f3:06: df:12:87:63:12:c6:ed:1c:4b:e6:72:4c:7a:ec:bb: 4b:2e:b7:a3:81:a5:8d:7b:2c:bb:70:ee:a2:d2:ba: b7:92:b6:69:c1:6f:90:0f:1f:4e:7d:86:38:fc:3e: e9:14:9a:a9:9e:89:d9:67:8d:9e:67:75:06:1d:a5: 9b:73:17:95:9f:2d:5e:25:a1:72:0d:75:81:18:c2: 39:30:15:e7:54:f3:62:ab:12:e4:ca:64:9a:e9:de: d3:cb:48:80:e1:30:ea:54:ed:96:69:19:25:28:63: c3:5c:46:64:47:a7:7d:e6:72:65:6a:dc:6c:45:9f: 4f:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 3E:59:89:F7:2D:CA:19:79:D1:DD:96:63:C5:75:ED:15:BF:A1:98:D5 X509v3 Authority Key Identifier: keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1107564169642639379/0/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1107564169642639379/0/3E5989F72DCA1979D1DD9663C575ED15BFA198D5.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 36.51.0.0/16 IPv6: 2400:89c0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 37936 Signature Algorithm: sha256WithRSAEncryption 7c:a9:8d:f9:44:7c:28:62:f5:1c:be:93:b0:d9:08:17:83:fe: ba:da:be:d6:94:2b:07:0d:be:d2:22:c7:24:c1:2d:53:44:a6: a0:17:db:d8:18:69:7a:ba:5d:6b:af:e8:9c:95:41:58:9f:3e: 61:fb:5d:c6:c8:31:82:70:58:dd:05:09:d5:94:1a:04:86:90: 59:50:28:54:34:fd:3c:07:78:fc:02:79:31:50:5b:2c:9a:fc: 55:23:da:ab:e4:6a:de:93:09:af:c0:df:04:0c:36:99:ce:2b: 33:32:df:aa:44:1e:1d:63:b5:d5:11:26:f3:e6:58:81:72:5a: 63:64:c1:b6:fe:2b:22:c6:c5:83:f2:1e:8e:93:9f:74:22:b6: cb:3b:22:47:01:46:17:44:cb:35:4d:c6:89:04:d6:96:74:d0: 7f:01:d7:81:a7:57:3f:51:48:09:20:e5:b2:ad:4f:be:5f:36: 6f:a4:f7:45:61:df:15:9e:28:6f:29:28:cc:3b:65:fa:a8:57: c0:4b:7e:70:91:55:67:a5:23:da:f2:1c:1a:b2:db:de:38:78: 41:0a:c3:8d:62:8c:48:9e:b1:f2:22:ba:fa:71:8e:b8:ea:8f: 49:e2:1e:44:d5:aa:0b:d7:07:1b:ab:96:eb:9d:e2:1b:30:91: 4b:42:bc:29 -----BEGIN CERTIFICATE----- MIIF0TCCBLmgAwIBAgIUIHi91zrQc1kQo02d5PivGE1vZTwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDUxNTA2NTkzNloX DTI3MDUxNDA3MDQzNlowMzExMC8GA1UEAxMoM0U1OTg5RjcyRENBMTk3OUQxREQ5 NjYzQzU3NUVEMTVCRkExOThENTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMEF3kFdd1xH1qX4tvaPrzN8bf+mbYvA41uqYQFE8awhuwLkwbldmyMRmPrE IM2NkC5LhmNxTdy+/n+/H+7KAoHVqdr1YpTjl3HZdHd+SEUqW2SOVbqIxv9M2xY9 FAHZZbq3A5wMLj4hj9u/bBq+3uFg+eyorvloKfwsPfhYTEHG/xg7SfMG3xKHYxLG 7RxL5nJMeuy7Sy63o4GljXssu3DuotK6t5K2acFvkA8fTn2GOPw+6RSaqZ6J2WeN nmd1Bh2lm3MXlZ8tXiWhcg11gRjCOTAV51TzYqsS5Mpkmune08tIgOEw6lTtlmkZ JShjw1xGZEenfeZyZWrcbEWfT+cCAwEAAaOCAsQwggLAMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFD5Zifctyhl50d2WY8V17RW/oZjVMB8GA1UdIwQYMBaAFKVu hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTEwNzU2NDE2OTY0MjYzOTM3OS8wLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMTA3NTY0MTY5NjQyNjM5Mzc5 LzAvM0U1OTg5RjcyRENBMTk3OUQxREQ5NjYzQzU3NUVEMTVCRkExOThENS5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwLQYIKwYBBQUH AQcBAf8EHjAcMAsEAgABMAUDAwAkMzANBAIAAjAHAwUAJACJwDAaBggrBgEFBQcB CAEB/wQLMAmgBzAFAgMAlDAwDQYJKoZIhvcNAQELBQADggEBAHypjflEfChi9Ry+ k7DZCBeD/rravtaUKwcNvtIixyTBLVNEpqAX29gYaXq6XWuv6JyVQVifPmH7XcbI MYJwWN0FCdWUGgSGkFlQKFQ0/TwHePwCeTFQWyya/FUj2qvkat6TCa/A3wQMNpnO KzMy36pEHh1jtdURJvPmWIFyWmNkwbb+KyLGxYPyHo6Tn3Qitss7IkcBRhdEyzVN xokE1pZ00H8B14GnVz9RSAkg5bKtT75fNm+k90Vh3xWeKG8pKMw7ZfqoV8BLfnCR VWelI9ryHBqy2944eEEKw41ijEiesfIiuvpxjrjqj0niHkTVqgvXBxurluud4hsw kUtCvCk= -----END CERTIFICATE-----Generated at Fri May 29 21:11:58 2026 by rpki-client