$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3EEEE97335393C19F4043C9CE5E7352198F585B8.cer File: 3EEEE97335393C19F4043C9CE5E7352198F585B8.cer (raw, json) Hash identifier: i5aa3eewFaRtMlr5vfAaGW43H7SNqNhIGOoM5DEXH0c= Subject key identifier: 3E:EE:E9:73:35:39:3C:19:F4:04:3C:9C:E5:E7:35:21:98:F5:85:B8 Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Certificate serial: 62F4C14097DD19C0232D01A5CE96C70DE05DB93D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1122406123115118627/0/3EEEE97335393C19F4043C9CE5E7352198F585B8.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1122406123115118627/0/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Thu 25 Jun 2026 05:56:14 +0000 Certificate not after: Thu 24 Jun 2027 06:01:14 +0000 Subordinate resources: IP: 210.76.32.0/19 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 Jul 2026 20:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:f4:c1:40:97:dd:19:c0:23:2d:01:a5:ce:96:c7:0d:e0:5d:b9:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Validity Not Before: Jun 25 05:56:14 2026 GMT Not After : Jun 24 06:01:14 2027 GMT Subject: CN=3EEEE97335393C19F4043C9CE5E7352198F585B8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:da:ce:8f:d8:ee:6b:87:bc:0f:b1:20:24:49: 76:3f:03:eb:7c:b6:61:e9:47:cd:a3:70:a5:a3:db: dc:33:58:9b:78:96:0b:33:52:6f:2a:5b:55:a9:4d: 68:4a:43:7d:3c:c1:86:ef:aa:7b:9f:8d:28:22:30: 82:ae:41:49:74:7d:ca:12:c1:72:26:38:6d:c8:f4: c2:54:f5:18:7c:a6:eb:9f:ab:33:7f:6a:8f:cb:46: 20:41:8b:9d:da:fe:cd:c6:38:d6:17:09:7e:4d:1a: d1:e4:3b:1d:cb:03:df:30:79:57:90:77:e4:28:09: 36:40:b3:2c:67:55:7e:d2:96:45:53:29:ba:6c:4e: 9f:b7:24:59:ea:0a:6d:21:5e:6b:0e:1c:a4:64:e0: 3e:68:0c:e9:a8:96:14:f3:44:38:d7:8a:53:06:22: 1f:fc:b3:60:03:9f:b3:04:60:ce:92:1a:38:6f:f3: 8c:c8:fb:09:ed:2f:9b:d4:a9:98:70:16:e2:3c:f5: 37:d7:35:e5:d3:2d:34:71:04:85:c9:be:36:7e:cb: d1:86:6e:d1:6b:27:f5:8c:36:3e:17:92:af:b5:a5: 7c:93:b8:19:eb:ac:3f:e4:47:fa:c3:51:da:dd:94: 2a:e3:2a:11:b1:ac:0a:03:95:12:87:e5:79:2b:07: 4b:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 3E:EE:E9:73:35:39:3C:19:F4:04:3C:9C:E5:E7:35:21:98:F5:85:B8 X509v3 Authority Key Identifier: keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1122406123115118627/0/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1122406123115118627/0/3EEEE97335393C19F4043C9CE5E7352198F585B8.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 210.76.32.0/19 Signature Algorithm: sha256WithRSAEncryption 4e:2f:e9:e5:dc:2b:c1:5a:2e:82:69:2d:b8:1a:9e:84:fe:83: 05:82:be:7d:dc:6c:85:4b:d2:31:2c:29:0c:07:20:a9:6b:ef: ed:c5:fd:8d:45:f2:aa:ea:d8:ad:09:e6:97:c8:b4:52:f7:12: 2d:4e:80:20:cf:d6:b1:8e:34:17:ce:b6:f7:38:bf:6d:51:8b: 6a:a6:f6:42:5b:ee:3a:3e:db:f9:a2:50:32:70:4d:24:ef:d4: d1:da:f0:bf:7a:2c:9f:91:86:4e:5f:92:42:c3:0a:86:30:3f: be:42:bf:e1:3e:9c:4d:1b:13:48:56:76:c3:4b:a8:a2:d8:b0: 49:39:12:ef:98:f6:f5:79:c2:fa:1f:51:f9:97:1d:04:38:2d: 15:27:3f:d3:98:81:5c:9e:1f:cc:69:66:af:ef:d5:5a:b3:a9: 70:ee:94:53:30:72:be:f4:52:0f:02:15:d9:0a:a0:ce:a8:52: d2:7c:69:63:a5:1c:38:e9:bc:8d:2a:c2:f9:90:01:b5:a0:05: c1:cb:00:93:47:1d:f7:61:88:cd:56:b2:bc:ec:98:5b:7a:86: 22:ed:d1:81:2a:bd:bd:87:a6:40:71:83:a2:89:ca:79:96:1f: 9a:42:03:d1:7f:c8:aa:ab:42:51:63:88:9f:90:e8:53:cf:66: 18:3d:89:6a -----BEGIN CERTIFICATE----- MIIFpzCCBI+gAwIBAgIUYvTBQJfdGcAjLQGlzpbHDeBduT0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDYyNTA1NTYxNFoX DTI3MDYyNDA2MDExNFowMzExMC8GA1UEAxMoM0VFRUU5NzMzNTM5M0MxOUY0MDQz QzlDRTVFNzM1MjE5OEY1ODVCODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAM7azo/Y7muHvA+xICRJdj8D63y2YelHzaNwpaPb3DNYm3iWCzNSbypbValN aEpDfTzBhu+qe5+NKCIwgq5BSXR9yhLBciY4bcj0wlT1GHym65+rM39qj8tGIEGL ndr+zcY41hcJfk0a0eQ7HcsD3zB5V5B35CgJNkCzLGdVftKWRVMpumxOn7ckWeoK bSFeaw4cpGTgPmgM6aiWFPNEONeKUwYiH/yzYAOfswRgzpIaOG/zjMj7Ce0vm9Sp mHAW4jz1N9c15dMtNHEEhcm+Nn7L0YZu0Wsn9Yw2PheSr7WlfJO4GeusP+RH+sNR 2t2UKuMqEbGsCgOVEofleSsHS+ECAwEAAaOCApowggKWMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFD7u6XM1OTwZ9AQ8nOXnNSGY9YW4MB8GA1UdIwQYMBaAFKVu hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTEyMjQwNjEyMzExNTExODYyNy8wLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMTIyNDA2MTIzMTE1MTE4NjI3 LzAvM0VFRUU5NzMzNTM5M0MxOUY0MDQzQzlDRTVFNzM1MjE5OEY1ODVCOC5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAXSTCAwDQYJKoZIhvcNAQELBQADggEBAE4v6eXc K8FaLoJpLbganoT+gwWCvn3cbIVL0jEsKQwHIKlr7+3F/Y1F8qrq2K0J5pfItFL3 Ei1OgCDP1rGONBfOtvc4v21Ri2qm9kJb7jo+2/miUDJwTSTv1NHa8L96LJ+Rhk5f kkLDCoYwP75Cv+E+nE0bE0hWdsNLqKLYsEk5Eu+Y9vV5wvofUfmXHQQ4LRUnP9OY gVyeH8xpZq/v1VqzqXDulFMwcr70Ug8CFdkKoM6oUtJ8aWOlHDjpvI0qwvmQAbWg BcHLAJNHHfdhiM1WsrzsmFt6hiLt0YEqvb2HpkBxg6KJynmWH5pCA9F/yKqrQlFj iJ+Q6FPPZhg9iWo= -----END CERTIFICATE-----Generated at Tue Jul 14 19:08:50 2026 by rpki-client