$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CCA3BB73899F78334CA03D6DA4D8FD3F94D69BB9.cer File: CCA3BB73899F78334CA03D6DA4D8FD3F94D69BB9.cer (raw, json) Hash identifier: gVkTJOyIAbPZd1T2Od9Gqb6CM10phKdX6nm3XZZyE6s= Subject key identifier: CC:A3:BB:73:89:9F:78:33:4C:A0:3D:6D:A4:D8:FD:3F:94:D6:9B:B9 Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Certificate serial: 2504F237D793A8CF4CE65AB2743A9307CC80C2C1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1088385455558230017/0/CCA3BB73899F78334CA03D6DA4D8FD3F94D69BB9.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1088385455558230017/0/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Mon 15 Jun 2026 02:30:24 +0000 Certificate not after: Mon 14 Jun 2027 02:35:24 +0000 Subordinate resources: AS: 149057 IP: 45.114.136.0/22 IP: 103.25.148.0/22 IP: 103.177.162.0/23 IP: 163.53.52.0/22 IP: 2001:df0:25c0::/48 IP: 2400:da60::/32 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 Jul 2026 20:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:04:f2:37:d7:93:a8:cf:4c:e6:5a:b2:74:3a:93:07:cc:80:c2:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Validity Not Before: Jun 15 02:30:24 2026 GMT Not After : Jun 14 02:35:24 2027 GMT Subject: CN=CCA3BB73899F78334CA03D6DA4D8FD3F94D69BB9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:78:e3:14:99:db:4f:65:c9:5e:3a:e5:30:c0: 0b:f4:ba:08:90:fc:7a:a0:0d:8a:df:3c:de:0c:ef: 93:8f:81:90:a7:44:96:d4:69:a9:b7:4e:81:53:1d: 6e:ce:72:d4:11:77:4f:4c:7a:bd:bc:d9:8e:e9:c2: c4:72:cc:a4:8f:1d:04:cb:c8:ca:45:f3:aa:fa:10: f6:87:ce:8c:64:76:61:b7:5b:74:e8:9c:70:c1:94: c2:a0:ea:3a:e4:b2:c0:71:4a:e8:19:a2:92:b4:f6: a6:35:46:6c:d5:59:e9:65:0d:cb:df:0d:08:7b:24: a3:27:3c:b4:59:3d:af:2e:f7:07:dc:d7:c3:96:2b: c4:a0:68:29:dc:a0:32:63:16:a0:8b:a6:5f:3f:ac: 63:7c:a3:d5:1e:f9:a6:30:b0:2d:19:51:be:16:dc: 54:83:20:59:7d:f5:54:7b:f1:73:57:0b:d0:df:fd: 89:71:50:32:47:3e:28:ec:32:fa:65:6a:5c:35:e8: ab:2d:b5:79:42:f3:ae:18:bc:0c:f1:cc:9d:64:51: a6:53:a2:fd:44:18:c3:18:93:61:ef:da:f6:02:8a: cf:84:8a:d2:62:bb:d6:ca:08:c9:61:de:2f:b4:e4: c1:de:ec:5b:e4:a1:e9:86:7b:bf:e1:d2:c4:ef:c8: 03:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: CC:A3:BB:73:89:9F:78:33:4C:A0:3D:6D:A4:D8:FD:3F:94:D6:9B:B9 X509v3 Authority Key Identifier: keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1088385455558230017/0/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1088385455558230017/0/CCA3BB73899F78334CA03D6DA4D8FD3F94D69BB9.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.114.136.0/22 103.25.148.0/22 103.177.162.0/23 163.53.52.0/22 IPv6: 2001:df0:25c0::/48 2400:da60::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 149057 Signature Algorithm: sha256WithRSAEncryption 58:5e:20:b5:29:95:6d:7c:4c:a7:a0:68:44:37:64:fa:39:c2: 8d:47:d7:d6:bc:90:18:2e:2f:11:2a:52:3e:5f:a9:84:a3:3d: c6:d0:1b:7c:19:c3:36:c1:f9:c7:b1:3f:d1:44:f5:73:c5:20: 2b:75:c9:88:6e:1d:40:01:87:db:ee:5c:4d:31:a6:a8:33:ef: 80:78:0c:13:c8:b2:d4:8e:2f:ec:a3:f2:e2:8f:a5:af:20:71: 34:97:4a:7f:9f:bf:fd:bc:6c:c7:6e:5f:10:2a:8f:39:82:81: e9:6f:2e:d3:9e:3e:df:1c:a2:86:32:8b:c6:91:81:3b:65:a8: 76:15:a7:8c:74:12:a8:fe:69:89:2c:23:3b:ba:43:fc:bc:3e: cc:21:70:6e:1e:21:5c:43:ef:7e:b4:a0:71:3d:8a:d1:e0:0f: 9d:f9:48:af:d3:54:09:82:8e:c3:69:f2:3c:77:cb:24:53:b3: c2:92:59:9e:02:0a:df:67:24:50:d3:7b:2f:83:59:78:4a:4f: 9b:55:c2:a5:36:34:e4:6e:fe:0e:cf:ae:c6:42:f0:8d:80:79: 5c:2e:13:f8:45:58:0b:52:34:ce:99:ea:09:2b:2d:2d:23:46: a2:09:70:c6:77:ce:07:5d:6d:36:8c:9e:79:13:de:97:09:db: ba:4e:af:30 -----BEGIN CERTIFICATE----- MIIF7TCCBNWgAwIBAgIUJQTyN9eTqM9M5lqydDqTB8yAwsEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDYxNTAyMzAyNFoX DTI3MDYxNDAyMzUyNFowMzExMC8GA1UEAxMoQ0NBM0JCNzM4OTlGNzgzMzRDQTAz RDZEQTREOEZEM0Y5NEQ2OUJCOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJ144xSZ209lyV465TDAC/S6CJD8eqANit883gzvk4+BkKdEltRpqbdOgVMd bs5y1BF3T0x6vbzZjunCxHLMpI8dBMvIykXzqvoQ9ofOjGR2YbdbdOiccMGUwqDq OuSywHFK6BmikrT2pjVGbNVZ6WUNy98NCHskoyc8tFk9ry73B9zXw5YrxKBoKdyg MmMWoIumXz+sY3yj1R75pjCwLRlRvhbcVIMgWX31VHvxc1cL0N/9iXFQMkc+KOwy +mVqXDXoqy21eULzrhi8DPHMnWRRplOi/UQYwxiTYe/a9gKKz4SK0mK71soIyWHe L7Tkwd7sW+Sh6YZ7v+HSxO/IA1sCAwEAAaOCAuAwggLcMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFMyju3OJn3gzTKA9baTY/T+U1pu5MB8GA1UdIwQYMBaAFKVu hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTA4ODM4NTQ1NTU1ODIzMDAxNy8wLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDg4Mzg1NDU1NTU4MjMwMDE3 LzAvQ0NBM0JCNzM4OTlGNzgzMzRDQTAzRDZEQTREOEZEM0Y5NEQ2OUJCOS5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwSQYIKwYBBQUH AQcBAf8EOjA4MB4EAgABMBgDBAItcogDBAJnGZQDBAFnsaIDBAKjNTQwFgQCAAIw EAMHACABDfAlwAMFACQA2mAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDAkZBMA0G CSqGSIb3DQEBCwUAA4IBAQBYXiC1KZVtfEynoGhEN2T6OcKNR9fWvJAYLi8RKlI+ X6mEoz3G0Bt8GcM2wfnHsT/RRPVzxSArdcmIbh1AAYfb7lxNMaaoM++AeAwTyLLU ji/so/Lij6WvIHE0l0p/n7/9vGzHbl8QKo85goHpby7Tnj7fHKKGMovGkYE7Zah2 FaeMdBKo/mmJLCM7ukP8vD7MIXBuHiFcQ+9+tKBxPYrR4A+d+Uiv01QJgo7DafI8 d8skU7PCklmeAgrfZyRQ03svg1l4Sk+bVcKlNjTkbv4Oz67GQvCNgHlcLhP4RVgL UjTOmeoJKy0tI0aiCXDGd84HXW02jJ55E96XCdu6Tq8w -----END CERTIFICATE-----Generated at Tue Jul 14 19:10:50 2026 by rpki-client