$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/334B93F76F5BCAAA2030E5BDD8CEF220A61CE061.cer File: 334B93F76F5BCAAA2030E5BDD8CEF220A61CE061.cer (raw, json) Hash identifier: ZnTP9/F9LaO9DDDyqshP6rVRLRYvbhyTmKs6TiHcol0= Subject key identifier: 33:4B:93:F7:6F:5B:CA:AA:20:30:E5:BD:D8:CE:F2:20:A6:1C:E0:61 Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Certificate serial: 73E77401711F878C860B9AA30973197372BB565A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1101394207139954693/0/334B93F76F5BCAAA2030E5BDD8CEF220A61CE061.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1101394207139954693/0/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Tue 28 Apr 2026 06:22:23 +0000 Certificate not after: Tue 27 Apr 2027 06:27:23 +0000 Subordinate resources: AS: 45064 IP: 43.254.200.0/22 IP: 103.10.84.0/22 IP: 103.238.204.0/22 IP: 202.85.208.0/20 IP: 223.223.176.0/21 IP: 2400:be00::/32 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 11:49:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:e7:74:01:71:1f:87:8c:86:0b:9a:a3:09:73:19:73:72:bb:56:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Validity Not Before: Apr 28 06:22:23 2026 GMT Not After : Apr 27 06:27:23 2027 GMT Subject: CN=334B93F76F5BCAAA2030E5BDD8CEF220A61CE061 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:0e:79:fb:1c:4c:bb:01:82:11:d1:fb:e8:05: d1:40:62:8d:97:2b:be:05:8b:4c:00:03:ed:2b:e6: ce:0e:e8:91:35:51:23:5f:a5:9e:9f:d4:c5:13:ff: 4b:d2:f1:f5:36:65:ff:93:d2:3f:42:ab:00:4f:84: e5:0c:ef:89:81:b2:3e:11:7f:a7:b5:5b:53:1e:9e: 1c:d0:ee:39:53:38:19:2c:c4:c0:ee:cb:19:b4:9d: b0:f1:6c:f3:63:2f:e4:bf:7f:36:eb:7d:99:36:ae: 8f:5e:18:80:b4:bd:02:79:98:14:76:56:fa:73:b9: 9e:e4:8d:d8:8c:53:22:66:db:08:12:6d:31:da:c4: 44:93:c3:5c:80:b0:a7:10:9b:db:6f:81:d8:39:c3: 06:db:39:53:c7:72:eb:a6:a0:c0:f0:7d:2a:d3:67: 7d:0a:48:1c:da:35:9c:66:fa:82:ef:45:63:6c:9e: d8:28:0d:5d:7a:e8:e0:3f:1a:5c:d3:00:fa:54:0a: 17:37:b8:1c:ab:14:34:a3:b8:f3:6f:20:aa:b1:12: bd:fc:aa:8c:d9:9a:e5:4b:1a:84:81:ee:bc:19:43: 55:b8:c3:ae:ae:8e:48:1a:8b:b3:06:06:10:9e:0c: 87:03:47:c0:cd:72:25:82:5c:ef:fe:5a:87:a2:73: 11:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 33:4B:93:F7:6F:5B:CA:AA:20:30:E5:BD:D8:CE:F2:20:A6:1C:E0:61 X509v3 Authority Key Identifier: keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1101394207139954693/0/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1101394207139954693/0/334B93F76F5BCAAA2030E5BDD8CEF220A61CE061.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.254.200.0/22 103.10.84.0/22 103.238.204.0/22 202.85.208.0/20 223.223.176.0/21 IPv6: 2400:be00::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 45064 Signature Algorithm: sha256WithRSAEncryption 49:e1:76:69:7d:30:58:c4:9e:91:69:5c:08:01:20:d3:ac:ea: b4:cc:de:b0:19:41:e3:b7:4e:f1:56:9f:41:db:b7:4e:57:02: ee:a4:63:12:47:37:35:56:a1:e0:8a:3e:b6:d4:6a:42:cf:19: 62:e0:bb:76:df:7a:a8:23:81:b6:24:5b:5b:e8:3d:a4:66:f2: 03:11:95:44:4a:87:41:1c:cb:f7:b6:2f:fb:e3:07:08:1c:d4: a9:aa:a9:33:f7:36:2a:a3:bb:25:06:d4:bf:64:02:e1:60:74: 4f:d8:18:4c:40:b0:89:a3:7b:8f:ec:51:19:86:93:18:ff:1a: d8:b4:f0:17:db:a6:41:2b:b1:2c:76:24:c6:93:75:71:b5:7d: f6:18:56:1e:7a:44:2c:68:bd:c1:2b:68:f8:1c:22:06:9f:6a: af:f9:25:30:d9:d4:50:5e:ed:fa:c4:0d:29:47:5e:e2:92:ad: fe:95:51:4c:cf:1f:97:4c:5d:94:ce:20:cb:97:19:57:d1:1f: 73:5e:1c:a3:6b:e3:a3:81:41:d1:87:78:d6:78:73:2a:21:dc: fe:68:eb:66:42:bb:56:5f:f9:57:a8:aa:60:92:23:7f:a7:be: df:8f:d5:e6:85:b0:4a:b2:e8:0b:3e:62:fe:8b:63:85:fc:30: b9:26:91:0f -----BEGIN CERTIFICATE----- MIIF6jCCBNKgAwIBAgIUc+d0AXEfh4yGC5qjCXMZc3K7VlowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDQyODA2MjIyM1oX DTI3MDQyNzA2MjcyM1owMzExMC8GA1UEAxMoMzM0QjkzRjc2RjVCQ0FBQTIwMzBF NUJERDhDRUYyMjBBNjFDRTA2MTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKoOefscTLsBghHR++gF0UBijZcrvgWLTAAD7Svmzg7okTVRI1+lnp/UxRP/ S9Lx9TZl/5PSP0KrAE+E5QzviYGyPhF/p7VbUx6eHNDuOVM4GSzEwO7LGbSdsPFs 82Mv5L9/Nut9mTauj14YgLS9AnmYFHZW+nO5nuSN2IxTImbbCBJtMdrERJPDXICw pxCb22+B2DnDBts5U8dy66agwPB9KtNnfQpIHNo1nGb6gu9FY2ye2CgNXXro4D8a XNMA+lQKFze4HKsUNKO4828gqrESvfyqjNma5UsahIHuvBlDVbjDrq6OSBqLswYG EJ4MhwNHwM1yJYJc7/5ah6JzEQMCAwEAAaOCAt0wggLZMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFDNLk/dvW8qqIDDlvdjO8iCmHOBhMB8GA1UdIwQYMBaAFKVu hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTEwMTM5NDIwNzEzOTk1NDY5My8wLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMTAxMzk0MjA3MTM5OTU0Njkz LzAvMzM0QjkzRjc2RjVCQ0FBQTIwMzBFNUJERDhDRUYyMjBBNjFDRTA2MS5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwRgYIKwYBBQUH AQcBAf8ENzA1MCQEAgABMB4DBAIr/sgDBAJnClQDBAJn7swDBATKVdADBAPf37Aw DQQCAAIwBwMFACQAvgAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDALAIMA0GCSqG SIb3DQEBCwUAA4IBAQBJ4XZpfTBYxJ6RaVwIASDTrOq0zN6wGUHjt07xVp9B27dO VwLupGMSRzc1VqHgij621GpCzxli4Lt233qoI4G2JFtb6D2kZvIDEZVESodBHMv3 ti/74wcIHNSpqqkz9zYqo7slBtS/ZALhYHRP2BhMQLCJo3uP7FEZhpMY/xrYtPAX 26ZBK7EsdiTGk3VxtX32GFYeekQsaL3BK2j4HCIGn2qv+SUw2dRQXu36xA0pR17i kq3+lVFMzx+XTF2UziDLlxlX0R9zXhyja+OjgUHRh3jWeHMqIdz+aOtmQrtWX/lX qKpgkiN/p77fj9XmhbBKsugLPmL+i2OF/DC5JpEP -----END CERTIFICATE-----Generated at Wed May 13 14:13:42 2026 by rpki-client