$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/363FDE3F30761CEFB41D458915BBBC8D91B434CF.cer File: 363FDE3F30761CEFB41D458915BBBC8D91B434CF.cer (raw, json) Hash identifier: iRhz/o3Os74vtc5Oys3egLb3HCL4kzxownNe5bDM77k= Subject key identifier: 36:3F:DE:3F:30:76:1C:EF:B4:1D:45:89:15:BB:BC:8D:91:B4:34:CF Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Certificate serial: 712C105C2CCFC640EC346E3B78C3BE7B8BEE693C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1100942521481035778/0/363FDE3F30761CEFB41D458915BBBC8D91B434CF.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1100942521481035778/0/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Mon 27 Apr 2026 00:27:34 +0000 Certificate not after: Mon 26 Apr 2027 00:32:34 +0000 Subordinate resources: IP: 110.173.96.0/19 IP: 202.173.224.0/19 IP: 211.148.128.0/19 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 11:49:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:2c:10:5c:2c:cf:c6:40:ec:34:6e:3b:78:c3:be:7b:8b:ee:69:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Validity Not Before: Apr 27 00:27:34 2026 GMT Not After : Apr 26 00:32:34 2027 GMT Subject: CN=363FDE3F30761CEFB41D458915BBBC8D91B434CF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:84:c2:8a:0b:da:5e:f7:8d:b5:41:93:2e:dd: fd:ad:3a:e0:6f:cd:5e:ea:28:fe:ce:7a:06:9e:0f: 49:1d:35:3b:e8:79:fc:a3:d2:25:1d:5a:a9:37:ad: 21:80:df:12:56:a6:e2:39:33:76:ee:d8:45:ad:b9: 82:a2:54:8c:29:b0:ac:1d:df:77:e8:74:01:c9:fd: 3b:98:84:ce:d3:fb:ae:92:72:b2:6d:77:1f:bc:b0: 89:2e:3f:80:10:58:ee:5c:e4:43:66:ad:50:83:89: a5:48:e3:c6:39:32:78:53:25:c9:10:7e:46:f7:97: 55:b3:87:6b:82:6a:b7:d9:23:48:57:54:3e:a9:90: e5:8a:4a:d2:09:32:ba:a1:89:10:78:36:09:f9:61: 84:25:61:66:51:46:09:c4:15:57:ca:ea:d7:55:5e: 18:d9:2d:b8:fe:ed:3a:48:48:77:66:f9:ee:d0:ca: ff:59:19:73:a4:67:e1:f5:44:2e:e5:a7:b9:6a:e3: 48:4a:cd:68:41:b7:6c:5a:91:5f:c1:f4:e3:7e:86: ef:12:55:d7:33:55:64:59:78:36:65:c8:35:e9:73: cb:02:95:bb:db:7a:25:f5:c3:ed:51:16:c5:7c:c3: 9b:37:06:04:f2:f1:cc:dc:6c:f9:41:86:44:81:34: 5a:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 36:3F:DE:3F:30:76:1C:EF:B4:1D:45:89:15:BB:BC:8D:91:B4:34:CF X509v3 Authority Key Identifier: keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1100942521481035778/0/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1100942521481035778/0/363FDE3F30761CEFB41D458915BBBC8D91B434CF.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 110.173.96.0/19 202.173.224.0/19 211.148.128.0/19 Signature Algorithm: sha256WithRSAEncryption 18:0a:3b:d9:28:51:53:6f:f2:fb:59:9b:e8:01:e1:0c:87:e6: c7:3e:ee:01:d2:9a:55:94:4f:6c:47:fb:f8:a2:52:d2:4e:35: ab:84:fc:ad:f6:14:5b:61:94:5b:00:b3:34:38:5d:49:43:67: b7:51:67:3c:94:47:9a:0d:29:68:e8:41:c7:eb:76:50:4b:1e: e3:05:e6:35:15:f4:a4:a9:be:c5:a8:2a:6f:fc:a0:2a:09:c5: b6:10:13:63:7b:4b:5b:d9:5f:ac:09:ea:46:19:2b:97:52:3a: a6:dd:c2:ee:2b:ac:0b:41:3a:e3:84:11:02:4c:b0:ce:1e:fd: c8:7a:e1:8d:cd:c8:8b:fb:61:59:1f:75:3e:7b:71:5e:66:c2: 20:85:19:a4:49:40:0a:48:03:7e:b4:2b:3c:65:ed:97:55:9a: 37:93:61:22:32:07:a5:6b:61:a4:b8:cd:93:fe:51:91:ff:3e: a4:c7:1e:fa:fb:3a:9c:f3:57:bf:b1:15:0f:94:d8:c1:40:a6: 68:fa:bc:18:d5:6d:c1:11:d6:21:fe:a8:6e:b2:80:fb:ae:3b: a7:da:69:9b:26:8c:92:e6:dd:90:44:7f:45:ae:c7:64:c9:dc: 5e:43:a4:84:a2:b5:62:88:a3:73:18:4f:50:dc:3d:69:28:a5: f1:1e:a7:c8 -----BEGIN CERTIFICATE----- MIIFszCCBJugAwIBAgIUcSwQXCzPxkDsNG47eMO+e4vuaTwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDQyNzAwMjczNFoX DTI3MDQyNjAwMzIzNFowMzExMC8GA1UEAxMoMzYzRkRFM0YzMDc2MUNFRkI0MUQ0 NTg5MTVCQkJDOEQ5MUI0MzRDRjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMqEwooL2l73jbVBky7d/a064G/NXuoo/s56Bp4PSR01O+h5/KPSJR1aqTet IYDfElam4jkzdu7YRa25gqJUjCmwrB3fd+h0Acn9O5iEztP7rpJysm13H7ywiS4/ gBBY7lzkQ2atUIOJpUjjxjkyeFMlyRB+RveXVbOHa4Jqt9kjSFdUPqmQ5YpK0gky uqGJEHg2CflhhCVhZlFGCcQVV8rq11VeGNktuP7tOkhId2b57tDK/1kZc6Rn4fVE LuWnuWrjSErNaEG3bFqRX8H0436G7xJV1zNVZFl4NmXINelzywKVu9t6JfXD7VEW xXzDmzcGBPLxzNxs+UGGRIE0Wn8CAwEAAaOCAqYwggKiMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFDY/3j8wdhzvtB1FiRW7vI2RtDTPMB8GA1UdIwQYMBaAFKVu hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTEwMDk0MjUyMTQ4MTAzNTc3OC8wLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMTAwOTQyNTIxNDgxMDM1Nzc4 LzAvMzYzRkRFM0YzMDc2MUNFRkI0MUQ0NTg5MTVCQkJDOEQ5MUI0MzRDRi5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwKwYIKwYBBQUH AQcBAf8EHDAaMBgEAgABMBIDBAVurWADBAXKreADBAXTlIAwDQYJKoZIhvcNAQEL BQADggEBABgKO9koUVNv8vtZm+gB4QyH5sc+7gHSmlWUT2xH+/iiUtJONauE/K32 FFthlFsAszQ4XUlDZ7dRZzyUR5oNKWjoQcfrdlBLHuMF5jUV9KSpvsWoKm/8oCoJ xbYQE2N7S1vZX6wJ6kYZK5dSOqbdwu4rrAtBOuOEEQJMsM4e/ch64Y3NyIv7YVkf dT57cV5mwiCFGaRJQApIA360Kzxl7ZdVmjeTYSIyB6VrYaS4zZP+UZH/PqTHHvr7 OpzzV7+xFQ+U2MFApmj6vBjVbcER1iH+qG6ygPuuO6faaZsmjJLm3ZBEf0Wux2TJ 3F5DpISitWKIo3MYT1DcPWkopfEep8g= -----END CERTIFICATE-----Generated at Wed May 13 15:57:44 2026 by rpki-client