$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3AB44778399E57EC4D9B2DF6AC8042C6637E0F66.cer File: 3AB44778399E57EC4D9B2DF6AC8042C6637E0F66.cer (raw, json) Hash identifier: ZPejivj0aXKezx8/lIcYXjiRO5qALc/FZpgw9eNlziE= Subject key identifier: 3A:B4:47:78:39:9E:57:EC:4D:9B:2D:F6:AC:80:42:C6:63:7E:0F:66 Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Certificate serial: 7D08793CD6EBB6C7DFF356A4CF27CC49BF4B3818 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1106832787505152019/0/3AB44778399E57EC4D9B2DF6AC8042C6637E0F66.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1106832787505152019/0/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Wed 13 May 2026 06:33:22 +0000 Certificate not after: Wed 12 May 2027 06:38:22 +0000 Subordinate resources: IP: 36.206.0.0/16 IP: 36.212.0.0 -- 36.221.255.255 IP: 110.100.0.0/16 IP: 110.116.0.0/16 IP: 110.199.0.0/16 IP: 110.218.0.0/15 IP: 122.94.0.0/16 IP: 123.77.0.0/16 IP: 222.45.0.0/16 IP: 222.49.128.0/17 IP: 222.59.128.0/17 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 11:49:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:08:79:3c:d6:eb:b6:c7:df:f3:56:a4:cf:27:cc:49:bf:4b:38:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Validity Not Before: May 13 06:33:22 2026 GMT Not After : May 12 06:38:22 2027 GMT Subject: CN=3AB44778399E57EC4D9B2DF6AC8042C6637E0F66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:4e:d9:fa:a4:ed:89:67:24:a4:7f:eb:94:66: 1d:13:c7:6a:b8:29:d5:c7:db:a9:d1:bb:8c:b5:2f: 5d:cb:54:28:7f:6b:f1:fa:31:c6:b6:b1:72:58:5b: 36:f4:b5:e1:55:b3:1f:3e:5d:14:6b:ed:12:03:59: 69:66:01:ef:d6:de:06:f5:c7:36:96:35:bc:59:d5: 6a:3c:98:c4:5c:b5:c4:04:ca:a9:ff:48:8a:65:24: 8f:6a:3c:f1:32:5e:42:99:f5:87:62:66:42:63:b2: 00:b2:31:81:d0:4a:bf:eb:d3:36:1a:35:99:87:bf: 19:3a:84:55:89:b9:64:94:11:14:6a:36:75:53:e4: d1:14:7c:48:a0:d2:da:e9:2d:f5:30:ae:d8:e4:c6: 58:20:09:9c:a4:33:11:a4:8c:c4:e9:b5:5c:fc:ef: 7f:e9:54:b8:53:f0:2b:51:e3:e1:36:ea:51:8a:5f: 98:6a:e4:31:eb:56:60:36:0a:ed:eb:65:57:5a:89: 8e:c5:e7:46:e0:c8:9c:61:7e:cb:6a:a3:27:7c:ee: 8b:c8:c8:62:4f:1a:2b:ae:38:a1:94:74:a1:5c:de: e8:4b:ca:d6:50:32:9e:24:ba:6a:f4:32:ad:fb:e2: f2:2d:6d:23:fe:33:ec:2d:03:ce:80:15:be:0b:de: 06:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 3A:B4:47:78:39:9E:57:EC:4D:9B:2D:F6:AC:80:42:C6:63:7E:0F:66 X509v3 Authority Key Identifier: keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1106832787505152019/0/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1106832787505152019/0/3AB44778399E57EC4D9B2DF6AC8042C6637E0F66.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 36.206.0.0/16 36.212.0.0-36.221.255.255 110.100.0.0/16 110.116.0.0/16 110.199.0.0/16 110.218.0.0/15 122.94.0.0/16 123.77.0.0/16 222.45.0.0/16 222.49.128.0/17 222.59.128.0/17 Signature Algorithm: sha256WithRSAEncryption 10:cc:6b:5d:19:97:5a:f7:e0:f3:c4:87:03:19:6d:ef:b9:ab: db:0e:c5:35:19:ae:a7:ad:d7:9f:35:63:9e:96:33:60:36:60: 6d:3b:41:dc:17:ff:dd:4f:4f:b4:69:b0:6d:66:6d:2a:14:d6: f9:c8:96:6f:a7:2c:eb:bf:4c:25:46:4b:3b:31:e2:d4:0e:7e: 18:76:25:fd:8b:06:05:83:93:5a:be:0e:dc:c4:59:23:24:87: 86:4f:e5:c2:b9:4e:0c:83:a0:58:af:09:93:b8:39:94:8d:5d: 49:3a:94:21:b7:e0:8a:04:c2:cb:0d:97:c2:7b:7a:68:8d:60: 0c:dd:17:03:79:4e:a1:4a:71:ba:08:c1:f4:85:c7:6c:5f:e8: a1:77:d9:b3:db:f9:ab:93:08:b0:6b:0b:87:15:79:08:a0:a2: 52:31:07:4d:c4:4d:0b:73:65:d6:9e:d9:28:34:93:5f:b3:ed: 17:75:55:e5:90:5c:5d:cd:c2:e5:16:97:40:c0:b3:a8:1c:8e: a8:56:f6:bb:5c:ee:74:dd:f8:5c:f4:e3:a2:c1:fd:6b:6d:22: 37:cb:bb:df:03:0f:5a:40:3a:7f:6f:3e:01:e3:d6:21:8e:78: 97:36:54:81:50:de:11:d6:0f:0b:ec:6c:1f:a4:01:60:66:9f: 4e:fe:65:8d -----BEGIN CERTIFICATE----- MIIF4TCCBMmgAwIBAgIUfQh5PNbrtsff81akzyfMSb9LOBgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDUxMzA2MzMyMloX DTI3MDUxMjA2MzgyMlowMzExMC8GA1UEAxMoM0FCNDQ3NzgzOTlFNTdFQzREOUIy REY2QUM4MDQyQzY2MzdFMEY2NjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOxO2fqk7YlnJKR/65RmHRPHargp1cfbqdG7jLUvXctUKH9r8foxxraxclhb NvS14VWzHz5dFGvtEgNZaWYB79beBvXHNpY1vFnVajyYxFy1xATKqf9IimUkj2o8 8TJeQpn1h2JmQmOyALIxgdBKv+vTNho1mYe/GTqEVYm5ZJQRFGo2dVPk0RR8SKDS 2ukt9TCu2OTGWCAJnKQzEaSMxOm1XPzvf+lUuFPwK1Hj4TbqUYpfmGrkMetWYDYK 7etlV1qJjsXnRuDInGF+y2qjJ3zui8jIYk8aK644oZR0oVze6EvK1lAyniS6avQy rfvi8i1tI/4z7C0DzoAVvgveBvsCAwEAAaOCAtQwggLQMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFDq0R3g5nlfsTZst9qyAQsZjfg9mMB8GA1UdIwQYMBaAFKVu hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTEwNjgzMjc4NzUwNTE1MjAxOS8wLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMTA2ODMyNzg3NTA1MTUyMDE5 LzAvM0FCNDQ3NzgzOTlFNTdFQzREOUIyREY2QUM4MDQyQzY2MzdFMEY2Ni5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwWQYIKwYBBQUH AQcBAf8ESjBIMEYEAgABMEADAwAkzjAKAwMCJNQDAwEk3AMDAG5kAwMAbnQDAwBu xwMDAW7aAwMAel4DAwB7TQMDAN4tAwQH3jGAAwQH3juAMA0GCSqGSIb3DQEBCwUA A4IBAQAQzGtdGZda9+DzxIcDGW3vuavbDsU1Ga6nrdefNWOeljNgNmBtO0HcF//d T0+0abBtZm0qFNb5yJZvpyzrv0wlRks7MeLUDn4YdiX9iwYFg5Navg7cxFkjJIeG T+XCuU4Mg6BYrwmTuDmUjV1JOpQht+CKBMLLDZfCe3pojWAM3RcDeU6hSnG6CMH0 hcdsX+ihd9mz2/mrkwiwawuHFXkIoKJSMQdNxE0Lc2XWntkoNJNfs+0XdVXlkFxd zcLlFpdAwLOoHI6oVva7XO503fhc9OOiwf1rbSI3y7vfAw9aQDp/bz4B49YhjniX NlSBUN4R1g8L7GwfpAFgZp9O/mWN -----END CERTIFICATE-----Generated at Wed May 13 14:09:16 2026 by rpki-client