$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3F0AED0297682970CEA1257B1985DB5901444FE7.cer File: 3F0AED0297682970CEA1257B1985DB5901444FE7.cer (raw, json) Hash identifier: CRdw1zs/xAo9q7qEn02Xt1k4FZ3hY+Fk+mL3WNu7hfw= Subject key identifier: 3F:0A:ED:02:97:68:29:70:CE:A1:25:7B:19:85:DB:59:01:44:4F:E7 Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Certificate serial: 7E060E99DCE3B90551B8E5D620DA4556EDB6C394 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1105420356518150159/0/3F0AED0297682970CEA1257B1985DB5901444FE7.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1105420356518150159/0/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Sat 09 May 2026 09:00:51 +0000 Certificate not after: Sat 08 May 2027 09:05:51 +0000 Subordinate resources: IP: 45.113.20.0/22 IP: 103.52.172.0/22 IP: 218.244.112.0/20 IP: 2403:1d80::/32 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 11:49:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:06:0e:99:dc:e3:b9:05:51:b8:e5:d6:20:da:45:56:ed:b6:c3:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Validity Not Before: May 9 09:00:51 2026 GMT Not After : May 8 09:05:51 2027 GMT Subject: CN=3F0AED0297682970CEA1257B1985DB5901444FE7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:1e:e7:2b:d0:52:5c:82:0f:ea:90:a4:dc:62: a8:44:16:01:07:b1:76:9a:f5:97:8c:35:88:9c:de: a0:3a:5c:1a:11:e1:18:91:83:32:eb:89:cc:74:25: 19:f1:84:f6:d2:d8:f6:4c:7f:73:2a:32:f2:c7:29: e6:63:7e:f1:4d:01:5b:c1:5e:e0:fb:d8:da:af:36: a9:63:15:6d:14:18:1f:2f:db:c3:49:11:a5:7d:5e: b7:6e:c1:2e:f0:0f:8c:76:35:b3:ee:50:48:33:3a: 51:66:28:49:c7:9d:3e:ce:88:b5:17:37:15:63:ff: 31:d5:e9:7e:29:b9:3e:e9:a0:58:7a:74:01:bd:cd: e7:38:9f:6e:91:07:d1:33:98:2e:61:aa:8a:be:f0: 14:87:02:a2:3b:28:94:09:38:1f:1f:a2:18:d5:96: b5:a5:ce:33:c1:b9:8e:51:21:c5:98:52:f6:fd:ee: c6:fc:84:49:f7:b7:fb:2c:99:e7:f8:7a:6c:45:94: e1:54:fb:01:ab:11:c7:73:a4:7f:04:49:51:a0:a3: 05:ae:3c:27:92:db:65:23:84:2d:2d:49:6d:77:47: d3:e6:25:0c:34:c0:28:b9:b4:e9:ed:0f:a6:7a:75: 1f:d3:36:9a:c9:c4:a6:b9:d7:58:0f:98:42:10:e8: 85:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 3F:0A:ED:02:97:68:29:70:CE:A1:25:7B:19:85:DB:59:01:44:4F:E7 X509v3 Authority Key Identifier: keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1105420356518150159/0/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1105420356518150159/0/3F0AED0297682970CEA1257B1985DB5901444FE7.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.113.20.0/22 103.52.172.0/22 218.244.112.0/20 IPv6: 2403:1d80::/32 Signature Algorithm: sha256WithRSAEncryption 30:fe:4c:c5:17:63:a9:74:22:60:76:f5:30:3c:ed:3a:58:da: dd:7d:ba:5b:f4:fb:94:39:a2:30:4e:b8:c9:8c:f9:10:e2:7d: 78:c7:6e:38:f8:cf:c4:01:ad:dc:11:e4:c8:58:78:cc:f9:7b: 2f:96:2b:e7:9f:09:97:31:bb:fd:b8:de:af:fd:03:c4:90:bf: 94:79:1b:fd:65:16:51:91:89:02:08:64:b5:1a:3c:1b:3a:ba: 47:44:f3:84:e2:be:00:bf:fc:eb:0e:24:6c:c6:06:51:ee:16: 37:9f:63:cb:7d:38:af:36:3b:84:83:2e:78:8c:d2:f9:89:e4: 8a:d0:04:92:2f:79:ea:2e:6d:d9:9f:7e:cb:5a:dc:47:38:3e: 3c:00:54:24:0c:62:97:15:1e:8c:7b:44:be:65:6b:46:6a:f9: a9:2a:23:72:42:cd:09:b6:6a:64:a2:28:61:e3:61:a2:58:58: b4:80:2e:66:f0:82:43:c7:e9:40:64:60:36:a1:56:45:b6:bb: cb:a0:21:ca:3e:23:9e:50:64:20:78:9a:1b:03:77:1b:61:3d: b0:00:72:ba:95:91:92:ee:be:0c:9e:ee:01:95:51:3e:f2:a1: 5e:3c:3f:5a:40:ed:1d:c6:95:d6:93:23:44:1e:72:20:1b:0d: 8f:37:31:b0 -----BEGIN CERTIFICATE----- MIIFwjCCBKqgAwIBAgIUfgYOmdzjuQVRuOXWINpFVu22w5QwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDUwOTA5MDA1MVoX DTI3MDUwODA5MDU1MVowMzExMC8GA1UEAxMoM0YwQUVEMDI5NzY4Mjk3MENFQTEy NTdCMTk4NURCNTkwMTQ0NEZFNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALMe5yvQUlyCD+qQpNxiqEQWAQexdpr1l4w1iJzeoDpcGhHhGJGDMuuJzHQl GfGE9tLY9kx/cyoy8scp5mN+8U0BW8Fe4PvY2q82qWMVbRQYHy/bw0kRpX1et27B LvAPjHY1s+5QSDM6UWYoScedPs6ItRc3FWP/MdXpfim5PumgWHp0Ab3N5zifbpEH 0TOYLmGqir7wFIcCojsolAk4Hx+iGNWWtaXOM8G5jlEhxZhS9v3uxvyESfe3+yyZ 5/h6bEWU4VT7AasRx3OkfwRJUaCjBa48J5LbZSOELS1JbXdH0+YlDDTAKLm06e0P pnp1H9M2msnEprnXWA+YQhDohbkCAwEAAaOCArUwggKxMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFD8K7QKXaClwzqElexmF21kBRE/nMB8GA1UdIwQYMBaAFKVu hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTEwNTQyMDM1NjUxODE1MDE1OS8wLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMTA1NDIwMzU2NTE4MTUwMTU5 LzAvM0YwQUVEMDI5NzY4Mjk3MENFQTEyNTdCMTk4NURCNTkwMTQ0NEZFNy5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwOgYIKwYBBQUH AQcBAf8EKzApMBgEAgABMBIDBAItcRQDBAJnNKwDBATa9HAwDQQCAAIwBwMFACQD HYAwDQYJKoZIhvcNAQELBQADggEBADD+TMUXY6l0ImB29TA87TpY2t19ulv0+5Q5 ojBOuMmM+RDifXjHbjj4z8QBrdwR5MhYeMz5ey+WK+efCZcxu/243q/9A8SQv5R5 G/1lFlGRiQIIZLUaPBs6ukdE84TivgC//OsOJGzGBlHuFjefY8t9OK82O4SDLniM 0vmJ5IrQBJIveeoubdmffsta3Ec4PjwAVCQMYpcVHox7RL5la0Zq+akqI3JCzQm2 amSiKGHjYaJYWLSALmbwgkPH6UBkYDahVkW2u8ugIco+I55QZCB4mhsDdxthPbAA crqVkZLuvgye7gGVUT7yoV48P1pA7R3GldaTI0QeciAbDY83MbA= -----END CERTIFICATE-----Generated at Wed May 13 20:17:16 2026 by rpki-client