$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C3AB478313D3113B68CBCC9ADB4481C1CAEDD47B.cer File: C3AB478313D3113B68CBCC9ADB4481C1CAEDD47B.cer (raw, json) Hash identifier: 2dHTF18Ho4oL17O/LHSkzBDoMFFYnEd6jD5ZODPzpjE= Subject key identifier: C3:AB:47:83:13:D3:11:3B:68:CB:CC:9A:DB:44:81:C1:CA:ED:D4:7B Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Certificate serial: 1470D7612C10F06430BB23A703884AD366121C25 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1116992151696179223/0/C3AB478313D3113B68CBCC9ADB4481C1CAEDD47B.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1116992151696179223/0/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Mon 14 Sep 2026 07:34:03 +0000 Certificate not after: Mon 13 Sep 2027 07:39:03 +0000 Subordinate resources: AS: 151288 IP: 119.80.56.0/21 IP: 2402:6320::/32 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 Oct 2026 09:52:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:70:d7:61:2c:10:f0:64:30:bb:23:a7:03:88:4a:d3:66:12:1c:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Validity Not Before: Sep 14 07:34:03 2026 GMT Not After : Sep 13 07:39:03 2027 GMT Subject: CN=C3AB478313D3113B68CBCC9ADB4481C1CAEDD47B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:bd:53:c5:c7:1b:79:72:e9:0c:c2:d9:e9:c8: 1b:c8:3b:d8:21:54:4d:01:dd:38:83:35:02:00:49: 75:9a:97:28:06:38:16:8b:e8:33:11:a7:0f:47:02: 18:9d:02:12:c1:df:8a:ab:df:08:3a:88:f1:38:b8: 0c:08:88:d1:a3:5e:04:c6:0b:5a:40:8f:62:9f:87: c9:7d:f7:9d:f6:ab:cd:f7:d4:80:bc:8a:3a:f8:81: 58:b9:ee:cc:34:5b:09:8b:74:1e:29:35:86:96:32: cd:5c:8c:13:82:e1:a9:34:0e:70:86:96:26:87:96: 3b:ad:7f:09:15:42:97:c7:06:f1:32:63:ea:cd:7f: 5c:4e:74:83:aa:1d:52:6f:07:69:e4:e6:30:55:4a: f9:dd:39:fe:b7:eb:40:18:b3:39:8f:db:d0:d3:44: 7e:bd:96:d4:31:28:fd:d0:d9:0e:32:a5:d5:e7:51: 70:c0:96:c2:dc:75:d9:b6:cb:87:b4:24:26:f1:a3: b9:77:28:ec:a0:ff:98:22:01:68:7b:2b:6f:cb:02: bc:0e:08:94:e7:81:98:a4:a3:c9:e6:61:d3:d8:43: 47:b4:6a:0b:b3:24:27:b8:ba:10:52:f3:97:58:3c: bb:20:05:34:7d:cd:eb:7c:98:6f:93:ca:a6:20:bb: 6e:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: C3:AB:47:83:13:D3:11:3B:68:CB:CC:9A:DB:44:81:C1:CA:ED:D4:7B X509v3 Authority Key Identifier: keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1116992151696179223/0/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1116992151696179223/0/C3AB478313D3113B68CBCC9ADB4481C1CAEDD47B.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 119.80.56.0/21 IPv6: 2402:6320::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 151288 Signature Algorithm: sha256WithRSAEncryption 9b:fa:a9:0e:b1:37:a2:a1:d2:90:d9:c3:f8:b7:4b:7e:03:18: 56:c8:04:12:6c:ca:d7:4d:9d:c9:65:45:a8:d2:54:e5:12:3a: 69:ac:71:d2:f5:db:51:ce:ec:34:a7:d8:2f:b0:a4:a5:d8:5a: 07:3e:89:88:71:ed:1d:fb:81:9b:01:8c:3d:41:98:3c:3f:de: 1c:4c:30:1b:f4:0b:07:22:01:da:6c:45:76:09:3b:4a:eb:10: fd:1f:a0:52:50:22:f5:cd:58:8b:c2:5e:4c:24:14:7a:1f:42: 83:a6:22:87:36:58:61:b4:3a:16:4c:c6:40:b2:19:df:ab:be: 24:78:d5:6a:b2:0f:d3:08:82:d1:b7:1b:0c:a8:39:4a:64:c7: de:ee:32:45:df:04:67:7a:83:a9:24:f8:a7:3b:11:2b:a0:dc: 2a:6e:56:f3:56:8a:e8:fb:1f:ee:d3:1f:2c:0e:00:71:58:34: fd:86:e8:f8:99:e0:35:48:ec:d8:cb:cf:6e:11:35:85:e2:40: 4b:98:91:42:da:a9:23:66:89:c4:dc:2b:9e:ec:2d:4b:f0:a2: 79:c0:43:c8:50:44:9d:6e:ec:cb:ca:21:f7:a5:e0:a2:fb:ab: 1f:c0:5f:9a:91:ba:a3:bb:a6:91:3d:b7:1c:ae:bd:3b:25:63: 9f:d0:0c:9e -----BEGIN CERTIFICATE----- MIIF0jCCBLqgAwIBAgIUFHDXYSwQ8GQwuyOnA4hK02YSHCUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDkxNDA3MzQwM1oX DTI3MDkxMzA3MzkwM1owMzExMC8GA1UEAxMoQzNBQjQ3ODMxM0QzMTEzQjY4Q0JD QzlBREI0NDgxQzFDQUVERDQ3QjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMi9U8XHG3ly6QzC2enIG8g72CFUTQHdOIM1AgBJdZqXKAY4FovoMxGnD0cC GJ0CEsHfiqvfCDqI8Ti4DAiI0aNeBMYLWkCPYp+HyX33nfarzffUgLyKOviBWLnu zDRbCYt0Hik1hpYyzVyME4LhqTQOcIaWJoeWO61/CRVCl8cG8TJj6s1/XE50g6od Um8HaeTmMFVK+d05/rfrQBizOY/b0NNEfr2W1DEo/dDZDjKl1edRcMCWwtx12bbL h7QkJvGjuXco7KD/mCIBaHsrb8sCvA4IlOeBmKSjyeZh09hDR7RqC7MkJ7i6EFLz l1g8uyAFNH3N63yYb5PKpiC7boECAwEAAaOCAsUwggLBMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFMOrR4MT0xE7aMvMmttEgcHK7dR7MB8GA1UdIwQYMBaAFKVu hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTExNjk5MjE1MTY5NjE3OTIyMy8wLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMTE2OTkyMTUxNjk2MTc5MjIz LzAvQzNBQjQ3ODMxM0QzMTEzQjY4Q0JDQzlBREI0NDgxQzFDQUVERDQ3Qi5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUH AQcBAf8EHzAdMAwEAgABMAYDBAN3UDgwDQQCAAIwBwMFACQCYyAwGgYIKwYBBQUH AQgBAf8ECzAJoAcwBQIDAk74MA0GCSqGSIb3DQEBCwUAA4IBAQCb+qkOsTeiodKQ 2cP4t0t+AxhWyAQSbMrXTZ3JZUWo0lTlEjpprHHS9dtRzuw0p9gvsKSl2FoHPomI ce0d+4GbAYw9QZg8P94cTDAb9AsHIgHabEV2CTtK6xD9H6BSUCL1zViLwl5MJBR6 H0KDpiKHNlhhtDoWTMZAshnfq74keNVqsg/TCILRtxsMqDlKZMfe7jJF3wRneoOp JPinOxEroNwqblbzVoro+x/u0x8sDgBxWDT9huj4meA1SOzYy89uETWF4kBLmJFC 2qkjZonE3Cue7C1L8KJ5wEPIUESdbuzLyiH3peCi+6sfwF+akbqju6aRPbccrr07 JWOf0Aye -----END CERTIFICATE-----Generated at Sun Oct 11 22:35:07 2026 by rpki-client