$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CCA3BB73899F78334CA03D6DA4D8FD3F94D69BB9.cer File: CCA3BB73899F78334CA03D6DA4D8FD3F94D69BB9.cer (raw, json) Hash identifier: ArB20k9Yo9AY1AqSv7t+zCOHzm+H8pfHZcLRz2NsJxQ= Subject key identifier: CC:A3:BB:73:89:9F:78:33:4C:A0:3D:6D:A4:D8:FD:3F:94:D6:9B:B9 Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Certificate serial: 6DD0211B72715F8ABB41F1705B067FA6BEFE065C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1088385455558230017/0/CCA3BB73899F78334CA03D6DA4D8FD3F94D69BB9.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1088385455558230017/0/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Mon 23 Mar 2026 08:50:15 +0000 Certificate not after: Mon 22 Mar 2027 08:55:15 +0000 Subordinate resources: AS: 149057 IP: 103.177.162.0/23 IP: 163.53.52.0/22 IP: 2001:df0:25c0::/48 IP: 2400:da60::/32 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 05:24:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:d0:21:1b:72:71:5f:8a:bb:41:f1:70:5b:06:7f:a6:be:fe:06:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Validity Not Before: Mar 23 08:50:15 2026 GMT Not After : Mar 22 08:55:15 2027 GMT Subject: CN=CCA3BB73899F78334CA03D6DA4D8FD3F94D69BB9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:78:e3:14:99:db:4f:65:c9:5e:3a:e5:30:c0: 0b:f4:ba:08:90:fc:7a:a0:0d:8a:df:3c:de:0c:ef: 93:8f:81:90:a7:44:96:d4:69:a9:b7:4e:81:53:1d: 6e:ce:72:d4:11:77:4f:4c:7a:bd:bc:d9:8e:e9:c2: c4:72:cc:a4:8f:1d:04:cb:c8:ca:45:f3:aa:fa:10: f6:87:ce:8c:64:76:61:b7:5b:74:e8:9c:70:c1:94: c2:a0:ea:3a:e4:b2:c0:71:4a:e8:19:a2:92:b4:f6: a6:35:46:6c:d5:59:e9:65:0d:cb:df:0d:08:7b:24: a3:27:3c:b4:59:3d:af:2e:f7:07:dc:d7:c3:96:2b: c4:a0:68:29:dc:a0:32:63:16:a0:8b:a6:5f:3f:ac: 63:7c:a3:d5:1e:f9:a6:30:b0:2d:19:51:be:16:dc: 54:83:20:59:7d:f5:54:7b:f1:73:57:0b:d0:df:fd: 89:71:50:32:47:3e:28:ec:32:fa:65:6a:5c:35:e8: ab:2d:b5:79:42:f3:ae:18:bc:0c:f1:cc:9d:64:51: a6:53:a2:fd:44:18:c3:18:93:61:ef:da:f6:02:8a: cf:84:8a:d2:62:bb:d6:ca:08:c9:61:de:2f:b4:e4: c1:de:ec:5b:e4:a1:e9:86:7b:bf:e1:d2:c4:ef:c8: 03:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: CC:A3:BB:73:89:9F:78:33:4C:A0:3D:6D:A4:D8:FD:3F:94:D6:9B:B9 X509v3 Authority Key Identifier: keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1088385455558230017/0/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1088385455558230017/0/CCA3BB73899F78334CA03D6DA4D8FD3F94D69BB9.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.177.162.0/23 163.53.52.0/22 IPv6: 2001:df0:25c0::/48 2400:da60::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 149057 Signature Algorithm: sha256WithRSAEncryption 37:f9:fc:05:f7:ff:3a:01:4c:73:bf:a2:d8:24:ef:02:2a:ad: b7:1a:a0:da:06:37:9c:eb:38:8f:2a:ab:27:aa:d9:f2:0b:e0: aa:e2:34:c8:63:12:fd:d8:fb:82:84:7e:14:f9:73:ac:36:d7: 78:1b:30:c7:65:02:40:de:58:81:53:75:93:00:95:53:01:be: b7:88:7e:e3:b0:eb:55:e5:b7:4b:95:77:68:d7:e3:68:d9:56: 0c:eb:c7:9f:73:f5:22:40:cf:7e:b4:be:92:1a:35:86:35:8d: a0:b8:c1:15:da:6e:25:4c:a0:8c:52:f4:fb:46:6b:fb:0c:f6: 58:fc:7d:e6:79:c4:dd:57:6f:d5:f5:24:22:cb:f0:b4:20:bd: 41:ab:1e:79:8e:e5:ef:c5:e2:2b:89:16:c8:f2:da:70:b9:0d: 0c:be:8e:64:43:2c:84:7a:b2:42:82:85:9d:bf:41:a5:0d:b1: 97:40:33:19:ee:26:7e:e3:fa:c4:25:83:f9:39:e8:c4:36:0b: 22:1d:da:3b:34:b4:b0:2d:39:ba:6d:f7:8b:d9:01:f4:36:5c: df:23:14:b8:41:90:38:f7:8c:64:8d:2a:35:42:f7:6d:32:cc: cd:98:46:6e:5b:2a:84:9d:6d:11:72:cc:0a:8f:00:33:1f:fc: 89:f4:c0:79 -----BEGIN CERTIFICATE----- MIIF4TCCBMmgAwIBAgIUbdAhG3JxX4q7QfFwWwZ/pr7+BlwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDMyMzA4NTAxNVoX DTI3MDMyMjA4NTUxNVowMzExMC8GA1UEAxMoQ0NBM0JCNzM4OTlGNzgzMzRDQTAz RDZEQTREOEZEM0Y5NEQ2OUJCOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJ144xSZ209lyV465TDAC/S6CJD8eqANit883gzvk4+BkKdEltRpqbdOgVMd bs5y1BF3T0x6vbzZjunCxHLMpI8dBMvIykXzqvoQ9ofOjGR2YbdbdOiccMGUwqDq OuSywHFK6BmikrT2pjVGbNVZ6WUNy98NCHskoyc8tFk9ry73B9zXw5YrxKBoKdyg MmMWoIumXz+sY3yj1R75pjCwLRlRvhbcVIMgWX31VHvxc1cL0N/9iXFQMkc+KOwy +mVqXDXoqy21eULzrhi8DPHMnWRRplOi/UQYwxiTYe/a9gKKz4SK0mK71soIyWHe L7Tkwd7sW+Sh6YZ7v+HSxO/IA1sCAwEAAaOCAtQwggLQMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFMyju3OJn3gzTKA9baTY/T+U1pu5MB8GA1UdIwQYMBaAFKVu hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTA4ODM4NTQ1NTU1ODIzMDAxNy8wLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDg4Mzg1NDU1NTU4MjMwMDE3 LzAvQ0NBM0JCNzM4OTlGNzgzMzRDQTAzRDZEQTREOEZEM0Y5NEQ2OUJCOS5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwPQYIKwYBBQUH AQcBAf8ELjAsMBIEAgABMAwDBAFnsaIDBAKjNTQwFgQCAAIwEAMHACABDfAlwAMF ACQA2mAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDAkZBMA0GCSqGSIb3DQEBCwUA A4IBAQA3+fwF9/86AUxzv6LYJO8CKq23GqDaBjec6ziPKqsnqtnyC+Cq4jTIYxL9 2PuChH4U+XOsNtd4GzDHZQJA3liBU3WTAJVTAb63iH7jsOtV5bdLlXdo1+No2VYM 68efc/UiQM9+tL6SGjWGNY2guMEV2m4lTKCMUvT7Rmv7DPZY/H3mecTdV2/V9SQi y/C0IL1Bqx55juXvxeIriRbI8tpwuQ0Mvo5kQyyEerJCgoWdv0GlDbGXQDMZ7iZ+ 4/rEJYP5OejENgsiHdo7NLSwLTm6bfeL2QH0NlzfIxS4QZA494xkjSo1QvdtMszN mEZuWyqEnW0RcswKjwAzH/yJ9MB5 -----END CERTIFICATE-----Generated at Thu Mar 26 20:53:17 2026 by rpki-client