$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EC33F872D9BC5845D79FC5ACBCF9E80C53B377EF.cer File: EC33F872D9BC5845D79FC5ACBCF9E80C53B377EF.cer (raw, json) Hash identifier: Ozz7sp7ctzLpvhzsX0WT3rmnYM82etOzCIPATvEfi40= Subject key identifier: EC:33:F8:72:D9:BC:58:45:D7:9F:C5:AC:BC:F9:E8:0C:53:B3:77:EF Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Certificate serial: 70B16623714441F41785E72B5D470EEB3C8775EB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1153958002902958123/0/EC33F872D9BC5845D79FC5ACBCF9E80C53B377EF.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1153958002902958123/0/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Sun 20 Sep 2026 07:32:09 +0000 Certificate not after: Sun 19 Sep 2027 07:37:09 +0000 Subordinate resources: AS: 151246 IP: 163.52.76.0/23 IP: 2402:72a0::/32 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 Oct 2026 01:08:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:b1:66:23:71:44:41:f4:17:85:e7:2b:5d:47:0e:eb:3c:87:75:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Validity Not Before: Sep 20 07:32:09 2026 GMT Not After : Sep 19 07:37:09 2027 GMT Subject: CN=EC33F872D9BC5845D79FC5ACBCF9E80C53B377EF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:60:52:85:38:0e:5a:0a:f6:cf:3b:c1:d5:57: 05:6c:0a:6c:76:61:02:f9:75:fd:c6:2a:27:aa:16: 7f:e7:7d:2a:c6:73:fd:67:94:28:cc:ed:2d:a8:82: 91:28:df:78:e9:45:b2:a4:b2:a7:36:da:f2:d7:f5: fc:be:e8:ff:36:7a:d2:91:b1:1d:91:b9:c4:01:f7: 21:81:a2:7d:67:84:bc:47:da:59:a5:92:40:8a:fd: fb:b6:a4:c3:3e:4d:76:bf:0f:31:5d:ce:c8:8d:14: 45:d7:9d:58:ad:bd:71:94:b1:95:e5:78:a6:a3:b3: bf:8f:67:24:16:16:ae:d7:24:ac:c3:2f:a1:2b:5d: 67:ba:e5:77:18:a8:4c:4a:19:4d:c8:6e:a2:68:2d: c8:db:0e:a9:d6:e7:67:b1:e8:30:15:a7:a9:f7:86: e5:9c:90:00:75:74:b7:96:f5:2d:1f:2c:00:40:f2: 15:3d:2c:2e:ff:cb:cb:1a:2b:f5:69:56:b4:d6:2d: 9f:7d:98:11:51:73:a4:5a:47:8e:09:c2:ab:78:bb: 6c:62:86:29:03:e5:90:75:0f:7b:af:5d:d4:08:86: f1:70:30:6b:b4:6b:1d:41:c3:47:46:d2:5b:b1:69: 0b:f7:eb:30:a6:51:1a:78:3a:d0:2b:14:4c:fa:80: 58:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: EC:33:F8:72:D9:BC:58:45:D7:9F:C5:AC:BC:F9:E8:0C:53:B3:77:EF X509v3 Authority Key Identifier: keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1153958002902958123/0/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1153958002902958123/0/EC33F872D9BC5845D79FC5ACBCF9E80C53B377EF.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 163.52.76.0/23 IPv6: 2402:72a0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 151246 Signature Algorithm: sha256WithRSAEncryption 3b:12:cd:83:de:cd:46:58:aa:0e:79:4f:f1:81:f1:32:99:ef: fa:5e:6e:53:37:47:f9:f2:9e:88:4d:21:6e:19:9a:57:94:85: 36:06:fa:af:5b:96:d1:da:0e:ec:53:d9:a7:f6:4c:ba:28:3b: f2:08:38:3a:17:78:13:85:87:11:f8:f9:87:41:d9:20:c3:cf: e8:aa:66:6f:d0:d7:90:97:7d:35:a2:90:ea:81:31:ee:c5:3b: 44:88:ab:2d:21:49:17:f8:81:9e:e4:7c:0a:4e:1d:eb:61:77: 93:01:3a:28:07:c8:85:cf:8a:fa:6e:73:2c:82:63:0a:fa:78: 10:82:19:c1:3a:6d:70:aa:13:f2:e2:44:b4:e8:bb:33:91:a9: b2:aa:90:0c:14:92:db:1d:1d:f3:03:34:5b:f8:16:ac:e2:5b: db:18:90:56:8e:31:19:cf:35:6a:f4:c3:88:bf:3e:9c:34:f3: 2c:72:79:ba:cf:98:9e:99:ce:17:9c:dd:72:63:0e:ce:c2:5f: 98:7b:53:6a:7d:57:88:c3:d9:fb:fd:cf:97:81:4f:9f:82:70: 9f:45:e0:31:22:1f:50:5a:52:c9:d4:0b:5a:52:18:cf:54:8f: 06:f6:8f:cf:f5:b9:cf:6c:4a:59:b3:1e:3d:c6:9a:24:1b:16: 40:b8:01:c2 -----BEGIN CERTIFICATE----- MIIF0jCCBLqgAwIBAgIUcLFmI3FEQfQXhecrXUcO6zyHdeswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDkyMDA3MzIwOVoX DTI3MDkxOTA3MzcwOVowMzExMC8GA1UEAxMoRUMzM0Y4NzJEOUJDNTg0NUQ3OUZD NUFDQkNGOUU4MEM1M0IzNzdFRjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAL9gUoU4DloK9s87wdVXBWwKbHZhAvl1/cYqJ6oWf+d9KsZz/WeUKMztLaiC kSjfeOlFsqSypzba8tf1/L7o/zZ60pGxHZG5xAH3IYGifWeEvEfaWaWSQIr9+7ak wz5Ndr8PMV3OyI0URdedWK29cZSxleV4pqOzv49nJBYWrtckrMMvoStdZ7rldxio TEoZTchuomgtyNsOqdbnZ7HoMBWnqfeG5ZyQAHV0t5b1LR8sAEDyFT0sLv/Lyxor 9WlWtNYtn32YEVFzpFpHjgnCq3i7bGKGKQPlkHUPe69d1AiG8XAwa7RrHUHDR0bS W7FpC/frMKZRGng60CsUTPqAWAkCAwEAAaOCAsUwggLBMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFOwz+HLZvFhF15/FrLz56AxTs3fvMB8GA1UdIwQYMBaAFKVu hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTE1Mzk1ODAwMjkwMjk1ODEyMy8wLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMTUzOTU4MDAyOTAyOTU4MTIz LzAvRUMzM0Y4NzJEOUJDNTg0NUQ3OUZDNUFDQkNGOUU4MEM1M0IzNzdFRi5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUH AQcBAf8EHzAdMAwEAgABMAYDBAGjNEwwDQQCAAIwBwMFACQCcqAwGgYIKwYBBQUH AQgBAf8ECzAJoAcwBQIDAk7OMA0GCSqGSIb3DQEBCwUAA4IBAQA7Es2D3s1GWKoO eU/xgfEyme/6Xm5TN0f58p6ITSFuGZpXlIU2BvqvW5bR2g7sU9mn9ky6KDvyCDg6 F3gThYcR+PmHQdkgw8/oqmZv0NeQl301opDqgTHuxTtEiKstIUkX+IGe5HwKTh3r YXeTATooB8iFz4r6bnMsgmMK+ngQghnBOm1wqhPy4kS06LszkamyqpAMFJLbHR3z AzRb+Bas4lvbGJBWjjEZzzVq9MOIvz6cNPMscnm6z5iemc4XnN1yYw7Owl+Ye1Nq fVeIw9n7/c+XgU+fgnCfReAxIh9QWlLJ1AtaUhjPVI8G9o/P9bnPbEpZsx49xpok GxZAuAHC -----END CERTIFICATE-----Generated at Mon Oct 12 15:26:35 2026 by rpki-client