$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/0/98319A3BC8F8CFD4FBB38C731DBFEC10AC053601.cer File: 98319A3BC8F8CFD4FBB38C731DBFEC10AC053601.cer (raw, json) Hash identifier: gkIeOTGII3QU07zy2ZHE3HpgnQ0q+Dbn4e1HAV9b2k8= Subject key identifier: 98:31:9A:3B:C8:F8:CF:D4:FB:B3:8C:73:1D:BF:EC:10:AC:05:36:01 Authority key identifier: CB:02:14:A5:C4:04:D6:F8:40:43:3B:12:0C:AC:BB:5B:8C:59:E6:13 Certificate issuer: /CN=A9162E3D0001/serialNumber=CB0214A5C404D6F840433B120CACBB5B8C59E613 Certificate serial: 5B1A3C244664BA7C997909845EB0DF67C19F2A33 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1068363599790997506/1/98319A3BC8F8CFD4FBB38C731DBFEC10AC053601.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1068363599790997506/1/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Tue 27 Jan 2026 02:50:33 +0000 Certificate not after: Tue 26 Jan 2027 02:55:33 +0000 Subordinate resources: IP: 170.179.0.0/16 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 06:59:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:1a:3c:24:46:64:ba:7c:99:79:09:84:5e:b0:df:67:c1:9f:2a:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=CB0214A5C404D6F840433B120CACBB5B8C59E613 Validity Not Before: Jan 27 02:50:33 2026 GMT Not After : Jan 26 02:55:33 2027 GMT Subject: CN=98319A3BC8F8CFD4FBB38C731DBFEC10AC053601 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:e2:2e:69:ad:89:30:8f:d6:73:41:b1:e6:f3: f5:cc:fc:57:29:61:8d:35:8a:35:12:9f:d1:af:df: 6f:4d:52:a1:d4:61:8f:08:06:3f:ce:46:87:03:44: 3e:e1:b1:ff:f1:5d:84:0e:ef:60:8c:d1:c3:00:21: 49:03:9a:31:ea:e9:09:d6:fa:92:cb:0a:17:97:6e: 4c:2b:e9:31:22:55:a9:68:9f:75:3d:bf:bb:35:6b: 3f:3b:77:1d:ab:d8:b3:6f:a6:7a:3c:85:65:fa:41: 54:68:fd:6d:18:ca:8c:68:33:74:27:f9:9e:03:31: 76:7c:a9:dc:1c:4f:4b:af:f2:a2:59:84:15:a5:55: 52:50:a3:46:e2:98:10:d7:c7:1c:4e:70:31:5a:66: 8d:66:29:59:9e:13:69:6e:a1:89:d4:5d:43:73:c4: 08:d9:18:d6:00:cf:5e:21:a1:9b:06:34:5e:67:98: 72:fd:16:01:64:2b:0a:02:20:cf:9d:f0:af:7f:54: b9:7f:8d:27:94:95:63:e0:4e:1a:3a:40:6f:bf:33: c8:a3:0a:a3:93:e7:67:4b:cb:97:bc:ee:06:8c:db: 74:37:a6:3c:5a:d7:60:e6:d1:b4:5e:8b:35:ff:fe: b8:84:58:17:9e:98:37:f6:bb:f4:05:ef:51:5e:33: 5d:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 98:31:9A:3B:C8:F8:CF:D4:FB:B3:8C:73:1D:BF:EC:10:AC:05:36:01 X509v3 Authority Key Identifier: keyid:CB:02:14:A5:C4:04:D6:F8:40:43:3B:12:0C:AC:BB:5B:8C:59:E6:13 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1068363599790997506/1/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1068363599790997506/1/98319A3BC8F8CFD4FBB38C731DBFEC10AC053601.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 170.179.0.0/16 Signature Algorithm: sha256WithRSAEncryption 31:e0:5e:d5:2c:a0:de:35:36:44:c9:0a:41:3e:c7:ab:b9:80: 72:fa:cf:30:7c:f6:31:19:86:ff:3f:56:31:d1:1b:c3:7d:6f: ca:3e:bc:4e:79:04:c0:6e:18:7f:c2:f5:06:d6:b4:02:b3:91: 4e:17:95:f5:8d:28:d0:6e:77:86:77:bb:42:3c:43:00:7d:9b: 92:8a:87:c6:fe:c5:82:87:39:c5:ee:67:58:82:04:c5:59:99: 60:fc:cd:b9:f8:2e:10:a9:6d:ee:f2:1b:0c:aa:9f:36:49:f6: 60:cd:9e:de:e3:34:0b:aa:95:46:0d:0a:8a:11:60:dd:77:8b: fe:1c:df:d1:43:54:17:a9:fd:7b:7d:e3:5d:d5:c6:6d:b6:a5: 01:ea:22:ed:72:b9:17:cb:0e:2f:ed:21:20:84:c4:0a:82:d5: bd:48:39:8d:c9:03:b1:e7:59:7d:e2:6a:9f:f7:fb:7e:ee:6f: 9b:83:63:5f:c9:47:41:bf:c7:8b:e5:7a:02:d9:c9:b0:7d:26: 53:50:c3:81:ac:43:0b:d5:0a:5c:00:c9:e6:71:85:44:dd:b1: f6:f3:d4:ac:25:a2:ae:f5:48:e3:0e:9e:ce:e4:32:22:34:91: e6:e7:03:e8:24:77:22:77:c6:62:4f:14:ca:96:9b:7d:50:73: 3a:bc:de:52 -----BEGIN CERTIFICATE----- MIIFpjCCBI6gAwIBAgIUWxo8JEZkunyZeQmEXrDfZ8GfKjMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhDQjAyMTRBNUM0 MDRENkY4NDA0MzNCMTIwQ0FDQkI1QjhDNTlFNjEzMB4XDTI2MDEyNzAyNTAzM1oX DTI3MDEyNjAyNTUzM1owMzExMC8GA1UEAxMoOTgzMTlBM0JDOEY4Q0ZENEZCQjM4 QzczMURCRkVDMTBBQzA1MzYwMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAN3iLmmtiTCP1nNBsebz9cz8VylhjTWKNRKf0a/fb01SodRhjwgGP85GhwNE PuGx//FdhA7vYIzRwwAhSQOaMerpCdb6kssKF5duTCvpMSJVqWifdT2/uzVrPzt3 HavYs2+mejyFZfpBVGj9bRjKjGgzdCf5ngMxdnyp3BxPS6/yolmEFaVVUlCjRuKY ENfHHE5wMVpmjWYpWZ4TaW6hidRdQ3PECNkY1gDPXiGhmwY0XmeYcv0WAWQrCgIg z53wr39UuX+NJ5SVY+BOGjpAb78zyKMKo5PnZ0vLl7zuBozbdDemPFrXYObRtF6L Nf/+uIRYF56YN/a79AXvUV4zXcsCAwEAAaOCApkwggKVMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFJgxmjvI+M/U+7OMcx2/7BCsBTYBMB8GA1UdIwQYMBaAFMsC FKXEBNb4QEM7Egysu1uMWeYTMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMC9DQjAyMTRBNUM0MDRENkY4NDA0MzNCMTIwQ0FDQkI1QjhDNTlF NjEzLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CM0EyNEYyMDFENjYxMUUyOEFDODgzN0M3 MkZEMUZGMi95d0lVcGNRRTF2aEFRenNTREt5N1c0eFo1aE0uY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTA2ODM2MzU5OTc5MDk5NzUwNi8xLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDY4MzYzNTk5NzkwOTk3NTA2 LzEvOTgzMTlBM0JDOEY4Q0ZENEZCQjM4QzczMURCRkVDMTBBQzA1MzYwMS5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUH AQcBAf8EDzANMAsEAgABMAUDAwCqszANBgkqhkiG9w0BAQsFAAOCAQEAMeBe1Syg 3jU2RMkKQT7Hq7mAcvrPMHz2MRmG/z9WMdEbw31vyj68TnkEwG4Yf8L1Bta0ArOR TheV9Y0o0G53hne7QjxDAH2bkoqHxv7Fgoc5xe5nWIIExVmZYPzNufguEKlt7vIb DKqfNkn2YM2e3uM0C6qVRg0KihFg3XeL/hzf0UNUF6n9e33jXdXGbbalAeoi7XK5 F8sOL+0hIITECoLVvUg5jckDsedZfeJqn/f7fu5vm4NjX8lHQb/Hi+V6AtnJsH0m U1DDgaxDC9UKXADJ5nGFRN2x9vPUrCWirvVI4w6ezuQyIjSR5ucD6CR3InfGYk8U ypabfVBzOrzeUg== -----END CERTIFICATE-----Generated at Mon Mar 2 10:10:07 2026 by rpki-client