$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/342BA3B0AF4AD34F3E0178834205F1AFC539192B.cer File: 342BA3B0AF4AD34F3E0178834205F1AFC539192B.cer (raw, json) Hash identifier: aqynmBQ2o5tJdiVcqt+TwjbTuC2vYU+TDCswpNy5qQY= Subject key identifier: 34:2B:A3:B0:AF:4A:D3:4F:3E:01:78:83:42:05:F1:AF:C5:39:19:2B Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Certificate serial: 36D3E40928951CC2B893B4FAB0C8F30923A769B6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1096408594477219842/0/342BA3B0AF4AD34F3E0178834205F1AFC539192B.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1096408594477219842/0/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Tue 14 Apr 2026 12:11:20 +0000 Certificate not after: Tue 13 Apr 2027 12:16:20 +0000 Subordinate resources: IP: 103.98.44.0/22 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 17:12:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:d3:e4:09:28:95:1c:c2:b8:93:b4:fa:b0:c8:f3:09:23:a7:69:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Validity Not Before: Apr 14 12:11:20 2026 GMT Not After : Apr 13 12:16:20 2027 GMT Subject: CN=342BA3B0AF4AD34F3E0178834205F1AFC539192B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:d8:3d:92:0b:90:a4:6e:02:45:fb:82:00:d2: 40:d4:42:9e:4d:85:06:41:d9:80:da:70:4a:6f:55: 74:8e:76:9c:2d:0b:a1:bb:4d:37:8b:ef:3b:c6:98: 7f:e3:56:bc:c3:6c:97:40:a3:c9:0f:50:47:6a:04: 11:95:3e:7b:78:a8:0f:b9:10:a7:14:f4:a8:68:ac: 8a:a2:93:28:ed:0a:a1:af:57:82:c3:62:6c:5a:16: b9:97:1d:49:75:ac:b4:ec:ee:49:77:16:61:bc:4f: 46:6c:f1:9f:af:64:b0:f7:ac:2e:bb:9d:79:4c:d1: 55:2e:a7:87:99:69:08:c0:a1:d8:d9:08:79:f5:95: ec:29:e4:9e:8f:fa:bb:3f:79:72:38:4a:de:64:02: 3e:99:40:7e:6b:9e:03:ef:7c:da:34:00:35:ce:68: da:a7:63:0f:d3:5f:a1:ec:d9:bd:6c:2e:0c:12:12: 4b:e4:ec:bd:e2:5e:3d:2a:4a:fc:ba:bb:d3:c2:78: 1d:71:1e:4e:4a:31:63:ea:88:54:b3:c6:bf:ae:33: 10:a2:6b:4d:0d:1a:fb:d0:82:ea:ba:2b:ea:4b:41: b0:bb:f0:b4:f7:52:07:45:0c:92:19:45:64:bf:44: 37:cb:f4:c5:c8:c4:09:77:25:3b:1d:6a:77:47:fe: b3:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 34:2B:A3:B0:AF:4A:D3:4F:3E:01:78:83:42:05:F1:AF:C5:39:19:2B X509v3 Authority Key Identifier: keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1096408594477219842/0/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1096408594477219842/0/342BA3B0AF4AD34F3E0178834205F1AFC539192B.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.98.44.0/22 Signature Algorithm: sha256WithRSAEncryption 03:e3:63:7d:17:e9:0c:a2:58:05:f5:97:c4:a1:52:0c:e5:2a: 65:f1:22:f4:01:34:c5:62:4c:41:f7:10:9a:98:08:c6:8c:81: 6e:08:38:76:54:2b:14:a5:ab:b0:3e:1c:93:8c:29:c3:c7:ae: 69:6e:f7:54:c9:4c:83:69:20:9c:cf:49:b9:a1:56:c3:57:a4: f1:a9:b8:4d:32:e9:2c:b8:20:45:54:4b:54:fa:c4:e7:f5:39: f4:51:1b:14:ae:a1:02:e5:df:a2:29:dc:50:6b:31:01:fa:6e: 61:32:6a:82:94:36:fc:95:35:76:97:bc:d4:5b:76:a3:c0:73: cc:cf:c1:de:e7:7a:61:19:47:40:b4:4f:04:32:ec:9a:d9:1a: 48:c1:a7:1a:e4:c6:91:5f:c3:87:34:bc:ee:45:1e:38:de:2e: d2:12:b2:09:fd:64:f9:78:72:2e:6e:a4:68:8f:db:75:5f:a5: 6c:bd:fe:47:2f:14:33:df:90:7e:59:f5:30:47:4c:ba:e6:b6: 20:95:f4:72:f4:a8:2b:59:1f:0c:17:78:e4:88:80:f1:49:0b: 4c:1a:97:a9:14:f3:99:f0:0b:59:27:8d:b0:76:ed:3c:57:df: 85:92:bd:d1:87:f2:d6:73:c7:d9:b0:11:c9:3e:e4:13:3f:cb: e5:c1:02:8b -----BEGIN CERTIFICATE----- MIIFpzCCBI+gAwIBAgIUNtPkCSiVHMK4k7T6sMjzCSOnabYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDQxNDEyMTEyMFoX DTI3MDQxMzEyMTYyMFowMzExMC8GA1UEAxMoMzQyQkEzQjBBRjRBRDM0RjNFMDE3 ODgzNDIwNUYxQUZDNTM5MTkyQjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMHYPZILkKRuAkX7ggDSQNRCnk2FBkHZgNpwSm9VdI52nC0LobtNN4vvO8aY f+NWvMNsl0CjyQ9QR2oEEZU+e3ioD7kQpxT0qGisiqKTKO0Koa9XgsNibFoWuZcd SXWstOzuSXcWYbxPRmzxn69ksPesLrudeUzRVS6nh5lpCMCh2NkIefWV7Cnkno/6 uz95cjhK3mQCPplAfmueA+982jQANc5o2qdjD9NfoezZvWwuDBISS+TsveJePSpK /Lq708J4HXEeTkoxY+qIVLPGv64zEKJrTQ0a+9CC6ror6ktBsLvwtPdSB0UMkhlF ZL9EN8v0xcjECXclOx1qd0f+s6UCAwEAAaOCApowggKWMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFDQro7CvStNPPgF4g0IF8a/FORkrMB8GA1UdIwQYMBaAFKVu hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTA5NjQwODU5NDQ3NzIxOTg0Mi8wLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDk2NDA4NTk0NDc3MjE5ODQy LzAvMzQyQkEzQjBBRjRBRDM0RjNFMDE3ODgzNDIwNUYxQUZDNTM5MTkyQi5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAJnYiwwDQYJKoZIhvcNAQELBQADggEBAAPjY30X 6QyiWAX1l8ShUgzlKmXxIvQBNMViTEH3EJqYCMaMgW4IOHZUKxSlq7A+HJOMKcPH rmlu91TJTINpIJzPSbmhVsNXpPGpuE0y6Sy4IEVUS1T6xOf1OfRRGxSuoQLl36Ip 3FBrMQH6bmEyaoKUNvyVNXaXvNRbdqPAc8zPwd7nemEZR0C0TwQy7JrZGkjBpxrk xpFfw4c0vO5FHjjeLtISsgn9ZPl4ci5upGiP23VfpWy9/kcvFDPfkH5Z9TBHTLrm tiCV9HL0qCtZHwwXeOSIgPFJC0wal6kU85nwC1knjbB27TxX34WSvdGH8tZzx9mw Eck+5BM/y+XBAos= -----END CERTIFICATE-----Generated at Fri Apr 17 17:59:00 2026 by rpki-client