$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3F3C605DF60C54D00505BCD8C0C6F7A38B0AE3D3.cer File: 3F3C605DF60C54D00505BCD8C0C6F7A38B0AE3D3.cer (raw, json) Hash identifier: WBJayKCimFyuiBn6tCKN/lv9h5902UCC+rNFkbL8oxM= Subject key identifier: 3F:3C:60:5D:F6:0C:54:D0:05:05:BC:D8:C0:C6:F7:A3:8B:0A:E3:D3 Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Certificate serial: 3B292955E476819BE1C4AFD4E3B6F39D939E8635 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1096698029873823747/0/3F3C605DF60C54D00505BCD8C0C6F7A38B0AE3D3.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1096698029873823747/0/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Wed 15 Apr 2026 07:21:27 +0000 Certificate not after: Wed 14 Apr 2027 07:26:27 +0000 Subordinate resources: AS: 139090 IP: 103.139.172.0/23 IP: 2404:e8c0::/32 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 17:12:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:29:29:55:e4:76:81:9b:e1:c4:af:d4:e3:b6:f3:9d:93:9e:86:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Validity Not Before: Apr 15 07:21:27 2026 GMT Not After : Apr 14 07:26:27 2027 GMT Subject: CN=3F3C605DF60C54D00505BCD8C0C6F7A38B0AE3D3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:19:d6:2e:b3:e1:c7:43:f0:81:56:dc:b5:58: 16:41:c8:84:fd:1a:b3:d9:27:cd:2b:35:3c:72:24: 28:07:ff:8f:b1:ef:9c:9c:3d:f4:bb:e9:44:db:f4: 41:e9:44:a2:f0:e7:b3:39:0e:3d:62:52:9c:cc:75: 04:5e:20:7f:64:75:ed:4e:fc:64:fe:c9:f4:8a:ce: 80:8b:a9:e4:64:09:03:2f:0e:9e:14:5a:2e:47:2a: 54:b3:ef:00:f5:4d:77:cd:15:96:9e:0b:5c:10:de: 81:06:28:1e:39:ca:6c:c3:b1:e6:7a:bb:4f:fc:e9: 25:12:cd:0c:ab:9f:d7:6c:de:c3:01:d6:e8:27:00: e4:9a:66:63:c8:69:20:07:de:65:40:69:46:7f:37: bc:89:2e:6d:3e:1e:55:10:2d:cb:d9:ba:a1:8d:36: 5a:23:e0:9c:9a:0d:8b:89:b9:24:8b:d2:e0:05:cc: c3:53:a8:64:7e:21:1c:3e:ec:fb:ac:4b:44:54:44: 1b:79:c0:27:fd:5f:dd:66:c0:a7:47:8a:11:6f:11: f8:69:6a:bf:5e:fc:eb:e4:7e:bb:56:f5:c8:e8:50: ba:29:bf:f7:e2:1f:00:ab:8a:2f:84:6e:d6:04:b9: 7e:a4:8a:40:d8:5f:7f:c5:fa:e0:f0:57:dc:cc:71: 51:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 3F:3C:60:5D:F6:0C:54:D0:05:05:BC:D8:C0:C6:F7:A3:8B:0A:E3:D3 X509v3 Authority Key Identifier: keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1096698029873823747/0/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1096698029873823747/0/3F3C605DF60C54D00505BCD8C0C6F7A38B0AE3D3.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.139.172.0/23 IPv6: 2404:e8c0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 139090 Signature Algorithm: sha256WithRSAEncryption 0c:23:7d:c7:80:40:f3:54:55:9c:3b:f7:9b:12:fa:11:1f:3b: 3d:df:c0:ac:08:c8:c5:00:bd:94:f0:40:d4:eb:2c:47:39:1d: 55:83:f7:40:50:c4:17:bd:39:be:c6:25:d8:41:d9:2c:42:d4: cc:8f:f1:27:c9:00:21:75:b6:c4:eb:2b:e9:00:b9:57:ef:34: a9:0e:21:99:b2:51:84:56:19:7a:32:ca:72:9e:4a:47:d7:01: e9:ae:fa:cc:dd:0c:37:a9:56:70:72:c5:a3:3a:ee:53:cd:56: ff:68:bb:c1:9f:77:d6:c3:f6:b4:35:b9:c0:db:5c:9c:bb:b9: 3a:d9:a8:38:2b:59:e6:26:6d:f0:93:dd:43:d8:ab:d2:47:8d: 2d:6a:3d:69:d2:93:8d:f0:e7:2a:24:27:67:57:8b:37:90:f3: d0:46:47:8f:b2:63:bb:c0:55:6b:97:c3:12:ff:3a:59:f3:a8: 66:a7:ce:e8:e6:9d:d0:10:65:07:91:4d:4d:8d:6f:c2:70:13: a0:0a:52:55:7a:99:83:5b:a9:06:5b:b4:8b:cd:19:d5:9e:5f: 21:07:fb:5d:1c:a7:0b:f5:aa:6d:63:fa:07:9b:c9:0c:a5:29: 40:a8:7a:e9:67:9a:93:d2:35:bd:fd:cc:82:b8:76:67:e4:6c: c9:81:4b:04 -----BEGIN CERTIFICATE----- MIIF0jCCBLqgAwIBAgIUOykpVeR2gZvhxK/U47bznZOehjUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDQxNTA3MjEyN1oX DTI3MDQxNDA3MjYyN1owMzExMC8GA1UEAxMoM0YzQzYwNURGNjBDNTREMDA1MDVC Q0Q4QzBDNkY3QTM4QjBBRTNEMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKYZ1i6z4cdD8IFW3LVYFkHIhP0as9knzSs1PHIkKAf/j7HvnJw99LvpRNv0 QelEovDnszkOPWJSnMx1BF4gf2R17U78ZP7J9IrOgIup5GQJAy8OnhRaLkcqVLPv APVNd80Vlp4LXBDegQYoHjnKbMOx5nq7T/zpJRLNDKuf12zewwHW6CcA5JpmY8hp IAfeZUBpRn83vIkubT4eVRAty9m6oY02WiPgnJoNi4m5JIvS4AXMw1OoZH4hHD7s +6xLRFREG3nAJ/1f3WbAp0eKEW8R+Glqv1786+R+u1b1yOhQuim/9+IfAKuKL4Ru 1gS5fqSKQNhff8X64PBX3MxxUZUCAwEAAaOCAsUwggLBMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFD88YF32DFTQBQW82MDG96OLCuPTMB8GA1UdIwQYMBaAFKVu hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTA5NjY5ODAyOTg3MzgyMzc0Ny8wLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDk2Njk4MDI5ODczODIzNzQ3 LzAvM0YzQzYwNURGNjBDNTREMDA1MDVCQ0Q4QzBDNkY3QTM4QjBBRTNEMy5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUH AQcBAf8EHzAdMAwEAgABMAYDBAFni6wwDQQCAAIwBwMFACQE6MAwGgYIKwYBBQUH AQgBAf8ECzAJoAcwBQIDAh9SMA0GCSqGSIb3DQEBCwUAA4IBAQAMI33HgEDzVFWc O/ebEvoRHzs938CsCMjFAL2U8EDU6yxHOR1Vg/dAUMQXvTm+xiXYQdksQtTMj/En yQAhdbbE6yvpALlX7zSpDiGZslGEVhl6MspynkpH1wHprvrM3Qw3qVZwcsWjOu5T zVb/aLvBn3fWw/a0NbnA21ycu7k62ag4K1nmJm3wk91D2KvSR40taj1p0pON8Ocq JCdnV4s3kPPQRkePsmO7wFVrl8MS/zpZ86hmp87o5p3QEGUHkU1NjW/CcBOgClJV epmDW6kGW7SLzRnVnl8hB/tdHKcL9aptY/oHm8kMpSlAqHrpZ5qT0jW9/cyCuHZn 5GzJgUsE -----END CERTIFICATE-----Generated at Fri Apr 17 17:51:41 2026 by rpki-client