$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/0/0503C0DCF2359A63935CA42978F7E95CF29425AD.cer File: 0503C0DCF2359A63935CA42978F7E95CF29425AD.cer (raw, json) Hash identifier: plK1KSLvYm6XvKfSYuzuD7uMslcHdAKZEcx+2GUdYq8= Subject key identifier: 05:03:C0:DC:F2:35:9A:63:93:5C:A4:29:78:F7:E9:5C:F2:94:25:AD Authority key identifier: CB:02:14:A5:C4:04:D6:F8:40:43:3B:12:0C:AC:BB:5B:8C:59:E6:13 Certificate issuer: /CN=A9162E3D0001/serialNumber=CB0214A5C404D6F840433B120CACBB5B8C59E613 Certificate serial: 7BA12DDDAB341311FB99A2EEC5343EDC0F0D5421 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1096301149373399041/0/0503C0DCF2359A63935CA42978F7E95CF29425AD.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1096301149373399041/0/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Fri 29 May 2026 08:35:02 +0000 Certificate not after: Fri 28 May 2027 08:40:02 +0000 Subordinate resources: IP: 157.66.244.0/23 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Jun 2026 13:43:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:a1:2d:dd:ab:34:13:11:fb:99:a2:ee:c5:34:3e:dc:0f:0d:54:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=CB0214A5C404D6F840433B120CACBB5B8C59E613 Validity Not Before: May 29 08:35:02 2026 GMT Not After : May 28 08:40:02 2027 GMT Subject: CN=0503C0DCF2359A63935CA42978F7E95CF29425AD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:13:0c:a0:00:66:9c:94:7b:78:31:ee:cb:e0: 85:b7:38:4e:b9:d1:0d:29:5b:c9:1d:dc:4d:0e:31: bd:cc:22:3b:40:78:be:77:f5:93:09:d2:13:b5:86: 00:31:d6:a1:7b:09:70:48:6f:10:9f:93:34:bd:eb: 22:37:69:b1:ef:45:58:1a:a2:62:d2:f4:ce:77:62: 7d:39:8a:f7:19:4e:29:a8:69:c1:c1:ef:71:6b:9e: 69:8e:7d:1d:55:93:ee:a9:3f:7f:83:74:52:eb:10: c8:9c:9b:6a:3e:58:8b:f0:f3:be:10:c8:90:51:b1: f0:d1:c4:8c:50:3a:63:9d:c3:bc:09:ee:68:6b:6d: ec:c8:88:cb:c4:1d:4c:b6:f7:91:83:c2:ee:46:c3: 50:05:75:31:70:31:50:49:5c:fb:7a:e4:dd:e7:4a: 06:4b:ae:33:56:a1:6a:0a:67:c9:fc:3d:b5:64:49: 5d:f0:82:5b:62:1b:66:6b:62:f9:95:19:69:20:0f: 24:5f:87:92:e0:cc:1b:28:89:8b:ae:04:6f:37:be: ec:7a:ad:d7:23:1a:be:d4:bc:2f:08:fc:2a:ef:89: b5:e9:81:98:ad:e2:aa:f8:20:18:e2:03:a1:5a:b5: 01:3f:3f:93:d8:f7:88:bd:e1:d4:04:3b:ec:ab:5a: 73:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 05:03:C0:DC:F2:35:9A:63:93:5C:A4:29:78:F7:E9:5C:F2:94:25:AD X509v3 Authority Key Identifier: keyid:CB:02:14:A5:C4:04:D6:F8:40:43:3B:12:0C:AC:BB:5B:8C:59:E6:13 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1096301149373399041/0/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1096301149373399041/0/0503C0DCF2359A63935CA42978F7E95CF29425AD.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.66.244.0/23 Signature Algorithm: sha256WithRSAEncryption 84:10:9a:43:5a:77:31:bd:26:b5:8c:16:6b:e5:81:a6:ac:19: 55:07:47:5b:82:c6:21:8d:a9:f5:c5:5c:a1:7f:a4:f6:bb:39: cb:90:1f:0d:2b:d3:cf:73:1f:9d:14:79:86:9f:c1:4f:e8:27: 29:18:cf:bd:30:aa:8c:e6:10:07:35:74:d8:ee:14:a3:79:5b: 19:47:26:e8:fd:79:b6:d2:da:0d:df:66:e1:be:34:37:05:03: 00:a6:41:db:3d:36:05:03:2f:15:0b:f8:ee:0d:a7:87:af:23: 10:b1:98:54:82:2f:5d:a2:03:bb:6f:5b:81:c0:36:4f:e7:bd: 97:f0:26:d6:77:3d:bf:cc:86:b4:4e:b2:21:bb:6f:c5:64:27: 59:41:ab:7e:f7:de:24:fd:21:c8:92:39:0f:08:f8:12:6d:0a: 06:08:e6:76:35:05:0f:f9:9e:b5:7d:72:23:45:89:91:6f:75: 96:5c:d8:5c:15:d8:25:ff:62:19:ba:f5:54:3a:e1:04:2d:c8: 28:ea:aa:09:9f:6d:ff:78:51:37:08:4d:b3:40:91:b0:cd:e7: 58:49:af:35:51:8c:29:01:35:3c:03:75:de:a9:0d:15:87:1f: 80:f8:68:4d:f3:3b:1f:16:aa:43:1d:7d:1f:a4:99:0a:f3:a8: fa:c9:d7:e8 -----BEGIN CERTIFICATE----- MIIFpzCCBI+gAwIBAgIUe6Et3as0ExH7maLuxTQ+3A8NVCEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhDQjAyMTRBNUM0 MDRENkY4NDA0MzNCMTIwQ0FDQkI1QjhDNTlFNjEzMB4XDTI2MDUyOTA4MzUwMloX DTI3MDUyODA4NDAwMlowMzExMC8GA1UEAxMoMDUwM0MwRENGMjM1OUE2MzkzNUNB NDI5NzhGN0U5NUNGMjk0MjVBRDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALkTDKAAZpyUe3gx7svghbc4TrnRDSlbyR3cTQ4xvcwiO0B4vnf1kwnSE7WG ADHWoXsJcEhvEJ+TNL3rIjdpse9FWBqiYtL0zndifTmK9xlOKahpwcHvcWueaY59 HVWT7qk/f4N0UusQyJybaj5Yi/DzvhDIkFGx8NHEjFA6Y53DvAnuaGtt7MiIy8Qd TLb3kYPC7kbDUAV1MXAxUElc+3rk3edKBkuuM1ahagpnyfw9tWRJXfCCW2IbZmti +ZUZaSAPJF+HkuDMGyiJi64Ebze+7Hqt1yMavtS8Lwj8Ku+JtemBmK3iqvggGOID oVq1AT8/k9j3iL3h1AQ77Ktac7MCAwEAAaOCApowggKWMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFAUDwNzyNZpjk1ykKXj36VzylCWtMB8GA1UdIwQYMBaAFMsC FKXEBNb4QEM7Egysu1uMWeYTMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMC9DQjAyMTRBNUM0MDRENkY4NDA0MzNCMTIwQ0FDQkI1QjhDNTlF NjEzLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CM0EyNEYyMDFENjYxMUUyOEFDODgzN0M3 MkZEMUZGMi95d0lVcGNRRTF2aEFRenNTREt5N1c0eFo1aE0uY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTA5NjMwMTE0OTM3MzM5OTA0MS8wLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDk2MzAxMTQ5MzczMzk5MDQx LzAvMDUwM0MwRENGMjM1OUE2MzkzNUNBNDI5NzhGN0U5NUNGMjk0MjVBRC5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAGdQvQwDQYJKoZIhvcNAQELBQADggEBAIQQmkNa dzG9JrWMFmvlgaasGVUHR1uCxiGNqfXFXKF/pPa7OcuQHw0r089zH50UeYafwU/o JykYz70wqozmEAc1dNjuFKN5WxlHJuj9ebbS2g3fZuG+NDcFAwCmQds9NgUDLxUL +O4Np4evIxCxmFSCL12iA7tvW4HANk/nvZfwJtZ3Pb/MhrROsiG7b8VkJ1lBq373 3iT9IciSOQ8I+BJtCgYI5nY1BQ/5nrV9ciNFiZFvdZZc2FwV2CX/Yhm69VQ64QQt yCjqqgmfbf94UTcITbNAkbDN51hJrzVRjCkBNTwDdd6pDRWHH4D4aE3zOx8WqkMd fR+kmQrzqPrJ1+g= -----END CERTIFICATE-----Generated at Thu Jun 4 14:12:15 2026 by rpki-client