$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/0/17DD38B4C590466DEEF7787C50E3FA39B047C6AC.cer File: 17DD38B4C590466DEEF7787C50E3FA39B047C6AC.cer (raw, json) Hash identifier: 6otR6174497Dj0fv1dLxKVkiIsAmP56NwjXnApvAdiw= Subject key identifier: 17:DD:38:B4:C5:90:46:6D:EE:F7:78:7C:50:E3:FA:39:B0:47:C6:AC Authority key identifier: CB:02:14:A5:C4:04:D6:F8:40:43:3B:12:0C:AC:BB:5B:8C:59:E6:13 Certificate issuer: /CN=A9162E3D0001/serialNumber=CB0214A5C404D6F840433B120CACBB5B8C59E613 Certificate serial: 0B4D7165FEC978F3C3ED3C3773546C1A0C6FE652 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1112266204052979731/0/17DD38B4C590466DEEF7787C50E3FA39B047C6AC.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1112266204052979731/0/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Thu 28 May 2026 06:23:50 +0000 Certificate not after: Thu 27 May 2027 06:28:50 +0000 Subordinate resources: IP: 162.4.198.0/23 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Jun 2026 13:43:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:4d:71:65:fe:c9:78:f3:c3:ed:3c:37:73:54:6c:1a:0c:6f:e6:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=CB0214A5C404D6F840433B120CACBB5B8C59E613 Validity Not Before: May 28 06:23:50 2026 GMT Not After : May 27 06:28:50 2027 GMT Subject: CN=17DD38B4C590466DEEF7787C50E3FA39B047C6AC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:3b:74:ad:c8:f0:d7:c7:f5:b8:9f:11:41:26: 1a:ef:3d:9e:3b:7d:a5:d9:c7:0f:3c:a0:2c:25:af: d7:67:ac:fd:3d:0b:28:38:ba:88:6f:1a:04:20:76: 09:98:62:ba:3c:f2:8e:a9:3c:66:03:e6:11:c5:05: 3e:70:7e:36:bd:c3:f7:29:bb:95:ce:75:c3:d0:7c: 51:91:c1:40:eb:1a:96:33:59:7b:1b:64:2b:f1:40: fa:03:88:44:95:99:bb:19:a0:e8:06:79:79:89:9e: bf:d7:8f:18:c2:db:0e:89:ae:f6:e0:f1:6a:ba:20: 3b:69:9d:6f:cb:16:a9:00:11:2a:bc:59:28:dd:77: 92:8e:3d:f9:6d:67:07:1f:e2:f5:66:97:83:32:be: e5:d8:83:9a:42:8a:17:40:22:42:d7:34:cd:1d:62: 7a:d1:f2:33:d9:25:3f:e8:b3:5d:4d:4f:fe:65:35: 44:75:ab:93:c9:5d:a0:c1:a6:7a:7a:6f:56:2c:25: 2a:8f:7d:b4:6f:b3:ee:e8:7b:ef:05:be:bf:70:22: 1b:3d:f0:07:2a:cf:e4:1d:a5:de:bf:5a:ad:a6:29: 56:98:93:fb:2b:c7:24:4f:4c:78:43:ef:f9:10:e3: 0e:0b:ad:66:ae:d3:44:ec:2d:12:0a:9c:c5:99:83: 2f:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 17:DD:38:B4:C5:90:46:6D:EE:F7:78:7C:50:E3:FA:39:B0:47:C6:AC X509v3 Authority Key Identifier: keyid:CB:02:14:A5:C4:04:D6:F8:40:43:3B:12:0C:AC:BB:5B:8C:59:E6:13 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1112266204052979731/0/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1112266204052979731/0/17DD38B4C590466DEEF7787C50E3FA39B047C6AC.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 162.4.198.0/23 Signature Algorithm: sha256WithRSAEncryption 7b:39:59:02:6a:f6:05:e3:87:44:ca:04:8b:53:3f:43:c4:99: 6f:7f:3c:21:26:a5:99:a8:6a:d2:53:78:e0:dd:a3:34:d6:55: e4:b7:94:99:3a:e2:a8:2c:53:8b:bd:d3:f5:3e:86:88:df:3f: 05:b7:b8:99:de:d9:ee:e3:5f:a1:4f:80:2b:1b:6b:cf:e9:e6: 3d:3b:9d:d7:4e:10:68:01:65:df:b9:7e:49:ab:de:e4:dd:fe: bc:d7:02:6c:cf:9d:c5:c5:71:ac:7c:a9:b0:db:1a:60:c5:e6: e7:83:45:a1:26:15:6f:ed:7d:c0:d5:63:d9:61:19:99:db:e4: 1c:3b:c6:a8:a3:b3:34:18:07:61:4f:0d:bf:1e:46:5b:5f:20: 5d:f7:4c:86:82:79:f1:69:af:32:2f:e2:54:fb:ca:5b:35:de: 3a:87:55:a4:a6:28:6e:d9:03:84:3d:a6:10:f2:06:25:ed:3d: 43:cd:4b:01:6c:15:d9:12:b3:55:43:76:e9:97:9e:66:59:e2: a1:5a:ab:2d:06:ff:59:4d:86:e0:bd:7e:e1:9f:71:58:af:fe: d8:40:3e:4b:bb:84:8a:a3:44:9c:0f:fe:a6:14:03:0f:78:44: 64:57:d2:59:3b:4d:65:9e:55:7e:fb:15:e7:cf:b1:e0:bc:df: 1d:a7:59:d2 -----BEGIN CERTIFICATE----- MIIFpzCCBI+gAwIBAgIUC01xZf7JePPD7Tw3c1RsGgxv5lIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhDQjAyMTRBNUM0 MDRENkY4NDA0MzNCMTIwQ0FDQkI1QjhDNTlFNjEzMB4XDTI2MDUyODA2MjM1MFoX DTI3MDUyNzA2Mjg1MFowMzExMC8GA1UEAxMoMTdERDM4QjRDNTkwNDY2REVFRjc3 ODdDNTBFM0ZBMzlCMDQ3QzZBQzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMg7dK3I8NfH9bifEUEmGu89njt9pdnHDzygLCWv12es/T0LKDi6iG8aBCB2 CZhiujzyjqk8ZgPmEcUFPnB+Nr3D9ym7lc51w9B8UZHBQOsaljNZextkK/FA+gOI RJWZuxmg6AZ5eYmev9ePGMLbDomu9uDxarogO2mdb8sWqQARKrxZKN13ko49+W1n Bx/i9WaXgzK+5diDmkKKF0AiQtc0zR1ietHyM9klP+izXU1P/mU1RHWrk8ldoMGm enpvViwlKo99tG+z7uh77wW+v3AiGz3wByrP5B2l3r9araYpVpiT+yvHJE9MeEPv +RDjDgutZq7TROwtEgqcxZmDLzkCAwEAAaOCApowggKWMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFBfdOLTFkEZt7vd4fFDj+jmwR8asMB8GA1UdIwQYMBaAFMsC FKXEBNb4QEM7Egysu1uMWeYTMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMC9DQjAyMTRBNUM0MDRENkY4NDA0MzNCMTIwQ0FDQkI1QjhDNTlF NjEzLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CM0EyNEYyMDFENjYxMUUyOEFDODgzN0M3 MkZEMUZGMi95d0lVcGNRRTF2aEFRenNTREt5N1c0eFo1aE0uY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTExMjI2NjIwNDA1Mjk3OTczMS8wLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMTEyMjY2MjA0MDUyOTc5NzMx LzAvMTdERDM4QjRDNTkwNDY2REVFRjc3ODdDNTBFM0ZBMzlCMDQ3QzZBQy5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAGiBMYwDQYJKoZIhvcNAQELBQADggEBAHs5WQJq 9gXjh0TKBItTP0PEmW9/PCEmpZmoatJTeODdozTWVeS3lJk64qgsU4u90/U+hojf PwW3uJne2e7jX6FPgCsba8/p5j07nddOEGgBZd+5fkmr3uTd/rzXAmzPncXFcax8 qbDbGmDF5ueDRaEmFW/tfcDVY9lhGZnb5Bw7xqijszQYB2FPDb8eRltfIF33TIaC efFprzIv4lT7yls13jqHVaSmKG7ZA4Q9phDyBiXtPUPNSwFsFdkSs1VDdumXnmZZ 4qFaqy0G/1lNhuC9fuGfcViv/thAPku7hIqjRJwP/qYUAw94RGRX0lk7TWWeVX77 FefPseC83x2nWdI= -----END CERTIFICATE-----Generated at Thu Jun 4 14:06:21 2026 by rpki-client