$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/0/7C559A00840D00325B45D7F6A7C10EDBD2ED69AF.cer File: 7C559A00840D00325B45D7F6A7C10EDBD2ED69AF.cer (raw, json) Hash identifier: 5JjTimtS+qGSzhihZx/K7UjvwQLnTx+q7QblF0QRSK4= Subject key identifier: 7C:55:9A:00:84:0D:00:32:5B:45:D7:F6:A7:C1:0E:DB:D2:ED:69:AF Authority key identifier: CB:02:14:A5:C4:04:D6:F8:40:43:3B:12:0C:AC:BB:5B:8C:59:E6:13 Certificate issuer: /CN=A9162E3D0001/serialNumber=CB0214A5C404D6F840433B120CACBB5B8C59E613 Certificate serial: 7EBB608AB2F614CFD62CD6314D13E5B2D0589375 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1096265459348537346/0/7C559A00840D00325B45D7F6A7C10EDBD2ED69AF.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1096265459348537346/0/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Fri 29 May 2026 08:32:09 +0000 Certificate not after: Fri 28 May 2027 08:37:09 +0000 Subordinate resources: IP: 167.189.0.0/16 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Jun 2026 13:43:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:bb:60:8a:b2:f6:14:cf:d6:2c:d6:31:4d:13:e5:b2:d0:58:93:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=CB0214A5C404D6F840433B120CACBB5B8C59E613 Validity Not Before: May 29 08:32:09 2026 GMT Not After : May 28 08:37:09 2027 GMT Subject: CN=7C559A00840D00325B45D7F6A7C10EDBD2ED69AF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:79:7b:64:48:fb:88:96:c8:e8:a2:5f:e8:3a: a8:7e:7c:2d:eb:c1:e9:b9:45:58:cd:23:1c:45:55: ee:69:c6:a9:b7:a4:e2:d4:8d:f0:fa:55:5b:73:4b: 6e:06:a4:ce:75:d9:47:b9:b3:a2:4d:67:a3:73:71: 07:2a:fb:d8:a1:c4:27:fc:cc:2b:74:76:7c:bc:a4: 49:89:20:9d:fa:52:59:60:a8:8f:4a:28:9a:49:6b: 0c:c4:83:af:a2:2e:b1:57:23:cb:11:14:25:af:f8: 37:7b:f6:9a:a2:dc:74:71:fa:37:24:64:37:84:21: 2f:51:1b:0a:8c:54:5a:8f:eb:87:d1:e6:92:e6:9f: 59:1b:77:05:4b:ec:47:6f:ec:b0:1b:44:d7:d1:a4: f7:76:c8:45:dc:60:2f:da:5c:c4:77:91:3d:77:af: e1:fa:5e:a0:b6:4f:77:4e:19:75:36:76:af:c1:7a: 4d:c3:c3:61:d3:0d:fa:4c:40:92:e1:33:69:0a:4d: 64:46:bd:06:e8:ca:17:93:26:d6:97:24:60:42:2d: 29:c9:32:3a:a4:07:40:f1:3f:28:55:d4:60:fb:0a: f8:f7:7e:b6:70:60:8b:bf:1a:a8:ef:f5:43:2a:18: f2:98:2e:e1:81:96:61:8b:05:bf:b5:fb:ab:d0:24: f8:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 7C:55:9A:00:84:0D:00:32:5B:45:D7:F6:A7:C1:0E:DB:D2:ED:69:AF X509v3 Authority Key Identifier: keyid:CB:02:14:A5:C4:04:D6:F8:40:43:3B:12:0C:AC:BB:5B:8C:59:E6:13 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1096265459348537346/0/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1096265459348537346/0/7C559A00840D00325B45D7F6A7C10EDBD2ED69AF.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 167.189.0.0/16 Signature Algorithm: sha256WithRSAEncryption 96:2a:15:e0:d8:38:a8:10:af:14:b7:61:20:e1:41:ed:c7:a9: 02:66:b4:7f:8a:42:d7:50:d6:88:04:a5:bd:4e:88:37:0b:df: 68:83:2c:08:ad:8e:ab:0f:0b:22:24:87:09:95:c1:48:69:f4: fa:e4:f3:7f:d5:d5:52:0c:df:52:08:7d:a4:b7:fa:62:58:8a: dd:cc:c0:e7:6a:91:20:68:62:57:b7:f2:e0:9b:8d:a0:b8:d7: f3:71:aa:b9:7a:cf:a8:2e:d1:8a:06:3c:5a:a7:2d:af:3b:a0: b6:23:ff:ad:9c:c2:e2:de:2e:4e:bd:5e:64:6e:ed:c9:0b:61: 21:b8:1e:14:b3:6e:1c:b8:6b:30:6d:0e:1a:12:0e:52:e9:40: 0d:9f:86:49:6f:bf:9b:d1:2b:38:ee:92:f4:21:9c:49:c7:e7: 10:3b:ed:64:7c:b5:1e:53:7b:e5:1d:29:f5:a0:ad:0d:98:56: 6a:7a:e7:9a:d8:79:f5:dc:63:5f:55:5f:ba:f0:1e:dd:01:cb: af:53:4b:e0:02:63:1c:79:68:7c:d1:25:5b:c9:05:57:6d:34: da:c0:04:e7:67:c7:7f:26:55:a8:ad:c4:eb:e4:90:94:76:2d: 2e:f5:b0:ea:fa:5d:bc:64:3b:5e:ed:0a:a0:00:62:8e:ab:29: ea:ab:9d:da -----BEGIN CERTIFICATE----- MIIFpjCCBI6gAwIBAgIUfrtgirL2FM/WLNYxTRPlstBYk3UwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhDQjAyMTRBNUM0 MDRENkY4NDA0MzNCMTIwQ0FDQkI1QjhDNTlFNjEzMB4XDTI2MDUyOTA4MzIwOVoX DTI3MDUyODA4MzcwOVowMzExMC8GA1UEAxMoN0M1NTlBMDA4NDBEMDAzMjVCNDVE N0Y2QTdDMTBFREJEMkVENjlBRjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMB5e2RI+4iWyOiiX+g6qH58LevB6blFWM0jHEVV7mnGqbek4tSN8PpVW3NL bgakznXZR7mzok1no3NxByr72KHEJ/zMK3R2fLykSYkgnfpSWWCoj0oomklrDMSD r6IusVcjyxEUJa/4N3v2mqLcdHH6NyRkN4QhL1EbCoxUWo/rh9HmkuafWRt3BUvs R2/ssBtE19Gk93bIRdxgL9pcxHeRPXev4fpeoLZPd04ZdTZ2r8F6TcPDYdMN+kxA kuEzaQpNZEa9BujKF5Mm1pckYEItKckyOqQHQPE/KFXUYPsK+Pd+tnBgi78aqO/1 QyoY8pgu4YGWYYsFv7X7q9Ak+IECAwEAAaOCApkwggKVMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFHxVmgCEDQAyW0XX9qfBDtvS7WmvMB8GA1UdIwQYMBaAFMsC FKXEBNb4QEM7Egysu1uMWeYTMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMC9DQjAyMTRBNUM0MDRENkY4NDA0MzNCMTIwQ0FDQkI1QjhDNTlF NjEzLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CM0EyNEYyMDFENjYxMUUyOEFDODgzN0M3 MkZEMUZGMi95d0lVcGNRRTF2aEFRenNTREt5N1c0eFo1aE0uY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTA5NjI2NTQ1OTM0ODUzNzM0Ni8wLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDk2MjY1NDU5MzQ4NTM3MzQ2 LzAvN0M1NTlBMDA4NDBEMDAzMjVCNDVEN0Y2QTdDMTBFREJEMkVENjlBRi5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUH AQcBAf8EDzANMAsEAgABMAUDAwCnvTANBgkqhkiG9w0BAQsFAAOCAQEAlioV4Ng4 qBCvFLdhIOFB7cepAma0f4pC11DWiASlvU6INwvfaIMsCK2Oqw8LIiSHCZXBSGn0 +uTzf9XVUgzfUgh9pLf6YliK3czA52qRIGhiV7fy4JuNoLjX83GquXrPqC7RigY8 WqctrzugtiP/rZzC4t4uTr1eZG7tyQthIbgeFLNuHLhrMG0OGhIOUulADZ+GSW+/ m9ErOO6S9CGcScfnEDvtZHy1HlN75R0p9aCtDZhWanrnmth59dxjX1VfuvAe3QHL r1NL4AJjHHlofNElW8kFV2002sAE52fHfyZVqK3E6+SQlHYtLvWw6vpdvGQ7Xu0K oABijqsp6qud2g== -----END CERTIFICATE-----Generated at Thu Jun 4 14:12:01 2026 by rpki-client