$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/0/855381EC93CF009732540F616E4905D544D838C8.cer File: 855381EC93CF009732540F616E4905D544D838C8.cer (raw, json) Hash identifier: JrZFKbARUjhG4qGrN8wECk6R4WcvI4rbaY7ZS5NDP3U= Subject key identifier: 85:53:81:EC:93:CF:00:97:32:54:0F:61:6E:49:05:D5:44:D8:38:C8 Authority key identifier: CB:02:14:A5:C4:04:D6:F8:40:43:3B:12:0C:AC:BB:5B:8C:59:E6:13 Certificate issuer: /CN=A9162E3D0001/serialNumber=CB0214A5C404D6F840433B120CACBB5B8C59E613 Certificate serial: 538FCB782C9316E555A81838323CE8BE78A0377B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/1/855381EC93CF009732540F616E4905D544D838C8.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/1/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Fri 29 May 2026 08:51:09 +0000 Certificate not after: Fri 28 May 2027 08:56:09 +0000 Subordinate resources: IP: 158.140.252.0/22 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Jun 2026 13:43:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:8f:cb:78:2c:93:16:e5:55:a8:18:38:32:3c:e8:be:78:a0:37:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=CB0214A5C404D6F840433B120CACBB5B8C59E613 Validity Not Before: May 29 08:51:09 2026 GMT Not After : May 28 08:56:09 2027 GMT Subject: CN=855381EC93CF009732540F616E4905D544D838C8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:3c:8a:cb:ec:8c:bf:d5:29:86:9d:36:9d:3f: be:10:75:1e:b6:b0:5f:34:b8:b8:40:59:89:d6:9e: 38:9d:36:b9:21:c1:0d:3b:a2:98:f4:8e:98:6f:95: cb:23:9b:d6:6b:5b:37:85:aa:82:b3:11:eb:5e:c8: 58:ad:42:ff:a6:34:77:9e:b7:dd:89:30:fd:d5:14: 4b:85:4a:62:a2:00:bd:62:11:35:4e:7d:57:6c:95: dd:20:f8:8c:da:e3:bb:35:75:6f:5f:1a:e7:54:7b: 44:55:dc:93:f5:01:4d:b5:e0:86:43:9f:cf:8b:e1: df:1f:37:fa:5d:91:c2:cb:f3:3a:68:23:cb:10:fc: 34:f7:0c:b0:39:e2:5b:0f:b3:c6:ed:92:4f:45:b2: 45:3f:5c:20:0d:df:14:e4:f0:30:28:5e:ed:db:eb: f5:d1:33:2f:f7:04:c2:54:fb:63:0e:a0:6b:5e:7a: 0d:76:3f:96:57:4c:46:ce:7c:39:74:55:a7:98:b5: 93:f2:d3:72:03:24:35:78:7e:c4:6f:be:2a:62:f5: 7d:56:bd:de:d1:05:65:6a:bf:32:0b:b1:3a:b6:ef: 1a:14:46:6b:a5:3a:7a:8b:c4:6e:84:96:b3:84:c6: 8b:7b:4d:db:96:95:11:9a:26:ac:fa:66:f7:28:31: fa:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 85:53:81:EC:93:CF:00:97:32:54:0F:61:6E:49:05:D5:44:D8:38:C8 X509v3 Authority Key Identifier: keyid:CB:02:14:A5:C4:04:D6:F8:40:43:3B:12:0C:AC:BB:5B:8C:59:E6:13 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/1/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/1/855381EC93CF009732540F616E4905D544D838C8.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 158.140.252.0/22 Signature Algorithm: sha256WithRSAEncryption c1:fe:40:3b:6b:9a:9b:a2:22:8f:15:db:64:32:33:dd:1a:de: ea:b4:0e:93:90:c5:2f:32:04:5e:b2:3d:ac:68:df:69:06:24: 9c:16:d4:cf:6c:0c:61:64:9a:9d:a4:81:5c:26:77:04:5d:5f: 6d:3b:8d:a2:8d:3d:1c:a3:43:f9:3d:05:83:70:15:2f:06:cb: 1c:ad:90:92:e6:cd:29:f0:60:24:5e:27:00:b1:67:4c:97:72: 49:f9:01:8d:4b:aa:40:24:0a:34:01:ea:a9:34:51:17:8a:cc: 7a:96:cc:37:b9:a5:ae:e2:3f:3b:a9:38:f9:da:ed:73:c0:ee: 3b:df:e1:6e:f2:a1:e0:98:3f:47:7c:7c:54:6e:07:c2:ba:e6: 3c:71:70:d7:ea:7a:d2:e8:4b:f2:50:e9:7b:36:6d:5f:4d:c6: 9b:f3:bc:05:7c:6e:ee:cf:8f:54:ab:41:2a:ff:5f:ce:0b:14: cf:b0:f9:fb:98:52:fc:1f:12:6e:b9:78:d4:36:14:8d:03:7f: 74:cd:8e:80:23:a2:5b:53:66:c8:7c:fe:13:09:f8:5c:ea:6b: e6:18:8b:e2:22:95:07:b6:9d:b8:70:75:6d:11:f6:62:a6:63: 2e:1c:ad:64:0f:87:6d:88:ae:a8:03:c2:09:66:30:60:60:45: 0e:0d:ce:2b -----BEGIN CERTIFICATE----- MIIFpzCCBI+gAwIBAgIUU4/LeCyTFuVVqBg4MjzovnigN3swDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhDQjAyMTRBNUM0 MDRENkY4NDA0MzNCMTIwQ0FDQkI1QjhDNTlFNjEzMB4XDTI2MDUyOTA4NTEwOVoX DTI3MDUyODA4NTYwOVowMzExMC8GA1UEAxMoODU1MzgxRUM5M0NGMDA5NzMyNTQw RjYxNkU0OTA1RDU0NEQ4MzhDODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOM8isvsjL/VKYadNp0/vhB1HrawXzS4uEBZidaeOJ02uSHBDTuimPSOmG+V yyOb1mtbN4WqgrMR617IWK1C/6Y0d5633Ykw/dUUS4VKYqIAvWIRNU59V2yV3SD4 jNrjuzV1b18a51R7RFXck/UBTbXghkOfz4vh3x83+l2RwsvzOmgjyxD8NPcMsDni Ww+zxu2ST0WyRT9cIA3fFOTwMChe7dvr9dEzL/cEwlT7Yw6ga156DXY/lldMRs58 OXRVp5i1k/LTcgMkNXh+xG++KmL1fVa93tEFZWq/MguxOrbvGhRGa6U6eovEboSW s4TGi3tN25aVEZomrPpm9ygx+pUCAwEAAaOCApowggKWMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFIVTgeyTzwCXMlQPYW5JBdVE2DjIMB8GA1UdIwQYMBaAFMsC FKXEBNb4QEM7Egysu1uMWeYTMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMC9DQjAyMTRBNUM0MDRENkY4NDA0MzNCMTIwQ0FDQkI1QjhDNTlF NjEzLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CM0EyNEYyMDFENjYxMUUyOEFDODgzN0M3 MkZEMUZGMi95d0lVcGNRRTF2aEFRenNTREt5N1c0eFo1aE0uY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTA2NTU3NzI0MTk0NzYwMjk0NS8xLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDY1NTc3MjQxOTQ3NjAyOTQ1 LzEvODU1MzgxRUM5M0NGMDA5NzMyNTQwRjYxNkU0OTA1RDU0NEQ4MzhDOC5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAKejPwwDQYJKoZIhvcNAQELBQADggEBAMH+QDtr mpuiIo8V22QyM90a3uq0DpOQxS8yBF6yPaxo32kGJJwW1M9sDGFkmp2kgVwmdwRd X207jaKNPRyjQ/k9BYNwFS8GyxytkJLmzSnwYCReJwCxZ0yXckn5AY1LqkAkCjQB 6qk0UReKzHqWzDe5pa7iPzupOPna7XPA7jvf4W7yoeCYP0d8fFRuB8K65jxxcNfq etLoS/JQ6Xs2bV9NxpvzvAV8bu7Pj1SrQSr/X84LFM+w+fuYUvwfEm65eNQ2FI0D f3TNjoAjoltTZsh8/hMJ+Fzqa+YYi+IilQe2nbhwdW0R9mKmYy4crWQPh22IrqgD wglmMGBgRQ4Nzis= -----END CERTIFICATE-----Generated at Thu Jun 4 14:12:19 2026 by rpki-client