$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/0/97B5B7009501E4718F06B9B36D215369C958203F.cer File: 97B5B7009501E4718F06B9B36D215369C958203F.cer (raw, json) Hash identifier: RgemEBPQZn4iEaFxfJs2xu/Qt3WpXPIqKp1S2xbXAs0= Subject key identifier: 97:B5:B7:00:95:01:E4:71:8F:06:B9:B3:6D:21:53:69:C9:58:20:3F Authority key identifier: CB:02:14:A5:C4:04:D6:F8:40:43:3B:12:0C:AC:BB:5B:8C:59:E6:13 Certificate issuer: /CN=A9162E3D0001/serialNumber=CB0214A5C404D6F840433B120CACBB5B8C59E613 Certificate serial: 2440C8AEEDA9CA835F358BC9BF581C4124156A9E Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1065591117757612035/1/97B5B7009501E4718F06B9B36D215369C958203F.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1065591117757612035/1/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Mon 01 Jun 2026 01:57:11 +0000 Certificate not after: Mon 31 May 2027 02:02:11 +0000 Subordinate resources: IP: 140.210.8.0/21 IP: 160.30.230.0/23 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Jun 2026 13:43:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:40:c8:ae:ed:a9:ca:83:5f:35:8b:c9:bf:58:1c:41:24:15:6a:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=CB0214A5C404D6F840433B120CACBB5B8C59E613 Validity Not Before: Jun 1 01:57:11 2026 GMT Not After : May 31 02:02:11 2027 GMT Subject: CN=97B5B7009501E4718F06B9B36D215369C958203F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:1b:14:30:9d:38:5e:96:69:04:ce:53:5c:a3: 68:67:b3:09:c7:78:6d:6f:70:85:2b:e0:b9:43:8a: 40:7c:b2:d0:29:c5:74:3b:4f:b8:e1:0a:68:28:d3: 55:64:61:9a:25:dc:5b:ad:e4:3a:67:eb:e2:58:d3: ec:73:a9:de:92:eb:78:cb:4e:c3:3e:be:71:c6:07: dd:66:31:35:87:7d:a9:41:1e:b2:06:dd:9d:74:15: 14:c5:95:d0:14:ac:cd:bf:09:e8:d9:9a:f7:f4:aa: 0a:65:ea:d6:6b:7e:fe:e6:02:22:75:56:23:e4:dd: 01:cf:ea:18:d5:04:1b:7c:ee:a4:27:b9:7d:64:6a: c4:da:ea:dc:e6:f1:55:dc:31:64:61:c8:47:4b:4e: e4:2c:4b:a8:79:0a:45:8a:32:29:36:f6:55:dc:48: 31:b6:fb:7f:54:e7:74:3b:9b:7b:d4:c5:7e:c3:d3: 00:47:c6:79:9a:9f:bc:5e:a1:15:ab:80:85:7e:95: a8:26:a0:52:f3:bd:a1:74:8b:01:c6:1b:3c:ea:a5: b6:d6:b3:86:87:be:91:99:78:25:67:21:aa:c0:ef: 83:0a:dd:c7:f4:06:c0:59:32:33:29:60:1b:7f:19: e9:fc:d0:9b:d3:8c:f1:88:8c:21:51:f5:a3:07:7e: d6:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 97:B5:B7:00:95:01:E4:71:8F:06:B9:B3:6D:21:53:69:C9:58:20:3F X509v3 Authority Key Identifier: keyid:CB:02:14:A5:C4:04:D6:F8:40:43:3B:12:0C:AC:BB:5B:8C:59:E6:13 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591117757612035/1/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591117757612035/1/97B5B7009501E4718F06B9B36D215369C958203F.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 140.210.8.0/21 160.30.230.0/23 Signature Algorithm: sha256WithRSAEncryption 81:80:53:84:73:7c:3a:db:e6:5a:52:2c:ca:9b:e8:cc:e0:ae: df:88:2a:e8:32:04:43:34:aa:7f:ce:22:5e:8b:02:48:ce:d5: 68:06:c2:38:be:41:d3:40:72:29:72:ad:08:2d:b3:6f:7a:39: f8:95:93:4c:ec:41:c1:7b:bf:3a:05:55:10:5f:af:5c:3b:0d: 63:66:77:10:2b:11:be:84:ac:6c:45:ec:bd:3f:a1:ea:cc:89: 3f:b1:31:74:97:83:39:b4:ff:af:0c:e0:9c:25:a4:56:71:e7: 24:ee:03:77:3f:c6:a0:5f:14:6f:47:d3:6e:68:1f:54:bd:75: 9d:8a:cd:c7:90:45:bb:ee:53:6f:de:76:71:ef:b2:b3:8e:20: f4:98:43:05:3c:92:19:95:03:09:9e:6b:b5:a7:65:0c:5a:45: da:29:30:28:ed:c6:77:8c:96:e5:b1:c2:22:ad:f7:dc:81:2d: ad:96:4d:49:09:57:29:6c:cb:ba:1d:02:a3:b0:08:e6:85:c0: 47:be:88:35:a6:bf:87:ef:92:6b:b2:6d:e1:d6:d4:be:bb:55: 3d:2b:1b:93:67:51:4f:32:66:44:03:59:5d:04:03:d8:3f:48: d2:03:6a:2b:50:4d:71:b6:55:3f:7c:4b:52:45:02:5a:11:49: 23:b9:54:de -----BEGIN CERTIFICATE----- MIIFrTCCBJWgAwIBAgIUJEDIru2pyoNfNYvJv1gcQSQVap4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhDQjAyMTRBNUM0 MDRENkY4NDA0MzNCMTIwQ0FDQkI1QjhDNTlFNjEzMB4XDTI2MDYwMTAxNTcxMVoX DTI3MDUzMTAyMDIxMVowMzExMC8GA1UEAxMoOTdCNUI3MDA5NTAxRTQ3MThGMDZC OUIzNkQyMTUzNjlDOTU4MjAzRjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOkbFDCdOF6WaQTOU1yjaGezCcd4bW9whSvguUOKQHyy0CnFdDtPuOEKaCjT VWRhmiXcW63kOmfr4ljT7HOp3pLreMtOwz6+ccYH3WYxNYd9qUEesgbdnXQVFMWV 0BSszb8J6Nma9/SqCmXq1mt+/uYCInVWI+TdAc/qGNUEG3zupCe5fWRqxNrq3Obx VdwxZGHIR0tO5CxLqHkKRYoyKTb2VdxIMbb7f1TndDube9TFfsPTAEfGeZqfvF6h FauAhX6VqCagUvO9oXSLAcYbPOqlttazhoe+kZl4JWchqsDvgwrdx/QGwFkyMylg G38Z6fzQm9OM8YiMIVH1owd+1rMCAwEAAaOCAqAwggKcMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFJe1twCVAeRxjwa5s20hU2nJWCA/MB8GA1UdIwQYMBaAFMsC FKXEBNb4QEM7Egysu1uMWeYTMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMC9DQjAyMTRBNUM0MDRENkY4NDA0MzNCMTIwQ0FDQkI1QjhDNTlF NjEzLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CM0EyNEYyMDFENjYxMUUyOEFDODgzN0M3 MkZEMUZGMi95d0lVcGNRRTF2aEFRenNTREt5N1c0eFo1aE0uY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTA2NTU5MTExNzc1NzYxMjAzNS8xLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDY1NTkxMTE3NzU3NjEyMDM1 LzEvOTdCNUI3MDA5NTAxRTQ3MThGMDZCOUIzNkQyMTUzNjlDOTU4MjAzRi5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwJQYIKwYBBQUH AQcBAf8EFjAUMBIEAgABMAwDBAOM0ggDBAGgHuYwDQYJKoZIhvcNAQELBQADggEB AIGAU4RzfDrb5lpSLMqb6Mzgrt+IKugyBEM0qn/OIl6LAkjO1WgGwji+QdNAcily rQgts296OfiVk0zsQcF7vzoFVRBfr1w7DWNmdxArEb6ErGxF7L0/oerMiT+xMXSX gzm0/68M4JwlpFZx5yTuA3c/xqBfFG9H025oH1S9dZ2KzceQRbvuU2/ednHvsrOO IPSYQwU8khmVAwmea7WnZQxaRdopMCjtxneMluWxwiKt99yBLa2WTUkJVylsy7od AqOwCOaFwEe+iDWmv4fvkmuybeHW1L67VT0rG5NnUU8yZkQDWV0EA9g/SNIDaitQ TXG2VT98S1JFAloRSSO5VN4= -----END CERTIFICATE-----Generated at Thu Jun 4 14:12:15 2026 by rpki-client