$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/0/BE564B2EFF08B30078A1960732464840B104EF35.cer File: BE564B2EFF08B30078A1960732464840B104EF35.cer (raw, json) Hash identifier: ohlCRLhhqFGv/jQ3bn5TMYgoIW3QH1i76kNuofNWjM8= Subject key identifier: BE:56:4B:2E:FF:08:B3:00:78:A1:96:07:32:46:48:40:B1:04:EF:35 Authority key identifier: CB:02:14:A5:C4:04:D6:F8:40:43:3B:12:0C:AC:BB:5B:8C:59:E6:13 Certificate issuer: /CN=A9162E3D0001/serialNumber=CB0214A5C404D6F840433B120CACBB5B8C59E613 Certificate serial: 170B4BE95165420C827971379CA7A94433BE968A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1065585911217389571/1/BE564B2EFF08B30078A1960732464840B104EF35.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1065585911217389571/1/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Mon 01 Jun 2026 01:34:26 +0000 Certificate not after: Mon 31 May 2027 01:39:26 +0000 Subordinate resources: IP: 160.30.150.0/23 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Jun 2026 13:43:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:0b:4b:e9:51:65:42:0c:82:79:71:37:9c:a7:a9:44:33:be:96:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=CB0214A5C404D6F840433B120CACBB5B8C59E613 Validity Not Before: Jun 1 01:34:26 2026 GMT Not After : May 31 01:39:26 2027 GMT Subject: CN=BE564B2EFF08B30078A1960732464840B104EF35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:d8:b9:33:ff:b0:cf:33:e3:df:54:79:b2:90: 47:ec:5f:d5:87:92:6d:73:23:c3:f5:61:13:e2:e9: a4:11:32:db:6a:4d:3d:b7:0f:6d:1d:f4:2d:f6:a1: 58:a3:ae:7b:81:5b:5b:e7:e0:3b:db:ee:92:d0:62: b3:a7:3f:d5:c4:49:10:22:54:d6:cf:ea:3b:0e:bf: 4a:9e:71:13:e4:89:1e:6f:3a:6d:13:2c:18:38:b5: c5:2d:7f:08:17:23:f1:7c:1a:58:44:46:e9:bc:b4: 86:5b:59:ea:9e:d7:f7:46:6c:07:ff:23:59:54:2d: 70:9e:13:0d:9f:93:e5:67:4f:b9:83:7b:0e:2c:c4: cd:da:ea:44:88:28:7e:15:40:6e:24:cd:d0:9b:bc: 59:30:e6:82:e9:88:41:cf:d8:f8:7f:ce:dd:2a:4d: 93:30:4a:2e:22:e6:03:38:1f:b8:ac:66:f5:f7:68: 63:22:31:50:fb:9b:8c:71:2e:77:8a:35:b6:09:a3: 9a:85:c3:1a:02:f0:99:5f:2b:8b:a6:00:27:d9:41: 03:9f:c7:95:2a:7f:55:a0:73:b4:a8:96:06:7d:a6: 77:09:a3:5f:71:93:8c:f6:8b:ef:48:53:b8:4f:c6: 8c:20:1c:15:18:b7:b5:f1:31:3d:5f:fa:2b:62:5a: be:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: BE:56:4B:2E:FF:08:B3:00:78:A1:96:07:32:46:48:40:B1:04:EF:35 X509v3 Authority Key Identifier: keyid:CB:02:14:A5:C4:04:D6:F8:40:43:3B:12:0C:AC:BB:5B:8C:59:E6:13 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217389571/1/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217389571/1/BE564B2EFF08B30078A1960732464840B104EF35.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.30.150.0/23 Signature Algorithm: sha256WithRSAEncryption 64:e6:14:54:e4:eb:69:e2:46:6f:98:41:57:d9:70:34:0d:9a: 22:6f:9d:cc:c8:98:ab:42:93:c1:e5:04:eb:d5:e2:3c:ab:bb: 12:7c:dd:fa:1a:39:e7:d7:25:0a:c3:fc:8f:d5:69:02:68:19: 39:30:91:e5:b3:ae:d6:07:63:0c:7f:91:85:11:86:8c:f1:95: 09:d4:7b:fa:64:38:02:e0:9d:89:bf:b5:92:d7:f2:84:36:8e: 01:5c:09:9b:86:e1:37:49:7a:34:9e:b7:98:90:39:2a:10:23: 28:35:22:dc:74:0a:4c:eb:35:c6:76:b6:5d:53:78:0b:31:eb: ae:99:cc:b1:fc:df:ad:39:3b:5e:d7:c9:85:aa:a8:a6:c3:83: 8d:4f:aa:04:4d:23:3e:76:e3:fe:00:f6:2b:83:47:c2:dd:1e: 9d:e5:9b:75:2a:b9:a9:63:14:e1:b7:f8:8e:1e:6d:5c:46:91: bf:62:1c:ea:20:22:14:e6:4e:1f:2c:f8:20:9c:f4:7b:26:0a: 4c:92:fc:6d:6f:2c:a5:77:75:98:11:94:e8:19:4b:85:6a:e7: e5:03:fa:34:2b:e5:cc:57:37:7b:a2:16:78:e6:80:25:00:17: 3a:4b:7f:52:c9:a4:17:e6:96:ae:05:0d:9f:15:bc:94:f9:cb: 61:30:6e:2d -----BEGIN CERTIFICATE----- MIIFpzCCBI+gAwIBAgIUFwtL6VFlQgyCeXE3nKepRDO+loowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhDQjAyMTRBNUM0 MDRENkY4NDA0MzNCMTIwQ0FDQkI1QjhDNTlFNjEzMB4XDTI2MDYwMTAxMzQyNloX DTI3MDUzMTAxMzkyNlowMzExMC8GA1UEAxMoQkU1NjRCMkVGRjA4QjMwMDc4QTE5 NjA3MzI0NjQ4NDBCMTA0RUYzNTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMXYuTP/sM8z499UebKQR+xf1YeSbXMjw/VhE+LppBEy22pNPbcPbR30Lfah WKOue4FbW+fgO9vuktBis6c/1cRJECJU1s/qOw6/Sp5xE+SJHm86bRMsGDi1xS1/ CBcj8XwaWERG6by0hltZ6p7X90ZsB/8jWVQtcJ4TDZ+T5WdPuYN7DizEzdrqRIgo fhVAbiTN0Ju8WTDmgumIQc/Y+H/O3SpNkzBKLiLmAzgfuKxm9fdoYyIxUPubjHEu d4o1tgmjmoXDGgLwmV8ri6YAJ9lBA5/HlSp/VaBztKiWBn2mdwmjX3GTjPaL70hT uE/GjCAcFRi3tfExPV/6K2Javv0CAwEAAaOCApowggKWMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFL5WSy7/CLMAeKGWBzJGSECxBO81MB8GA1UdIwQYMBaAFMsC FKXEBNb4QEM7Egysu1uMWeYTMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMC9DQjAyMTRBNUM0MDRENkY4NDA0MzNCMTIwQ0FDQkI1QjhDNTlF NjEzLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CM0EyNEYyMDFENjYxMUUyOEFDODgzN0M3 MkZEMUZGMi95d0lVcGNRRTF2aEFRenNTREt5N1c0eFo1aE0uY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTA2NTU4NTkxMTIxNzM4OTU3MS8xLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDY1NTg1OTExMjE3Mzg5NTcx LzEvQkU1NjRCMkVGRjA4QjMwMDc4QTE5NjA3MzI0NjQ4NDBCMTA0RUYzNS5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAGgHpYwDQYJKoZIhvcNAQELBQADggEBAGTmFFTk 62niRm+YQVfZcDQNmiJvnczImKtCk8HlBOvV4jyruxJ83foaOefXJQrD/I/VaQJo GTkwkeWzrtYHYwx/kYURhozxlQnUe/pkOALgnYm/tZLX8oQ2jgFcCZuG4TdJejSe t5iQOSoQIyg1Itx0CkzrNcZ2tl1TeAsx666ZzLH83605O17XyYWqqKbDg41PqgRN Iz524/4A9iuDR8LdHp3lm3UqualjFOG3+I4ebVxGkb9iHOogIhTmTh8s+CCc9Hsm CkyS/G1vLKV3dZgRlOgZS4Vq5+UD+jQr5cxXN3uiFnjmgCUAFzpLf1LJpBfmlq4F DZ8VvJT5y2Ewbi0= -----END CERTIFICATE-----Generated at Thu Jun 4 14:12:15 2026 by rpki-client