$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/0/D369F71DFD96519DEB4BCA28C2A7B2374B242704.cer File: D369F71DFD96519DEB4BCA28C2A7B2374B242704.cer (raw, json) Hash identifier: LR8mD6rjMScGIa9V3wVjsei6G4lV26PIXfHn8VBjles= Subject key identifier: D3:69:F7:1D:FD:96:51:9D:EB:4B:CA:28:C2:A7:B2:37:4B:24:27:04 Authority key identifier: CB:02:14:A5:C4:04:D6:F8:40:43:3B:12:0C:AC:BB:5B:8C:59:E6:13 Certificate issuer: /CN=A9162E3D0001/serialNumber=CB0214A5C404D6F840433B120CACBB5B8C59E613 Certificate serial: 67635C7D0154B0A7B5BD773737C36EE870A7CFA0 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/1/D369F71DFD96519DEB4BCA28C2A7B2374B242704.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/1/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Fri 29 May 2026 08:07:07 +0000 Certificate not after: Fri 28 May 2027 08:12:07 +0000 Subordinate resources: IP: 160.191.110.0/23 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Jun 2026 13:43:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:63:5c:7d:01:54:b0:a7:b5:bd:77:37:37:c3:6e:e8:70:a7:cf:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=CB0214A5C404D6F840433B120CACBB5B8C59E613 Validity Not Before: May 29 08:07:07 2026 GMT Not After : May 28 08:12:07 2027 GMT Subject: CN=D369F71DFD96519DEB4BCA28C2A7B2374B242704 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:59:4c:b1:e7:16:31:ba:52:f5:95:b4:63:4b: cb:1d:eb:b5:76:df:be:ea:95:89:d1:a6:85:40:ef: 1d:50:b6:6e:78:70:66:ad:b3:f9:ff:a5:1e:94:cd: 22:c0:4b:5b:3a:93:ec:ad:ad:75:9b:e7:2e:0f:76: 03:e0:f4:ac:64:1a:4e:97:97:7b:ff:24:29:0c:20: f7:3d:78:ff:b9:1a:7c:87:af:8e:05:cc:44:a5:3b: 22:41:44:f1:bb:c9:e5:e3:d2:23:0d:58:bd:0b:a1: 4e:4b:39:93:89:f0:bc:0a:04:5b:99:69:65:ee:93: 9b:d4:6e:97:fc:83:f4:7e:e1:99:c2:f0:c9:84:88: 31:38:6c:d9:8a:4d:f4:f4:4c:00:5c:70:7b:91:f5: b7:78:23:f4:ec:70:5c:53:e3:6e:d6:c4:4f:5b:eb: b3:ea:39:0c:48:0a:5f:33:28:aa:36:8a:a1:38:34: b6:30:85:e6:7b:65:81:ae:4f:5c:de:f4:0d:c3:49: 09:3a:c8:74:19:ea:10:76:ed:f8:cb:b6:d2:c6:8a: bc:0e:31:1c:66:88:ed:85:63:b3:27:db:bc:8b:b3: 32:50:6e:9c:da:8f:4f:12:a0:3f:66:2f:0c:0a:92: 1f:b5:21:71:cf:13:9b:9c:95:42:cf:cc:ee:89:f5: ee:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: D3:69:F7:1D:FD:96:51:9D:EB:4B:CA:28:C2:A7:B2:37:4B:24:27:04 X509v3 Authority Key Identifier: keyid:CB:02:14:A5:C4:04:D6:F8:40:43:3B:12:0C:AC:BB:5B:8C:59:E6:13 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/1/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/1/D369F71DFD96519DEB4BCA28C2A7B2374B242704.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.191.110.0/23 Signature Algorithm: sha256WithRSAEncryption 84:89:95:2c:5f:34:17:f5:10:6a:3a:0c:1c:68:4b:e9:04:aa: 5d:4a:be:3a:13:92:e0:d0:41:8b:80:31:cb:55:4b:43:25:7b: 3b:b2:d5:1e:f4:05:bb:b6:f2:6f:20:bf:08:a6:96:1a:2a:63: 61:d0:05:1c:6c:cf:ec:15:e7:6c:a4:be:58:3c:09:ad:38:5c: 9b:20:93:fc:82:8b:f9:de:33:13:b2:15:59:c3:72:06:69:1b: 9f:ae:75:16:65:44:b5:7e:6e:7d:d9:3d:d7:dc:be:cc:ea:74: bb:fe:d9:7d:b4:44:cb:c7:58:2d:1e:cb:1e:93:30:de:a7:01: 40:30:25:3a:73:19:66:98:6a:2e:25:8c:4d:e4:ff:87:a1:7d: 67:38:83:af:54:d6:72:a6:b5:df:78:35:07:cc:50:b4:93:5c: 88:13:9c:ea:4a:32:74:31:f0:7a:9c:15:ad:98:d6:1e:2b:98: 4a:19:b6:c9:6e:ee:61:24:b6:44:9a:48:98:b3:ea:61:57:12: 64:5d:ce:ba:9d:6f:fc:9a:7a:bb:5c:17:a1:88:15:ac:e0:51: 70:b1:7d:08:11:04:51:fa:93:73:2e:5d:57:34:ef:13:e7:77: 5b:ed:23:e8:46:8c:36:3a:7e:69:76:2b:60:3a:07:f9:10:c4: 1c:cc:b3:07 -----BEGIN CERTIFICATE----- MIIFpzCCBI+gAwIBAgIUZ2NcfQFUsKe1vXc3N8Nu6HCnz6AwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhDQjAyMTRBNUM0 MDRENkY4NDA0MzNCMTIwQ0FDQkI1QjhDNTlFNjEzMB4XDTI2MDUyOTA4MDcwN1oX DTI3MDUyODA4MTIwN1owMzExMC8GA1UEAxMoRDM2OUY3MURGRDk2NTE5REVCNEJD QTI4QzJBN0IyMzc0QjI0MjcwNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAN1ZTLHnFjG6UvWVtGNLyx3rtXbfvuqVidGmhUDvHVC2bnhwZq2z+f+lHpTN IsBLWzqT7K2tdZvnLg92A+D0rGQaTpeXe/8kKQwg9z14/7kafIevjgXMRKU7IkFE 8bvJ5ePSIw1YvQuhTks5k4nwvAoEW5lpZe6Tm9Rul/yD9H7hmcLwyYSIMThs2YpN 9PRMAFxwe5H1t3gj9OxwXFPjbtbET1vrs+o5DEgKXzMoqjaKoTg0tjCF5ntlga5P XN70DcNJCTrIdBnqEHbt+Mu20saKvA4xHGaI7YVjsyfbvIuzMlBunNqPTxKgP2Yv DAqSH7Uhcc8Tm5yVQs/M7on17k8CAwEAAaOCApowggKWMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFNNp9x39llGd60vKKMKnsjdLJCcEMB8GA1UdIwQYMBaAFMsC FKXEBNb4QEM7Egysu1uMWeYTMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMC9DQjAyMTRBNUM0MDRENkY4NDA0MzNCMTIwQ0FDQkI1QjhDNTlF NjEzLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CM0EyNEYyMDFENjYxMUUyOEFDODgzN0M3 MkZEMUZGMi95d0lVcGNRRTF2aEFRenNTREt5N1c0eFo1aE0uY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTA2NTU4NTkxMTIxNzQ1NTEwNy8xLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDY1NTg1OTExMjE3NDU1MTA3 LzEvRDM2OUY3MURGRDk2NTE5REVCNEJDQTI4QzJBN0IyMzc0QjI0MjcwNC5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAGgv24wDQYJKoZIhvcNAQELBQADggEBAISJlSxf NBf1EGo6DBxoS+kEql1KvjoTkuDQQYuAMctVS0Mlezuy1R70Bbu28m8gvwimlhoq Y2HQBRxsz+wV52ykvlg8Ca04XJsgk/yCi/neMxOyFVnDcgZpG5+udRZlRLV+bn3Z PdfcvszqdLv+2X20RMvHWC0eyx6TMN6nAUAwJTpzGWaYai4ljE3k/4ehfWc4g69U 1nKmtd94NQfMULSTXIgTnOpKMnQx8HqcFa2Y1h4rmEoZtslu7mEktkSaSJiz6mFX EmRdzrqdb/yaertcF6GIFazgUXCxfQgRBFH6k3MuXVc07xPnd1vtI+hGjDY6fml2 K2A6B/kQxBzMswc= -----END CERTIFICATE-----Generated at Thu Jun 4 14:12:17 2026 by rpki-client