$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/0/D850080623F8BDB006D1C2A5705B45346A8CA661.cer File: D850080623F8BDB006D1C2A5705B45346A8CA661.cer (raw, json) Hash identifier: Wuep0syUaTBjjgvhq1Nghs/Zv7b0f+XEyc55GSS4XBM= Subject key identifier: D8:50:08:06:23:F8:BD:B0:06:D1:C2:A5:70:5B:45:34:6A:8C:A6:61 Authority key identifier: CB:02:14:A5:C4:04:D6:F8:40:43:3B:12:0C:AC:BB:5B:8C:59:E6:13 Certificate issuer: /CN=A9162E3D0001/serialNumber=CB0214A5C404D6F840433B120CACBB5B8C59E613 Certificate serial: 30F7CEE404180F87205B9DF344636FE4CCF2386D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1065585389265747969/1/D850080623F8BDB006D1C2A5705B45346A8CA661.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1065585389265747969/1/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Mon 01 Jun 2026 01:28:40 +0000 Certificate not after: Mon 31 May 2027 01:33:40 +0000 Subordinate resources: IP: 157.10.220.0/23 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Jun 2026 13:43:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:f7:ce:e4:04:18:0f:87:20:5b:9d:f3:44:63:6f:e4:cc:f2:38:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=CB0214A5C404D6F840433B120CACBB5B8C59E613 Validity Not Before: Jun 1 01:28:40 2026 GMT Not After : May 31 01:33:40 2027 GMT Subject: CN=D850080623F8BDB006D1C2A5705B45346A8CA661 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:1d:69:4c:80:32:8c:db:03:ab:79:32:a7:98: b6:09:25:fd:8f:bc:b5:6c:12:7f:39:e1:5b:99:95: 63:6e:97:9c:a5:61:6e:12:ff:94:ee:37:3a:9f:ed: fe:f8:f0:f1:de:f0:29:7c:c8:0f:3a:2d:5c:c9:ef: 91:dc:7c:57:de:0c:04:37:2c:6c:28:84:50:d2:06: b0:98:9d:6f:d1:b1:12:35:fd:7f:63:80:c8:e1:39: dd:de:13:28:43:86:75:07:43:a7:73:bb:a6:a7:02: a9:cc:cc:c3:74:3d:66:7d:ff:f2:a8:b8:e4:a7:70: 5a:0f:bc:e0:b9:04:53:6e:15:22:1e:d7:80:4a:f2: eb:5d:8c:3b:7c:de:2b:98:1f:1e:58:3a:e9:41:f6: b6:86:07:39:0c:87:b1:94:59:3b:fa:34:22:fd:ef: 6d:da:66:8c:a3:a8:9e:e7:8f:78:f8:4d:91:d9:ec: 34:9f:d2:8a:91:39:65:b6:03:d2:23:6e:3f:2e:e4: ec:b5:b0:c7:1f:1c:7b:56:88:44:ac:30:50:fc:99: 67:9f:a4:09:69:5f:0f:a7:85:f3:b5:a8:0d:fb:e4: 8a:96:b5:18:16:74:d5:a7:91:df:f4:16:33:0a:6f: 97:7f:c9:53:e7:17:52:af:34:9c:c0:2a:9c:01:b3: 9b:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: D8:50:08:06:23:F8:BD:B0:06:D1:C2:A5:70:5B:45:34:6A:8C:A6:61 X509v3 Authority Key Identifier: keyid:CB:02:14:A5:C4:04:D6:F8:40:43:3B:12:0C:AC:BB:5B:8C:59:E6:13 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265747969/1/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265747969/1/D850080623F8BDB006D1C2A5705B45346A8CA661.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.10.220.0/23 Signature Algorithm: sha256WithRSAEncryption 37:0c:60:dc:da:51:07:da:1e:e4:45:f5:ce:d6:96:ef:50:0a: be:d1:fa:ae:0a:d8:8d:12:12:56:98:17:23:7c:6a:21:74:9f: 04:55:c9:89:16:35:d0:2f:d3:41:47:97:db:2f:61:c5:20:bc: 38:cf:a3:b4:62:0d:6d:7e:20:cb:c3:08:12:d6:4a:ec:b9:e4: ca:1e:6f:33:48:3e:6c:96:c2:12:5a:5b:d5:6c:a0:90:c1:7f: 27:dd:8d:b5:85:05:28:bd:df:28:94:ba:53:78:ca:78:15:03: 33:28:41:72:ff:24:eb:0a:bf:bb:aa:61:a7:1b:b8:cb:75:06: 1f:c7:68:d9:13:c3:85:a2:a1:39:97:ce:5b:6c:79:90:97:08: e8:88:3d:31:e3:71:a5:7d:ec:2d:6c:14:ff:35:3c:1e:4f:68: 68:b8:ed:88:72:cc:89:bf:86:ca:8c:51:28:aa:4a:2a:e3:dd: 74:fd:b5:91:73:2b:92:24:4f:96:4a:c8:07:22:17:d6:28:f0: ef:24:d9:39:76:95:8c:51:66:92:1e:40:14:86:df:bd:a8:44: f4:93:ab:76:54:f8:28:ef:7d:7d:71:9a:e4:99:06:95:55:8f: 33:73:a5:59:28:b9:61:2c:79:f7:c0:f1:fe:ec:c3:f2:ba:46: 30:d2:81:c9 -----BEGIN CERTIFICATE----- MIIFpzCCBI+gAwIBAgIUMPfO5AQYD4cgW53zRGNv5MzyOG0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhDQjAyMTRBNUM0 MDRENkY4NDA0MzNCMTIwQ0FDQkI1QjhDNTlFNjEzMB4XDTI2MDYwMTAxMjg0MFoX DTI3MDUzMTAxMzM0MFowMzExMC8GA1UEAxMoRDg1MDA4MDYyM0Y4QkRCMDA2RDFD MkE1NzA1QjQ1MzQ2QThDQTY2MTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOQdaUyAMozbA6t5MqeYtgkl/Y+8tWwSfznhW5mVY26XnKVhbhL/lO43Op/t /vjw8d7wKXzIDzotXMnvkdx8V94MBDcsbCiEUNIGsJidb9GxEjX9f2OAyOE53d4T KEOGdQdDp3O7pqcCqczMw3Q9Zn3/8qi45KdwWg+84LkEU24VIh7XgEry612MO3ze K5gfHlg66UH2toYHOQyHsZRZO/o0Iv3vbdpmjKOonuePePhNkdnsNJ/SipE5ZbYD 0iNuPy7k7LWwxx8ce1aIRKwwUPyZZ5+kCWlfD6eF87WoDfvkipa1GBZ01aeR3/QW Mwpvl3/JU+cXUq80nMAqnAGzm20CAwEAAaOCApowggKWMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFNhQCAYj+L2wBtHCpXBbRTRqjKZhMB8GA1UdIwQYMBaAFMsC FKXEBNb4QEM7Egysu1uMWeYTMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMC9DQjAyMTRBNUM0MDRENkY4NDA0MzNCMTIwQ0FDQkI1QjhDNTlF NjEzLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CM0EyNEYyMDFENjYxMUUyOEFDODgzN0M3 MkZEMUZGMi95d0lVcGNRRTF2aEFRenNTREt5N1c0eFo1aE0uY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTA2NTU4NTM4OTI2NTc0Nzk2OS8xLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDY1NTg1Mzg5MjY1NzQ3OTY5 LzEvRDg1MDA4MDYyM0Y4QkRCMDA2RDFDMkE1NzA1QjQ1MzQ2QThDQTY2MS5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAGdCtwwDQYJKoZIhvcNAQELBQADggEBADcMYNza UQfaHuRF9c7Wlu9QCr7R+q4K2I0SElaYFyN8aiF0nwRVyYkWNdAv00FHl9svYcUg vDjPo7RiDW1+IMvDCBLWSuy55MoebzNIPmyWwhJaW9VsoJDBfyfdjbWFBSi93yiU ulN4yngVAzMoQXL/JOsKv7uqYacbuMt1Bh/HaNkTw4WioTmXzltseZCXCOiIPTHj caV97C1sFP81PB5PaGi47YhyzIm/hsqMUSiqSirj3XT9tZFzK5IkT5ZKyAciF9Yo 8O8k2Tl2lYxRZpIeQBSG372oRPSTq3ZU+CjvfX1xmuSZBpVVjzNzpVkouWEseffA 8f7sw/K6RjDSgck= -----END CERTIFICATE-----Generated at Thu Jun 4 14:12:16 2026 by rpki-client