$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/0/EDB73071044B6AA67901EB0A11A028B8B2CEEC5F.cer File: EDB73071044B6AA67901EB0A11A028B8B2CEEC5F.cer (raw, json) Hash identifier: VU4EG4VkT5FxnLCFvWsUnsnaaHGL4k14kJnsgwzDS1k= Subject key identifier: ED:B7:30:71:04:4B:6A:A6:79:01:EB:0A:11:A0:28:B8:B2:CE:EC:5F Authority key identifier: CB:02:14:A5:C4:04:D6:F8:40:43:3B:12:0C:AC:BB:5B:8C:59:E6:13 Certificate issuer: /CN=A9162E3D0001/serialNumber=CB0214A5C404D6F840433B120CACBB5B8C59E613 Certificate serial: 72C8C82F03D7CE6D0ED0B87C733F13D421F87018 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1108677435395670037/0/EDB73071044B6AA67901EB0A11A028B8B2CEEC5F.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1108677435395670037/0/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Mon 18 May 2026 08:43:21 +0000 Certificate not after: Mon 17 May 2027 08:48:21 +0000 Subordinate resources: IP: 52.80.0.0/15 IP: 54.222.0.0/15 IP: 71.131.192.0 -- 71.132.63.255 IP: 71.136.64.0/18 IP: 71.137.0.0/18 IP: 140.179.0.0/16 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 13:26:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:c8:c8:2f:03:d7:ce:6d:0e:d0:b8:7c:73:3f:13:d4:21:f8:70:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=CB0214A5C404D6F840433B120CACBB5B8C59E613 Validity Not Before: May 18 08:43:21 2026 GMT Not After : May 17 08:48:21 2027 GMT Subject: CN=EDB73071044B6AA67901EB0A11A028B8B2CEEC5F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:dc:2a:11:ec:c5:2a:32:50:cf:0a:7b:51:3e: bb:69:e8:02:40:1f:39:cb:e8:65:3e:ee:09:a1:81: 99:fb:e1:83:8c:d4:76:a4:f1:20:b3:90:a3:49:71: e4:f2:68:d1:44:a0:95:cd:7d:3b:4e:37:2a:eb:69: a9:1f:1b:28:d1:c9:4b:1b:c7:fd:09:8a:90:d1:6b: 94:ce:3a:ba:ab:a6:bf:4c:4e:e5:79:d1:a0:df:66: 92:21:05:47:22:89:ee:f3:8e:8a:47:d0:71:af:79: 50:c2:a1:04:e1:a5:59:d1:fd:6d:8a:85:f4:a6:eb: 89:db:3c:ae:39:a4:4d:2f:b8:e1:35:4f:ab:96:c9: 29:2d:6f:11:31:34:e4:fc:72:e4:38:2b:5f:6a:9e: aa:6f:6f:c2:ac:7f:0c:0e:d6:54:56:3d:6e:7b:bf: 57:d7:5e:80:e1:d4:e0:a7:6c:34:26:0e:48:23:e3: 8c:9e:a1:1b:ed:9a:4c:5f:eb:f8:2b:55:34:54:a0: 31:e6:61:5c:7f:0c:a0:e6:05:e0:cc:0b:6c:9e:46: 46:33:0d:3a:00:3a:b3:63:a5:7d:0c:2e:0a:11:d6: 21:d0:c2:91:60:23:63:3f:e5:24:27:b0:f6:68:26: 96:cc:d0:69:41:46:ac:20:d6:6e:6b:66:b7:c7:dd: ba:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: ED:B7:30:71:04:4B:6A:A6:79:01:EB:0A:11:A0:28:B8:B2:CE:EC:5F X509v3 Authority Key Identifier: keyid:CB:02:14:A5:C4:04:D6:F8:40:43:3B:12:0C:AC:BB:5B:8C:59:E6:13 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1108677435395670037/0/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1108677435395670037/0/EDB73071044B6AA67901EB0A11A028B8B2CEEC5F.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 52.80.0.0/15 54.222.0.0/15 71.131.192.0-71.132.63.255 71.136.64.0/18 71.137.0.0/18 140.179.0.0/16 Signature Algorithm: sha256WithRSAEncryption ac:22:af:8f:7b:eb:41:b6:23:7c:0d:df:03:d7:40:65:48:3d: dd:9e:e6:96:16:60:23:b0:c5:bf:a3:93:96:4c:1a:3b:05:91: 2a:07:df:d5:fe:8e:77:02:a9:44:d1:0a:cb:46:14:f1:6b:cc: 7c:69:e1:a7:46:b8:1a:53:8d:3b:af:e9:af:02:61:61:da:9a: 70:52:df:c9:04:bc:8c:3a:07:0c:ee:cd:ac:3a:af:fc:69:68: d8:a7:55:d4:69:d9:bb:0e:59:63:fa:79:36:ba:30:ec:7b:69: a4:b4:68:13:1d:dd:34:1c:a1:bd:03:c4:4b:70:f0:f4:79:ba: 98:64:6c:2a:8a:a1:68:98:48:17:a1:c7:7c:c0:0b:6b:39:b7: 3d:8c:9b:26:ce:14:73:e1:01:98:0d:18:34:4d:d4:b8:97:6c: 4b:ff:2b:1f:e6:51:27:4b:4d:3e:4f:f9:96:46:11:38:05:77: 69:f7:13:b7:56:48:12:5f:e6:8c:c6:7c:e2:cb:59:2c:9c:2a: e7:86:c5:4d:7c:d3:74:f7:f9:cb:ef:7a:52:df:93:0a:8e:bb: 00:99:22:14:dd:bb:57:7c:bc:53:94:a0:82:88:48:5f:3a:6d: 12:e0:cc:e7:68:25:25:d9:1d:88:cc:ee:dc:7c:59:3e:60:33: dd:c6:06:73 -----BEGIN CERTIFICATE----- MIIFyjCCBLKgAwIBAgIUcsjILwPXzm0O0Lh8cz8T1CH4cBgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhDQjAyMTRBNUM0 MDRENkY4NDA0MzNCMTIwQ0FDQkI1QjhDNTlFNjEzMB4XDTI2MDUxODA4NDMyMVoX DTI3MDUxNzA4NDgyMVowMzExMC8GA1UEAxMoRURCNzMwNzEwNDRCNkFBNjc5MDFF QjBBMTFBMDI4QjhCMkNFRUM1RjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKzcKhHsxSoyUM8Ke1E+u2noAkAfOcvoZT7uCaGBmfvhg4zUdqTxILOQo0lx 5PJo0USglc19O043KutpqR8bKNHJSxvH/QmKkNFrlM46uqumv0xO5XnRoN9mkiEF RyKJ7vOOikfQca95UMKhBOGlWdH9bYqF9Kbrids8rjmkTS+44TVPq5bJKS1vETE0 5Pxy5DgrX2qeqm9vwqx/DA7WVFY9bnu/V9degOHU4KdsNCYOSCPjjJ6hG+2aTF/r +CtVNFSgMeZhXH8MoOYF4MwLbJ5GRjMNOgA6s2OlfQwuChHWIdDCkWAjYz/lJCew 9mgmlszQaUFGrCDWbmtmt8fduusCAwEAAaOCAr0wggK5MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFO23MHEES2qmeQHrChGgKLiyzuxfMB8GA1UdIwQYMBaAFMsC FKXEBNb4QEM7Egysu1uMWeYTMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMC9DQjAyMTRBNUM0MDRENkY4NDA0MzNCMTIwQ0FDQkI1QjhDNTlF NjEzLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CM0EyNEYyMDFENjYxMUUyOEFDODgzN0M3 MkZEMUZGMi95d0lVcGNRRTF2aEFRenNTREt5N1c0eFo1aE0uY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTEwODY3NzQzNTM5NTY3MDAzNy8wLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMTA4Njc3NDM1Mzk1NjcwMDM3 LzAvRURCNzMwNzEwNDRCNkFBNjc5MDFFQjBBMTFBMDI4QjhCMkNFRUM1Ri5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwQgYIKwYBBQUH AQcBAf8EMzAxMC8EAgABMCkDAwE0UAMDATbeMAwDBAZHg8ADBAZHhAADBAZHiEAD BAZHiQADAwCMszANBgkqhkiG9w0BAQsFAAOCAQEArCKvj3vrQbYjfA3fA9dAZUg9 3Z7mlhZgI7DFv6OTlkwaOwWRKgff1f6OdwKpRNEKy0YU8WvMfGnhp0a4GlONO6/p rwJhYdqacFLfyQS8jDoHDO7NrDqv/Glo2KdV1GnZuw5ZY/p5Nrow7HtppLRoEx3d NByhvQPES3Dw9Hm6mGRsKoqhaJhIF6HHfMALazm3PYybJs4Uc+EBmA0YNE3UuJds S/8rH+ZRJ0tNPk/5lkYROAV3afcTt1ZIEl/mjMZ84stZLJwq54bFTXzTdPf5y+96 Ut+TCo67AJkiFN27V3y8U5SggohIXzptEuDM52glJdkdiMzu3HxZPmAz3cYGcw== -----END CERTIFICATE-----Generated at Sat May 30 01:23:12 2026 by rpki-client