$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0A37AC88E303F4BB834C180B06F250ADE69700BF.cer File: 0A37AC88E303F4BB834C180B06F250ADE69700BF.cer (raw, json) Hash identifier: ZyTiTuxs6x2qTCGLIKlcgKQGY9LPPGhvF3P7YsAZOvc= Subject key identifier: 0A:37:AC:88:E3:03:F4:BB:83:4C:18:0B:06:F2:50:AD:E6:97:00:BF Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Certificate serial: 4B2D0569722C62BF751E75F1C7E30B1F5C5D7897 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1065582741577269250/0/0A37AC88E303F4BB834C180B06F250ADE69700BF.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1065582741577269250/0/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Thu 28 May 2026 08:49:52 +0000 Certificate not after: Thu 27 May 2027 08:54:52 +0000 Subordinate resources: AS: 131539 IP: 103.88.32.0/22 IP: 110.42.0.0/17 IP: 2402:dcc0::/32 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 15:28:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:2d:05:69:72:2c:62:bf:75:1e:75:f1:c7:e3:0b:1f:5c:5d:78:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Validity Not Before: May 28 08:49:52 2026 GMT Not After : May 27 08:54:52 2027 GMT Subject: CN=0A37AC88E303F4BB834C180B06F250ADE69700BF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:b1:5a:3c:86:2f:d5:3a:c1:83:c7:b9:cf:b7: 00:fd:08:2a:73:ad:24:de:8a:26:3e:33:41:05:1f: 9a:f2:61:14:6c:8d:de:cb:fb:92:8c:14:9d:ec:cc: c9:8d:8b:e3:23:c8:47:2e:cb:97:41:dd:5f:41:2b: f2:9f:c9:48:7f:41:22:13:3b:79:04:2f:53:11:f5: f7:be:b4:4e:0e:4b:81:60:c1:8b:5c:5d:d1:27:bf: 91:33:d1:25:b3:81:ab:a2:39:52:2c:57:83:a2:69: 5f:f6:59:76:ec:a1:60:04:09:8f:91:25:a4:d4:90: 43:dd:b8:db:43:e9:7c:11:cb:10:2f:2e:34:41:f3: 9e:48:84:bd:6c:f8:0c:88:62:8d:78:07:67:52:05: 2d:10:0e:c5:cd:66:3e:74:61:d0:c2:f1:d4:fc:87: 68:30:f3:42:95:33:c4:42:fb:66:e8:41:bb:a3:70: e2:ef:67:60:c5:2a:bc:7d:dc:05:4f:d2:dc:23:3c: a4:1c:32:45:67:1b:5b:63:2c:af:30:12:6b:4b:7e: ad:e9:42:94:34:bf:c3:7a:b3:91:5d:22:33:89:e8: d0:7f:54:fe:88:28:5c:11:2f:87:77:ee:2b:2b:8a: f4:f0:24:ab:7f:93:d9:72:5d:f9:3d:e9:e9:cc:34: 72:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 0A:37:AC:88:E3:03:F4:BB:83:4C:18:0B:06:F2:50:AD:E6:97:00:BF X509v3 Authority Key Identifier: keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577269250/0/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577269250/0/0A37AC88E303F4BB834C180B06F250ADE69700BF.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.88.32.0/22 110.42.0.0/17 IPv6: 2402:dcc0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 131539 Signature Algorithm: sha256WithRSAEncryption 33:f5:da:30:13:cb:60:83:79:46:b6:cc:dc:bb:c0:b0:11:ab: fd:ba:ab:99:b6:25:46:72:5d:ba:0b:80:ec:5a:af:b8:58:2b: c6:c7:c4:81:13:23:b3:dd:60:ec:90:be:99:13:de:da:49:54: d4:72:4c:b0:15:23:5d:a2:24:d8:d0:90:6b:00:f3:f9:d0:e7: 96:72:0a:f5:13:48:aa:08:80:9d:c5:89:b6:f2:4e:cd:19:b8: 05:5c:68:53:5b:16:09:21:ed:ce:c2:ae:6b:6d:2a:1f:e0:31: 98:36:7f:ac:5f:82:f4:bb:8e:1b:30:18:b1:47:37:aa:8a:af: a8:07:2c:11:58:6b:30:31:6c:11:d9:a1:c9:fc:b0:7b:12:31: 03:c7:54:9d:6c:13:5c:d0:71:22:71:cc:5d:2a:79:10:78:42: 33:7b:06:89:7e:73:07:3b:b4:32:25:94:ea:f9:4e:c2:dd:82: 3a:77:2d:17:8c:2d:a5:ac:67:29:d7:53:de:1c:cb:75:4a:90: 94:58:d7:de:26:3f:80:c7:e3:97:75:95:a7:b0:87:ce:33:a1: fe:06:07:df:c0:4f:ec:6f:8b:89:a2:89:9d:38:90:1d:d7:1e: 41:f9:fd:7d:9b:51:fc:b4:1b:cf:68:fe:c5:e1:ca:3d:7e:32: 41:10:c5:95 -----BEGIN CERTIFICATE----- MIIF2DCCBMCgAwIBAgIUSy0FaXIsYr91HnXxx+MLH1xdeJcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDUyODA4NDk1MloX DTI3MDUyNzA4NTQ1MlowMzExMC8GA1UEAxMoMEEzN0FDODhFMzAzRjRCQjgzNEMx ODBCMDZGMjUwQURFNjk3MDBCRjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOCxWjyGL9U6wYPHuc+3AP0IKnOtJN6KJj4zQQUfmvJhFGyN3sv7kowUnezM yY2L4yPIRy7Ll0HdX0Er8p/JSH9BIhM7eQQvUxH19760Tg5LgWDBi1xd0Se/kTPR JbOBq6I5UixXg6JpX/ZZduyhYAQJj5ElpNSQQ92420PpfBHLEC8uNEHznkiEvWz4 DIhijXgHZ1IFLRAOxc1mPnRh0MLx1PyHaDDzQpUzxEL7ZuhBu6Nw4u9nYMUqvH3c BU/S3CM8pBwyRWcbW2MsrzASa0t+relClDS/w3qzkV0iM4no0H9U/ogoXBEvh3fu KyuK9PAkq3+T2XJd+T3p6cw0cvcCAwEAAaOCAsswggLHMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFAo3rIjjA/S7g0wYCwbyUK3mlwC/MB8GA1UdIwQYMBaAFKVu hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTA2NTU4Mjc0MTU3NzI2OTI1MC8wLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDY1NTgyNzQxNTc3MjY5MjUw LzAvMEEzN0FDODhFMzAzRjRCQjgzNEMxODBCMDZGMjUwQURFNjk3MDBCRi5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwNAYIKwYBBQUH AQcBAf8EJTAjMBIEAgABMAwDBAJnWCADBAduKgAwDQQCAAIwBwMFACQC3MAwGgYI KwYBBQUHAQgBAf8ECzAJoAcwBQIDAgHTMA0GCSqGSIb3DQEBCwUAA4IBAQAz9dow E8tgg3lGtszcu8CwEav9uquZtiVGcl26C4DsWq+4WCvGx8SBEyOz3WDskL6ZE97a SVTUckywFSNdoiTY0JBrAPP50OeWcgr1E0iqCICdxYm28k7NGbgFXGhTWxYJIe3O wq5rbSof4DGYNn+sX4L0u44bMBixRzeqiq+oBywRWGswMWwR2aHJ/LB7EjEDx1Sd bBNc0HEiccxdKnkQeEIzewaJfnMHO7QyJZTq+U7C3YI6dy0XjC2lrGcp11PeHMt1 SpCUWNfeJj+Ax+OXdZWnsIfOM6H+BgffwE/sb4uJoomdOJAd1x5B+f19m1H8tBvP aP7F4co9fjJBEMWV -----END CERTIFICATE-----Generated at Fri May 29 21:13:51 2026 by rpki-client