$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.cer File: 0C02007C391DB5414355DE1A053D4E6D06CDD2CE.cer (raw, json) Hash identifier: 8rmRQhrKrLzJka3RuY97G4oSVPa4Df/5Cf6/+wnwSn8= Subject key identifier: 0C:02:00:7C:39:1D:B5:41:43:55:DE:1A:05:3D:4E:6D:06:CD:D2:CE Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Certificate serial: 42AE120B0B339C24B0CD4537DB80079645A4531A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Fri 29 May 2026 06:26:23 +0000 Certificate not after: Fri 28 May 2027 06:31:23 +0000 Subordinate resources: IP: 180.223.0.0/16 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Jun 2026 08:47:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:ae:12:0b:0b:33:9c:24:b0:cd:45:37:db:80:07:96:45:a4:53:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Validity Not Before: May 29 06:26:23 2026 GMT Not After : May 28 06:31:23 2027 GMT Subject: CN=0C02007C391DB5414355DE1A053D4E6D06CDD2CE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:14:27:d0:d9:dd:d4:6f:15:cb:78:49:7b:20: e7:e5:3c:0f:d5:95:4a:ea:29:87:d4:b6:e7:6a:f8: 03:6c:e5:62:3f:cf:fa:ee:5c:76:d0:5d:d7:a5:cf: 55:48:30:00:6f:ad:01:b2:af:99:30:3c:3a:21:4e: 0c:a0:05:fa:77:f5:46:e2:25:6f:90:95:86:5e:c3: 18:d3:d1:80:7c:55:a0:04:ea:ff:93:fe:6c:a2:a9: 8b:e7:97:2f:eb:17:57:37:34:13:99:73:e3:73:0a: 88:ef:9e:e1:84:df:ff:26:6c:51:9d:0d:48:26:1e: 04:8c:89:33:3d:13:20:8d:2b:c2:fe:ba:64:d6:dd: d9:d9:1d:73:ba:bc:f6:95:ec:aa:1c:ff:e8:fc:a7: 0b:9c:7b:b9:35:41:f4:5d:87:7e:78:8a:ea:35:60: f9:20:15:5d:90:04:70:57:f7:21:a5:3f:75:91:46: 91:6e:09:6a:28:57:76:13:81:c8:e7:9d:81:eb:e1: 30:82:70:2d:80:83:ab:94:df:95:4a:ff:f7:5f:84: b1:80:57:84:9a:71:44:11:3a:8c:18:c4:6d:18:8c: 94:1a:69:2a:1e:c1:ba:94:75:d2:76:8c:77:8b:d7: da:9b:63:19:6b:25:65:60:21:92:46:90:2a:86:a7: 29:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 0C:02:00:7C:39:1D:B5:41:43:55:DE:1A:05:3D:4E:6D:06:CD:D2:CE X509v3 Authority Key Identifier: keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 180.223.0.0/16 Signature Algorithm: sha256WithRSAEncryption 2e:53:d7:d1:31:26:fb:6c:b7:31:06:9a:67:bf:01:51:87:f0: 3b:4a:b1:09:70:c5:b6:4d:b2:d7:36:94:10:d3:4b:e7:9a:51: ff:b4:7a:ee:8d:23:f1:e1:2d:1b:b0:36:b1:13:39:ac:3e:b7: 20:37:cf:fd:ad:99:b8:97:cf:45:36:62:71:3b:8c:c8:09:d9: 8d:ee:23:30:ec:25:88:a5:79:19:48:17:51:8d:a9:09:e8:28: b8:0f:eb:30:e7:85:a4:78:1b:71:92:bd:5f:22:14:2b:07:f3: 06:8c:47:1c:e8:3d:56:4b:7c:19:8e:21:9d:2e:b9:e1:0c:e8: 9f:2d:83:34:2f:a7:f4:79:a8:e5:e9:15:d4:90:64:2d:4a:86: c5:fb:94:e4:4b:85:36:65:3a:e7:4e:32:3d:31:13:75:45:b2: 37:25:49:88:f8:97:cf:6e:04:f9:32:ba:8c:5e:06:af:7e:97: 6a:de:98:c4:a8:90:4f:40:0e:a6:53:52:f4:43:f1:c2:17:da: c0:11:38:0c:39:a2:6c:3b:a7:4c:f1:77:b2:e7:6a:9d:73:94: e1:1a:b4:7b:29:3b:95:05:88:07:ee:9e:2f:3c:4b:88:32:f3: 00:f1:3f:fb:9b:88:fa:c9:29:11:c6:49:ec:5f:18:77:ed:50: 5e:9b:6a:f5 -----BEGIN CERTIFICATE----- MIIFpjCCBI6gAwIBAgIUQq4SCwsznCSwzUU324AHlkWkUxowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDUyOTA2MjYyM1oX DTI3MDUyODA2MzEyM1owMzExMC8GA1UEAxMoMEMwMjAwN0MzOTFEQjU0MTQzNTVE RTFBMDUzRDRFNkQwNkNERDJDRTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMUUJ9DZ3dRvFct4SXsg5+U8D9WVSuoph9S252r4A2zlYj/P+u5cdtBd16XP VUgwAG+tAbKvmTA8OiFODKAF+nf1RuIlb5CVhl7DGNPRgHxVoATq/5P+bKKpi+eX L+sXVzc0E5lz43MKiO+e4YTf/yZsUZ0NSCYeBIyJMz0TII0rwv66ZNbd2dkdc7q8 9pXsqhz/6PynC5x7uTVB9F2HfniK6jVg+SAVXZAEcFf3IaU/dZFGkW4JaihXdhOB yOedgevhMIJwLYCDq5TflUr/91+EsYBXhJpxRBE6jBjEbRiMlBppKh7BupR10naM d4vX2ptjGWslZWAhkkaQKoanKesCAwEAAaOCApkwggKVMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFAwCAHw5HbVBQ1XeGgU9Tm0GzdLOMB8GA1UdIwQYMBaAFKVu hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTA2NTU5MTE5NTcyMTU5NjkyOS8wLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDY1NTkxMTk1NzIxNTk2OTI5 LzAvMEMwMjAwN0MzOTFEQjU0MTQzNTVERTFBMDUzRDRFNkQwNkNERDJDRS5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUH AQcBAf8EDzANMAsEAgABMAUDAwC03zANBgkqhkiG9w0BAQsFAAOCAQEALlPX0TEm +2y3MQaaZ78BUYfwO0qxCXDFtk2y1zaUENNL55pR/7R67o0j8eEtG7A2sRM5rD63 IDfP/a2ZuJfPRTZicTuMyAnZje4jMOwliKV5GUgXUY2pCegouA/rMOeFpHgbcZK9 XyIUKwfzBoxHHOg9Vkt8GY4hnS654Qzony2DNC+n9Hmo5ekV1JBkLUqGxfuU5EuF NmU6504yPTETdUWyNyVJiPiXz24E+TK6jF4Gr36Xat6YxKiQT0AOplNS9EPxwhfa wBE4DDmibDunTPF3sudqnXOU4Rq0eyk7lQWIB+6eLzxLiDLzAPE/+5uI+skpEcZJ 7F8Yd+1QXptq9Q== -----END CERTIFICATE-----Generated at Thu Jun 11 17:43:31 2026 by rpki-client