$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/24DF5D57D3DC90C70C758DA9F83ED072FC035D6B.cer File: 24DF5D57D3DC90C70C758DA9F83ED072FC035D6B.cer (raw, json) Hash identifier: ebxBDvINXR3VsKUHXisYKWA7iS/0BzT/+SgCfX4uZSA= Subject key identifier: 24:DF:5D:57:D3:DC:90:C7:0C:75:8D:A9:F8:3E:D0:72:FC:03:5D:6B Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Certificate serial: 1EB7C76B28D85791090026ADCD96476C0E7D40A8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1108935859060670483/0/24DF5D57D3DC90C70C758DA9F83ED072FC035D6B.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1108935859060670483/0/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Tue 19 May 2026 01:56:06 +0000 Certificate not after: Tue 18 May 2027 02:01:06 +0000 Subordinate resources: IP: 103.131.138.0/23 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 15:28:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:b7:c7:6b:28:d8:57:91:09:00:26:ad:cd:96:47:6c:0e:7d:40:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Validity Not Before: May 19 01:56:06 2026 GMT Not After : May 18 02:01:06 2027 GMT Subject: CN=24DF5D57D3DC90C70C758DA9F83ED072FC035D6B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:86:47:7a:80:eb:8c:6c:72:5d:15:67:18:eb: c1:86:a4:85:fa:b2:8d:a4:48:e5:b1:e1:56:35:b7: a9:71:db:ca:76:f4:50:38:7d:ce:73:d0:2b:1a:9d: ff:6c:63:66:de:ea:da:54:f6:3c:d2:2e:21:2b:c7: 98:70:e6:21:26:00:4e:ac:07:06:7c:1a:f6:5f:96: fa:e1:e3:c8:0a:24:4d:1d:3f:d6:81:7e:9a:23:fb: d9:d4:03:a3:e2:42:1f:bd:32:c3:80:96:66:c6:e6: 2e:a3:fb:93:c2:ef:4c:9d:77:35:57:28:c6:4d:3a: 4c:24:82:91:f9:b7:f1:df:0d:56:91:3b:26:b9:76: c5:6c:1a:94:8f:a5:8c:01:1f:46:9e:67:23:8d:36: df:28:61:90:75:62:5b:01:23:24:08:1b:d9:43:83: 44:7b:8e:73:11:b5:ef:ba:c3:5d:79:07:39:7a:c8: 7e:ae:29:5d:23:f9:7b:08:c4:e4:44:18:99:f2:c5: a6:07:d8:48:43:51:49:41:27:84:16:b8:06:30:ce: 66:5b:28:52:33:ca:e3:e2:36:a8:af:9c:b7:37:bd: f6:78:18:4a:16:e0:a2:6e:c0:62:9d:4c:d3:e0:6c: 89:8e:71:55:4b:d4:6f:ca:40:86:ca:58:51:55:60: 6d:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 24:DF:5D:57:D3:DC:90:C7:0C:75:8D:A9:F8:3E:D0:72:FC:03:5D:6B X509v3 Authority Key Identifier: keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1108935859060670483/0/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1108935859060670483/0/24DF5D57D3DC90C70C758DA9F83ED072FC035D6B.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.131.138.0/23 Signature Algorithm: sha256WithRSAEncryption 60:b4:45:bd:b2:5c:da:b4:b1:25:d7:9a:a9:4e:1d:1c:e1:80: b8:f0:b9:f1:13:1d:e1:58:27:15:55:97:e2:5e:b3:56:f2:b3: 7b:ba:c2:53:65:5e:32:54:67:85:7e:e8:19:15:42:aa:3a:24: 99:43:1c:83:f3:ec:7f:3c:41:36:7f:51:32:9c:92:9a:f0:67: de:a0:cf:0a:15:7a:85:02:50:da:6c:5c:48:49:86:f7:86:2e: ac:21:ca:ae:68:ef:ce:b8:10:b6:be:5c:d7:29:cc:e2:da:85: ef:a8:50:0f:8d:8a:52:65:6e:48:a7:bc:50:52:2a:af:9a:04: d1:8c:c6:63:91:b2:1b:9b:11:0a:df:0a:bc:9c:9a:3a:cb:84: 85:87:fa:a0:d1:8d:b2:72:8a:e9:13:67:f0:fc:6d:7e:c6:8a: 09:43:eb:4a:15:25:4c:d7:12:da:0e:18:78:e7:2b:ed:17:0d: c2:8c:a0:cc:2e:b2:66:a2:24:99:70:4f:c4:e1:dc:a9:31:7b: ea:fb:84:30:a9:8a:45:9b:47:b6:2b:22:8e:f5:7c:ec:7d:ec: 35:d7:38:23:3e:a8:68:69:3c:02:34:0d:fb:39:09:c5:20:64: a5:c9:f9:d1:32:a2:65:38:72:53:ec:16:59:30:06:7f:fa:48: c3:a9:3e:fc -----BEGIN CERTIFICATE----- MIIFpzCCBI+gAwIBAgIUHrfHayjYV5EJACatzZZHbA59QKgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDUxOTAxNTYwNloX DTI3MDUxODAyMDEwNlowMzExMC8GA1UEAxMoMjRERjVENTdEM0RDOTBDNzBDNzU4 REE5RjgzRUQwNzJGQzAzNUQ2QjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKuGR3qA64xscl0VZxjrwYakhfqyjaRI5bHhVjW3qXHbynb0UDh9znPQKxqd /2xjZt7q2lT2PNIuISvHmHDmISYATqwHBnwa9l+W+uHjyAokTR0/1oF+miP72dQD o+JCH70yw4CWZsbmLqP7k8LvTJ13NVcoxk06TCSCkfm38d8NVpE7Jrl2xWwalI+l jAEfRp5nI4023yhhkHViWwEjJAgb2UODRHuOcxG177rDXXkHOXrIfq4pXSP5ewjE 5EQYmfLFpgfYSENRSUEnhBa4BjDOZlsoUjPK4+I2qK+ctze99ngYShbgom7AYp1M 0+BsiY5xVUvUb8pAhspYUVVgbdMCAwEAAaOCApowggKWMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFCTfXVfT3JDHDHWNqfg+0HL8A11rMB8GA1UdIwQYMBaAFKVu hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTEwODkzNTg1OTA2MDY3MDQ4My8wLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMTA4OTM1ODU5MDYwNjcwNDgz LzAvMjRERjVENTdEM0RDOTBDNzBDNzU4REE5RjgzRUQwNzJGQzAzNUQ2Qi5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAFng4owDQYJKoZIhvcNAQELBQADggEBAGC0Rb2y XNq0sSXXmqlOHRzhgLjwufETHeFYJxVVl+Jes1bys3u6wlNlXjJUZ4V+6BkVQqo6 JJlDHIPz7H88QTZ/UTKckprwZ96gzwoVeoUCUNpsXEhJhveGLqwhyq5o7864ELa+ XNcpzOLahe+oUA+NilJlbkinvFBSKq+aBNGMxmORshubEQrfCrycmjrLhIWH+qDR jbJyiukTZ/D8bX7GiglD60oVJUzXEtoOGHjnK+0XDcKMoMwusmaiJJlwT8Th3Kkx e+r7hDCpikWbR7YrIo71fOx97DXXOCM+qGhpPAI0Dfs5CcUgZKXJ+dEyomU4clPs FlkwBn/6SMOpPvw= -----END CERTIFICATE-----Generated at Fri May 29 21:11:24 2026 by rpki-client