$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2DE78C945E2B53374B86C0A7BDE5ADE6904C5EC2.cer File: 2DE78C945E2B53374B86C0A7BDE5ADE6904C5EC2.cer (raw, json) Hash identifier: VgWIZ85DcjrD3vfgPqfh7UFLOaaCg06zS81+FQdHQIE= Subject key identifier: 2D:E7:8C:94:5E:2B:53:37:4B:86:C0:A7:BD:E5:AD:E6:90:4C:5E:C2 Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Certificate serial: 3A27354A0E830475F6A32D339EF39B2399736CA4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1114861900895617051/0/2DE78C945E2B53374B86C0A7BDE5ADE6904C5EC2.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1114861900895617051/0/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Thu 04 Jun 2026 10:18:11 +0000 Certificate not after: Thu 03 Jun 2027 10:23:11 +0000 Subordinate resources: AS: 58851 IP: 1.119.0.0/17 IP: 103.16.124.0/22 IP: 103.244.64.0/22 IP: 103.254.112.0/22 IP: 114.112.136.0 -- 114.112.151.255 IP: 211.102.208.0/20 IP: 2400:a780::/32 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Jun 2026 04:35:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:27:35:4a:0e:83:04:75:f6:a3:2d:33:9e:f3:9b:23:99:73:6c:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Validity Not Before: Jun 4 10:18:11 2026 GMT Not After : Jun 3 10:23:11 2027 GMT Subject: CN=2DE78C945E2B53374B86C0A7BDE5ADE6904C5EC2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:51:c0:a2:b6:08:f7:9f:96:38:25:86:bb:2a: fb:3f:1e:31:f3:3d:73:5a:31:fe:99:20:aa:84:4b: f9:69:47:c0:87:ba:5e:95:a9:6d:1b:c2:eb:f3:0d: 65:13:cd:88:ec:a6:f5:9f:d8:1b:4a:21:8b:88:54: 6d:7f:32:cd:44:47:b9:d5:7f:41:4e:37:e8:f9:d1: 70:4f:9b:84:38:0a:ac:25:bd:d4:33:24:c4:60:56: 13:28:f6:cf:2d:06:fc:7a:3f:1c:d8:be:51:4f:b4: 28:8a:18:a9:7e:3c:0d:4e:84:59:4d:92:17:2e:b0: c8:95:b0:16:35:2d:bc:0f:5b:89:66:45:b9:ee:f2: 3a:ad:16:d9:6f:33:c5:5a:4d:4d:db:ea:68:75:b9: a8:d2:f4:e9:68:56:12:92:8b:a0:c2:b7:60:83:76: 5f:12:05:7a:2d:c5:93:13:d9:bf:93:1a:17:7d:e2: 14:b2:3a:c9:e6:a4:ba:8e:c1:b1:f3:51:8f:ed:f8: 91:67:8a:16:31:84:76:94:54:41:72:b4:a1:ba:c1: e1:3b:27:c5:57:b9:88:92:01:b9:44:24:f5:25:38: c5:4f:c0:c4:9e:7d:bf:0b:1a:b8:23:f0:30:ed:86: 9a:5c:a7:51:a1:75:f0:02:ca:ff:8d:92:f7:11:d8: 37:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 2D:E7:8C:94:5E:2B:53:37:4B:86:C0:A7:BD:E5:AD:E6:90:4C:5E:C2 X509v3 Authority Key Identifier: keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1114861900895617051/0/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1114861900895617051/0/2DE78C945E2B53374B86C0A7BDE5ADE6904C5EC2.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 1.119.0.0/17 103.16.124.0/22 103.244.64.0/22 103.254.112.0/22 114.112.136.0-114.112.151.255 211.102.208.0/20 IPv6: 2400:a780::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 58851 Signature Algorithm: sha256WithRSAEncryption 6a:a2:1a:40:8c:30:f7:13:e9:fe:ba:f2:f1:ec:e5:83:80:96: 46:68:c8:da:ac:dc:f4:2a:ef:24:1e:bf:57:ad:f2:e3:f6:6c: 0d:79:b8:a0:ff:32:c9:8d:12:94:6e:9b:0b:47:d9:d1:1a:57: f5:4d:d3:96:01:5c:73:20:6c:df:57:ed:27:7d:64:63:4c:83: e1:83:c7:b7:e8:32:d9:75:7c:59:26:d7:ca:54:8f:43:4e:04: 74:3d:7d:a6:29:93:29:6d:10:cf:9c:17:dc:86:a5:12:81:34: 8d:17:fe:65:ba:dc:b2:6c:b8:88:44:38:ff:da:61:6d:86:8f: 8a:48:56:1f:cb:b1:7e:93:df:17:87:22:af:bb:73:fd:db:28: 12:28:db:15:20:ce:fc:04:c2:b2:22:9a:6f:fd:37:25:0f:7f: 22:5b:42:4c:ae:f6:95:85:02:98:2a:02:4b:7c:d5:e0:5a:cc: 74:71:ee:3d:13:a1:ad:45:02:1f:00:57:57:20:2d:69:87:a6: 15:45:4f:bd:01:86:36:f5:3b:2b:ea:65:52:98:43:ca:41:55: a9:4a:67:64:33:c9:fb:42:f5:73:1d:da:70:ca:1a:04:25:41: ce:33:87:ba:0d:fa:50:5b:94:49:fa:a2:14:98:79:36:4f:67: a3:24:cc:5a -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUOic1Sg6DBHX2oy0znvObI5lzbKQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDYwNDEwMTgxMVoX DTI3MDYwMzEwMjMxMVowMzExMC8GA1UEAxMoMkRFNzhDOTQ1RTJCNTMzNzRCODZD MEE3QkRFNUFERTY5MDRDNUVDMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALlRwKK2CPefljglhrsq+z8eMfM9c1ox/pkgqoRL+WlHwIe6XpWpbRvC6/MN ZRPNiOym9Z/YG0ohi4hUbX8yzURHudV/QU436PnRcE+bhDgKrCW91DMkxGBWEyj2 zy0G/Ho/HNi+UU+0KIoYqX48DU6EWU2SFy6wyJWwFjUtvA9biWZFue7yOq0W2W8z xVpNTdvqaHW5qNL06WhWEpKLoMK3YIN2XxIFei3FkxPZv5MaF33iFLI6yeakuo7B sfNRj+34kWeKFjGEdpRUQXK0obrB4TsnxVe5iJIBuUQk9SU4xU/AxJ59vwsauCPw MO2GmlynUaF18ALK/42S9xHYN48CAwEAAaOCAuswggLnMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFC3njJReK1M3S4bAp73lreaQTF7CMB8GA1UdIwQYMBaAFKVu hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTExNDg2MTkwMDg5NTYxNzA1MS8wLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMTE0ODYxOTAwODk1NjE3MDUx LzAvMkRFNzhDOTQ1RTJCNTMzNzRCODZDMEE3QkRFNUFERTY5MDRDNUVDMi5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwVAYIKwYBBQUH AQcBAf8ERTBDMDIEAgABMCwDBAcBdwADBAJnEHwDBAJn9EADBAJn/nAwDAMEA3Jw iAMEA3JwkAMEBNNm0DANBAIAAjAHAwUAJACngDAaBggrBgEFBQcBCAEB/wQLMAmg BzAFAgMA5eMwDQYJKoZIhvcNAQELBQADggEBAGqiGkCMMPcT6f668vHs5YOAlkZo yNqs3PQq7yQev1et8uP2bA15uKD/MsmNEpRumwtH2dEaV/VN05YBXHMgbN9X7Sd9 ZGNMg+GDx7foMtl1fFkm18pUj0NOBHQ9faYpkyltEM+cF9yGpRKBNI0X/mW63LJs uIhEOP/aYW2Gj4pIVh/LsX6T3xeHIq+7c/3bKBIo2xUgzvwEwrIimm/9NyUPfyJb Qkyu9pWFApgqAkt81eBazHRx7j0Toa1FAh8AV1cgLWmHphVFT70Bhjb1OyvqZVKY Q8pBValKZ2QzyftC9XMd2nDKGgQlQc4zh7oN+lBblEn6ohSYeTZPZ6MkzFo= -----END CERTIFICATE-----Generated at Fri Jun 12 07:48:51 2026 by rpki-client