$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/305CF9A41DCC6E06CE9CA73352325EFC4D34331C.cer File: 305CF9A41DCC6E06CE9CA73352325EFC4D34331C.cer (raw, json) Hash identifier: eTgX61y8wEBmw76fu0kJd1TG8CYjd/JRbNw21UFRcwk= Subject key identifier: 30:5C:F9:A4:1D:CC:6E:06:CE:9C:A7:33:52:32:5E:FC:4D:34:33:1C Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Certificate serial: 5BB68D0DFCAADE5B6FCB703E3159C52B9C881C11 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1111857844975566867/0/305CF9A41DCC6E06CE9CA73352325EFC4D34331C.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1111857844975566867/0/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Wed 27 May 2026 03:21:08 +0000 Certificate not after: Wed 26 May 2027 03:26:08 +0000 Subordinate resources: IP: 43.224.80.0/22 IP: 103.214.48.0/24 IP: 103.214.50.0/24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 15:28:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:b6:8d:0d:fc:aa:de:5b:6f:cb:70:3e:31:59:c5:2b:9c:88:1c:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Validity Not Before: May 27 03:21:08 2026 GMT Not After : May 26 03:26:08 2027 GMT Subject: CN=305CF9A41DCC6E06CE9CA73352325EFC4D34331C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:97:16:94:05:89:7a:5d:68:4e:78:fe:43:ff: 30:1d:1a:51:ee:68:07:c7:b6:56:92:4f:02:d7:e3: 73:3f:51:1e:4b:99:3f:7f:38:47:fe:ff:9e:2c:b7: b0:33:1d:32:4f:16:d5:c4:99:60:ab:a6:7a:3e:a6: 0f:e6:a1:f7:14:8e:8b:54:99:de:37:a8:b0:86:8f: 20:a7:f5:84:d0:f8:8b:05:5c:7f:bc:e0:6f:b5:bd: 94:55:36:ea:66:fc:4e:a8:c1:fa:4f:21:56:5b:5c: 49:2f:9b:13:75:af:9c:ef:99:60:76:7b:64:b3:c7: 32:74:91:cf:65:63:5d:09:c1:e5:bb:8e:63:62:ea: 39:e1:57:9c:9f:54:8e:0a:10:aa:27:e9:7e:98:c0: 98:86:45:a9:80:3f:08:c9:8d:f4:c4:43:b5:a3:2f: 72:ef:17:da:cd:41:b2:ef:1a:95:c2:3d:5d:9b:07: 65:1e:50:dc:e4:ed:cc:ae:63:eb:da:c5:df:0a:7f: e7:b6:7e:f0:09:59:98:5c:65:56:b0:04:e5:7b:92: e1:55:1b:a2:e2:37:66:dc:c6:6f:a1:cc:8a:c2:9b: 58:02:32:35:18:7d:49:97:b7:01:fe:ea:99:a2:74: 99:aa:71:05:bd:68:a5:e0:6e:30:85:3a:ac:1f:ae: 84:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 30:5C:F9:A4:1D:CC:6E:06:CE:9C:A7:33:52:32:5E:FC:4D:34:33:1C X509v3 Authority Key Identifier: keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1111857844975566867/0/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1111857844975566867/0/305CF9A41DCC6E06CE9CA73352325EFC4D34331C.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.224.80.0/22 103.214.48.0/24 103.214.50.0/24 Signature Algorithm: sha256WithRSAEncryption 1f:69:78:0a:1e:86:69:89:24:d5:71:af:95:85:45:0c:af:37: 97:78:76:e3:f1:02:1a:be:8c:7e:c2:f8:9f:51:64:09:d0:5e: c0:d5:5e:57:4b:50:87:f0:b9:24:38:44:1f:56:01:c7:12:de: 93:06:6d:79:49:9e:13:65:55:40:b5:9a:b6:ea:06:71:fd:22: 70:19:e0:2d:40:9e:31:73:95:ed:15:c4:7c:95:4b:8d:37:04: 3c:56:db:88:ad:61:93:25:9d:f6:ab:3d:b6:24:a3:a0:36:cf: c6:3d:62:a0:aa:64:77:56:37:32:20:5d:59:62:cd:b1:45:8b: b4:4e:93:15:1a:c6:36:94:1b:90:ba:c9:04:0d:b1:12:06:d1: ec:c5:86:71:10:06:d1:3f:f7:63:a0:09:13:69:63:26:e5:48: c9:c3:b0:71:83:16:95:5c:aa:59:6f:b3:cb:24:22:94:a0:f7: 0a:83:c8:ec:21:f6:0d:dd:fe:35:5c:54:c7:58:ef:18:34:02: 7d:cc:94:4c:1e:1b:7f:35:8c:5d:9a:87:b5:b7:ec:6e:f5:08: c8:28:06:83:be:3f:d2:b0:e1:ec:38:39:70:14:ec:ec:00:90: af:c0:b5:42:bb:ec:5b:5b:0f:48:7b:e8:9e:76:10:93:91:95: 9d:80:af:96 -----BEGIN CERTIFICATE----- MIIFszCCBJugAwIBAgIUW7aNDfyq3ltvy3A+MVnFK5yIHBEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDUyNzAzMjEwOFoX DTI3MDUyNjAzMjYwOFowMzExMC8GA1UEAxMoMzA1Q0Y5QTQxRENDNkUwNkNFOUNB NzMzNTIzMjVFRkM0RDM0MzMxQzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANCXFpQFiXpdaE54/kP/MB0aUe5oB8e2VpJPAtfjcz9RHkuZP384R/7/niy3 sDMdMk8W1cSZYKumej6mD+ah9xSOi1SZ3jeosIaPIKf1hND4iwVcf7zgb7W9lFU2 6mb8TqjB+k8hVltcSS+bE3WvnO+ZYHZ7ZLPHMnSRz2VjXQnB5buOY2LqOeFXnJ9U jgoQqifpfpjAmIZFqYA/CMmN9MRDtaMvcu8X2s1Bsu8alcI9XZsHZR5Q3OTtzK5j 69rF3wp/57Z+8AlZmFxlVrAE5XuS4VUbouI3ZtzGb6HMisKbWAIyNRh9SZe3Af7q maJ0mapxBb1opeBuMIU6rB+uhMkCAwEAAaOCAqYwggKiMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFDBc+aQdzG4GzpynM1IyXvxNNDMcMB8GA1UdIwQYMBaAFKVu hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTExMTg1Nzg0NDk3NTU2Njg2Ny8wLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMTExODU3ODQ0OTc1NTY2ODY3 LzAvMzA1Q0Y5QTQxRENDNkUwNkNFOUNBNzMzNTIzMjVFRkM0RDM0MzMxQy5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwKwYIKwYBBQUH AQcBAf8EHDAaMBgEAgABMBIDBAIr4FADBABn1jADBABn1jIwDQYJKoZIhvcNAQEL BQADggEBAB9peAoehmmJJNVxr5WFRQyvN5d4duPxAhq+jH7C+J9RZAnQXsDVXldL UIfwuSQ4RB9WAccS3pMGbXlJnhNlVUC1mrbqBnH9InAZ4C1AnjFzle0VxHyVS403 BDxW24itYZMlnfarPbYko6A2z8Y9YqCqZHdWNzIgXVlizbFFi7ROkxUaxjaUG5C6 yQQNsRIG0ezFhnEQBtE/92OgCRNpYyblSMnDsHGDFpVcqllvs8skIpSg9wqDyOwh 9g3d/jVcVMdY7xg0An3MlEweG381jF2ah7W37G71CMgoBoO+P9Kw4ew4OXAU7OwA kK/AtUK77FtbD0h76J52EJORlZ2Ar5Y= -----END CERTIFICATE-----Generated at Fri May 29 21:11:50 2026 by rpki-client