$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/567767345978FFC7B627F4CD1AA4B63EA9331D4C.cer File: 567767345978FFC7B627F4CD1AA4B63EA9331D4C.cer (raw, json) Hash identifier: JA1chVVMV6sVoroWwa0Rotr/ear/jLG5p8MBY/JX730= Subject key identifier: 56:77:67:34:59:78:FF:C7:B6:27:F4:CD:1A:A4:B6:3E:A9:33:1D:4C Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Certificate serial: 7C47279A212365967F6BFEF33689B7989D7B9A2B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1112266204052979731/1/567767345978FFC7B627F4CD1AA4B63EA9331D4C.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1112266204052979731/1/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Thu 28 May 2026 06:23:50 +0000 Certificate not after: Thu 27 May 2027 06:28:50 +0000 Subordinate resources: AS: 151234 IP: 2402:6060::/32 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 15:28:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:47:27:9a:21:23:65:96:7f:6b:fe:f3:36:89:b7:98:9d:7b:9a:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Validity Not Before: May 28 06:23:50 2026 GMT Not After : May 27 06:28:50 2027 GMT Subject: CN=567767345978FFC7B627F4CD1AA4B63EA9331D4C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:cd:e8:c9:1b:d1:45:f7:53:f5:d4:3a:c1:a0: 24:6b:f7:23:7d:3c:13:3a:63:83:58:5b:7a:60:e4: 2d:e8:ef:c5:c4:82:51:ba:43:56:2d:81:d1:53:d6: 79:7e:c9:f1:34:92:06:02:3d:0d:41:ff:d2:ab:72: 45:03:82:d0:c4:1b:75:4c:88:44:ee:ff:a6:dc:e4: 3d:03:d8:d5:fe:5d:9a:92:8f:e1:81:69:b1:fe:15: ed:b4:c6:ca:4a:29:de:e2:91:b2:d6:2c:b7:bd:c8: 42:f8:35:65:78:cc:ad:cf:03:68:7f:03:79:15:28: da:88:68:b1:33:98:12:a8:69:a8:fc:af:5f:df:15: d9:7e:98:51:f3:f5:33:af:59:4a:6e:d6:a2:42:73: 02:ff:c0:5e:a4:71:22:fe:da:8b:94:b8:de:c6:6b: ab:a5:49:51:af:f6:48:8f:e1:6b:e7:42:72:3a:27: 30:1a:92:72:16:dc:89:4c:84:fb:40:cb:6d:67:b4: 5b:69:0d:5e:d1:84:32:9f:24:dd:a2:c4:76:11:06: b8:f7:3b:ad:f9:37:9c:00:07:02:23:fd:b6:d7:a1: 81:98:0e:6a:49:0b:b2:0f:05:e2:be:2b:50:6f:c9: 8d:7a:56:51:0c:57:c3:86:68:68:80:9a:13:b9:87: 9f:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 56:77:67:34:59:78:FF:C7:B6:27:F4:CD:1A:A4:B6:3E:A9:33:1D:4C X509v3 Authority Key Identifier: keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1112266204052979731/1/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1112266204052979731/1/567767345978FFC7B627F4CD1AA4B63EA9331D4C.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2402:6060::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 151234 Signature Algorithm: sha256WithRSAEncryption 5d:0a:10:57:11:96:2a:16:89:2c:a6:fe:0a:93:3f:b2:ca:86: 3f:3d:bf:fd:48:da:09:59:a6:47:3c:b2:57:f8:e2:7b:5b:ac: 72:f3:d8:85:d9:35:19:92:f4:7c:a7:ac:78:7b:9b:bb:2e:e6: de:80:4f:e9:3e:63:b7:00:29:5b:03:3e:e6:22:ba:7e:97:0c: 15:ab:d6:b4:18:fc:2b:a5:c7:bf:cb:21:4a:5a:ea:2e:46:52: 15:28:13:38:a2:e5:ab:82:70:6a:19:f1:f0:1a:b4:01:ec:56: 9d:de:1a:5b:06:88:ec:88:5c:69:dd:6c:0e:ad:17:75:85:0b: 3f:c3:ad:96:11:7a:7f:88:d0:2d:bd:25:7f:32:58:9b:d6:43: 9a:7d:81:71:b0:07:7c:a1:0b:32:ff:cf:96:99:c4:b6:ff:95: 08:9a:a0:ea:2d:d9:7b:76:ff:86:7e:c6:e8:06:2a:ca:68:03: d7:82:0f:06:98:65:2e:a2:0b:25:1c:fa:70:6c:73:1f:f6:a4: 86:f3:3e:51:e0:3b:34:2e:fe:83:c2:27:87:79:8a:f0:d6:41: 7a:59:91:13:93:82:b2:49:74:02:64:d0:e2:a9:15:e1:83:58: 9a:2a:df:61:30:f1:fc:c3:06:95:54:89:bb:bb:6a:bf:6f:d2: aa:ae:a1:15 -----BEGIN CERTIFICATE----- MIIFxDCCBKygAwIBAgIUfEcnmiEjZZZ/a/7zNom3mJ17miswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDUyODA2MjM1MFoX DTI3MDUyNzA2Mjg1MFowMzExMC8GA1UEAxMoNTY3NzY3MzQ1OTc4RkZDN0I2MjdG NENEMUFBNEI2M0VBOTMzMUQ0QzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMvN6Mkb0UX3U/XUOsGgJGv3I308Ezpjg1hbemDkLejvxcSCUbpDVi2B0VPW eX7J8TSSBgI9DUH/0qtyRQOC0MQbdUyIRO7/ptzkPQPY1f5dmpKP4YFpsf4V7bTG ykop3uKRstYst73IQvg1ZXjMrc8DaH8DeRUo2ohosTOYEqhpqPyvX98V2X6YUfP1 M69ZSm7WokJzAv/AXqRxIv7ai5S43sZrq6VJUa/2SI/ha+dCcjonMBqSchbciUyE +0DLbWe0W2kNXtGEMp8k3aLEdhEGuPc7rfk3nAAHAiP9ttehgZgOakkLsg8F4r4r UG/JjXpWUQxXw4ZoaICaE7mHn9MCAwEAAaOCArcwggKzMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFFZ3ZzRZeP/Htif0zRqktj6pMx1MMB8GA1UdIwQYMBaAFKVu hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTExMjI2NjIwNDA1Mjk3OTczMS8xLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMTEyMjY2MjA0MDUyOTc5NzMx LzEvNTY3NzY3MzQ1OTc4RkZDN0I2MjdGNENEMUFBNEI2M0VBOTMzMUQ0Qy5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUH AQcBAf8EETAPMA0EAgACMAcDBQAkAmBgMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwJOwjANBgkqhkiG9w0BAQsFAAOCAQEAXQoQVxGWKhaJLKb+CpM/ssqGPz2//Uja CVmmRzyyV/jie1uscvPYhdk1GZL0fKeseHubuy7m3oBP6T5jtwApWwM+5iK6fpcM FavWtBj8K6XHv8shSlrqLkZSFSgTOKLlq4Jwahnx8Bq0AexWnd4aWwaI7Ihcad1s Dq0XdYULP8OtlhF6f4jQLb0lfzJYm9ZDmn2BcbAHfKELMv/PlpnEtv+VCJqg6i3Z e3b/hn7G6AYqymgD14IPBphlLqILJRz6cGxzH/akhvM+UeA7NC7+g8Inh3mK8NZB elmRE5OCskl0AmTQ4qkV4YNYmirfYTDx/MMGlVSJu7tqv2/Sqq6hFQ== -----END CERTIFICATE-----Generated at Fri May 29 21:11:46 2026 by rpki-client