$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/57FBC602F8DD1AA06D45E7F3F1993968E7995AE0.cer File: 57FBC602F8DD1AA06D45E7F3F1993968E7995AE0.cer (raw, json) Hash identifier: AFSoB2zINfUI+PrWhqycmebdwxZp/E5rnsvrKFJWaj8= Subject key identifier: 57:FB:C6:02:F8:DD:1A:A0:6D:45:E7:F3:F1:99:39:68:E7:99:5A:E0 Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Certificate serial: 07698436B007DEF0E70C16DE5571AC22BE7F9D08 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1065576199947878403/0/57FBC602F8DD1AA06D45E7F3F1993968E7995AE0.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1065576199947878403/0/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Thu 28 May 2026 03:37:23 +0000 Certificate not after: Thu 27 May 2027 03:42:23 +0000 Subordinate resources: AS: 17969 AS: 38355 IP: 27.144.0.0/16 IP: 42.50.0.0/16 IP: 42.123.128.0/17 IP: 117.59.0.0/16 IP: 125.62.0.0/18 IP: 203.161.192.0/19 IP: 218.244.0.0/19 IP: 2401:7e00::/32 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 15:28:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:69:84:36:b0:07:de:f0:e7:0c:16:de:55:71:ac:22:be:7f:9d:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Validity Not Before: May 28 03:37:23 2026 GMT Not After : May 27 03:42:23 2027 GMT Subject: CN=57FBC602F8DD1AA06D45E7F3F1993968E7995AE0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:32:50:2d:b3:50:cd:aa:bd:37:13:34:80:a0: 0b:42:ff:54:ba:e1:bd:68:74:fb:bc:57:49:4a:cb: e0:ed:0a:9a:02:27:35:ee:95:8b:f0:3b:43:b3:91: 49:18:be:bc:11:8d:57:51:d1:26:56:b5:df:51:c1: 5b:69:4c:41:a6:75:89:eb:c8:97:9a:93:fc:09:61: f5:71:c6:28:9c:6d:eb:e5:6e:eb:8e:a5:7a:b6:d5: 4a:ef:f5:6a:84:b3:dc:ae:9c:41:6e:b1:56:1a:c9: c6:51:15:d4:48:e9:6d:c8:78:85:09:d6:eb:54:3c: c3:05:e7:ea:fc:80:d4:6d:91:49:ef:02:1d:c0:ad: 29:22:f2:06:47:f7:2d:9c:0c:f2:85:cc:4d:b2:52: db:f4:1f:3b:e3:f0:90:6d:89:38:87:6f:43:8a:de: a4:9b:fa:54:31:da:a4:b1:39:b5:0b:e0:f2:81:12: a3:6a:bf:97:08:aa:dc:7f:df:25:7b:7f:67:54:b4: 21:47:ea:96:94:68:e8:dd:38:4f:30:be:17:64:7d: 0f:9d:6a:8a:55:8a:70:c4:e3:e8:67:b8:82:22:b7: f0:9a:fd:3c:bf:b2:b2:5a:29:05:22:e7:ec:25:37: 4b:da:ac:5e:8a:86:eb:ef:7e:bf:f5:de:d6:c0:2b: 5d:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 57:FB:C6:02:F8:DD:1A:A0:6D:45:E7:F3:F1:99:39:68:E7:99:5A:E0 X509v3 Authority Key Identifier: keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947878403/0/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947878403/0/57FBC602F8DD1AA06D45E7F3F1993968E7995AE0.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 27.144.0.0/16 42.50.0.0/16 42.123.128.0/17 117.59.0.0/16 125.62.0.0/18 203.161.192.0/19 218.244.0.0/19 IPv6: 2401:7e00::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 17969 38355 Signature Algorithm: sha256WithRSAEncryption 03:da:25:48:bf:9f:4b:ac:86:8b:a7:1c:47:50:ae:ef:e3:2a: 62:a0:6c:ac:70:7c:d8:fc:2d:74:c7:bb:a7:81:26:92:77:e2: b3:d6:e0:db:97:0e:bd:9d:cb:17:ba:8b:b3:0c:39:e2:b2:1c: 55:15:30:c7:a5:6b:0c:22:5d:d9:59:41:32:1f:f9:48:72:f3: cc:1c:6b:14:df:1b:8c:f0:85:ee:e5:6c:4b:c2:4d:6e:66:6c: 35:de:a8:32:73:7c:05:52:53:04:c0:46:64:29:ff:6c:db:33: 4c:18:6d:92:20:54:17:48:e7:a6:1a:d1:db:50:c9:5a:48:86: 0e:40:22:ff:33:23:80:cc:bb:a6:46:a8:ca:89:1d:29:91:71: b2:b2:44:42:1f:6c:5b:26:88:04:66:40:a4:2b:51:b1:ac:9e: 95:5c:75:6a:fa:9f:08:ad:4f:b0:db:23:a2:a0:29:dc:ab:9f: ee:5e:c7:3c:a8:1b:03:60:f0:a1:00:d6:d4:fb:8f:e4:69:09: 73:23:50:a1:49:0f:6d:03:bd:d9:ea:a3:d9:f0:0a:b1:3c:29: 55:85:f2:7a:f9:e1:6f:dd:c3:67:03:ec:50:d2:49:f6:6f:35: 3e:a3:3b:d4:b0:64:9d:f2:6a:e6:c5:7e:14:f8:2b:c6:62:a7: 97:b3:65:7f -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUB2mENrAH3vDnDBbeVXGsIr5/nQgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDUyODAzMzcyM1oX DTI3MDUyNzAzNDIyM1owMzExMC8GA1UEAxMoNTdGQkM2MDJGOEREMUFBMDZENDVF N0YzRjE5OTM5NjhFNzk5NUFFMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAN4yUC2zUM2qvTcTNICgC0L/VLrhvWh0+7xXSUrL4O0KmgInNe6Vi/A7Q7OR SRi+vBGNV1HRJla131HBW2lMQaZ1ievIl5qT/Alh9XHGKJxt6+Vu646lerbVSu/1 aoSz3K6cQW6xVhrJxlEV1Ejpbch4hQnW61Q8wwXn6vyA1G2RSe8CHcCtKSLyBkf3 LZwM8oXMTbJS2/QfO+PwkG2JOIdvQ4repJv6VDHapLE5tQvg8oESo2q/lwiq3H/f JXt/Z1S0IUfqlpRo6N04TzC+F2R9D51qilWKcMTj6Ge4giK38Jr9PL+yslopBSLn 7CU3S9qsXoqG6+9+v/Xe1sArXR0CAwEAAaOCAuowggLmMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFFf7xgL43RqgbUXn8/GZOWjnmVrgMB8GA1UdIwQYMBaAFKVu hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTA2NTU3NjE5OTk0Nzg3ODQwMy8wLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDY1NTc2MTk5OTQ3ODc4NDAz LzAvNTdGQkM2MDJGOEREMUFBMDZENDVFN0YzRjE5OTM5NjhFNzk5NUFFMC5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwTwYIKwYBBQUH AQcBAf8EQDA+MC0EAgABMCcDAwAbkAMDACoyAwQHKnuAAwMAdTsDBAZ9PgADBAXL ocADBAXa9AAwDQQCAAIwBwMFACQBfgAwHgYIKwYBBQUHAQgBAf8EDzANoAswCQIC RjECAwCV0zANBgkqhkiG9w0BAQsFAAOCAQEAA9olSL+fS6yGi6ccR1Cu7+MqYqBs rHB82PwtdMe7p4Emknfis9bg25cOvZ3LF7qLsww54rIcVRUwx6VrDCJd2VlBMh/5 SHLzzBxrFN8bjPCF7uVsS8JNbmZsNd6oMnN8BVJTBMBGZCn/bNszTBhtkiBUF0jn phrR21DJWkiGDkAi/zMjgMy7pkaoyokdKZFxsrJEQh9sWyaIBGZApCtRsayelVx1 avqfCK1PsNsjoqAp3Kuf7l7HPKgbA2DwoQDW1PuP5GkJcyNQoUkPbQO92eqj2fAK sTwpVYXyevnhb93DZwPsUNJJ9m81PqM71LBknfJq5sV+FPgrxmKnl7Nlfw== -----END CERTIFICATE-----Generated at Fri May 29 21:13:22 2026 by rpki-client