$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.cer File: 5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.cer (raw, json) Hash identifier: bu0sKX9SlLGm6kJq811GntfZiInBzUbk9Q7rvbi8/ag= Subject key identifier: 5D:F8:08:6D:3E:FA:17:64:87:A1:C3:76:B7:BC:CF:3E:83:AB:23:39 Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Certificate serial: 241CEEBCFA6FB8A1BC703F87BB60E116E80885B4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/0/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/0/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Fri 29 May 2026 08:51:09 +0000 Certificate not after: Fri 28 May 2027 08:56:09 +0000 Subordinate resources: AS: 55996 IP: 43.229.48.0/22 IP: 103.20.32.0/22 IP: 103.40.174.0/23 IP: 103.45.168.0/22 IP: 103.45.224.0/22 IP: 103.61.188.0/22 IP: 103.197.0.0/22 IP: 103.248.100.0/22 IP: 123.108.88.0/23 IP: 2405:b300::/32 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 15:28:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:1c:ee:bc:fa:6f:b8:a1:bc:70:3f:87:bb:60:e1:16:e8:08:85:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Validity Not Before: May 29 08:51:09 2026 GMT Not After : May 28 08:56:09 2027 GMT Subject: CN=5DF8086D3EFA176487A1C376B7BCCF3E83AB2339 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:d4:4c:df:a5:75:ee:93:95:74:19:89:14:bb: 0e:41:cc:8d:11:fd:8d:56:8c:cf:64:57:5d:92:68: 4c:27:42:6b:ac:22:78:82:b2:40:5c:27:fe:32:52: e7:b2:27:cd:99:f6:ed:7c:73:f9:14:9a:32:86:f4: 3f:dc:08:d8:7e:45:62:d4:76:55:59:37:26:dc:23: 30:05:2f:85:cd:65:1a:05:2b:83:c6:c5:fb:fe:7e: 18:d0:1b:38:f5:e5:3a:db:65:a3:18:17:b4:83:ed: 4e:f4:fd:ae:63:56:b2:0b:24:08:85:48:91:40:d0: 87:98:c3:fb:ea:91:14:41:85:f6:d6:af:61:61:5f: 15:1c:be:82:0c:94:57:74:c9:49:ac:3f:45:ef:01: 39:52:6e:c4:3d:10:21:b2:49:88:b2:62:ac:27:74: 49:53:0f:ee:a7:9d:9b:3a:9e:e0:cc:9b:bd:d6:5a: c3:94:25:c9:59:bf:30:27:bc:ae:34:9d:88:7c:f7: b3:6a:47:25:c7:20:28:ad:3d:8a:9c:f6:b1:03:83: 61:4d:34:64:36:f8:12:ee:84:cf:1e:b5:8b:da:f7: b6:37:e2:0f:40:8b:21:d1:48:76:1a:4b:c2:7f:cb: b3:f7:a2:02:0a:84:3e:9b:5f:50:0d:17:27:12:a1: de:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 5D:F8:08:6D:3E:FA:17:64:87:A1:C3:76:B7:BC:CF:3E:83:AB:23:39 X509v3 Authority Key Identifier: keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/0/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/0/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.229.48.0/22 103.20.32.0/22 103.40.174.0/23 103.45.168.0/22 103.45.224.0/22 103.61.188.0/22 103.197.0.0/22 103.248.100.0/22 123.108.88.0/23 IPv6: 2405:b300::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 55996 Signature Algorithm: sha256WithRSAEncryption 49:c8:da:f2:da:39:18:f0:fa:47:f5:76:d0:f7:b0:48:b8:07: 81:8e:e5:1b:09:7a:a8:a6:7b:1f:4d:f8:14:2b:dc:e0:ee:5c: f5:67:00:ea:cb:ad:4e:12:4a:ea:0a:6b:2e:2a:40:49:d4:e1: 25:df:07:bc:4a:ef:d9:f3:71:a9:d7:cf:53:dc:27:18:e2:87: 89:9c:3a:83:b0:bc:0d:ef:82:ff:c5:84:a4:77:fe:94:57:16: a1:e8:a2:6a:30:5b:14:22:5c:ae:2e:45:21:da:aa:5d:15:39: b0:e0:02:c9:7d:4f:38:24:4e:ba:a5:6c:e4:d0:d8:1f:df:e0: 9e:08:7c:f7:37:2b:02:6b:a6:09:6c:88:09:f7:63:1d:c1:36: 67:7c:a1:39:f5:71:ed:78:37:78:a8:11:ca:ec:6c:42:4e:de: fc:93:75:86:96:86:3c:48:c1:08:e1:90:23:38:96:b7:74:ec: 37:c4:1a:cf:24:86:a8:25:09:f9:01:e8:36:79:32:b2:5e:ff: 35:fc:03:25:65:2e:a9:dc:d9:7e:2e:e9:81:91:9a:7b:99:97: 59:0b:0c:db:2a:48:39:38:15:3c:f9:7b:16:30:8f:5b:94:1e: bc:ba:dc:ac:de:89:6a:20:a5:06:5d:a7:4e:67:3f:99:94:42: 80:66:2a:4c -----BEGIN CERTIFICATE----- MIIGAjCCBOqgAwIBAgIUJBzuvPpvuKG8cD+Hu2DhFugIhbQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDUyOTA4NTEwOVoX DTI3MDUyODA4NTYwOVowMzExMC8GA1UEAxMoNURGODA4NkQzRUZBMTc2NDg3QTFD Mzc2QjdCQ0NGM0U4M0FCMjMzOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANXUTN+lde6TlXQZiRS7DkHMjRH9jVaMz2RXXZJoTCdCa6wieIKyQFwn/jJS 57InzZn27Xxz+RSaMob0P9wI2H5FYtR2VVk3JtwjMAUvhc1lGgUrg8bF+/5+GNAb OPXlOttloxgXtIPtTvT9rmNWsgskCIVIkUDQh5jD++qRFEGF9tavYWFfFRy+ggyU V3TJSaw/Re8BOVJuxD0QIbJJiLJirCd0SVMP7qedmzqe4MybvdZaw5QlyVm/MCe8 rjSdiHz3s2pHJccgKK09ipz2sQODYU00ZDb4Eu6Ezx61i9r3tjfiD0CLIdFIdhpL wn/Ls/eiAgqEPptfUA0XJxKh3oMCAwEAAaOCAvUwggLxMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFF34CG0++hdkh6HDdre8zz6DqyM5MB8GA1UdIwQYMBaAFKVu hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTA2NTU3NzI0MTk0NzYwMjk0NS8wLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDY1NTc3MjQxOTQ3NjAyOTQ1 LzAvNURGODA4NkQzRUZBMTc2NDg3QTFDMzc2QjdCQ0NGM0U4M0FCMjMzOS5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwXgYIKwYBBQUH AQcBAf8ETzBNMDwEAgABMDYDBAIr5TADBAJnFCADBAFnKK4DBAJnLagDBAJnLeAD BAJnPbwDBAJnxQADBAJn+GQDBAF7bFgwDQQCAAIwBwMFACQFswAwGgYIKwYBBQUH AQgBAf8ECzAJoAcwBQIDANq8MA0GCSqGSIb3DQEBCwUAA4IBAQBJyNry2jkY8PpH 9XbQ97BIuAeBjuUbCXqopnsfTfgUK9zg7lz1ZwDqy61OEkrqCmsuKkBJ1OEl3we8 Su/Z83Gp189T3CcY4oeJnDqDsLwN74L/xYSkd/6UVxah6KJqMFsUIlyuLkUh2qpd FTmw4ALJfU84JE66pWzk0Ngf3+CeCHz3NysCa6YJbIgJ92MdwTZnfKE59XHteDd4 qBHK7GxCTt78k3WGloY8SMEI4ZAjOJa3dOw3xBrPJIaoJQn5Aeg2eTKyXv81/AMl ZS6p3Nl+LumBkZp7mZdZCwzbKkg5OBU8+XsWMI9blB68utys3olqIKUGXadOZz+Z lEKAZipM -----END CERTIFICATE-----Generated at Fri May 29 21:13:53 2026 by rpki-client