$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D.cer File: 7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D.cer (raw, json) Hash identifier: N7E3dZkUJjGLilyHb8n/bRk4v8CtjyiLp9akpXh7y0c= Subject key identifier: 73:89:E1:B7:DF:B5:0F:AE:6A:4F:0C:88:09:16:4A:D0:7F:E9:13:4D Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Certificate serial: 044383572B70326A81B1F35FDCE5426B8DB73E00 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1065579534394916867/0/7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1065579534394916867/0/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Thu 28 May 2026 07:44:20 +0000 Certificate not after: Thu 27 May 2027 07:49:20 +0000 Subordinate resources: AS: 59033 AS: 63689 IP: 103.90.51.0/24 IP: 103.90.56.0/23 IP: 103.204.72.0/22 IP: 202.160.140.0/22 IP: 2402:1440::/32 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 15:28:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:43:83:57:2b:70:32:6a:81:b1:f3:5f:dc:e5:42:6b:8d:b7:3e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Validity Not Before: May 28 07:44:20 2026 GMT Not After : May 27 07:49:20 2027 GMT Subject: CN=7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:7a:20:16:31:f7:f7:80:53:16:c1:e4:16:b9: 5d:67:ff:70:da:a7:a7:b1:9d:6c:29:5e:31:42:14: db:49:fa:39:d6:fd:91:e0:bb:08:3e:13:49:07:d6: 45:79:35:22:02:72:67:85:e4:dc:5c:c8:09:19:00: 63:61:ed:06:6f:77:79:de:97:2c:d7:5a:2a:af:30: 74:57:bf:e1:ec:5d:94:f5:e7:ee:db:15:48:93:ad: 4a:c5:0a:96:52:f4:ec:0f:52:d3:14:3a:03:20:6b: c6:3c:df:2f:8e:21:12:34:4b:49:ef:87:cf:4f:73: 30:ef:f5:29:1a:b8:2e:e9:d2:b0:d8:e0:f7:30:72: 0a:0b:f7:d4:c6:85:21:f3:94:6b:05:90:34:f7:9f: 5c:99:89:1b:81:8a:cb:59:1c:07:d9:ab:c8:eb:78: f3:bd:b1:6a:97:b0:f9:d6:b9:ac:63:f9:38:72:07: 35:c9:10:61:63:2b:b2:55:0c:ac:8f:ab:93:75:a2: 6a:f3:06:17:18:70:bf:a0:82:f2:1f:b9:6c:68:d0: 6d:d7:40:67:3b:62:68:84:02:21:3c:7e:23:5b:10: 5c:74:91:2c:61:e2:f5:c5:76:3b:73:b5:5a:b9:f6: 92:80:54:0f:d8:a0:ad:31:76:52:ae:13:18:85:c8: 19:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 73:89:E1:B7:DF:B5:0F:AE:6A:4F:0C:88:09:16:4A:D0:7F:E9:13:4D X509v3 Authority Key Identifier: keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394916867/0/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394916867/0/7389E1B7DFB50FAE6A4F0C8809164AD07FE9134D.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.90.51.0/24 103.90.56.0/23 103.204.72.0/22 202.160.140.0/22 IPv6: 2402:1440::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 59033 63689 Signature Algorithm: sha256WithRSAEncryption 04:06:a4:e0:5a:a6:93:02:5c:90:7f:c2:d2:c7:45:99:e5:f7: 44:b5:03:e4:51:6a:b2:a7:f9:f8:f7:be:29:84:51:44:ad:36: 10:98:aa:2f:f3:7a:13:a9:d5:e2:eb:73:cb:8b:5f:b9:c5:c7: f6:1e:d5:f5:63:26:4a:8c:ea:c8:83:19:f7:81:7b:7f:2e:c9: c4:91:25:72:04:cf:11:f0:97:ae:27:71:ed:a7:4f:9f:3a:7f: 31:1f:45:a1:c0:75:ed:02:b2:ee:cd:93:6e:d9:83:dc:d0:ea: de:d6:51:a9:d2:28:2f:bc:91:2f:68:fc:f9:db:99:68:a3:a5: 3f:ab:ca:a9:96:49:49:ce:41:ba:47:c5:ff:6e:22:88:00:6d: 7f:aa:96:0f:48:d5:4d:c6:02:1a:2b:fb:9c:a1:9f:60:74:c0: 7c:75:64:1d:c1:e1:cb:4b:a6:4d:25:30:a4:d9:99:1d:5d:6f: ff:cf:e9:3e:f9:20:fd:64:9d:1c:7b:03:0f:db:32:58:2a:c3: 64:62:04:1a:66:cd:2e:6a:8c:ce:3d:72:e2:87:7c:cf:01:7b: 49:7c:48:02:7e:8a:eb:b4:93:62:c3:37:28:1f:ee:b8:65:6d: 22:00:fe:d5:a0:f6:5b:22:b5:a6:5f:a3:27:b5:8d:45:1c:ac: 9b:f2:ac:3c -----BEGIN CERTIFICATE----- MIIF6TCCBNGgAwIBAgIUBEODVytwMmqBsfNf3OVCa423PgAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDUyODA3NDQyMFoX DTI3MDUyNzA3NDkyMFowMzExMC8GA1UEAxMoNzM4OUUxQjdERkI1MEZBRTZBNEYw Qzg4MDkxNjRBRDA3RkU5MTM0RDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALl6IBYx9/eAUxbB5Ba5XWf/cNqnp7GdbCleMUIU20n6Odb9keC7CD4TSQfW RXk1IgJyZ4Xk3FzICRkAY2HtBm93ed6XLNdaKq8wdFe/4exdlPXn7tsVSJOtSsUK llL07A9S0xQ6AyBrxjzfL44hEjRLSe+Hz09zMO/1KRq4LunSsNjg9zByCgv31MaF IfOUawWQNPefXJmJG4GKy1kcB9mryOt4872xapew+da5rGP5OHIHNckQYWMrslUM rI+rk3WiavMGFxhwv6CC8h+5bGjQbddAZztiaIQCITx+I1sQXHSRLGHi9cV2O3O1 Wrn2koBUD9igrTF2Uq4TGIXIGa0CAwEAAaOCAtwwggLYMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFHOJ4bfftQ+uak8MiAkWStB/6RNNMB8GA1UdIwQYMBaAFKVu hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTA2NTU3OTUzNDM5NDkxNjg2Ny8wLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDY1NTc5NTM0Mzk0OTE2ODY3 LzAvNzM4OUUxQjdERkI1MEZBRTZBNEYwQzg4MDkxNjRBRDA3RkU5MTM0RC5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwQAYIKwYBBQUH AQcBAf8EMTAvMB4EAgABMBgDBABnWjMDBAFnWjgDBAJnzEgDBALKoIwwDQQCAAIw BwMFACQCFEAwHwYIKwYBBQUHAQgBAf8EEDAOoAwwCgIDAOaZAgMA+MkwDQYJKoZI hvcNAQELBQADggEBAAQGpOBappMCXJB/wtLHRZnl90S1A+RRarKn+fj3vimEUUSt NhCYqi/zehOp1eLrc8uLX7nFx/Ye1fVjJkqM6siDGfeBe38uycSRJXIEzxHwl64n ce2nT586fzEfRaHAde0Csu7Nk27Zg9zQ6t7WUanSKC+8kS9o/PnbmWijpT+ryqmW SUnOQbpHxf9uIogAbX+qlg9I1U3GAhor+5yhn2B0wHx1ZB3B4ctLpk0lMKTZmR1d b//P6T75IP1knRx7Aw/bMlgqw2RiBBpmzS5qjM49cuKHfM8Be0l8SAJ+iuu0k2LD Nygf7rhlbSIA/tWg9lsitaZfoye1jUUcrJvyrDw= -----END CERTIFICATE-----Generated at Fri May 29 21:13:23 2026 by rpki-client