$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A487EFD8173F6507202F8FDAB24DA77DB8429DAB.cer File: A487EFD8173F6507202F8FDAB24DA77DB8429DAB.cer (raw, json) Hash identifier: b+AUZ14XPpSwiffJSS7Al6B/WRgSG80FIQC0qV5TyrY= Subject key identifier: A4:87:EF:D8:17:3F:65:07:20:2F:8F:DA:B2:4D:A7:7D:B8:42:9D:AB Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Certificate serial: 5BA55AD206119332844C4B990D6810FB25926D4C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1065588553129656323/0/A487EFD8173F6507202F8FDAB24DA77DB8429DAB.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1065588553129656323/0/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Fri 29 May 2026 05:43:56 +0000 Certificate not after: Fri 28 May 2027 05:48:56 +0000 Subordinate resources: IP: 103.203.212.0/22 IP: 2404:280::/32 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 15:28:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:a5:5a:d2:06:11:93:32:84:4c:4b:99:0d:68:10:fb:25:92:6d:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Validity Not Before: May 29 05:43:56 2026 GMT Not After : May 28 05:48:56 2027 GMT Subject: CN=A487EFD8173F6507202F8FDAB24DA77DB8429DAB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:a9:f7:5d:7d:7c:d3:0a:4c:a1:89:3f:ab:93: db:26:de:a4:e8:0e:21:e1:56:cc:ee:da:1b:49:df: d0:a0:36:b5:47:2a:b9:60:c2:31:08:95:e6:85:4d: f2:94:51:85:d4:49:b9:cc:85:24:49:26:3c:f8:cc: b4:bd:91:e1:19:36:01:59:d3:e8:36:8a:d5:04:ff: cd:4a:5f:06:7d:4e:83:7f:a8:6d:c3:b3:54:ec:46: be:ca:dc:3d:84:45:55:5e:11:6e:79:8f:18:c7:56: 17:02:ed:71:2b:7a:ea:f0:21:bb:0a:d1:46:b5:b4: 16:a6:28:c2:15:c4:35:dd:53:5f:7c:ba:8a:a1:52: d9:50:98:f6:a9:22:9c:5a:93:cd:97:89:7e:5b:12: c2:28:f0:01:16:95:aa:58:f1:72:92:57:b5:ed:0e: 3e:32:15:11:3b:cd:28:8d:e3:35:b6:1a:88:c0:8e: 56:7a:fc:1d:4a:1c:e9:76:62:9f:a9:67:71:e7:28: f2:5d:77:79:bf:d8:47:75:9e:aa:0d:0f:a9:2d:85: d9:2d:44:e5:63:9d:0f:df:50:70:51:9e:35:53:88: 1b:68:1f:b9:b2:b7:6b:e0:18:cd:2a:97:89:32:9c: ce:e6:14:dd:93:dd:4d:f4:55:a9:c8:de:81:43:f0: c6:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: A4:87:EF:D8:17:3F:65:07:20:2F:8F:DA:B2:4D:A7:7D:B8:42:9D:AB X509v3 Authority Key Identifier: keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129656323/0/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129656323/0/A487EFD8173F6507202F8FDAB24DA77DB8429DAB.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.203.212.0/22 IPv6: 2404:280::/32 Signature Algorithm: sha256WithRSAEncryption 6f:0f:2f:d5:b4:71:88:81:c0:22:55:69:e8:dd:51:a4:a8:c2: cc:f9:81:23:0d:ce:15:47:7d:b6:3a:25:c8:e4:46:d3:68:52: e3:35:7c:eb:0d:54:d9:bc:69:d8:94:33:be:85:02:bf:6d:77: 26:4a:45:2b:f1:77:aa:04:1f:1e:48:fd:6b:43:10:c8:23:d0: 97:7a:4a:60:98:b1:81:b0:20:c0:dd:a5:14:92:86:eb:93:67: e1:c1:8a:2e:9e:db:74:88:23:3e:19:8a:bd:4c:56:c9:1c:69: e8:3b:c6:01:18:2f:17:6d:be:40:8c:1b:fa:8f:a4:8d:04:06: 14:5e:5e:5c:b0:e9:77:e0:4f:79:30:b0:ad:1d:29:fc:65:a9: c5:b5:73:d1:fb:61:8f:78:79:a3:49:e1:1d:67:7d:69:f9:b6: f8:ce:25:86:2b:89:44:58:71:fa:74:90:46:56:68:2e:d2:f6: bc:1d:91:6f:82:27:2f:d2:31:57:0b:cb:74:83:e1:b8:35:83: 9b:c5:33:84:3d:a2:b7:c1:ed:0e:86:0f:a9:b8:d2:5b:7d:c3: fb:ba:f3:da:0b:5b:41:6b:07:f3:1e:70:1c:40:81:02:a6:68: ec:e9:89:aa:07:08:75:c7:b9:7d:7a:42:e8:a5:9e:2b:46:22: 15:73:d6:87 -----BEGIN CERTIFICATE----- MIIFtjCCBJ6gAwIBAgIUW6Va0gYRkzKETEuZDWgQ+yWSbUwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDUyOTA1NDM1NloX DTI3MDUyODA1NDg1NlowMzExMC8GA1UEAxMoQTQ4N0VGRDgxNzNGNjUwNzIwMkY4 RkRBQjI0REE3N0RCODQyOURBQjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMap9119fNMKTKGJP6uT2ybepOgOIeFWzO7aG0nf0KA2tUcquWDCMQiV5oVN 8pRRhdRJucyFJEkmPPjMtL2R4Rk2AVnT6DaK1QT/zUpfBn1Og3+obcOzVOxGvsrc PYRFVV4RbnmPGMdWFwLtcSt66vAhuwrRRrW0FqYowhXENd1TX3y6iqFS2VCY9qki nFqTzZeJflsSwijwARaVqljxcpJXte0OPjIVETvNKI3jNbYaiMCOVnr8HUoc6XZi n6lnceco8l13eb/YR3Weqg0PqS2F2S1E5WOdD99QcFGeNVOIG2gfubK3a+AYzSqX iTKczuYU3ZPdTfRVqcjegUPwxucCAwEAAaOCAqkwggKlMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFKSH79gXP2UHIC+P2rJNp324Qp2rMB8GA1UdIwQYMBaAFKVu hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTA2NTU4ODU1MzEyOTY1NjMyMy8wLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDY1NTg4NTUzMTI5NjU2MzIz LzAvQTQ4N0VGRDgxNzNGNjUwNzIwMkY4RkRBQjI0REE3N0RCODQyOURBQi5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUH AQcBAf8EHzAdMAwEAgABMAYDBAJny9QwDQQCAAIwBwMFACQEAoAwDQYJKoZIhvcN AQELBQADggEBAG8PL9W0cYiBwCJVaejdUaSowsz5gSMNzhVHfbY6JcjkRtNoUuM1 fOsNVNm8adiUM76FAr9tdyZKRSvxd6oEHx5I/WtDEMgj0Jd6SmCYsYGwIMDdpRSS huuTZ+HBii6e23SIIz4Zir1MVskcaeg7xgEYLxdtvkCMG/qPpI0EBhReXlyw6Xfg T3kwsK0dKfxlqcW1c9H7YY94eaNJ4R1nfWn5tvjOJYYriURYcfp0kEZWaC7S9rwd kW+CJy/SMVcLy3SD4bg1g5vFM4Q9orfB7Q6GD6m40lt9w/u689oLW0FrB/MecBxA gQKmaOzpiaoHCHXHuX16QuilnitGIhVz1oc= -----END CERTIFICATE-----Generated at Fri May 29 21:12:34 2026 by rpki-client