$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AC68C3A56C2B8FB70DEE75D5F58493ACBE260538.cer File: AC68C3A56C2B8FB70DEE75D5F58493ACBE260538.cer (raw, json) Hash identifier: cTvWKo7tfIKlg8gXAbQ3md4Z6kb02e1Bwp7MbgicCK0= Subject key identifier: AC:68:C3:A5:6C:2B:8F:B7:0D:EE:75:D5:F5:84:93:AC:BE:26:05:38 Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Certificate serial: 3AC5F4D448D886E7D786A5EEE7E8DDCFA6271F66 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1108600868493590547/0/AC68C3A56C2B8FB70DEE75D5F58493ACBE260538.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1108600868493590547/0/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Mon 18 May 2026 03:39:04 +0000 Certificate not after: Mon 17 May 2027 03:44:04 +0000 Subordinate resources: IP: 124.240.128.0/18 IP: 175.106.128.0/17 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 May 2026 02:27:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:c5:f4:d4:48:d8:86:e7:d7:86:a5:ee:e7:e8:dd:cf:a6:27:1f:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Validity Not Before: May 18 03:39:04 2026 GMT Not After : May 17 03:44:04 2027 GMT Subject: CN=AC68C3A56C2B8FB70DEE75D5F58493ACBE260538 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:dd:a9:b6:a5:12:09:88:fa:0e:bc:ab:bf:9d: 81:36:1e:15:2f:61:a1:9a:bc:a6:22:22:d2:ad:c4: c4:96:39:6b:e2:dc:28:64:bd:48:d3:cc:3a:7a:dc: 4a:6c:39:ca:c6:42:ce:a8:72:68:8d:86:29:7d:5e: c3:af:6c:b4:4c:f3:84:55:c3:fe:09:ff:17:3e:0b: 1b:01:ce:40:73:fc:30:18:7d:6e:d9:cc:97:af:d7: 02:8a:84:91:d8:42:a6:74:1f:7a:ee:f7:cc:ca:f5: 06:82:3b:4f:5e:af:bc:63:1c:f7:0b:60:cb:9b:fa: b2:35:bf:e8:e9:9f:6a:33:ac:59:83:4b:f7:11:da: 5e:8a:20:58:79:00:54:08:c5:83:4f:c6:75:89:68: 53:48:bb:6c:b2:c8:a0:45:e9:52:92:91:c7:6c:2c: b9:59:a6:81:d9:3c:be:b8:97:7c:ca:27:4c:31:93: c2:91:37:fc:b3:cf:4f:50:9d:6c:e8:45:4b:f5:f6: 53:ec:78:92:c9:c5:84:90:c9:ba:2d:9f:63:31:e4: 84:74:36:c0:c0:2f:f4:8a:a0:8c:a5:87:61:04:fe: 98:4e:f7:68:3f:bc:3f:6c:37:ce:3e:07:3b:25:ba: 93:b5:b1:6b:b4:ce:1c:d6:3a:aa:15:fd:a0:66:b3: d7:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: AC:68:C3:A5:6C:2B:8F:B7:0D:EE:75:D5:F5:84:93:AC:BE:26:05:38 X509v3 Authority Key Identifier: keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1108600868493590547/0/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1108600868493590547/0/AC68C3A56C2B8FB70DEE75D5F58493ACBE260538.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 124.240.128.0/18 175.106.128.0/17 Signature Algorithm: sha256WithRSAEncryption 15:c7:66:13:e5:44:29:bc:60:a5:71:33:61:7a:e3:34:04:45: ff:b0:47:b5:a4:31:31:d3:9a:56:92:3b:f5:a4:7e:6a:fe:53: 6a:12:27:a9:12:48:64:7f:b7:8c:9b:54:78:1f:fc:e9:1c:58: 63:36:cb:62:6f:4b:0a:23:f0:bf:9c:7f:1e:1d:7f:ae:a6:5f: b2:61:24:35:a7:9b:c0:e9:d0:ba:38:72:d0:c1:4d:c7:73:5d: b2:be:e6:a1:92:7d:03:b8:0d:0b:06:f1:08:55:98:96:b5:58: fe:a1:b3:c4:91:93:48:be:ed:2c:32:a9:ba:c7:a8:42:23:57: e4:a0:28:73:1b:a6:8f:59:76:fe:1e:36:69:3d:01:67:ac:6d: f2:6b:23:bf:30:49:f1:51:4b:08:95:94:11:e2:ea:91:4d:11: 1b:26:78:6f:6e:41:f1:60:fc:95:30:0e:cf:99:35:99:09:a5: 1a:8d:e4:a1:60:36:e1:3b:0f:81:8f:f7:67:35:35:4b:03:e9: 3d:2b:f7:fe:d9:bf:85:1b:e7:0b:7d:30:b6:7f:11:f3:ed:61: d9:49:12:8f:2c:51:71:ed:0a:bb:99:28:2b:5d:45:25:d1:3f: 45:53:40:35:a4:78:ea:55:40:fc:a2:7f:ac:80:98:0a:9a:19: 95:d8:c2:4c -----BEGIN CERTIFICATE----- MIIFrTCCBJWgAwIBAgIUOsX01EjYhufXhqXu5+jdz6YnH2YwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDUxODAzMzkwNFoX DTI3MDUxNzAzNDQwNFowMzExMC8GA1UEAxMoQUM2OEMzQTU2QzJCOEZCNzBERUU3 NUQ1RjU4NDkzQUNCRTI2MDUzODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANjdqbalEgmI+g68q7+dgTYeFS9hoZq8piIi0q3ExJY5a+LcKGS9SNPMOnrc Smw5ysZCzqhyaI2GKX1ew69stEzzhFXD/gn/Fz4LGwHOQHP8MBh9btnMl6/XAoqE kdhCpnQfeu73zMr1BoI7T16vvGMc9wtgy5v6sjW/6OmfajOsWYNL9xHaXoogWHkA VAjFg0/GdYloU0i7bLLIoEXpUpKRx2wsuVmmgdk8vriXfMonTDGTwpE3/LPPT1Cd bOhFS/X2U+x4ksnFhJDJui2fYzHkhHQ2wMAv9IqgjKWHYQT+mE73aD+8P2w3zj4H OyW6k7Wxa7TOHNY6qhX9oGaz16ECAwEAAaOCAqAwggKcMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFKxow6VsK4+3De511fWEk6y+JgU4MB8GA1UdIwQYMBaAFKVu hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTEwODYwMDg2ODQ5MzU5MDU0Ny8wLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMTA4NjAwODY4NDkzNTkwNTQ3 LzAvQUM2OEMzQTU2QzJCOEZCNzBERUU3NUQ1RjU4NDkzQUNCRTI2MDUzOC5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwJQYIKwYBBQUH AQcBAf8EFjAUMBIEAgABMAwDBAZ88IADBAevaoAwDQYJKoZIhvcNAQELBQADggEB ABXHZhPlRCm8YKVxM2F64zQERf+wR7WkMTHTmlaSO/Wkfmr+U2oSJ6kSSGR/t4yb VHgf/OkcWGM2y2JvSwoj8L+cfx4df66mX7JhJDWnm8Dp0Lo4ctDBTcdzXbK+5qGS fQO4DQsG8QhVmJa1WP6hs8SRk0i+7SwyqbrHqEIjV+SgKHMbpo9Zdv4eNmk9AWes bfJrI78wSfFRSwiVlBHi6pFNERsmeG9uQfFg/JUwDs+ZNZkJpRqN5KFgNuE7D4GP 92c1NUsD6T0r9/7Zv4Ub5wt9MLZ/EfPtYdlJEo8sUXHtCruZKCtdRSXRP0VTQDWk eOpVQPyif6yAmAqaGZXYwkw= -----END CERTIFICATE-----Generated at Sat May 23 03:46:04 2026 by rpki-client