$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B043593F306D7500D228434C9973B1B9635461AB.cer File: B043593F306D7500D228434C9973B1B9635461AB.cer (raw, json) Hash identifier: h7VmiQ1eKdr59raFqGvzUI6Shs4qLn6+2d7n4tZzA+w= Subject key identifier: B0:43:59:3F:30:6D:75:00:D2:28:43:4C:99:73:B1:B9:63:54:61:AB Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Certificate serial: 31F4DAC9DDC7EFE186DEA180468AA55030CF1A77 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1065588335525167105/0/B043593F306D7500D228434C9973B1B9635461AB.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1065588335525167105/0/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Fri 29 May 2026 03:18:02 +0000 Certificate not after: Fri 28 May 2027 03:23:02 +0000 Subordinate resources: IP: 103.97.56.0/22 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 15:28:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:f4:da:c9:dd:c7:ef:e1:86:de:a1:80:46:8a:a5:50:30:cf:1a:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Validity Not Before: May 29 03:18:02 2026 GMT Not After : May 28 03:23:02 2027 GMT Subject: CN=B043593F306D7500D228434C9973B1B9635461AB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:3d:45:90:b5:68:72:9e:1f:7f:90:70:a6:dc: a7:c0:89:f1:58:ca:a7:94:61:01:7c:ad:6d:6f:91: 12:73:91:c1:74:9d:21:23:8c:63:a1:df:78:52:ef: 54:13:e7:75:84:2f:e2:14:96:88:d4:ce:b0:5c:74: fc:85:54:33:1b:27:0e:13:02:7e:42:d8:b1:c2:c4: 76:e2:d3:8f:a7:84:4a:ca:b9:53:55:83:b7:68:e1: e4:64:ad:84:ee:5e:6b:6d:65:d7:44:56:74:1f:15: e8:dd:7f:f7:35:57:c6:78:fc:6c:57:d6:73:2f:79: fd:c6:fc:60:ce:93:59:43:18:95:8f:70:d7:aa:11: cb:42:71:ee:2e:bd:a0:11:0f:f4:8e:b8:15:7a:02: f5:2e:f8:c4:4a:e8:1a:e9:7e:0b:82:76:b4:54:20: 31:c1:2e:cf:a5:9f:c1:9e:c7:e8:b7:77:e5:4e:29: 9d:9a:d8:90:93:77:e8:84:d8:df:e2:15:f7:06:9c: 35:97:ac:e9:ad:c4:6b:c2:41:79:5e:24:53:39:c5: 2c:54:70:56:8e:1c:47:51:2c:61:14:55:7e:0c:4e: 1c:5a:d0:de:ae:4f:58:07:a1:22:3d:82:69:ae:e7: 29:21:c3:8c:b9:69:80:87:1e:8a:87:24:2f:cc:8b: 61:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: B0:43:59:3F:30:6D:75:00:D2:28:43:4C:99:73:B1:B9:63:54:61:AB X509v3 Authority Key Identifier: keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335525167105/0/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335525167105/0/B043593F306D7500D228434C9973B1B9635461AB.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.97.56.0/22 Signature Algorithm: sha256WithRSAEncryption 94:80:15:b1:43:ae:81:cc:cc:0f:82:c8:c8:f4:fb:8f:8e:33: ac:71:55:ed:88:a1:b7:47:e5:6e:db:7a:f3:84:66:f4:65:36: c0:1e:b7:d2:1d:74:c9:ca:00:9c:67:4e:f0:3b:a7:7f:17:bd: 5d:44:55:37:5a:56:a6:0d:90:f3:cd:45:40:d8:53:b1:5d:37: f4:4d:31:84:a8:5f:26:9a:32:a2:ce:2f:b6:47:aa:1a:61:db: 2b:2f:00:d3:a9:af:4e:7a:96:64:b6:ff:57:a4:40:09:c1:cf: c0:c6:6f:c9:20:16:aa:c6:70:e2:51:d8:ac:83:5d:a8:27:f1: 44:c7:0e:06:0c:5f:94:d4:c0:20:b6:c0:0a:6b:4a:25:a0:1c: c6:f9:00:24:c4:d5:04:ed:62:5b:ae:4d:eb:9b:ad:40:48:61: f2:94:ee:88:64:bf:d0:f1:65:b9:9c:90:98:96:99:b3:f4:7f: 74:09:fa:ce:7b:39:e5:e4:1b:6f:3c:42:90:72:08:fe:6a:a2: 80:d6:00:b8:39:18:90:dc:f8:af:6a:70:32:38:80:ab:e5:7e: a9:ee:67:07:54:8e:05:7e:b4:de:f2:e1:98:f7:0a:b1:49:e6: b2:29:77:6a:fa:34:ff:1e:c1:ca:7c:59:24:01:21:7d:66:d0: a7:90:cf:a6 -----BEGIN CERTIFICATE----- MIIFpzCCBI+gAwIBAgIUMfTayd3H7+GG3qGARoqlUDDPGncwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDUyOTAzMTgwMloX DTI3MDUyODAzMjMwMlowMzExMC8GA1UEAxMoQjA0MzU5M0YzMDZENzUwMEQyMjg0 MzRDOTk3M0IxQjk2MzU0NjFBQjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKk9RZC1aHKeH3+QcKbcp8CJ8VjKp5RhAXytbW+REnORwXSdISOMY6HfeFLv VBPndYQv4hSWiNTOsFx0/IVUMxsnDhMCfkLYscLEduLTj6eESsq5U1WDt2jh5GSt hO5ea21l10RWdB8V6N1/9zVXxnj8bFfWcy95/cb8YM6TWUMYlY9w16oRy0Jx7i69 oBEP9I64FXoC9S74xEroGul+C4J2tFQgMcEuz6WfwZ7H6Ld35U4pnZrYkJN36ITY 3+IV9wacNZes6a3Ea8JBeV4kUznFLFRwVo4cR1EsYRRVfgxOHFrQ3q5PWAehIj2C aa7nKSHDjLlpgIceiockL8yLYf0CAwEAAaOCApowggKWMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFLBDWT8wbXUA0ihDTJlzsbljVGGrMB8GA1UdIwQYMBaAFKVu hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTA2NTU4ODMzNTUyNTE2NzEwNS8wLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDY1NTg4MzM1NTI1MTY3MTA1 LzAvQjA0MzU5M0YzMDZENzUwMEQyMjg0MzRDOTk3M0IxQjk2MzU0NjFBQi5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAJnYTgwDQYJKoZIhvcNAQELBQADggEBAJSAFbFD roHMzA+CyMj0+4+OM6xxVe2IobdH5W7bevOEZvRlNsAet9IddMnKAJxnTvA7p38X vV1EVTdaVqYNkPPNRUDYU7FdN/RNMYSoXyaaMqLOL7ZHqhph2ysvANOpr056lmS2 /1ekQAnBz8DGb8kgFqrGcOJR2KyDXagn8UTHDgYMX5TUwCC2wAprSiWgHMb5ACTE 1QTtYluuTeubrUBIYfKU7ohkv9DxZbmckJiWmbP0f3QJ+s57OeXkG288QpByCP5q ooDWALg5GJDc+K9qcDI4gKvlfqnuZwdUjgV+tN7y4Zj3CrFJ5rIpd2r6NP8ewcp8 WSQBIX1m0KeQz6Y= -----END CERTIFICATE-----Generated at Fri May 29 21:14:00 2026 by rpki-client