$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B8CCD8B571FEC8C5EA125D5B35C22CC1FC6F770D.cer File: B8CCD8B571FEC8C5EA125D5B35C22CC1FC6F770D.cer (raw, json) Hash identifier: IVyg1nST/5DlIGRmAdarSKjk69KzeLymFH20rljZlbo= Subject key identifier: B8:CC:D8:B5:71:FE:C8:C5:EA:12:5D:5B:35:C2:2C:C1:FC:6F:77:0D Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Certificate serial: 5D0B874DC026BD860837D3DC1F09FA5F5CDA8FB9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1111918323395788817/0/B8CCD8B571FEC8C5EA125D5B35C22CC1FC6F770D.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1111918323395788817/0/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Wed 27 May 2026 07:27:42 +0000 Certificate not after: Wed 26 May 2027 07:32:42 +0000 Subordinate resources: IP: 43.227.157.0/24 IP: 43.228.7.0/24 IP: 103.46.69.0 -- 103.46.71.255 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 15:28:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:0b:87:4d:c0:26:bd:86:08:37:d3:dc:1f:09:fa:5f:5c:da:8f:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Validity Not Before: May 27 07:27:42 2026 GMT Not After : May 26 07:32:42 2027 GMT Subject: CN=B8CCD8B571FEC8C5EA125D5B35C22CC1FC6F770D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:75:3d:d3:dd:42:cc:fd:7e:3d:01:70:14:91: f6:3a:35:f5:f7:f1:60:e4:fd:35:47:a5:37:43:e8: d1:86:08:2c:25:96:89:61:af:14:1a:b7:50:49:53: 89:99:bb:ed:9b:4c:5a:4d:ab:09:2c:40:a5:fd:7d: de:9d:89:e6:54:02:64:70:c2:86:3c:cc:38:4c:91: 01:a2:9e:01:0c:b8:34:3f:7f:54:0a:ea:14:08:03: cb:d0:90:63:2e:a3:bf:cc:0d:72:f9:91:df:2e:74: 5d:45:b3:77:89:73:2e:f8:59:97:c3:4c:11:87:4f: 8c:40:ed:22:99:55:e0:de:2a:96:a4:84:6e:be:3e: 9b:57:f1:2e:a5:e0:47:83:7f:ca:11:7c:c2:29:69: 4c:9b:1e:87:0b:d7:4f:65:47:f1:05:da:5f:d2:5e: da:12:db:ae:6c:ad:bb:d0:f0:ac:90:fe:e0:34:d4: 34:76:c4:2e:99:da:c2:b2:9a:00:60:a0:1a:ba:49: c5:53:05:cc:20:9c:5a:88:d9:51:23:ec:0e:3c:6d: 20:27:ed:9f:33:b1:13:63:e4:46:e3:51:1c:5b:aa: 0b:8a:56:3c:55:e7:95:ad:49:fc:e9:7b:99:08:a9: 38:17:fa:4f:a7:f9:f5:ce:61:1f:ef:50:2e:52:c9: e8:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: B8:CC:D8:B5:71:FE:C8:C5:EA:12:5D:5B:35:C2:2C:C1:FC:6F:77:0D X509v3 Authority Key Identifier: keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1111918323395788817/0/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1111918323395788817/0/B8CCD8B571FEC8C5EA125D5B35C22CC1FC6F770D.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.227.157.0/24 43.228.7.0/24 103.46.69.0-103.46.71.255 Signature Algorithm: sha256WithRSAEncryption 8d:fa:e9:ec:01:c8:7f:14:e9:d2:19:a9:c7:30:3f:3b:23:ed: c9:df:7b:ef:da:a1:3f:bf:08:f7:4c:6e:13:c6:a7:cc:d1:f6: 24:db:0c:9e:f3:2a:1c:b9:4f:b2:a7:4e:d7:fb:b2:f5:21:c1: 98:ac:dd:1d:d6:81:fa:b5:bf:e4:1c:0e:12:66:ca:3d:ec:18: 9e:84:56:7b:42:7c:1e:c7:f5:36:de:ab:66:e6:7e:05:26:81: bb:12:3d:9e:f0:05:61:ad:fd:e1:37:f9:b5:aa:fa:23:68:c0: fc:64:56:ba:21:fe:cc:38:70:1c:1b:53:9b:88:b7:34:3b:47: 97:38:a1:42:fb:5d:43:c4:f1:00:92:14:10:b7:1b:ee:58:10: 18:e0:dc:66:26:cc:63:b2:d2:1b:05:52:f9:d7:12:f6:76:78: a7:b8:f9:ad:fb:57:8e:dc:30:95:34:5d:f5:bf:af:25:ef:db: 9c:2c:41:de:c8:33:f8:48:ac:34:5d:33:de:a6:93:c8:8e:d1: 55:7d:50:4c:5c:31:86:6e:e2:80:e3:f9:38:42:f8:2e:81:20: 1d:f7:a7:95:86:1b:67:48:59:e5:ea:b5:b8:ba:a7:66:42:d9: b4:4a:3c:8b:24:97:e2:f4:36:9f:be:e2:a6:83:ef:89:db:75: 84:25:73:c5 -----BEGIN CERTIFICATE----- MIIFuzCCBKOgAwIBAgIUXQuHTcAmvYYIN9PcHwn6X1zaj7kwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDUyNzA3Mjc0MloX DTI3MDUyNjA3MzI0MlowMzExMC8GA1UEAxMoQjhDQ0Q4QjU3MUZFQzhDNUVBMTI1 RDVCMzVDMjJDQzFGQzZGNzcwRDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAK51PdPdQsz9fj0BcBSR9jo19ffxYOT9NUelN0Po0YYILCWWiWGvFBq3UElT iZm77ZtMWk2rCSxApf193p2J5lQCZHDChjzMOEyRAaKeAQy4ND9/VArqFAgDy9CQ Yy6jv8wNcvmR3y50XUWzd4lzLvhZl8NMEYdPjEDtIplV4N4qlqSEbr4+m1fxLqXg R4N/yhF8wilpTJsehwvXT2VH8QXaX9Je2hLbrmytu9DwrJD+4DTUNHbELpnawrKa AGCgGrpJxVMFzCCcWojZUSPsDjxtICftnzOxE2PkRuNRHFuqC4pWPFXnla1J/Ol7 mQipOBf6T6f59c5hH+9QLlLJ6NUCAwEAAaOCAq4wggKqMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFLjM2LVx/sjF6hJdWzXCLMH8b3cNMB8GA1UdIwQYMBaAFKVu hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTExMTkxODMyMzM5NTc4ODgxNy8wLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMTExOTE4MzIzMzk1Nzg4ODE3 LzAvQjhDQ0Q4QjU3MUZFQzhDNUVBMTI1RDVCMzVDMjJDQzFGQzZGNzcwRC5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwMwYIKwYBBQUH AQcBAf8EJDAiMCAEAgABMBoDBAAr450DBAAr5AcwDAMEAGcuRQMEA2cuQDANBgkq hkiG9w0BAQsFAAOCAQEAjfrp7AHIfxTp0hmpxzA/OyPtyd9779qhP78I90xuE8an zNH2JNsMnvMqHLlPsqdO1/uy9SHBmKzdHdaB+rW/5BwOEmbKPewYnoRWe0J8Hsf1 Nt6rZuZ+BSaBuxI9nvAFYa394Tf5tar6I2jA/GRWuiH+zDhwHBtTm4i3NDtHlzih QvtdQ8TxAJIUELcb7lgQGODcZibMY7LSGwVS+dcS9nZ4p7j5rftXjtwwlTRd9b+v Je/bnCxB3sgz+EisNF0z3qaTyI7RVX1QTFwxhm7igOP5OEL4LoEgHfenlYYbZ0hZ 5eq1uLqnZkLZtEo8iySX4vQ2n77ipoPvidt1hCVzxQ== -----END CERTIFICATE-----Generated at Fri May 29 21:11:46 2026 by rpki-client