$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CAC43E7DD964B172267BD98B6D82D524ADE91E1E.cer File: CAC43E7DD964B172267BD98B6D82D524ADE91E1E.cer (raw, json) Hash identifier: EDWMGg5SnqW02l/6bwHi4YoxP9nvJPXmksAayDdZrzk= Subject key identifier: CA:C4:3E:7D:D9:64:B1:72:26:7B:D9:8B:6D:82:D5:24:AD:E9:1E:1E Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Certificate serial: 02D419A76C20D120B452E4F6BFA83121CD777229 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1114092081023811603/0/CAC43E7DD964B172267BD98B6D82D524ADE91E1E.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1114092081023811603/0/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Tue 02 Jun 2026 07:19:12 +0000 Certificate not after: Tue 01 Jun 2027 07:24:12 +0000 Subordinate resources: AS: 59064 IP: 45.117.68.0/22 IP: 103.57.136.0/22 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Jun 2026 19:04:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:d4:19:a7:6c:20:d1:20:b4:52:e4:f6:bf:a8:31:21:cd:77:72:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Validity Not Before: Jun 2 07:19:12 2026 GMT Not After : Jun 1 07:24:12 2027 GMT Subject: CN=CAC43E7DD964B172267BD98B6D82D524ADE91E1E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:73:3d:68:be:7b:1c:ca:32:fe:b6:45:dd:d8: 82:95:bf:7c:a4:93:b4:64:07:0d:43:10:11:45:c8: a7:e6:5c:40:f3:7b:7b:ba:d5:4d:2d:83:25:d6:4a: 8e:f3:bc:d9:cc:6c:38:90:b2:63:9a:41:0f:1b:b9: 69:14:7e:8a:ee:b8:ba:75:41:f2:5b:f3:10:70:7a: d6:15:51:9c:14:13:dc:3b:73:56:cb:85:6f:21:11: 96:49:a7:c0:82:78:ae:97:ec:b2:ce:52:cc:89:4e: e1:63:dc:0d:de:e7:45:94:5f:ef:36:50:ea:1d:00: 0d:38:d9:0f:5a:64:5b:3d:61:a7:5f:54:c6:30:d1: a3:01:e9:59:8a:42:78:23:dd:d1:ef:a0:d0:b2:0e: 10:11:c8:22:3a:5f:e5:8d:0d:01:a7:de:e6:45:e9: a6:ce:5b:46:db:aa:3a:55:79:f0:86:70:78:3b:8a: 97:0c:c0:4d:49:2f:ac:77:05:a8:27:97:76:51:38: e3:f5:0c:a7:30:1d:5f:d8:dd:ee:9e:23:f6:a0:5d: 00:d4:96:16:2a:29:54:c4:36:b5:47:6d:bb:8d:9e: f5:58:a9:bf:f0:38:87:8b:82:03:41:19:be:4b:d4: c0:52:58:79:d7:92:1c:9f:f7:bc:fe:d6:c0:3b:40: eb:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: CA:C4:3E:7D:D9:64:B1:72:26:7B:D9:8B:6D:82:D5:24:AD:E9:1E:1E X509v3 Authority Key Identifier: keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1114092081023811603/0/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1114092081023811603/0/CAC43E7DD964B172267BD98B6D82D524ADE91E1E.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.117.68.0/22 103.57.136.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 59064 Signature Algorithm: sha256WithRSAEncryption 8b:0b:21:0a:3b:7d:45:ac:a7:a3:97:9d:66:c2:77:bb:66:65: ed:f4:09:fb:e3:0e:94:3b:2f:96:72:f2:6a:d5:d9:46:25:52: e6:f1:fc:59:33:44:5e:ca:95:73:f1:5f:d1:ea:bc:c8:ce:ca: ea:6d:29:71:fe:c9:99:8c:dc:c8:bb:83:a9:e4:21:09:b4:03: d6:56:40:c1:95:0b:16:90:53:14:30:19:f5:3c:40:57:79:6d: 66:4d:bb:28:49:ac:b4:3b:50:f1:72:13:fa:f2:4c:1d:23:37: 89:71:6b:f7:25:3e:16:b3:e6:59:7f:a9:be:43:be:41:13:2e: 9a:18:25:e6:88:dd:71:f0:d6:7f:40:c6:cb:44:ae:c1:96:47: 28:fa:ed:94:c0:88:7f:93:46:9c:5e:02:3c:24:93:6d:9c:b4: 0c:00:16:b6:49:09:0b:fe:8a:7d:05:e2:c0:9d:23:45:ca:07: a2:c8:94:a7:af:20:67:f7:71:00:cd:c8:cc:c7:37:1f:b5:08: dc:ba:27:ec:18:c0:16:12:e2:d5:fa:43:9a:46:e6:6e:30:eb: 2f:82:0a:7e:42:54:4d:b7:5e:be:49:69:4e:80:2c:0b:b3:8e: 2c:57:0e:0e:cc:22:c3:51:e6:10:12:49:cc:98:38:1c:83:34: 0d:71:cc:93 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUAtQZp2wg0SC0UuT2v6gxIc13cikwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDYwMjA3MTkxMloX DTI3MDYwMTA3MjQxMlowMzExMC8GA1UEAxMoQ0FDNDNFN0REOTY0QjE3MjI2N0JE OThCNkQ4MkQ1MjRBREU5MUUxRTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMNzPWi+exzKMv62Rd3YgpW/fKSTtGQHDUMQEUXIp+ZcQPN7e7rVTS2DJdZK jvO82cxsOJCyY5pBDxu5aRR+iu64unVB8lvzEHB61hVRnBQT3DtzVsuFbyERlkmn wIJ4rpfsss5SzIlO4WPcDd7nRZRf7zZQ6h0ADTjZD1pkWz1hp19UxjDRowHpWYpC eCPd0e+g0LIOEBHIIjpf5Y0NAafe5kXpps5bRtuqOlV58IZweDuKlwzATUkvrHcF qCeXdlE44/UMpzAdX9jd7p4j9qBdANSWFiopVMQ2tUdtu42e9Vipv/A4h4uCA0EZ vkvUwFJYedeSHJ/3vP7WwDtA600CAwEAAaOCArwwggK4MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFMrEPn3ZZLFyJnvZi22C1SSt6R4eMB8GA1UdIwQYMBaAFKVu hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTExNDA5MjA4MTAyMzgxMTYwMy8wLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMTE0MDkyMDgxMDIzODExNjAz LzAvQ0FDNDNFN0REOTY0QjE3MjI2N0JEOThCNkQ4MkQ1MjRBREU5MUUxRS5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwJQYIKwYBBQUH AQcBAf8EFjAUMBIEAgABMAwDBAItdUQDBAJnOYgwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDAOa4MA0GCSqGSIb3DQEBCwUAA4IBAQCLCyEKO31FrKejl51mwne7ZmXt 9An74w6UOy+WcvJq1dlGJVLm8fxZM0ReypVz8V/R6rzIzsrqbSlx/smZjNzIu4Op 5CEJtAPWVkDBlQsWkFMUMBn1PEBXeW1mTbsoSay0O1DxchP68kwdIzeJcWv3JT4W s+ZZf6m+Q75BEy6aGCXmiN1x8NZ/QMbLRK7Blkco+u2UwIh/k0acXgI8JJNtnLQM ABa2SQkL/op9BeLAnSNFygeiyJSnryBn93EAzcjMxzcftQjcuifsGMAWEuLV+kOa RuZuMOsvggp+QlRNt16+SWlOgCwLs44sVw4OzCLDUeYQEknMmDgcgzQNccyT -----END CERTIFICATE-----Generated at Fri Jun 12 03:35:03 2026 by rpki-client