$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CCB400245E6C2E159A469D4699195E08ECCE5250.cer File: CCB400245E6C2E159A469D4699195E08ECCE5250.cer (raw, json) Hash identifier: z4cCSZA0wbWwYQBAWwYHV0Xl1S3uxH6Kj7gXUcwAvnU= Subject key identifier: CC:B4:00:24:5E:6C:2E:15:9A:46:9D:46:99:19:5E:08:EC:CE:52:50 Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Certificate serial: 74D46667F6CF9842E87CEEA7EC908FB55D9DEA3C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1111882915819552787/0/CCB400245E6C2E159A469D4699195E08ECCE5250.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1111882915819552787/0/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Wed 27 May 2026 05:00:46 +0000 Certificate not after: Wed 26 May 2027 05:05:46 +0000 Subordinate resources: IP: 119.27.64.0/18 IP: 124.6.64.0/18 IP: 203.79.0.0/20 IP: 203.100.96.0/19 IP: 219.234.64.0/20 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 15:28:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:d4:66:67:f6:cf:98:42:e8:7c:ee:a7:ec:90:8f:b5:5d:9d:ea:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Validity Not Before: May 27 05:00:46 2026 GMT Not After : May 26 05:05:46 2027 GMT Subject: CN=CCB400245E6C2E159A469D4699195E08ECCE5250 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:a5:ac:fe:40:d8:27:b7:49:6c:d3:0e:55:d1: 69:69:08:39:88:29:fb:9f:9a:09:77:e8:a7:a3:f0: c7:f0:6d:8a:b7:35:27:6a:20:c9:50:ca:3f:47:0e: d1:e1:38:58:c2:8d:ad:3c:c4:a5:42:d4:6d:78:30: 25:1c:ac:95:d9:10:c5:4e:51:56:99:35:de:54:2c: e9:a3:04:e8:68:b6:bc:44:3f:f4:48:e0:04:8d:4b: 9f:46:0a:b6:de:e4:d0:cd:2d:0c:cc:4b:73:04:e3: 7a:a8:c5:51:d8:06:e6:48:89:2d:78:1f:06:fc:01: 47:b5:05:84:f0:b5:ca:31:9f:89:19:8c:9f:56:45: 9c:45:57:fc:c7:b4:43:a7:27:1f:7f:db:55:3f:e9: 43:30:f4:fc:53:6f:98:91:09:41:eb:63:64:57:fe: 98:65:7c:82:64:f8:fd:58:69:fe:81:93:00:4c:97: 4c:2e:23:bd:9f:d4:3c:a1:fe:9f:fd:bd:24:5e:8b: de:32:56:4f:38:15:f5:df:bd:d8:b2:0a:a2:a2:a3: 86:78:bc:41:16:4f:c7:3b:65:93:13:78:c4:24:e6: 27:50:ae:42:2b:22:a2:8c:25:57:00:5e:c4:ec:f6: f5:50:7a:95:8e:83:c5:7e:e1:ab:c3:e9:39:7a:4d: 70:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: CC:B4:00:24:5E:6C:2E:15:9A:46:9D:46:99:19:5E:08:EC:CE:52:50 X509v3 Authority Key Identifier: keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1111882915819552787/0/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1111882915819552787/0/CCB400245E6C2E159A469D4699195E08ECCE5250.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 119.27.64.0/18 124.6.64.0/18 203.79.0.0/20 203.100.96.0/19 219.234.64.0/20 Signature Algorithm: sha256WithRSAEncryption 10:e9:35:9b:1d:94:3f:d7:86:bd:f1:3c:be:b2:87:60:e1:30: c8:8d:b4:20:80:41:59:9b:99:ca:8f:85:9d:6b:ff:94:fd:d6: 36:61:98:42:19:51:cb:c1:e4:9a:cd:db:8f:89:ec:c6:4e:d1: 6d:00:87:c9:d1:73:4d:97:fa:f0:1f:4f:86:d1:e7:f3:02:56: 09:a9:2b:89:97:96:56:ca:cc:a1:ae:62:bb:2d:22:69:ec:57: f5:0d:21:4d:e8:bd:de:fa:e4:97:4d:9b:93:27:f3:be:cc:fb: 44:6b:b9:f8:86:bc:f5:a6:ac:1a:c4:64:f8:75:99:11:3c:e6: 39:b6:34:e7:d7:54:4d:75:56:d7:74:45:06:36:d5:3b:10:e7: a0:86:26:3e:76:a9:5f:d0:f7:e2:6e:46:4a:4b:1e:db:e5:37: f1:17:37:29:4a:0b:66:aa:71:b0:1a:8b:50:b2:b5:78:d8:1c: e0:ab:9a:19:50:84:6e:cf:aa:98:2c:c2:eb:90:64:c8:1a:2c: 90:1b:f8:8d:1b:88:b5:3c:8b:dd:e8:e9:32:06:f4:a9:87:d7: 5a:14:ed:f6:e4:ea:33:72:f9:87:c3:16:31:c3:ca:7e:65:a5: e0:c2:a4:f4:ed:17:aa:4a:14:c6:34:fd:20:bf:27:bf:b3:99: 4c:36:bd:15 -----BEGIN CERTIFICATE----- MIIFvzCCBKegAwIBAgIUdNRmZ/bPmELofO6n7JCPtV2d6jwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDUyNzA1MDA0NloX DTI3MDUyNjA1MDU0NlowMzExMC8GA1UEAxMoQ0NCNDAwMjQ1RTZDMkUxNTlBNDY5 RDQ2OTkxOTVFMDhFQ0NFNTI1MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAN6lrP5A2Ce3SWzTDlXRaWkIOYgp+5+aCXfop6Pwx/Btirc1J2ogyVDKP0cO 0eE4WMKNrTzEpULUbXgwJRysldkQxU5RVpk13lQs6aME6Gi2vEQ/9EjgBI1Ln0YK tt7k0M0tDMxLcwTjeqjFUdgG5kiJLXgfBvwBR7UFhPC1yjGfiRmMn1ZFnEVX/Me0 Q6cnH3/bVT/pQzD0/FNvmJEJQetjZFf+mGV8gmT4/Vhp/oGTAEyXTC4jvZ/UPKH+ n/29JF6L3jJWTzgV9d+92LIKoqKjhni8QRZPxztlkxN4xCTmJ1CuQisioowlVwBe xOz29VB6lY6DxX7hq8PpOXpNcOECAwEAAaOCArIwggKuMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFMy0ACRebC4VmkadRpkZXgjszlJQMB8GA1UdIwQYMBaAFKVu hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTExMTg4MjkxNTgxOTU1Mjc4Ny8wLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMTExODgyOTE1ODE5NTUyNzg3 LzAvQ0NCNDAwMjQ1RTZDMkUxNTlBNDY5RDQ2OTkxOTVFMDhFQ0NFNTI1MC5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwNwYIKwYBBQUH AQcBAf8EKDAmMCQEAgABMB4DBAZ3G0ADBAZ8BkADBATLTwADBAXLZGADBATb6kAw DQYJKoZIhvcNAQELBQADggEBABDpNZsdlD/Xhr3xPL6yh2DhMMiNtCCAQVmbmcqP hZ1r/5T91jZhmEIZUcvB5JrN24+J7MZO0W0Ah8nRc02X+vAfT4bR5/MCVgmpK4mX llbKzKGuYrstImnsV/UNIU3ovd765JdNm5Mn877M+0RrufiGvPWmrBrEZPh1mRE8 5jm2NOfXVE11Vtd0RQY21TsQ56CGJj52qV/Q9+JuRkpLHtvlN/EXNylKC2aqcbAa i1CytXjYHOCrmhlQhG7PqpgswuuQZMgaLJAb+I0biLU8i93o6TIG9KmH11oU7fbk 6jNy+YfDFjHDyn5lpeDCpPTtF6pKFMY0/SC/J7+zmUw2vRU= -----END CERTIFICATE-----Generated at Fri May 29 21:12:18 2026 by rpki-client