$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D43DFC413BC84FA18BD1B8E07A23462C043ACB23.cer File: D43DFC413BC84FA18BD1B8E07A23462C043ACB23.cer (raw, json) Hash identifier: uodUNLkZtjs46JYEeBt5oeOsokEJMZznZAy6Twr7Qa4= Subject key identifier: D4:3D:FC:41:3B:C8:4F:A1:8B:D1:B8:E0:7A:23:46:2C:04:3A:CB:23 Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Certificate serial: 676EB4E28291A77B7962CDF811FF4A4FADDD4DF5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1114852675259727895/0/D43DFC413BC84FA18BD1B8E07A23462C043ACB23.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1114852675259727895/0/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Thu 04 Jun 2026 09:41:32 +0000 Certificate not after: Thu 03 Jun 2027 09:46:32 +0000 Subordinate resources: AS: 59034 IP: 1.119.128.0/17 IP: 43.224.44.0/22 IP: 43.248.232.0/22 IP: 2402:9840::/32 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Jun 2026 04:35:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:6e:b4:e2:82:91:a7:7b:79:62:cd:f8:11:ff:4a:4f:ad:dd:4d:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Validity Not Before: Jun 4 09:41:32 2026 GMT Not After : Jun 3 09:46:32 2027 GMT Subject: CN=D43DFC413BC84FA18BD1B8E07A23462C043ACB23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:34:71:71:a8:c9:75:2e:ee:b6:41:2b:00:14: ad:31:0d:d9:50:8f:54:79:53:f4:74:38:25:aa:ba: 83:0c:a6:bd:b7:2c:b9:e2:51:f9:43:23:07:df:1f: 85:cb:ee:dc:78:0e:1b:27:ef:8c:45:83:cf:df:0a: ce:6b:88:72:53:f3:98:ca:ac:07:a9:3f:f0:56:28: 52:25:ec:7d:07:42:1b:f7:fd:ea:0a:cd:9b:9b:b4: dd:4e:41:a5:d3:88:20:85:14:38:e3:77:46:7d:76: 74:0f:e5:fd:49:77:1d:76:dc:72:df:98:84:5c:05: e9:8c:77:05:1b:a9:36:e0:76:fb:17:18:dd:34:c7: 2f:d6:00:c5:30:d9:1a:86:12:96:d9:16:12:cd:56: 01:63:b8:d9:bf:9d:6b:7f:76:41:67:d4:fd:ab:ab: 10:0d:30:1b:ff:69:3e:71:17:6c:5e:7b:3b:ef:7b: 8e:0e:60:14:b1:2b:98:6f:3d:d6:a9:d9:b1:8e:c9: a3:55:e7:5b:7f:31:a8:68:ba:ee:9f:92:ef:86:0f: b2:ab:cb:5d:89:e0:70:74:7f:1d:27:16:57:b6:2e: aa:61:b0:d0:63:47:92:8c:53:73:aa:97:a7:5a:b2: 81:ae:20:f1:a3:00:ce:b6:eb:39:b3:14:74:eb:4c: 7e:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: D4:3D:FC:41:3B:C8:4F:A1:8B:D1:B8:E0:7A:23:46:2C:04:3A:CB:23 X509v3 Authority Key Identifier: keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1114852675259727895/0/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1114852675259727895/0/D43DFC413BC84FA18BD1B8E07A23462C043ACB23.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 1.119.128.0/17 43.224.44.0/22 43.248.232.0/22 IPv6: 2402:9840::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 59034 Signature Algorithm: sha256WithRSAEncryption 2f:7a:e4:c7:d7:28:c6:86:37:0b:d0:ee:3c:28:9e:e7:f8:2e: e0:5b:8f:93:05:68:c3:ed:b0:10:0c:7b:40:a3:90:b0:c5:75: 6a:c1:e1:07:d5:b2:66:f9:b8:50:99:48:90:23:31:77:50:62: ba:8a:04:be:35:5f:cd:21:3d:ea:f4:a8:b0:17:97:a5:eb:31: 99:43:2d:50:5e:7a:f6:ea:40:7e:d8:2c:0c:0f:1f:86:d9:56: 5c:5d:11:8f:5a:51:67:0d:a5:f8:fb:81:36:61:2c:ea:cb:2e: 1e:d8:4f:56:f9:a4:6b:6b:29:f7:93:24:2b:53:80:f0:bd:e3: 52:81:15:b2:09:e3:2d:e9:30:83:d0:65:b9:b5:95:b2:92:d3: 4f:7d:f1:b1:36:ef:88:09:3b:d6:eb:e9:10:d8:5e:83:f6:1f: 1f:e5:55:db:1e:0a:25:a7:40:68:81:31:9c:b0:ac:82:21:f9: 34:17:f6:e5:39:ae:e7:58:32:6d:01:ef:ef:8d:f9:79:cd:02: 4f:0d:e7:4a:87:8c:87:c4:82:fe:38:90:57:89:e0:c6:22:6c: 05:b5:d7:a5:4f:a2:c9:0b:fa:a9:fc:0e:97:67:bc:ee:34:d6: 03:48:f4:5c:b3:17:1a:46:1e:af:70:b4:4f:05:56:57:0d:88: 7a:7e:22:cc -----BEGIN CERTIFICATE----- MIIF3jCCBMagAwIBAgIUZ2604oKRp3t5Ys34Ef9KT63dTfUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDYwNDA5NDEzMloX DTI3MDYwMzA5NDYzMlowMzExMC8GA1UEAxMoRDQzREZDNDEzQkM4NEZBMThCRDFC OEUwN0EyMzQ2MkMwNDNBQ0IyMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMk0cXGoyXUu7rZBKwAUrTEN2VCPVHlT9HQ4Jaq6gwymvbcsueJR+UMjB98f hcvu3HgOGyfvjEWDz98KzmuIclPzmMqsB6k/8FYoUiXsfQdCG/f96grNm5u03U5B pdOIIIUUOON3Rn12dA/l/Ul3HXbcct+YhFwF6Yx3BRupNuB2+xcY3TTHL9YAxTDZ GoYSltkWEs1WAWO42b+da392QWfU/aurEA0wG/9pPnEXbF57O+97jg5gFLErmG89 1qnZsY7Jo1XnW38xqGi67p+S74YPsqvLXYngcHR/HScWV7YuqmGw0GNHkoxTc6qX p1qyga4g8aMAzrbrObMUdOtMfukCAwEAAaOCAtEwggLNMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFNQ9/EE7yE+hi9G44HojRiwEOssjMB8GA1UdIwQYMBaAFKVu hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTExNDg1MjY3NTI1OTcyNzg5NS8wLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMTE0ODUyNjc1MjU5NzI3ODk1 LzAvRDQzREZDNDEzQkM4NEZBMThCRDFCOEUwN0EyMzQ2MkMwNDNBQ0IyMy5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwOgYIKwYBBQUH AQcBAf8EKzApMBgEAgABMBIDBAcBd4ADBAIr4CwDBAIr+OgwDQQCAAIwBwMFACQC mEAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDAOaaMA0GCSqGSIb3DQEBCwUAA4IB AQAveuTH1yjGhjcL0O48KJ7n+C7gW4+TBWjD7bAQDHtAo5CwxXVqweEH1bJm+bhQ mUiQIzF3UGK6igS+NV/NIT3q9KiwF5el6zGZQy1QXnr26kB+2CwMDx+G2VZcXRGP WlFnDaX4+4E2YSzqyy4e2E9W+aRrayn3kyQrU4DwveNSgRWyCeMt6TCD0GW5tZWy ktNPffGxNu+ICTvW6+kQ2F6D9h8f5VXbHgolp0BogTGcsKyCIfk0F/blOa7nWDJt Ae/vjfl5zQJPDedKh4yHxIL+OJBXieDGImwFtdelT6LJC/qp/A6XZ7zuNNYDSPRc sxcaRh6vcLRPBVZXDYh6fiLM -----END CERTIFICATE-----Generated at Fri Jun 12 03:35:19 2026 by rpki-client