$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D59EFD93B022C056E80BDBB5B7562B324FDB4A52.cer File: D59EFD93B022C056E80BDBB5B7562B324FDB4A52.cer (raw, json) Hash identifier: mTD6pQgmC9ubGhTl92y2f4gmii4p8uAfXLDWxEQBD/g= Subject key identifier: D5:9E:FD:93:B0:22:C0:56:E8:0B:DB:B5:B7:56:2B:32:4F:DB:4A:52 Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Certificate serial: 1922F4F668D473D54B89CA248AE7CFE18725718F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1094783080826142722/0/D59EFD93B022C056E80BDBB5B7562B324FDB4A52.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1094783080826142722/0/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Mon 15 Jun 2026 02:03:48 +0000 Certificate not after: Mon 14 Jun 2027 02:08:48 +0000 Subordinate resources: IP: 103.241.92.0 -- 103.241.94.255 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 Jul 2026 20:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:22:f4:f6:68:d4:73:d5:4b:89:ca:24:8a:e7:cf:e1:87:25:71:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Validity Not Before: Jun 15 02:03:48 2026 GMT Not After : Jun 14 02:08:48 2027 GMT Subject: CN=D59EFD93B022C056E80BDBB5B7562B324FDB4A52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:03:86:89:c0:0c:9b:ca:bf:e7:e6:88:90:e9: 79:c2:ba:aa:4f:6b:e7:8b:60:97:74:bd:ab:b4:86: 5d:8e:14:4a:61:cd:61:8a:33:7b:55:bd:68:4b:96: 3c:49:22:03:8a:16:13:44:e3:1f:c1:71:43:e9:2a: 4c:92:58:73:7c:69:f7:a5:d6:c4:ce:62:9f:01:70: 1b:3f:28:4b:b7:80:cd:5e:a9:65:ba:33:81:16:a8: 2d:c4:8f:a0:39:cc:7c:74:53:99:40:9d:52:52:ee: c7:fb:7c:54:16:8e:5d:02:25:16:0b:56:c3:b2:44: ae:72:79:7a:1f:35:6e:21:1d:f7:e4:4b:3c:af:24: 6d:e5:fb:24:5b:5f:52:83:ab:dd:80:e6:5f:0f:b3: c2:31:67:12:5d:7d:d4:c6:ad:35:a4:9c:fc:e9:6f: 79:9d:e3:cc:4d:3b:4f:de:79:9a:4b:35:21:12:e9: 03:43:b9:36:7e:01:db:5f:7d:68:d1:e5:33:56:cb: b5:68:4e:62:47:9a:e9:ff:c3:ab:55:80:27:5b:87: b5:88:f5:1b:62:b7:8b:a3:57:bb:ab:14:89:92:04: 3d:78:e8:65:d7:59:eb:1f:cd:e6:b7:dd:7f:84:e3: 42:e0:86:07:83:4f:51:47:3d:db:72:31:41:3d:ec: 2d:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: D5:9E:FD:93:B0:22:C0:56:E8:0B:DB:B5:B7:56:2B:32:4F:DB:4A:52 X509v3 Authority Key Identifier: keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1094783080826142722/0/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1094783080826142722/0/D59EFD93B022C056E80BDBB5B7562B324FDB4A52.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.241.92.0-103.241.94.255 Signature Algorithm: sha256WithRSAEncryption 25:ec:e5:5c:ab:9f:b5:cd:de:40:b1:14:55:51:b5:16:23:b5: 3b:ff:01:2d:5b:ac:9c:54:b7:45:07:01:bf:e3:2c:f9:fa:02: 9b:88:fb:75:1a:dd:03:a6:7a:a1:76:b3:ca:b3:8d:e9:c8:07: de:d1:51:e6:cc:e5:74:bd:51:fc:ef:bb:51:6e:9c:16:33:cb: 9d:a4:4b:aa:75:50:9e:86:c7:dc:83:70:14:33:ad:49:42:07: 4f:5a:a0:6d:e7:82:53:bb:d5:6d:47:14:f2:a9:e8:11:07:ca: ac:18:e8:fb:61:ab:11:34:b5:66:4c:bf:1a:98:b4:64:7d:1c: ef:81:be:81:08:61:e4:b6:ad:ca:83:82:4d:2b:2d:b8:34:bb: f7:d2:6c:05:d3:07:c8:85:17:57:a2:2c:39:40:45:cd:40:f2: 96:30:a2:31:8b:3d:dd:6f:f5:de:82:72:12:48:10:66:30:2d: 5e:17:a3:9e:a3:36:0e:83:1c:d4:c5:a7:fc:47:ab:e8:ba:30: 19:51:2d:7e:57:b3:91:07:62:11:20:b2:fa:64:ec:3e:18:14: 6d:06:af:e0:ca:b7:6a:6a:52:5d:3e:74:7b:84:40:31:c6:d1: 0f:fe:d7:a9:50:7d:34:d5:16:a3:4c:3c:6f:4e:5a:7e:60:82: c4:5f:e9:15 -----BEGIN CERTIFICATE----- MIIFrzCCBJegAwIBAgIUGSL09mjUc9VLicokiufP4YclcY8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDYxNTAyMDM0OFoX DTI3MDYxNDAyMDg0OFowMzExMC8GA1UEAxMoRDU5RUZEOTNCMDIyQzA1NkU4MEJE QkI1Qjc1NjJCMzI0RkRCNEE1MjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAL0DhonADJvKv+fmiJDpecK6qk9r54tgl3S9q7SGXY4USmHNYYoze1W9aEuW PEkiA4oWE0TjH8FxQ+kqTJJYc3xp96XWxM5inwFwGz8oS7eAzV6pZbozgRaoLcSP oDnMfHRTmUCdUlLux/t8VBaOXQIlFgtWw7JErnJ5eh81biEd9+RLPK8kbeX7JFtf UoOr3YDmXw+zwjFnEl191MatNaSc/OlveZ3jzE07T955mks1IRLpA0O5Nn4B2199 aNHlM1bLtWhOYkea6f/Dq1WAJ1uHtYj1G2K3i6NXu6sUiZIEPXjoZddZ6x/N5rfd f4TjQuCGB4NPUUc923IxQT3sLdcCAwEAAaOCAqIwggKeMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFNWe/ZOwIsBW6AvbtbdWKzJP20pSMB8GA1UdIwQYMBaAFKVu hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTA5NDc4MzA4MDgyNjE0MjcyMi8wLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDk0NzgzMDgwODI2MTQyNzIy LzAvRDU5RUZEOTNCMDIyQzA1NkU4MEJEQkI1Qjc1NjJCMzI0RkRCNEE1Mi5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwJwYIKwYBBQUH AQcBAf8EGDAWMBQEAgABMA4wDAMEAmfxXAMEAGfxXjANBgkqhkiG9w0BAQsFAAOC AQEAJezlXKuftc3eQLEUVVG1FiO1O/8BLVusnFS3RQcBv+Ms+foCm4j7dRrdA6Z6 oXazyrON6cgH3tFR5szldL1R/O+7UW6cFjPLnaRLqnVQnobH3INwFDOtSUIHT1qg beeCU7vVbUcU8qnoEQfKrBjo+2GrETS1Zky/Gpi0ZH0c74G+gQhh5LatyoOCTSst uDS799JsBdMHyIUXV6IsOUBFzUDyljCiMYs93W/13oJyEkgQZjAtXhejnqM2DoMc 1MWn/Eer6LowGVEtflezkQdiESCy+mTsPhgUbQav4Mq3ampSXT50e4RAMcbRD/7X qVB9NNUWo0w8b05afmCCxF/pFQ== -----END CERTIFICATE-----Generated at Tue Jul 14 19:09:49 2026 by rpki-client