$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DE3831D69587EC59C3002006198FD58A977ED1AD.cer File: DE3831D69587EC59C3002006198FD58A977ED1AD.cer (raw, json) Hash identifier: QL8f6IgvN3edPTdrwW2L6fbuGw3OgXcQomkINpYHzaA= Subject key identifier: DE:38:31:D6:95:87:EC:59:C3:00:20:06:19:8F:D5:8A:97:7E:D1:AD Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Certificate serial: 0E95513E54CAA47564FEF86758A9C78B24996011 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1065582330347323393/0/DE3831D69587EC59C3002006198FD58A977ED1AD.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1065582330347323393/0/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Thu 28 May 2026 08:48:03 +0000 Certificate not after: Thu 27 May 2027 08:53:03 +0000 Subordinate resources: AS: 137730 IP: 103.124.48.0/22 IP: 2403:d9c0::/32 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 15:28:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:95:51:3e:54:ca:a4:75:64:fe:f8:67:58:a9:c7:8b:24:99:60:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Validity Not Before: May 28 08:48:03 2026 GMT Not After : May 27 08:53:03 2027 GMT Subject: CN=DE3831D69587EC59C3002006198FD58A977ED1AD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:8f:48:d1:ea:95:e5:36:36:53:38:ac:ea:49: c3:7b:1c:92:6c:6f:a0:f5:3f:92:19:08:50:51:a9: 01:d0:11:a3:16:71:07:35:de:9d:a7:93:50:62:37: 73:63:f2:13:03:89:93:26:37:e7:ac:a3:ff:1f:c2: ae:e1:61:3b:55:a1:2d:0f:fe:a6:18:c7:5d:55:b7: 6c:11:bf:5c:11:ad:72:df:43:3c:8d:c8:94:de:0d: 71:41:98:49:e6:e5:ca:c1:5c:90:ee:c2:da:ff:c1: a8:f5:5b:38:01:36:68:6d:f2:20:86:8a:d7:30:38: b4:83:01:56:45:3d:6b:30:4e:77:27:4c:37:41:8b: 6c:d0:42:fb:27:95:f0:ef:46:a7:07:1e:1a:f5:7c: 64:de:1f:34:d0:db:c7:13:2d:81:27:e4:c7:a7:f9: 9e:d6:c5:c5:7a:d9:c7:ea:c2:f8:59:5d:58:1e:10: 0e:cc:8e:42:50:e0:7e:c1:03:a1:b3:2a:39:13:2e: ec:fb:03:28:36:15:36:55:3d:8b:48:c4:01:52:c9: 73:a8:b1:f8:41:5c:5c:91:bc:fd:65:9a:ab:cb:38: 4b:34:57:c4:95:c6:a8:8f:c5:79:d9:fe:63:79:9b: cb:a2:10:75:5b:e0:d9:63:66:c2:e0:7a:09:23:ff: 90:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: DE:38:31:D6:95:87:EC:59:C3:00:20:06:19:8F:D5:8A:97:7E:D1:AD X509v3 Authority Key Identifier: keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330347323393/0/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330347323393/0/DE3831D69587EC59C3002006198FD58A977ED1AD.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.124.48.0/22 IPv6: 2403:d9c0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 137730 Signature Algorithm: sha256WithRSAEncryption 3f:49:de:72:83:04:43:60:c7:48:e1:86:77:07:50:70:e0:82: f1:5a:be:af:df:76:55:14:7f:c7:67:ec:d9:f3:88:32:8e:b5: e9:4c:52:22:73:e9:1a:cc:9c:c9:dc:0d:3e:8b:64:08:f5:5f: d5:32:ac:43:b8:5f:f0:84:64:10:cd:5f:14:09:50:ad:8b:d6: 1f:41:43:fc:9d:c1:5d:59:cb:47:ee:cb:b0:69:92:27:2a:db: 9c:c8:c6:16:51:e6:b2:b9:ac:cf:c7:9c:c4:79:b6:b6:11:e7: 64:0a:ee:84:ba:3c:f0:d7:3d:02:07:a8:1d:80:c7:e8:91:cf: 25:1f:07:a8:00:bf:68:83:b2:81:31:ec:6a:77:6f:24:fb:8b: f8:26:ac:fe:3e:40:56:66:dd:8d:41:4e:8b:41:c6:8b:c1:8d: 3d:7c:f6:26:a9:15:ab:bd:96:a1:25:2b:1d:4b:e5:59:52:d6: a1:4b:27:59:98:45:0a:05:e2:0a:91:3e:bf:7a:4a:45:b8:87: b3:c8:71:9a:37:ea:88:e4:a0:e9:64:b7:7e:8b:03:c5:ce:80: a5:2e:7f:10:80:80:42:88:24:09:6f:6a:54:2a:d2:22:46:3a: e2:7d:b4:0f:6d:7b:d8:4b:ee:4d:d9:2e:64:54:8c:3a:93:8b: 18:05:50:48 -----BEGIN CERTIFICATE----- MIIF0jCCBLqgAwIBAgIUDpVRPlTKpHVk/vhnWKnHiySZYBEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDUyODA4NDgwM1oX DTI3MDUyNzA4NTMwM1owMzExMC8GA1UEAxMoREUzODMxRDY5NTg3RUM1OUMzMDAy MDA2MTk4RkQ1OEE5NzdFRDFBRDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAM2PSNHqleU2NlM4rOpJw3sckmxvoPU/khkIUFGpAdARoxZxBzXenaeTUGI3 c2PyEwOJkyY356yj/x/CruFhO1WhLQ/+phjHXVW3bBG/XBGtct9DPI3IlN4NcUGY SeblysFckO7C2v/BqPVbOAE2aG3yIIaK1zA4tIMBVkU9azBOdydMN0GLbNBC+yeV 8O9GpwceGvV8ZN4fNNDbxxMtgSfkx6f5ntbFxXrZx+rC+FldWB4QDsyOQlDgfsED obMqORMu7PsDKDYVNlU9i0jEAVLJc6ix+EFcXJG8/WWaq8s4SzRXxJXGqI/Fedn+ Y3mby6IQdVvg2WNmwuB6CSP/kBECAwEAAaOCAsUwggLBMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFN44MdaVh+xZwwAgBhmP1YqXftGtMB8GA1UdIwQYMBaAFKVu hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTA2NTU4MjMzMDM0NzMyMzM5My8wLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDY1NTgyMzMwMzQ3MzIzMzkz LzAvREUzODMxRDY5NTg3RUM1OUMzMDAyMDA2MTk4RkQ1OEE5NzdFRDFBRC5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUH AQcBAf8EHzAdMAwEAgABMAYDBAJnfDAwDQQCAAIwBwMFACQD2cAwGgYIKwYBBQUH AQgBAf8ECzAJoAcwBQIDAhoCMA0GCSqGSIb3DQEBCwUAA4IBAQA/Sd5ygwRDYMdI 4YZ3B1Bw4ILxWr6v33ZVFH/HZ+zZ84gyjrXpTFIic+kazJzJ3A0+i2QI9V/VMqxD uF/whGQQzV8UCVCti9YfQUP8ncFdWctH7suwaZInKtucyMYWUeayuazPx5zEeba2 EedkCu6Eujzw1z0CB6gdgMfokc8lHweoAL9og7KBMexqd28k+4v4Jqz+PkBWZt2N QU6LQcaLwY09fPYmqRWrvZahJSsdS+VZUtahSydZmEUKBeIKkT6/ekpFuIezyHGa N+qI5KDpZLd+iwPFzoClLn8QgIBCiCQJb2pUKtIiRjrifbQPbXvYS+5N2S5kVIw6 k4sYBVBI -----END CERTIFICATE-----Generated at Fri May 29 21:13:50 2026 by rpki-client