$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer File: E893434A32058DAFE9758FDA7B36659444C9EF8E.cer (raw, json) Hash identifier: vsryO9moXMSG/3q5mUL8PN+059Sg4wJZT0VqjfIk++8= Subject key identifier: E8:93:43:4A:32:05:8D:AF:E9:75:8F:DA:7B:36:65:94:44:C9:EF:8E Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Certificate serial: 5C003CC522C2BC11FE26594D83C63C2EA8A62018 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Fri 29 May 2026 03:23:16 +0000 Certificate not after: Fri 28 May 2027 03:28:16 +0000 Subordinate resources: IP: 101.232.0.0/15 IP: 119.59.128.0/17 IP: 123.98.0.0/17 IP: 124.42.128.0/17 IP: 210.79.64.0/18 IP: 211.149.32.0 -- 211.149.95.255 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Jun 2026 08:07:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:00:3c:c5:22:c2:bc:11:fe:26:59:4d:83:c6:3c:2e:a8:a6:20:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Validity Not Before: May 29 03:23:16 2026 GMT Not After : May 28 03:28:16 2027 GMT Subject: CN=E893434A32058DAFE9758FDA7B36659444C9EF8E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:33:7d:bb:eb:e4:db:fa:a7:49:fd:c3:28:6d: aa:4e:dd:87:8e:90:e9:c7:30:41:33:97:6d:52:7a: 01:5e:e6:49:0c:c5:b2:07:ae:98:fc:1d:45:be:dd: 11:c1:3e:d1:91:b1:b3:b3:cc:9c:e9:8c:7a:5f:c2: 5a:e4:7b:8c:c7:51:a7:2d:05:ad:ba:a8:ac:fa:fe: 30:63:4e:1c:69:38:83:d9:f8:98:63:62:14:68:33: a5:4b:c7:08:5f:05:3a:f7:28:e9:dc:66:ec:98:6a: 57:14:9a:2a:94:82:68:46:d2:16:83:b1:c0:67:1e: 92:ae:f1:f6:2d:5e:99:af:b5:d9:8e:18:a6:e5:00: fa:40:1c:39:ee:c4:7d:05:0a:dc:f0:fe:7a:d5:0e: 58:21:9f:45:72:be:25:fa:b3:55:a6:2d:08:c9:db: e7:4e:97:b3:2b:d5:83:b9:81:81:dd:2c:76:5d:25: b2:ab:de:a4:56:58:3d:84:de:7c:3d:7f:14:8f:16: cc:54:9c:a7:ff:fc:a4:24:c8:16:3e:51:da:35:4d: 94:3f:49:79:02:a9:64:fb:df:4d:2b:e1:07:82:3d: 49:5b:86:77:6c:f8:43:c8:e4:af:35:d2:7c:a2:52: 65:34:b3:c8:d5:d9:64:32:80:d3:d1:fa:e4:85:31: 8b:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: E8:93:43:4A:32:05:8D:AF:E9:75:8F:DA:7B:36:65:94:44:C9:EF:8E X509v3 Authority Key Identifier: keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 101.232.0.0/15 119.59.128.0/17 123.98.0.0/17 124.42.128.0/17 210.79.64.0/18 211.149.32.0-211.149.95.255 Signature Algorithm: sha256WithRSAEncryption 6d:2e:dc:7d:62:d7:af:72:73:e5:73:50:7c:71:b9:ef:73:03: a0:d4:1f:e0:ac:df:14:51:4f:96:f3:b2:da:66:e2:16:e5:34: 72:e9:dd:4e:3b:7c:20:f2:27:72:80:c1:c5:ca:5f:9c:97:18: 27:ed:c1:cb:3c:79:4c:a9:a4:79:96:76:75:58:bd:d1:0a:70: 5a:3a:68:80:8e:41:d9:b8:a3:94:48:d1:9a:87:3a:99:9f:18: b4:c0:dd:8b:af:ba:6a:37:18:00:9f:2c:71:88:88:35:5d:1c: 43:88:df:7f:6c:2a:75:06:68:92:78:08:52:78:be:e5:02:07: 09:60:38:14:d4:95:18:13:ba:7b:61:f9:ba:c9:f3:e2:cd:fe: 98:2a:7c:ef:b8:53:f9:27:0a:76:b0:b2:f0:89:6a:eb:3e:f2: 6a:d7:40:bd:99:c8:6a:7f:f2:df:1f:fc:7b:cc:5d:77:25:d6: 39:1b:b0:a5:6c:ee:67:98:d4:f2:14:e3:71:0f:ad:38:e8:54: f0:15:66:cb:1c:8b:93:a3:5b:5c:92:65:5f:e3:0d:78:8f:4a: d8:5e:6d:5c:ec:f0:23:a9:8f:5c:aa:61:eb:d2:42:3b:ac:3d: 18:dd:83:3f:e5:60:38:e8:db:6c:96:8e:98:fa:d6:22:9d:4f: 6e:84:d7:51 -----BEGIN CERTIFICATE----- MIIFzDCCBLSgAwIBAgIUXAA8xSLCvBH+JllNg8Y8LqimIBgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDUyOTAzMjMxNloX DTI3MDUyODAzMjgxNlowMzExMC8GA1UEAxMoRTg5MzQzNEEzMjA1OERBRkU5NzU4 RkRBN0IzNjY1OTQ0NEM5RUY4RTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMkzfbvr5Nv6p0n9wyhtqk7dh46Q6ccwQTOXbVJ6AV7mSQzFsgeumPwdRb7d EcE+0ZGxs7PMnOmMel/CWuR7jMdRpy0FrbqorPr+MGNOHGk4g9n4mGNiFGgzpUvH CF8FOvco6dxm7JhqVxSaKpSCaEbSFoOxwGcekq7x9i1ema+12Y4YpuUA+kAcOe7E fQUK3PD+etUOWCGfRXK+JfqzVaYtCMnb506XsyvVg7mBgd0sdl0lsqvepFZYPYTe fD1/FI8WzFScp//8pCTIFj5R2jVNlD9JeQKpZPvfTSvhB4I9SVuGd2z4Q8jkrzXS fKJSZTSzyNXZZDKA09H65IUxixsCAwEAAaOCAr8wggK7MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFOiTQ0oyBY2v6XWP2ns2ZZREye+OMB8GA1UdIwQYMBaAFKVu hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTA2NTU4ODU1MzEyOTUyNTI1MS8wLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDY1NTg4NTUzMTI5NTI1MjUx LzAvRTg5MzQzNEEzMjA1OERBRkU5NzU4RkRBN0IzNjY1OTQ0NEM5RUY4RS5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwRAYIKwYBBQUH AQcBAf8ENTAzMDEEAgABMCsDAwFl6AMEB3c7gAMEB3tiAAMEB3wqgAMEBtJPQDAM AwQF05UgAwQF05VAMA0GCSqGSIb3DQEBCwUAA4IBAQBtLtx9YtevcnPlc1B8cbnv cwOg1B/grN8UUU+W87LaZuIW5TRy6d1OO3wg8idygMHFyl+clxgn7cHLPHlMqaR5 lnZ1WL3RCnBaOmiAjkHZuKOUSNGahzqZnxi0wN2Lr7pqNxgAnyxxiIg1XRxDiN9/ bCp1BmiSeAhSeL7lAgcJYDgU1JUYE7p7Yfm6yfPizf6YKnzvuFP5Jwp2sLLwiWrr PvJq10C9mchqf/LfH/x7zF13JdY5G7ClbO5nmNTyFONxD6046FTwFWbLHIuTo1tc kmVf4w14j0rYXm1c7PAjqY9cqmHr0kI7rD0Y3YM/5WA46Ntslo6Y+tYinU9uhNdR -----END CERTIFICATE-----Generated at Mon Jun 8 19:51:36 2026 by rpki-client