$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EBE8B4E6EA7C58B2E56E3C599F86A132629D0F3E.cer File: EBE8B4E6EA7C58B2E56E3C599F86A132629D0F3E.cer (raw, json) Hash identifier: RZCKfsN3BfkUOo5jC6EKwyPKmEicR289YlnTVf52RtU= Subject key identifier: EB:E8:B4:E6:EA:7C:58:B2:E5:6E:3C:59:9F:86:A1:32:62:9D:0F:3E Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Certificate serial: 4733732D393C8B254F836589C5F332E515861158 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1108656271558443027/0/EBE8B4E6EA7C58B2E56E3C599F86A132629D0F3E.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1108656271558443027/0/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Mon 18 May 2026 07:19:13 +0000 Certificate not after: Mon 17 May 2027 07:24:13 +0000 Subordinate resources: IP: 43.229.185.0 -- 43.229.187.255 IP: 43.254.24.0/24 IP: 45.113.204.0/22 IP: 103.83.44.0/22 IP: 2403:e7c0::/32 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 15:28:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:33:73:2d:39:3c:8b:25:4f:83:65:89:c5:f3:32:e5:15:86:11:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Validity Not Before: May 18 07:19:13 2026 GMT Not After : May 17 07:24:13 2027 GMT Subject: CN=EBE8B4E6EA7C58B2E56E3C599F86A132629D0F3E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:e0:9c:6e:48:b6:c6:e1:1a:0f:a3:f2:cc:14: 47:30:78:61:71:c0:07:f1:c6:c7:5b:77:0b:85:1c: 04:af:0d:6f:79:ad:88:76:ae:23:09:b2:e9:9e:09: ae:4d:46:c9:aa:70:f8:63:44:bf:0a:9b:53:ff:bf: 4c:b7:1d:9a:1d:b8:49:91:c7:0f:3d:a5:ac:5d:15: 0d:fb:08:04:04:4e:bc:6c:57:13:7c:6a:b8:c9:d6: 47:fc:26:60:d3:59:c3:f7:d2:75:90:78:10:a5:4c: d2:64:d6:86:d2:be:52:69:bd:29:a8:e3:c4:3d:10: 43:03:33:33:90:e3:e0:ab:2d:c5:e2:d0:81:bd:09: 0e:f4:7c:57:61:80:95:0c:a4:47:5d:98:1c:c4:15: 2a:23:90:a4:90:55:b8:c4:f2:8d:af:3c:17:94:20: 52:ab:f4:9e:14:49:e3:ed:51:f8:b8:b4:3f:4e:ab: 59:07:ef:04:0b:11:46:ee:f5:e8:78:82:cf:b8:91: f5:b7:33:69:15:89:01:cc:db:04:a7:08:3b:51:c7: 74:25:47:fd:94:f5:a8:31:c6:98:b7:77:32:f3:33: b8:0a:80:13:64:b7:20:99:77:42:04:69:f8:90:b2: ec:e8:83:fc:05:aa:a7:69:c2:ae:5c:db:b1:c1:5e: 1b:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: EB:E8:B4:E6:EA:7C:58:B2:E5:6E:3C:59:9F:86:A1:32:62:9D:0F:3E X509v3 Authority Key Identifier: keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1108656271558443027/0/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1108656271558443027/0/EBE8B4E6EA7C58B2E56E3C599F86A132629D0F3E.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.229.185.0-43.229.187.255 43.254.24.0/24 45.113.204.0/22 103.83.44.0/22 IPv6: 2403:e7c0::/32 Signature Algorithm: sha256WithRSAEncryption 7b:2f:a2:4c:2b:3a:31:df:3f:d0:9f:50:e5:19:96:d2:c6:7a: f5:cb:ec:69:f8:28:23:6d:e8:67:08:e5:a5:b0:92:0a:33:cc: 91:8a:bf:5d:b6:ce:b5:4f:b1:58:03:a2:80:a5:23:81:97:e1: 84:0a:13:f3:cb:9d:9f:3a:71:83:2c:c0:51:b0:83:cd:29:93: a1:ce:f5:8b:e3:ca:4c:ac:78:7f:52:81:02:ab:95:07:d6:c7: 62:da:ad:3e:e7:c8:18:0e:d7:d5:c8:39:8b:d9:8a:43:95:7d: fd:c7:1d:c8:4e:b1:e0:3a:52:38:84:28:f0:e6:11:80:66:20: 84:fb:ed:bd:a8:ef:84:42:13:ba:4b:b0:a8:9b:f9:14:36:d5: 39:cc:96:69:6c:cc:a6:d2:30:23:29:39:2e:c8:51:02:f1:5d: 02:db:3b:fc:ba:63:08:39:2e:a7:99:b8:52:36:b0:0c:2a:7d: f3:68:94:19:bf:75:5d:8e:32:8d:c5:22:cb:ef:b4:ae:f6:99: 8a:15:ba:14:74:64:93:12:76:55:15:2a:ac:f9:4d:39:ad:66: 4b:44:ef:62:f3:b3:09:97:b1:19:7b:e2:31:df:62:0a:4f:b5: a3:cb:18:d4:06:af:5d:c9:00:bc:f1:8e:00:aa:89:fe:f7:bd: 46:ba:68:58 -----BEGIN CERTIFICATE----- MIIF0DCCBLigAwIBAgIURzNzLTk8iyVPg2WJxfMy5RWGEVgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDUxODA3MTkxM1oX DTI3MDUxNzA3MjQxM1owMzExMC8GA1UEAxMoRUJFOEI0RTZFQTdDNThCMkU1NkUz QzU5OUY4NkExMzI2MjlEMEYzRTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMTgnG5ItsbhGg+j8swURzB4YXHAB/HGx1t3C4UcBK8Nb3mtiHauIwmy6Z4J rk1Gyapw+GNEvwqbU/+/TLcdmh24SZHHDz2lrF0VDfsIBAROvGxXE3xquMnWR/wm YNNZw/fSdZB4EKVM0mTWhtK+Umm9KajjxD0QQwMzM5Dj4KstxeLQgb0JDvR8V2GA lQykR12YHMQVKiOQpJBVuMTyja88F5QgUqv0nhRJ4+1R+Li0P06rWQfvBAsRRu71 6HiCz7iR9bczaRWJAczbBKcIO1HHdCVH/ZT1qDHGmLd3MvMzuAqAE2S3IJl3QgRp +JCy7OiD/AWqp2nCrlzbscFeG08CAwEAAaOCAsMwggK/MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFOvotObqfFiy5W48WZ+GoTJinQ8+MB8GA1UdIwQYMBaAFKVu hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTEwODY1NjI3MTU1ODQ0MzAyNy8wLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMTA4NjU2MjcxNTU4NDQzMDI3 LzAvRUJFOEI0RTZFQTdDNThCMkU1NkUzQzU5OUY4NkExMzI2MjlEMEYzRS5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwSAYIKwYBBQUH AQcBAf8EOTA3MCYEAgABMCAwDAMEACvluQMEAivluAMEACv+GAMEAi1xzAMEAmdT LDANBAIAAjAHAwUAJAPnwDANBgkqhkiG9w0BAQsFAAOCAQEAey+iTCs6Md8/0J9Q 5RmW0sZ69cvsafgoI23oZwjlpbCSCjPMkYq/XbbOtU+xWAOigKUjgZfhhAoT88ud nzpxgyzAUbCDzSmToc71i+PKTKx4f1KBAquVB9bHYtqtPufIGA7X1cg5i9mKQ5V9 /ccdyE6x4DpSOIQo8OYRgGYghPvtvajvhEITukuwqJv5FDbVOcyWaWzMptIwIyk5 LshRAvFdAts7/LpjCDkup5m4UjawDCp982iUGb91XY4yjcUiy++0rvaZihW6FHRk kxJ2VRUqrPlNOa1mS0TvYvOzCZexGXviMd9iCk+1o8sY1AavXckAvPGOAKqJ/ve9 RrpoWA== -----END CERTIFICATE-----Generated at Fri May 29 21:11:57 2026 by rpki-client