$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/0/0503C0DCF2359A63935CA42978F7E95CF29425AD.cer File: 0503C0DCF2359A63935CA42978F7E95CF29425AD.cer (raw, json) Hash identifier: nh/3tW2Q1FXZYIFrGh1TJKSojWTaH/lyH3UwKPVjheA= Subject key identifier: 05:03:C0:DC:F2:35:9A:63:93:5C:A4:29:78:F7:E9:5C:F2:94:25:AD Authority key identifier: CB:02:14:A5:C4:04:D6:F8:40:43:3B:12:0C:AC:BB:5B:8C:59:E6:13 Certificate issuer: /CN=A9162E3D0001/serialNumber=CB0214A5C404D6F840433B120CACBB5B8C59E613 Certificate serial: 67B3E4F86422AC29EC54050A086FF3802EF2A24E Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1096301149373399041/0/0503C0DCF2359A63935CA42978F7E95CF29425AD.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1096301149373399041/0/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Tue 14 Apr 2026 05:10:03 +0000 Certificate not after: Tue 13 Apr 2027 05:15:03 +0000 Subordinate resources: IP: 157.66.244.0/23 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 15:28:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:b3:e4:f8:64:22:ac:29:ec:54:05:0a:08:6f:f3:80:2e:f2:a2:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=CB0214A5C404D6F840433B120CACBB5B8C59E613 Validity Not Before: Apr 14 05:10:03 2026 GMT Not After : Apr 13 05:15:03 2027 GMT Subject: CN=0503C0DCF2359A63935CA42978F7E95CF29425AD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:13:0c:a0:00:66:9c:94:7b:78:31:ee:cb:e0: 85:b7:38:4e:b9:d1:0d:29:5b:c9:1d:dc:4d:0e:31: bd:cc:22:3b:40:78:be:77:f5:93:09:d2:13:b5:86: 00:31:d6:a1:7b:09:70:48:6f:10:9f:93:34:bd:eb: 22:37:69:b1:ef:45:58:1a:a2:62:d2:f4:ce:77:62: 7d:39:8a:f7:19:4e:29:a8:69:c1:c1:ef:71:6b:9e: 69:8e:7d:1d:55:93:ee:a9:3f:7f:83:74:52:eb:10: c8:9c:9b:6a:3e:58:8b:f0:f3:be:10:c8:90:51:b1: f0:d1:c4:8c:50:3a:63:9d:c3:bc:09:ee:68:6b:6d: ec:c8:88:cb:c4:1d:4c:b6:f7:91:83:c2:ee:46:c3: 50:05:75:31:70:31:50:49:5c:fb:7a:e4:dd:e7:4a: 06:4b:ae:33:56:a1:6a:0a:67:c9:fc:3d:b5:64:49: 5d:f0:82:5b:62:1b:66:6b:62:f9:95:19:69:20:0f: 24:5f:87:92:e0:cc:1b:28:89:8b:ae:04:6f:37:be: ec:7a:ad:d7:23:1a:be:d4:bc:2f:08:fc:2a:ef:89: b5:e9:81:98:ad:e2:aa:f8:20:18:e2:03:a1:5a:b5: 01:3f:3f:93:d8:f7:88:bd:e1:d4:04:3b:ec:ab:5a: 73:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 05:03:C0:DC:F2:35:9A:63:93:5C:A4:29:78:F7:E9:5C:F2:94:25:AD X509v3 Authority Key Identifier: keyid:CB:02:14:A5:C4:04:D6:F8:40:43:3B:12:0C:AC:BB:5B:8C:59:E6:13 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1096301149373399041/0/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1096301149373399041/0/0503C0DCF2359A63935CA42978F7E95CF29425AD.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.66.244.0/23 Signature Algorithm: sha256WithRSAEncryption 8f:b5:ed:e5:ad:8b:5e:6f:e1:94:c6:d3:45:1b:4a:83:d2:b5: 95:a4:35:8f:6e:1c:9d:5c:77:90:94:f0:e6:e5:4a:13:28:2d: d8:50:da:d1:71:59:a4:29:06:aa:66:34:f2:93:8e:87:c2:b0: e5:03:75:fb:87:a3:5c:34:ed:d2:f9:59:cc:38:f8:9e:66:c8: 65:83:1d:78:07:4b:6e:9b:1f:64:af:09:e1:30:43:d2:f0:8a: 80:50:16:29:53:ce:f8:4c:3a:a7:a7:87:25:96:93:e4:db:28: 86:2a:30:ee:59:6d:b6:78:a4:01:29:a8:2f:bb:18:e2:39:68: 34:67:c3:11:53:8a:f4:68:c2:c6:81:97:91:02:bf:56:93:3e: 9a:93:38:15:06:3d:71:81:09:76:8c:1a:b5:80:e2:37:60:33: bc:a9:e9:f9:d1:81:d4:22:41:fd:12:1a:2f:75:53:b3:65:c0: ce:f4:5b:3e:a7:d5:26:43:69:80:cc:11:d9:d7:84:cd:a3:4b: 3d:b1:4a:77:8b:a9:90:1b:fd:dd:d1:c5:6e:2c:ed:dc:02:52: aa:e6:26:79:dd:29:48:df:25:0f:17:78:57:8a:e1:e2:be:19: 96:d1:47:60:89:ef:5b:e1:19:e4:74:28:c3:88:f7:c5:96:1e: 15:ae:2b:25 -----BEGIN CERTIFICATE----- MIIFpzCCBI+gAwIBAgIUZ7Pk+GQirCnsVAUKCG/zgC7yok4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhDQjAyMTRBNUM0 MDRENkY4NDA0MzNCMTIwQ0FDQkI1QjhDNTlFNjEzMB4XDTI2MDQxNDA1MTAwM1oX DTI3MDQxMzA1MTUwM1owMzExMC8GA1UEAxMoMDUwM0MwRENGMjM1OUE2MzkzNUNB NDI5NzhGN0U5NUNGMjk0MjVBRDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALkTDKAAZpyUe3gx7svghbc4TrnRDSlbyR3cTQ4xvcwiO0B4vnf1kwnSE7WG ADHWoXsJcEhvEJ+TNL3rIjdpse9FWBqiYtL0zndifTmK9xlOKahpwcHvcWueaY59 HVWT7qk/f4N0UusQyJybaj5Yi/DzvhDIkFGx8NHEjFA6Y53DvAnuaGtt7MiIy8Qd TLb3kYPC7kbDUAV1MXAxUElc+3rk3edKBkuuM1ahagpnyfw9tWRJXfCCW2IbZmti +ZUZaSAPJF+HkuDMGyiJi64Ebze+7Hqt1yMavtS8Lwj8Ku+JtemBmK3iqvggGOID oVq1AT8/k9j3iL3h1AQ77Ktac7MCAwEAAaOCApowggKWMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFAUDwNzyNZpjk1ykKXj36VzylCWtMB8GA1UdIwQYMBaAFMsC FKXEBNb4QEM7Egysu1uMWeYTMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMC9DQjAyMTRBNUM0MDRENkY4NDA0MzNCMTIwQ0FDQkI1QjhDNTlF NjEzLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CM0EyNEYyMDFENjYxMUUyOEFDODgzN0M3 MkZEMUZGMi95d0lVcGNRRTF2aEFRenNTREt5N1c0eFo1aE0uY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTA5NjMwMTE0OTM3MzM5OTA0MS8wLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDk2MzAxMTQ5MzczMzk5MDQx LzAvMDUwM0MwRENGMjM1OUE2MzkzNUNBNDI5NzhGN0U5NUNGMjk0MjVBRC5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAGdQvQwDQYJKoZIhvcNAQELBQADggEBAI+17eWt i15v4ZTG00UbSoPStZWkNY9uHJ1cd5CU8OblShMoLdhQ2tFxWaQpBqpmNPKTjofC sOUDdfuHo1w07dL5Wcw4+J5myGWDHXgHS26bH2SvCeEwQ9LwioBQFilTzvhMOqen hyWWk+TbKIYqMO5ZbbZ4pAEpqC+7GOI5aDRnwxFTivRowsaBl5ECv1aTPpqTOBUG PXGBCXaMGrWA4jdgM7yp6fnRgdQiQf0SGi91U7NlwM70Wz6n1SZDaYDMEdnXhM2j Sz2xSneLqZAb/d3RxW4s7dwCUqrmJnndKUjfJQ8XeFeK4eK+GZbRR2CJ71vhGeR0 KMOI98WWHhWuKyU= -----END CERTIFICATE-----Generated at Fri Apr 17 20:38:30 2026 by rpki-client