$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/0/42EFD1D00C09B99E5E9DBCDD0E590421661D6558.cer File: 42EFD1D00C09B99E5E9DBCDD0E590421661D6558.cer (raw, json) Hash identifier: nu2+iDjS2tezR+lAUesAMGU85WHHqNhEXe3/PJfu33Y= Subject key identifier: 42:EF:D1:D0:0C:09:B9:9E:5E:9D:BC:DD:0E:59:04:21:66:1D:65:58 Authority key identifier: CB:02:14:A5:C4:04:D6:F8:40:43:3B:12:0C:AC:BB:5B:8C:59:E6:13 Certificate issuer: /CN=A9162E3D0001/serialNumber=CB0214A5C404D6F840433B120CACBB5B8C59E613 Certificate serial: 39D3173EE9D8FA1A2C7A36BA4F03FB4591878B1E Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1065585389265616897/1/42EFD1D00C09B99E5E9DBCDD0E590421661D6558.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1065585389265616897/1/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Mon 01 Jun 2026 01:25:24 +0000 Certificate not after: Mon 31 May 2027 01:30:24 +0000 Subordinate resources: IP: 157.10.34.0/23 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 17:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:d3:17:3e:e9:d8:fa:1a:2c:7a:36:ba:4f:03:fb:45:91:87:8b:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=CB0214A5C404D6F840433B120CACBB5B8C59E613 Validity Not Before: Jun 1 01:25:24 2026 GMT Not After : May 31 01:30:24 2027 GMT Subject: CN=42EFD1D00C09B99E5E9DBCDD0E590421661D6558 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:43:10:22:41:f5:74:c9:96:3f:ee:a7:4a:c6: 05:0b:cb:a9:5e:b8:cd:aa:90:38:71:7c:e3:c9:d4: 82:a1:eb:e2:f8:76:c2:26:3b:4f:c3:ae:0a:d9:19: 5a:62:f7:ee:c2:0f:17:8e:15:fc:ff:1e:12:56:fa: 67:f6:45:1a:88:8e:b9:50:cf:14:63:db:b6:fe:bd: e4:aa:97:01:5f:13:99:95:6c:8e:cb:da:6d:d0:c5: 3d:77:88:63:36:e4:09:4c:65:ea:fe:5f:4c:af:67: 89:99:f5:9f:80:eb:d5:ae:ce:ab:77:96:cd:34:cc: a9:3e:a7:ab:27:41:2a:26:7f:fc:2a:29:80:4f:01: 53:9c:e0:69:25:a8:13:42:8b:77:cb:93:bc:97:e9: 4c:a1:e0:8e:ca:58:00:68:2c:52:fd:57:9b:5e:34: 50:bc:4b:21:6d:e2:fc:55:a0:49:64:c6:b9:1c:e0: 36:30:ba:d5:6c:c4:a8:c4:37:4f:11:bc:fc:e7:23: 1f:0d:73:f2:f2:13:a6:d4:d7:e8:f5:82:87:24:24: d7:7b:4e:e0:e2:53:75:14:ad:95:21:33:f5:d8:6d: 16:42:f2:1c:6b:87:bb:8b:1d:8c:d8:e1:31:f8:42: 18:a9:e6:bf:85:1e:ea:a0:b7:53:34:3b:6a:8d:ad: 37:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 42:EF:D1:D0:0C:09:B9:9E:5E:9D:BC:DD:0E:59:04:21:66:1D:65:58 X509v3 Authority Key Identifier: keyid:CB:02:14:A5:C4:04:D6:F8:40:43:3B:12:0C:AC:BB:5B:8C:59:E6:13 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265616897/1/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265616897/1/42EFD1D00C09B99E5E9DBCDD0E590421661D6558.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.10.34.0/23 Signature Algorithm: sha256WithRSAEncryption 57:11:5a:09:da:9a:43:23:7e:4c:69:0c:d0:d6:5c:a2:d3:78: b6:25:9c:53:62:6b:0d:47:1c:a9:f8:75:a6:5b:55:23:13:ae: cb:96:c9:41:50:b9:4c:bf:60:eb:49:8c:c6:1e:22:68:72:46: fd:cd:f6:e4:5c:96:e0:0d:5b:ca:9f:25:f1:d3:b5:2a:67:d7: 49:f2:3c:be:d6:9e:5e:dd:ad:41:40:0c:76:00:6c:e5:f1:95: 24:c6:80:4d:9d:f2:4c:cb:12:e8:41:74:76:3b:70:c3:e5:9c: 7e:d1:15:73:89:31:9f:99:ab:22:fd:f6:57:d8:21:6e:22:7b: 4b:6b:d6:9a:7f:1f:79:5e:20:a6:cd:89:35:7a:e5:f1:b5:14: e8:bc:03:98:aa:81:79:6a:24:98:cd:b7:c9:e6:38:57:3e:3c: 0d:02:12:1a:bc:14:b5:f5:a8:5e:7a:c5:62:b0:1f:ff:f8:a7: 1b:3e:e7:02:2c:88:f5:03:97:75:48:8e:2a:52:f3:2a:d4:49: 88:0e:50:29:ea:78:57:aa:07:71:f7:a0:55:d4:a3:b4:20:83: 76:a6:5b:06:05:2c:8a:3e:60:07:a0:94:73:87:fd:5b:48:80: ab:93:60:bd:af:f0:fe:38:f0:03:06:56:fc:36:4e:29:d5:c4: 86:d1:96:97 -----BEGIN CERTIFICATE----- MIIFpzCCBI+gAwIBAgIUOdMXPunY+hoseja6TwP7RZGHix4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhDQjAyMTRBNUM0 MDRENkY4NDA0MzNCMTIwQ0FDQkI1QjhDNTlFNjEzMB4XDTI2MDYwMTAxMjUyNFoX DTI3MDUzMTAxMzAyNFowMzExMC8GA1UEAxMoNDJFRkQxRDAwQzA5Qjk5RTVFOURC Q0REMEU1OTA0MjE2NjFENjU1ODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAN5DECJB9XTJlj/up0rGBQvLqV64zaqQOHF848nUgqHr4vh2wiY7T8OuCtkZ WmL37sIPF44V/P8eElb6Z/ZFGoiOuVDPFGPbtv695KqXAV8TmZVsjsvabdDFPXeI YzbkCUxl6v5fTK9niZn1n4Dr1a7Oq3eWzTTMqT6nqydBKiZ//CopgE8BU5zgaSWo E0KLd8uTvJfpTKHgjspYAGgsUv1Xm140ULxLIW3i/FWgSWTGuRzgNjC61WzEqMQ3 TxG8/OcjHw1z8vITptTX6PWChyQk13tO4OJTdRStlSEz9dhtFkLyHGuHu4sdjNjh MfhCGKnmv4Ue6qC3UzQ7ao2tN50CAwEAAaOCApowggKWMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFELv0dAMCbmeXp283Q5ZBCFmHWVYMB8GA1UdIwQYMBaAFMsC FKXEBNb4QEM7Egysu1uMWeYTMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMC9DQjAyMTRBNUM0MDRENkY4NDA0MzNCMTIwQ0FDQkI1QjhDNTlF NjEzLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CM0EyNEYyMDFENjYxMUUyOEFDODgzN0M3 MkZEMUZGMi95d0lVcGNRRTF2aEFRenNTREt5N1c0eFo1aE0uY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTA2NTU4NTM4OTI2NTYxNjg5Ny8xLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDY1NTg1Mzg5MjY1NjE2ODk3 LzEvNDJFRkQxRDAwQzA5Qjk5RTVFOURCQ0REMEU1OTA0MjE2NjFENjU1OC5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAGdCiIwDQYJKoZIhvcNAQELBQADggEBAFcRWgna mkMjfkxpDNDWXKLTeLYlnFNiaw1HHKn4daZbVSMTrsuWyUFQuUy/YOtJjMYeImhy Rv3N9uRcluANW8qfJfHTtSpn10nyPL7Wnl7drUFADHYAbOXxlSTGgE2d8kzLEuhB dHY7cMPlnH7RFXOJMZ+ZqyL99lfYIW4ie0tr1pp/H3leIKbNiTV65fG1FOi8A5iq gXlqJJjNt8nmOFc+PA0CEhq8FLX1qF56xWKwH//4pxs+5wIsiPUDl3VIjipS8yrU SYgOUCnqeFeqB3H3oFXUo7Qgg3amWwYFLIo+YAeglHOH/VtIgKuTYL2v8P448AMG Vvw2TinVxIbRlpc= -----END CERTIFICATE-----Generated at Sun Jun 14 07:14:24 2026 by rpki-client