$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2E6BE7EE043A01D3CD483F302C345E46581A5C85.cer File: 2E6BE7EE043A01D3CD483F302C345E46581A5C85.cer (raw, json) Hash identifier: 2G5X1Vt2+V5sA5Ocfsy6rwMKJvA8wTgsXbO+vBtV4nI= Subject key identifier: 2E:6B:E7:EE:04:3A:01:D3:CD:48:3F:30:2C:34:5E:46:58:1A:5C:85 Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Certificate serial: 2C8492D47126397160FAFAA6016DFA73868F8C5F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1065591117757546499/0/2E6BE7EE043A01D3CD483F302C345E46581A5C85.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1065591117757546499/0/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Fri 29 May 2026 06:09:19 +0000 Certificate not after: Fri 28 May 2027 06:14:19 +0000 Subordinate resources: IP: 103.120.52.0/22 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 16:02:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:84:92:d4:71:26:39:71:60:fa:fa:a6:01:6d:fa:73:86:8f:8c:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Validity Not Before: May 29 06:09:19 2026 GMT Not After : May 28 06:14:19 2027 GMT Subject: CN=2E6BE7EE043A01D3CD483F302C345E46581A5C85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:dd:18:05:ea:6a:ff:0b:f9:56:3c:cc:06:33: 4e:a4:c2:30:21:73:b4:97:1a:d5:97:ca:29:fb:81: 8a:4c:9a:57:a0:20:4b:4f:55:24:d3:9b:7d:27:26: 0d:38:74:6c:12:1d:d7:ef:88:6b:f4:82:24:62:a6: ef:0c:67:fa:ce:8c:76:97:11:04:f7:5d:53:58:f8: 6d:24:28:bc:bd:0d:bb:d2:13:d1:28:a7:fa:23:fc: 11:a0:f4:43:7b:73:de:be:7e:51:1f:eb:71:83:8a: 38:ed:3a:96:8b:71:3c:fd:2d:c2:8b:33:ce:8f:e1: f9:66:e7:e9:f9:6c:89:16:b8:0b:10:0f:81:95:ae: b3:a5:b4:b8:f8:35:04:53:50:fb:e3:31:0d:34:aa: 5c:b9:4e:61:13:a4:7e:c9:34:88:44:9c:d9:95:bc: de:ec:32:55:f8:0a:81:8e:61:38:3d:56:0e:22:d9: d2:fa:aa:f2:53:84:73:60:5c:61:78:a1:59:42:00: 52:7d:68:5a:c1:2f:7d:5e:cb:a7:5d:45:a0:5f:37: 51:22:d8:9a:68:4e:8a:c5:32:95:2b:32:d7:85:2a: 5a:f4:d6:b0:02:93:40:42:07:e4:f5:c4:ab:66:7e: 9b:a4:cc:e4:fd:25:39:59:2a:51:6d:b0:84:d6:d9: 91:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 2E:6B:E7:EE:04:3A:01:D3:CD:48:3F:30:2C:34:5E:46:58:1A:5C:85 X509v3 Authority Key Identifier: keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591117757546499/0/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591117757546499/0/2E6BE7EE043A01D3CD483F302C345E46581A5C85.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.120.52.0/22 Signature Algorithm: sha256WithRSAEncryption 90:2e:df:32:ba:e3:15:d5:10:15:56:0c:91:f3:13:6b:61:58: b9:26:c2:73:83:c5:35:b0:90:72:ac:5b:18:a1:51:f5:bc:ee: 88:94:03:70:f4:f0:39:f8:71:1e:8b:98:4c:77:70:4f:d2:98: d4:6d:7f:ab:aa:ee:43:59:9d:cb:76:a3:b5:b2:bf:f3:41:4b: 79:50:16:e5:41:92:f7:03:d2:7a:04:fc:bd:71:e9:3c:f6:03: f4:67:bb:43:18:36:ca:ce:ec:5b:87:ec:6a:b0:fb:a0:8e:b0: 66:5e:a8:98:14:66:44:f0:0d:45:4e:12:4c:28:c5:34:5d:e3: 00:df:62:53:85:d3:99:07:c2:f2:03:0a:50:21:18:5e:2b:c6: 3c:3e:3e:84:8e:5c:a1:83:f2:d3:6b:87:84:a5:af:3f:92:0a: 8d:5b:da:ed:3e:7c:c8:ac:16:e4:1a:a5:da:4c:94:24:2a:ac: 70:2c:e2:97:ef:90:68:25:a5:b5:d9:1f:17:ad:4f:00:d5:30: cd:83:5d:16:bb:ac:0c:fd:2e:9e:7a:c4:72:26:fe:ac:93:60: ee:12:f2:e8:c2:8a:4c:0b:e4:fc:d9:cd:16:6a:da:b9:a5:de: 6c:a9:35:d9:59:81:69:2d:7b:c4:fd:6c:c2:ea:a2:67:0b:9f: 52:ab:23:2f -----BEGIN CERTIFICATE----- MIIFpzCCBI+gAwIBAgIULISS1HEmOXFg+vqmAW36c4aPjF8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDUyOTA2MDkxOVoX DTI3MDUyODA2MTQxOVowMzExMC8GA1UEAxMoMkU2QkU3RUUwNDNBMDFEM0NENDgz RjMwMkMzNDVFNDY1ODFBNUM4NTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAO7dGAXqav8L+VY8zAYzTqTCMCFztJca1ZfKKfuBikyaV6AgS09VJNObfScm DTh0bBId1++Ia/SCJGKm7wxn+s6MdpcRBPddU1j4bSQovL0Nu9IT0Sin+iP8EaD0 Q3tz3r5+UR/rcYOKOO06lotxPP0twoszzo/h+Wbn6flsiRa4CxAPgZWus6W0uPg1 BFNQ++MxDTSqXLlOYROkfsk0iESc2ZW83uwyVfgKgY5hOD1WDiLZ0vqq8lOEc2Bc YXihWUIAUn1oWsEvfV7Lp11FoF83USLYmmhOisUylSsy14UqWvTWsAKTQEIH5PXE q2Z+m6TM5P0lOVkqUW2whNbZkfUCAwEAAaOCApowggKWMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFC5r5+4EOgHTzUg/MCw0XkZYGlyFMB8GA1UdIwQYMBaAFKVu hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTA2NTU5MTExNzc1NzU0NjQ5OS8wLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDY1NTkxMTE3NzU3NTQ2NDk5 LzAvMkU2QkU3RUUwNDNBMDFEM0NENDgzRjMwMkMzNDVFNDY1ODFBNUM4NS5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAJneDQwDQYJKoZIhvcNAQELBQADggEBAJAu3zK6 4xXVEBVWDJHzE2thWLkmwnODxTWwkHKsWxihUfW87oiUA3D08Dn4cR6LmEx3cE/S mNRtf6uq7kNZnct2o7Wyv/NBS3lQFuVBkvcD0noE/L1x6Tz2A/Rnu0MYNsrO7FuH 7Gqw+6COsGZeqJgUZkTwDUVOEkwoxTRd4wDfYlOF05kHwvIDClAhGF4rxjw+PoSO XKGD8tNrh4Slrz+SCo1b2u0+fMisFuQapdpMlCQqrHAs4pfvkGglpbXZHxetTwDV MM2DXRa7rAz9Lp56xHIm/qyTYO4S8ujCikwL5PzZzRZq2rml3mypNdlZgWkte8T9 bMLqomcLn1KrIy8= -----END CERTIFICATE-----Generated at Sat Jun 13 23:50:21 2026 by rpki-client