$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CCB400245E6C2E159A469D4699195E08ECCE5250.cer File: CCB400245E6C2E159A469D4699195E08ECCE5250.cer (raw, json) Hash identifier: cfhnHICAiCz3wKgQ5Yv3n6woQ2KxLiIRwdoufaUpxL4= Subject key identifier: CC:B4:00:24:5E:6C:2E:15:9A:46:9D:46:99:19:5E:08:EC:CE:52:50 Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Certificate serial: 2ED3E0EA58D849C1246601E0FFC36BF071054E18 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1111882915819552787/0/CCB400245E6C2E159A469D4699195E08ECCE5250.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1111882915819552787/0/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Mon 01 Jun 2026 02:50:30 +0000 Certificate not after: Mon 31 May 2027 02:55:30 +0000 Subordinate resources: IP: 203.79.0.0/20 IP: 219.234.64.0/20 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 16:02:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:d3:e0:ea:58:d8:49:c1:24:66:01:e0:ff:c3:6b:f0:71:05:4e:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Validity Not Before: Jun 1 02:50:30 2026 GMT Not After : May 31 02:55:30 2027 GMT Subject: CN=CCB400245E6C2E159A469D4699195E08ECCE5250 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:a5:ac:fe:40:d8:27:b7:49:6c:d3:0e:55:d1: 69:69:08:39:88:29:fb:9f:9a:09:77:e8:a7:a3:f0: c7:f0:6d:8a:b7:35:27:6a:20:c9:50:ca:3f:47:0e: d1:e1:38:58:c2:8d:ad:3c:c4:a5:42:d4:6d:78:30: 25:1c:ac:95:d9:10:c5:4e:51:56:99:35:de:54:2c: e9:a3:04:e8:68:b6:bc:44:3f:f4:48:e0:04:8d:4b: 9f:46:0a:b6:de:e4:d0:cd:2d:0c:cc:4b:73:04:e3: 7a:a8:c5:51:d8:06:e6:48:89:2d:78:1f:06:fc:01: 47:b5:05:84:f0:b5:ca:31:9f:89:19:8c:9f:56:45: 9c:45:57:fc:c7:b4:43:a7:27:1f:7f:db:55:3f:e9: 43:30:f4:fc:53:6f:98:91:09:41:eb:63:64:57:fe: 98:65:7c:82:64:f8:fd:58:69:fe:81:93:00:4c:97: 4c:2e:23:bd:9f:d4:3c:a1:fe:9f:fd:bd:24:5e:8b: de:32:56:4f:38:15:f5:df:bd:d8:b2:0a:a2:a2:a3: 86:78:bc:41:16:4f:c7:3b:65:93:13:78:c4:24:e6: 27:50:ae:42:2b:22:a2:8c:25:57:00:5e:c4:ec:f6: f5:50:7a:95:8e:83:c5:7e:e1:ab:c3:e9:39:7a:4d: 70:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: CC:B4:00:24:5E:6C:2E:15:9A:46:9D:46:99:19:5E:08:EC:CE:52:50 X509v3 Authority Key Identifier: keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1111882915819552787/0/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1111882915819552787/0/CCB400245E6C2E159A469D4699195E08ECCE5250.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 203.79.0.0/20 219.234.64.0/20 Signature Algorithm: sha256WithRSAEncryption 59:b6:70:c3:fa:6f:31:2e:69:83:c3:f9:09:89:07:be:5c:08: 8c:aa:50:9a:40:b6:dc:e1:b9:a2:fd:1b:ed:35:fc:17:49:21: 2c:80:65:41:ac:35:dc:d5:2a:53:0d:bf:bb:54:35:b5:a4:ba: e5:0a:dd:98:19:93:a7:20:c1:2a:9d:6e:86:9f:6b:f3:6f:ff: 29:49:c0:4c:97:31:9c:b7:a5:2f:f5:16:d2:e5:d7:3e:9c:a5: 6a:30:06:9c:7a:40:54:16:80:b5:b0:9c:72:bd:6c:87:c9:f7: ab:e3:24:50:7c:8b:34:ea:ac:06:46:66:5c:a3:d5:b1:40:a3: 13:67:7a:bf:b4:d7:4a:c7:3d:41:9c:d0:7c:a1:c4:e0:f7:78: 82:a0:0a:70:4e:dc:d7:1e:d9:87:10:6a:f7:21:3b:47:e4:f9: 91:47:fc:bc:72:45:7d:b9:57:f7:e2:06:3b:69:6f:5e:e1:16: dd:8a:28:ea:a9:d4:98:76:0f:dd:72:03:6b:ea:1c:77:a2:1e: db:b0:ec:bc:81:ab:17:3e:83:fb:83:a4:62:87:57:52:ce:39: 4a:2c:1b:ae:b0:1b:ed:a1:75:bb:72:86:88:bb:86:93:e8:1a: e1:32:ef:36:d1:ab:73:46:30:1e:0d:c1:0f:0c:97:e5:92:f4: 8c:82:19:b3 -----BEGIN CERTIFICATE----- MIIFrTCCBJWgAwIBAgIULtPg6ljYScEkZgHg/8Nr8HEFThgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDYwMTAyNTAzMFoX DTI3MDUzMTAyNTUzMFowMzExMC8GA1UEAxMoQ0NCNDAwMjQ1RTZDMkUxNTlBNDY5 RDQ2OTkxOTVFMDhFQ0NFNTI1MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAN6lrP5A2Ce3SWzTDlXRaWkIOYgp+5+aCXfop6Pwx/Btirc1J2ogyVDKP0cO 0eE4WMKNrTzEpULUbXgwJRysldkQxU5RVpk13lQs6aME6Gi2vEQ/9EjgBI1Ln0YK tt7k0M0tDMxLcwTjeqjFUdgG5kiJLXgfBvwBR7UFhPC1yjGfiRmMn1ZFnEVX/Me0 Q6cnH3/bVT/pQzD0/FNvmJEJQetjZFf+mGV8gmT4/Vhp/oGTAEyXTC4jvZ/UPKH+ n/29JF6L3jJWTzgV9d+92LIKoqKjhni8QRZPxztlkxN4xCTmJ1CuQisioowlVwBe xOz29VB6lY6DxX7hq8PpOXpNcOECAwEAAaOCAqAwggKcMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFMy0ACRebC4VmkadRpkZXgjszlJQMB8GA1UdIwQYMBaAFKVu hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTExMTg4MjkxNTgxOTU1Mjc4Ny8wLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMTExODgyOTE1ODE5NTUyNzg3 LzAvQ0NCNDAwMjQ1RTZDMkUxNTlBNDY5RDQ2OTkxOTVFMDhFQ0NFNTI1MC5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwJQYIKwYBBQUH AQcBAf8EFjAUMBIEAgABMAwDBATLTwADBATb6kAwDQYJKoZIhvcNAQELBQADggEB AFm2cMP6bzEuaYPD+QmJB75cCIyqUJpAttzhuaL9G+01/BdJISyAZUGsNdzVKlMN v7tUNbWkuuUK3ZgZk6cgwSqdboafa/Nv/ylJwEyXMZy3pS/1FtLl1z6cpWowBpx6 QFQWgLWwnHK9bIfJ96vjJFB8izTqrAZGZlyj1bFAoxNner+010rHPUGc0HyhxOD3 eIKgCnBO3Nce2YcQavchO0fk+ZFH/LxyRX25V/fiBjtpb17hFt2KKOqp1Jh2D91y A2vqHHeiHtuw7LyBqxc+g/uDpGKHV1LOOUosG66wG+2hdbtyhoi7hpPoGuEy7zbR q3NGMB4NwQ8Ml+WS9IyCGbM= -----END CERTIFICATE-----Generated at Sun Jun 14 05:40:02 2026 by rpki-client