$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D5EF2A792166F94FBE33377E0239034ED2FC2F80.cer File: D5EF2A792166F94FBE33377E0239034ED2FC2F80.cer (raw, json) Hash identifier: VgxmHoy11HjYAEf/AvkAxR+2kDkM4VgHmVk6iCtkiWE= Subject key identifier: D5:EF:2A:79:21:66:F9:4F:BE:33:37:7E:02:39:03:4E:D2:FC:2F:80 Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Certificate serial: 79688ED6BF7C2167330F73409A84BA50ED89425C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1088651015181303810/0/D5EF2A792166F94FBE33377E0239034ED2FC2F80.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1088651015181303810/0/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Mon 01 Jun 2026 10:24:04 +0000 Certificate not after: Mon 31 May 2027 10:29:04 +0000 Subordinate resources: AS: 18245 IP: 45.253.68.0/22 IP: 59.108.0.0/16 IP: 103.222.192.0/22 IP: 103.235.148.0/22 IP: 150.242.168.0/22 IP: 219.232.32.0/19 IP: 2400:5400::/32 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 16:02:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:68:8e:d6:bf:7c:21:67:33:0f:73:40:9a:84:ba:50:ed:89:42:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Validity Not Before: Jun 1 10:24:04 2026 GMT Not After : May 31 10:29:04 2027 GMT Subject: CN=D5EF2A792166F94FBE33377E0239034ED2FC2F80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:7e:39:af:80:63:b0:1b:2d:5c:f1:44:22:59: 81:94:4f:05:3e:07:35:b6:09:fb:f6:d6:db:60:20: 9a:44:80:bf:dd:d0:4c:92:87:72:26:f3:29:46:95: 02:f8:5c:e5:b3:6d:c6:bf:44:7c:fd:d7:c2:c6:61: e0:71:11:f1:70:d4:bf:db:37:48:2c:0d:d6:6a:0c: f6:8a:ed:00:80:0a:bb:bf:f7:8c:9f:6c:d1:5f:12: 87:73:3b:3d:2d:43:a6:44:93:54:42:2b:87:ee:59: 52:f7:59:61:d4:d6:0d:c7:66:5e:b8:2b:b9:1c:27: 9d:cb:0f:2f:5b:d4:10:6b:4b:8a:2c:09:be:56:a9: 77:6e:87:26:1d:ca:d9:0d:35:3c:94:56:1b:03:79: ad:e5:1a:d3:8f:c9:ab:b7:ef:a8:06:e7:cd:47:9b: 94:5b:c8:68:e0:b3:e9:36:a2:c1:23:e8:37:9e:96: 0f:1b:5f:22:f3:df:e4:af:5c:6b:8d:21:5b:97:59: f0:29:ac:9f:64:cf:f1:8e:57:ff:78:02:94:ce:01: 73:51:d4:21:b2:a0:4c:f0:a4:74:5c:3c:fc:12:97: 4d:67:47:9d:42:d2:e6:79:fb:40:41:bb:83:f3:84: 38:10:c8:1f:27:29:81:2f:9c:8d:a4:9c:5c:90:3e: 0c:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: D5:EF:2A:79:21:66:F9:4F:BE:33:37:7E:02:39:03:4E:D2:FC:2F:80 X509v3 Authority Key Identifier: keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1088651015181303810/0/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1088651015181303810/0/D5EF2A792166F94FBE33377E0239034ED2FC2F80.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.253.68.0/22 59.108.0.0/16 103.222.192.0/22 103.235.148.0/22 150.242.168.0/22 219.232.32.0/19 IPv6: 2400:5400::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 18245 Signature Algorithm: sha256WithRSAEncryption 95:67:a0:be:9d:39:92:48:2b:8d:17:3d:34:47:7b:3a:35:43: 37:14:a2:99:ef:d8:70:c6:1e:11:d5:00:d8:36:a4:c3:13:0a: d8:cc:ad:83:bc:26:64:e0:4a:5e:70:9c:50:b6:84:90:75:66: fa:eb:07:f0:aa:39:7a:a7:41:de:bc:28:4a:7b:52:f7:9e:16: 14:fb:c7:71:65:b7:76:a6:5e:92:dd:5c:91:eb:48:a2:b3:44: 44:f7:21:3f:a0:a8:27:f2:bd:21:46:0a:63:82:af:70:26:6b: a7:56:25:46:f5:32:97:6c:95:b9:24:9b:c4:20:c0:a2:de:91: 88:ca:48:47:64:b4:39:2d:84:1c:06:e0:05:67:db:b6:2c:a2: e3:cb:21:bf:f8:e8:3f:6c:09:ea:d3:71:02:89:27:34:a3:19: 5f:a8:d1:b0:3c:86:5d:29:2e:33:16:c1:40:89:91:0b:62:81: 91:55:ad:2a:69:98:a1:d7:b3:89:5a:aa:59:01:fe:77:d4:31: 50:46:c4:b7:56:92:6e:89:a8:e4:b4:a0:2c:90:e9:04:c7:b0: 81:31:04:51:32:be:04:69:79:b6:15:c5:16:cc:d0:49:44:29: c1:92:27:f9:67:87:e4:39:44:87:5d:90:e3:a2:71:df:e7:84: 75:16:ce:02 -----BEGIN CERTIFICATE----- MIIF7jCCBNagAwIBAgIUeWiO1r98IWczD3NAmoS6UO2JQlwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDYwMTEwMjQwNFoX DTI3MDUzMTEwMjkwNFowMzExMC8GA1UEAxMoRDVFRjJBNzkyMTY2Rjk0RkJFMzMz NzdFMDIzOTAzNEVEMkZDMkY4MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMp+Oa+AY7AbLVzxRCJZgZRPBT4HNbYJ+/bW22AgmkSAv93QTJKHcibzKUaV Avhc5bNtxr9EfP3XwsZh4HER8XDUv9s3SCwN1moM9ortAIAKu7/3jJ9s0V8Sh3M7 PS1DpkSTVEIrh+5ZUvdZYdTWDcdmXrgruRwnncsPL1vUEGtLiiwJvlapd26HJh3K 2Q01PJRWGwN5reUa04/Jq7fvqAbnzUeblFvIaOCz6TaiwSPoN56WDxtfIvPf5K9c a40hW5dZ8Cmsn2TP8Y5X/3gClM4Bc1HUIbKgTPCkdFw8/BKXTWdHnULS5nn7QEG7 g/OEOBDIHycpgS+cjaScXJA+DK0CAwEAAaOCAuEwggLdMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFNXvKnkhZvlPvjM3fgI5A07S/C+AMB8GA1UdIwQYMBaAFKVu hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTA4ODY1MTAxNTE4MTMwMzgxMC8wLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDg4NjUxMDE1MTgxMzAzODEw LzAvRDVFRjJBNzkyMTY2Rjk0RkJFMzMzNzdFMDIzOTAzNEVEMkZDMkY4MC5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwSwYIKwYBBQUH AQcBAf8EPDA6MCkEAgABMCMDBAIt/UQDAwA7bAMEAmfewAMEAmfrlAMEApbyqAME BdvoIDANBAIAAjAHAwUAJABUADAZBggrBgEFBQcBCAEB/wQKMAigBjAEAgJHRTAN BgkqhkiG9w0BAQsFAAOCAQEAlWegvp05kkgrjRc9NEd7OjVDNxSime/YcMYeEdUA 2DakwxMK2Mytg7wmZOBKXnCcULaEkHVm+usH8Ko5eqdB3rwoSntS954WFPvHcWW3 dqZekt1cketIorNERPchP6CoJ/K9IUYKY4KvcCZrp1YlRvUyl2yVuSSbxCDAot6R iMpIR2S0OS2EHAbgBWfbtiyi48shv/joP2wJ6tNxAoknNKMZX6jRsDyGXSkuMxbB QImRC2KBkVWtKmmYodeziVqqWQH+d9QxUEbEt1aSbomo5LSgLJDpBMewgTEEUTK+ BGl5thXFFszQSUQpwZIn+WeH5DlEh12Q46Jx3+eEdRbOAg== -----END CERTIFICATE-----Generated at Sat Jun 13 23:24:22 2026 by rpki-client