$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/573895035A5FB9C94F33AC71886002E21C9EE894.cer File: 573895035A5FB9C94F33AC71886002E21C9EE894.cer (raw, json) Hash identifier: iWfRWL41STP4+/3588s6h1l99iKt1fSCmVQNrWhbEvI= Subject key identifier: 57:38:95:03:5A:5F:B9:C9:4F:33:AC:71:88:60:02:E2:1C:9E:E8:94 Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Certificate serial: 0E67E977071B1D9021DC8B6107B45B557250731B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1084666797904363523/0/573895035A5FB9C94F33AC71886002E21C9EE894.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1084666797904363523/0/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Fri 13 Mar 2026 02:33:39 +0000 Certificate not after: Fri 12 Mar 2027 02:38:39 +0000 Subordinate resources: IP: 103.28.204.0/22 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 22:39:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:67:e9:77:07:1b:1d:90:21:dc:8b:61:07:b4:5b:55:72:50:73:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Validity Not Before: Mar 13 02:33:39 2026 GMT Not After : Mar 12 02:38:39 2027 GMT Subject: CN=573895035A5FB9C94F33AC71886002E21C9EE894 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:78:8c:4a:e5:2e:39:dd:17:73:d5:e0:6c:32: b8:71:5d:42:77:df:18:de:7b:f1:b7:25:05:3a:4a: 0c:89:d9:c4:fb:ba:09:06:59:24:3d:86:5c:30:5e: 37:4d:5f:5d:1e:00:02:a3:38:4c:9e:55:f9:fa:26: 85:02:20:23:8b:3b:52:ad:71:c0:53:60:72:e7:c2: 4f:0f:0c:b9:8a:31:5e:f6:cc:a0:23:c5:89:18:e3: f2:a5:65:33:a2:52:c4:fe:94:8e:22:3a:c2:e3:cf: 39:7b:78:2d:f7:ac:e5:3a:0e:2c:16:30:99:e5:80: c9:2f:e7:f7:c8:39:90:43:09:86:3d:7e:c2:dc:4d: c1:02:74:f7:c9:ca:e4:38:4d:d0:7d:a7:e7:6d:0b: f9:12:49:18:d6:e3:b2:e7:2e:b9:10:85:8f:f4:3f: a9:44:1d:ab:8a:fe:ab:58:1d:b1:21:34:28:04:2f: bb:06:82:cf:28:20:46:14:49:3c:48:eb:89:52:f1: ad:35:55:96:09:09:dc:26:4f:01:68:13:a9:ab:0a: b2:f5:03:41:fa:ee:e2:9a:54:37:9a:96:7c:ac:40: b2:a8:ac:83:ac:59:a8:71:eb:20:8c:86:bd:65:96: ec:3b:de:a4:8f:0e:73:a5:f3:15:56:ed:d1:27:59: 7d:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 57:38:95:03:5A:5F:B9:C9:4F:33:AC:71:88:60:02:E2:1C:9E:E8:94 X509v3 Authority Key Identifier: keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1084666797904363523/0/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1084666797904363523/0/573895035A5FB9C94F33AC71886002E21C9EE894.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.28.204.0/22 Signature Algorithm: sha256WithRSAEncryption 5f:60:a7:d0:a3:29:12:88:e2:10:38:9e:5f:3f:96:f5:34:fc: 75:50:b8:61:d0:dc:c6:7b:6b:a4:4f:52:6b:86:54:fa:45:b6: 60:63:98:ad:0e:df:8c:19:c2:d1:2c:24:2b:8d:1d:fe:d8:ed: 7d:41:28:82:7f:f0:c6:30:1f:f2:c3:29:24:d4:16:03:49:08: 45:94:bc:9c:e8:50:33:49:ae:c6:9d:af:84:91:4c:f7:7f:a8: 0c:82:98:a2:13:23:a9:b1:89:67:44:a9:3a:75:ab:b1:02:2e: 9d:fa:a1:bc:18:62:88:3e:3b:94:f7:d5:51:ce:45:e4:50:83: ac:3e:f5:e9:c2:a4:fa:e4:f9:ac:66:83:86:e9:8e:9d:c3:13: 61:c0:e9:31:0e:b4:a0:cc:a6:1a:27:b2:9d:f5:b4:79:ca:12: 68:a6:0f:7a:14:fa:32:08:e5:e5:94:00:64:a1:cb:68:89:4f: 9e:e9:62:ee:49:9f:2c:6c:42:85:a3:a8:b0:a3:2f:d1:14:a6: 88:51:79:90:4a:7a:33:07:cc:45:b9:b5:59:7b:50:ca:c8:57: 14:c0:b3:1a:23:bb:c2:2e:9c:e7:c1:9a:87:99:45:60:71:d9: 6c:22:21:94:ee:e9:7d:df:ba:e0:81:40:03:24:22:33:d6:3d: 5f:56:71:99 -----BEGIN CERTIFICATE----- MIIFpzCCBI+gAwIBAgIUDmfpdwcbHZAh3IthB7RbVXJQcxswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDMxMzAyMzMzOVoX DTI3MDMxMjAyMzgzOVowMzExMC8GA1UEAxMoNTczODk1MDM1QTVGQjlDOTRGMzNB QzcxODg2MDAyRTIxQzlFRTg5NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMl4jErlLjndF3PV4GwyuHFdQnffGN578bclBTpKDInZxPu6CQZZJD2GXDBe N01fXR4AAqM4TJ5V+fomhQIgI4s7Uq1xwFNgcufCTw8MuYoxXvbMoCPFiRjj8qVl M6JSxP6UjiI6wuPPOXt4Lfes5ToOLBYwmeWAyS/n98g5kEMJhj1+wtxNwQJ098nK 5DhN0H2n520L+RJJGNbjsucuuRCFj/Q/qUQdq4r+q1gdsSE0KAQvuwaCzyggRhRJ PEjriVLxrTVVlgkJ3CZPAWgTqasKsvUDQfru4ppUN5qWfKxAsqisg6xZqHHrIIyG vWWW7DvepI8Oc6XzFVbt0SdZfRkCAwEAAaOCApowggKWMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFFc4lQNaX7nJTzOscYhgAuIcnuiUMB8GA1UdIwQYMBaAFKVu hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTA4NDY2Njc5NzkwNDM2MzUyMy8wLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDg0NjY2Nzk3OTA0MzYzNTIz LzAvNTczODk1MDM1QTVGQjlDOTRGMzNBQzcxODg2MDAyRTIxQzlFRTg5NC5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAJnHMwwDQYJKoZIhvcNAQELBQADggEBAF9gp9Cj KRKI4hA4nl8/lvU0/HVQuGHQ3MZ7a6RPUmuGVPpFtmBjmK0O34wZwtEsJCuNHf7Y 7X1BKIJ/8MYwH/LDKSTUFgNJCEWUvJzoUDNJrsadr4SRTPd/qAyCmKITI6mxiWdE qTp1q7ECLp36obwYYog+O5T31VHOReRQg6w+9enCpPrk+axmg4bpjp3DE2HA6TEO tKDMphonsp31tHnKEmimD3oU+jII5eWUAGShy2iJT57pYu5JnyxsQoWjqLCjL9EU pohReZBKejMHzEW5tVl7UMrIVxTAsxoju8IunOfBmoeZRWBx2WwiIZTu6X3fuuCB QAMkIjPWPV9WcZk= -----END CERTIFICATE-----Generated at Fri Mar 27 01:47:41 2026 by rpki-client