$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BC585ED5A9C2B8C26475DAD56833B76EF816D671.cer File: BC585ED5A9C2B8C26475DAD56833B76EF816D671.cer (raw, json) Hash identifier: BOeFPylUyO8DaKHD+thzTim9adb+mDIfAhOc5rMGcVo= Subject key identifier: BC:58:5E:D5:A9:C2:B8:C2:64:75:DA:D5:68:33:B7:6E:F8:16:D6:71 Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Certificate serial: 1B84098FA2F664DB2A7695D1F442A195116B4BA1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1099898650089226241/0/BC585ED5A9C2B8C26475DAD56833B76EF816D671.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1099898650089226241/0/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Fri 24 Apr 2026 03:19:34 +0000 Certificate not after: Fri 23 Apr 2027 03:24:34 +0000 Subordinate resources: IP: 43.254.208.0/22 IP: 103.30.148.0/22 IP: 2405:9b00::/32 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 11:49:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:84:09:8f:a2:f6:64:db:2a:76:95:d1:f4:42:a1:95:11:6b:4b:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Validity Not Before: Apr 24 03:19:34 2026 GMT Not After : Apr 23 03:24:34 2027 GMT Subject: CN=BC585ED5A9C2B8C26475DAD56833B76EF816D671 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:c8:e7:89:91:30:3c:a9:03:9c:bf:80:58:db: f6:28:b3:83:1b:35:35:9c:cb:2b:04:27:ad:5a:14: 4f:35:e7:70:a8:b1:7d:28:54:cf:8a:5c:e8:a1:10: cd:e8:8e:13:01:4e:d6:cd:85:44:e5:8c:67:b3:bf: ec:61:15:90:4f:95:12:9b:18:a9:b6:79:a7:1b:fb: 63:75:e8:21:3b:9a:97:45:43:b2:16:b8:ec:52:86: df:df:53:ba:13:dc:31:1b:97:df:32:71:1e:20:00: 9d:55:de:6f:ca:aa:d7:7b:30:4c:6c:11:2a:39:89: 83:5f:be:cd:9b:51:84:7d:3b:d9:ba:3b:4c:f1:34: 8c:52:12:a3:bd:f9:f4:e4:34:32:ba:6d:59:0d:6d: b9:59:3f:cc:f7:64:8a:a5:93:46:0a:01:d6:a2:bd: 86:bb:39:24:b1:fa:09:6b:f0:2b:e5:3c:c7:78:c8: ef:27:aa:e5:43:97:8f:37:3d:6f:1d:0e:ac:f4:c0: 40:38:28:46:a3:3d:c3:8f:5c:75:c0:8e:c4:94:dd: 9e:28:27:6e:da:d0:4b:64:58:15:f2:50:88:97:e9: 88:35:d3:2e:7e:08:49:be:ee:2b:40:12:f7:60:07: 9c:a9:73:d7:b2:1c:c8:77:21:b9:ed:08:23:25:a8: 1c:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: BC:58:5E:D5:A9:C2:B8:C2:64:75:DA:D5:68:33:B7:6E:F8:16:D6:71 X509v3 Authority Key Identifier: keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1099898650089226241/0/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1099898650089226241/0/BC585ED5A9C2B8C26475DAD56833B76EF816D671.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.254.208.0/22 103.30.148.0/22 IPv6: 2405:9b00::/32 Signature Algorithm: sha256WithRSAEncryption 43:5b:4e:55:79:93:0c:b6:53:c3:d6:2b:02:3e:ac:36:bc:cb: 31:26:36:b1:35:b5:17:36:05:96:08:1a:9d:8e:7c:59:06:51: fd:c1:56:c1:d0:db:a5:93:89:64:69:c9:a7:d5:47:d9:c8:11: 4b:62:76:0a:bb:30:2f:ce:6b:01:24:00:9c:0b:59:2f:70:47: 23:6e:82:5e:df:12:10:a8:04:6b:34:bf:48:90:24:02:f6:76: ff:34:3b:ba:c4:2e:08:98:8a:b3:df:21:7e:0e:6d:02:24:e6: 33:85:78:6f:fd:65:e0:aa:26:fe:15:af:3b:db:36:70:af:1e: 7c:d6:69:07:d0:bd:29:4c:1b:07:11:13:8a:3d:84:66:ad:57: 98:fb:20:63:31:fa:81:6f:4a:ca:a9:ae:95:99:01:35:9c:f2: 73:ec:a9:a8:5c:8e:51:a9:1b:6e:c2:8a:83:df:9b:eb:27:2d: 9e:4b:15:04:a7:a4:ce:b6:65:47:cc:63:b2:6a:e4:8f:a5:e0: 25:b2:fc:38:9c:64:43:60:62:37:b8:dc:e6:85:35:8d:f9:06: a9:59:32:b6:06:23:f3:b3:d2:0b:24:ab:ad:6e:38:fe:56:93: 08:c4:75:33:12:18:e5:33:25:cd:b3:9c:3b:37:c1:21:0e:43: 93:20:19:ba -----BEGIN CERTIFICATE----- MIIFvDCCBKSgAwIBAgIUG4QJj6L2ZNsqdpXR9EKhlRFrS6EwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDQyNDAzMTkzNFoX DTI3MDQyMzAzMjQzNFowMzExMC8GA1UEAxMoQkM1ODVFRDVBOUMyQjhDMjY0NzVE QUQ1NjgzM0I3NkVGODE2RDY3MTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOzI54mRMDypA5y/gFjb9iizgxs1NZzLKwQnrVoUTzXncKixfShUz4pc6KEQ zeiOEwFO1s2FROWMZ7O/7GEVkE+VEpsYqbZ5pxv7Y3XoITual0VDsha47FKG399T uhPcMRuX3zJxHiAAnVXeb8qq13swTGwRKjmJg1++zZtRhH072bo7TPE0jFISo735 9OQ0MrptWQ1tuVk/zPdkiqWTRgoB1qK9hrs5JLH6CWvwK+U8x3jI7yeq5UOXjzc9 bx0OrPTAQDgoRqM9w49cdcCOxJTdnignbtrQS2RYFfJQiJfpiDXTLn4ISb7uK0AS 92AHnKlz17IcyHchue0IIyWoHP8CAwEAAaOCAq8wggKrMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFLxYXtWpwrjCZHXa1Wgzt274FtZxMB8GA1UdIwQYMBaAFKVu hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTA5OTg5ODY1MDA4OTIyNjI0MS8wLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDk5ODk4NjUwMDg5MjI2MjQx LzAvQkM1ODVFRDVBOUMyQjhDMjY0NzVEQUQ1NjgzM0I3NkVGODE2RDY3MS5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwNAYIKwYBBQUH AQcBAf8EJTAjMBIEAgABMAwDBAIr/tADBAJnHpQwDQQCAAIwBwMFACQFmwAwDQYJ KoZIhvcNAQELBQADggEBAENbTlV5kwy2U8PWKwI+rDa8yzEmNrE1tRc2BZYIGp2O fFkGUf3BVsHQ26WTiWRpyafVR9nIEUtidgq7MC/OawEkAJwLWS9wRyNugl7fEhCo BGs0v0iQJAL2dv80O7rELgiYirPfIX4ObQIk5jOFeG/9ZeCqJv4VrzvbNnCvHnzW aQfQvSlMGwcRE4o9hGatV5j7IGMx+oFvSsqprpWZATWc8nPsqahcjlGpG27CioPf m+snLZ5LFQSnpM62ZUfMY7Jq5I+l4CWy/DicZENgYje43OaFNY35BqlZMrYGI/Oz 0gskq61uOP5WkwjEdTMSGOUzJc2znDs3wSEOQ5MgGbo= -----END CERTIFICATE-----Generated at Wed May 13 15:03:34 2026 by rpki-client