$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/0/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.cer File: 01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.cer (raw, json) Hash identifier: N5cE1fZR72jjC+EVPm4sO+XtUdqaF9Tj6EvdsCZrDQo= Subject key identifier: 01:FB:56:09:FD:2A:A5:67:AD:7A:F6:9C:D2:0C:C4:AB:3E:BD:10:CA Authority key identifier: CB:02:14:A5:C4:04:D6:F8:40:43:3B:12:0C:AC:BB:5B:8C:59:E6:13 Certificate issuer: /CN=A9162E3D0001/serialNumber=CB0214A5C404D6F840433B120CACBB5B8C59E613 Certificate serial: 14FD81C51873A7E044DD68433A366B93C93C7DA1 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/1/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/1/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Fri 29 May 2026 08:56:21 +0000 Certificate not after: Fri 28 May 2027 09:01:21 +0000 Subordinate resources: IP: 139.198.0.0/16 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Jun 2026 13:43:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:fd:81:c5:18:73:a7:e0:44:dd:68:43:3a:36:6b:93:c9:3c:7d:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=CB0214A5C404D6F840433B120CACBB5B8C59E613 Validity Not Before: May 29 08:56:21 2026 GMT Not After : May 28 09:01:21 2027 GMT Subject: CN=01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:d2:f0:42:ba:64:f6:73:72:17:9f:b0:90:56: 73:14:05:8b:77:38:79:6e:36:e4:39:a3:5a:bd:dd: 39:a4:37:76:d1:d5:fa:b1:40:7a:9c:e6:9d:e3:c8: 4d:ff:91:5e:86:ff:64:99:66:31:ce:93:09:f5:f1: eb:77:0c:bc:b2:8a:f6:95:d3:39:41:97:f9:fc:91: 09:c8:2d:3e:85:27:67:1a:52:d9:7c:1f:49:b3:1a: 7d:b8:09:79:62:a9:aa:c5:18:50:71:bc:a7:3e:f2: c5:06:ae:1f:cb:db:58:a7:8c:de:54:6b:bf:ed:e7: 29:a2:52:cd:db:13:97:9e:60:1b:fa:b1:1b:20:b9: 28:f1:7a:b6:68:dd:ed:c0:94:26:7e:7e:aa:b7:d6: fa:89:77:a2:c0:52:a8:f3:3a:3b:bb:70:40:77:93: 2a:bd:fa:3e:7b:83:bc:ce:f0:05:d6:ac:88:3f:17: b4:8b:c6:81:5a:97:05:2b:d6:f3:4c:43:c2:d7:4c: c3:da:49:92:0f:9c:6f:f0:5e:ca:7a:a7:10:fc:06: 8e:66:27:24:82:a7:c1:52:fd:b4:25:cc:b6:a3:29: e1:33:d9:90:7c:f7:92:38:19:15:c3:c7:6f:46:86: 8d:3a:ea:88:6f:fd:4b:63:bd:b9:00:97:02:7d:6a: fb:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 01:FB:56:09:FD:2A:A5:67:AD:7A:F6:9C:D2:0C:C4:AB:3E:BD:10:CA X509v3 Authority Key Identifier: keyid:CB:02:14:A5:C4:04:D6:F8:40:43:3B:12:0C:AC:BB:5B:8C:59:E6:13 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/1/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/1/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 139.198.0.0/16 Signature Algorithm: sha256WithRSAEncryption 39:54:84:5b:a3:42:5c:6c:16:1b:2c:62:d4:0c:31:e7:39:11: 0b:68:55:ba:88:b3:45:b9:12:fd:a5:9e:5a:03:48:cf:f8:92: 5f:d8:95:12:ce:cf:1c:39:0e:7e:a8:26:b8:58:48:85:d6:b1: e8:c5:52:fe:3e:d6:ef:f2:11:a0:18:ce:dd:5d:ee:74:43:2d: f6:e8:c2:ee:fe:c1:84:a7:34:b9:6c:37:72:2c:b3:27:1b:50: f8:ea:54:0e:4e:91:c7:49:ee:7f:17:93:aa:0d:b3:b4:c2:c6: 6a:1e:d1:15:1e:c8:9f:d1:23:8d:39:15:4a:e0:cb:66:20:e2: 1a:9d:e0:da:bc:c3:41:cb:11:13:e9:bd:c0:73:fc:d4:56:3d: cc:d1:53:03:19:4b:32:52:3f:31:8e:98:7b:a8:c4:e3:f2:7e: 7c:66:45:cb:40:47:e7:a7:40:d5:79:a7:21:60:fc:b8:fd:bf: d9:3d:45:da:f1:4a:d1:7e:0a:8b:be:b7:8e:36:0d:96:0a:5c: db:88:30:46:04:44:d3:f7:36:23:b0:1a:47:be:69:ce:da:d5: f6:7f:06:d0:ca:bf:aa:3c:8b:60:67:e5:4e:0e:cd:7e:14:35: 75:c9:aa:3c:a0:0b:95:2d:02:41:a7:9e:95:91:e4:dd:81:9f: b1:63:cc:93 -----BEGIN CERTIFICATE----- MIIFpjCCBI6gAwIBAgIUFP2BxRhzp+BE3WhDOjZrk8k8faEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhDQjAyMTRBNUM0 MDRENkY4NDA0MzNCMTIwQ0FDQkI1QjhDNTlFNjEzMB4XDTI2MDUyOTA4NTYyMVoX DTI3MDUyODA5MDEyMVowMzExMC8GA1UEAxMoMDFGQjU2MDlGRDJBQTU2N0FEN0FG NjlDRDIwQ0M0QUIzRUJEMTBDQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAM7S8EK6ZPZzchefsJBWcxQFi3c4eW425DmjWr3dOaQ3dtHV+rFAepzmnePI Tf+RXob/ZJlmMc6TCfXx63cMvLKK9pXTOUGX+fyRCcgtPoUnZxpS2XwfSbMafbgJ eWKpqsUYUHG8pz7yxQauH8vbWKeM3lRrv+3nKaJSzdsTl55gG/qxGyC5KPF6tmjd 7cCUJn5+qrfW+ol3osBSqPM6O7twQHeTKr36PnuDvM7wBdasiD8XtIvGgVqXBSvW 80xDwtdMw9pJkg+cb/BeynqnEPwGjmYnJIKnwVL9tCXMtqMp4TPZkHz3kjgZFcPH b0aGjTrqiG/9S2O9uQCXAn1q+x0CAwEAAaOCApkwggKVMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFAH7Vgn9KqVnrXr2nNIMxKs+vRDKMB8GA1UdIwQYMBaAFMsC FKXEBNb4QEM7Egysu1uMWeYTMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMC9DQjAyMTRBNUM0MDRENkY4NDA0MzNCMTIwQ0FDQkI1QjhDNTlF NjEzLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CM0EyNEYyMDFENjYxMUUyOEFDODgzN0M3 MkZEMUZGMi95d0lVcGNRRTF2aEFRenNTREt5N1c0eFo1aE0uY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTA2NTU3OTUzNDM5NDUyMzY1MS8xLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDY1NTc5NTM0Mzk0NTIzNjUx LzEvMDFGQjU2MDlGRDJBQTU2N0FEN0FGNjlDRDIwQ0M0QUIzRUJEMTBDQS5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUH AQcBAf8EDzANMAsEAgABMAUDAwCLxjANBgkqhkiG9w0BAQsFAAOCAQEAOVSEW6NC XGwWGyxi1Awx5zkRC2hVuoizRbkS/aWeWgNIz/iSX9iVEs7PHDkOfqgmuFhIhdax 6MVS/j7W7/IRoBjO3V3udEMt9ujC7v7BhKc0uWw3ciyzJxtQ+OpUDk6Rx0nufxeT qg2ztMLGah7RFR7In9EjjTkVSuDLZiDiGp3g2rzDQcsRE+m9wHP81FY9zNFTAxlL MlI/MY6Ye6jE4/J+fGZFy0BH56dA1XmnIWD8uP2/2T1F2vFK0X4Ki763jjYNlgpc 24gwRgRE0/c2I7AaR75pztrV9n8G0Mq/qjyLYGflTg7NfhQ1dcmqPKALlS0CQaee lZHk3YGfsWPMkw== -----END CERTIFICATE-----Generated at Thu Jun 4 14:11:16 2026 by rpki-client