$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/0/6F1BDEE752DBE35C77308D3A9B775AC497B50C04.cer File: 6F1BDEE752DBE35C77308D3A9B775AC497B50C04.cer (raw, json) Hash identifier: W8+vRGl6hpx8RFUO34177e8sPDYoIHDkEOkpHP6XVqw= Subject key identifier: 6F:1B:DE:E7:52:DB:E3:5C:77:30:8D:3A:9B:77:5A:C4:97:B5:0C:04 Authority key identifier: CB:02:14:A5:C4:04:D6:F8:40:43:3B:12:0C:AC:BB:5B:8C:59:E6:13 Certificate issuer: /CN=A9162E3D0001/serialNumber=CB0214A5C404D6F840433B120CACBB5B8C59E613 Certificate serial: 0CC3552E1F9CBC3EFCD0F1A3C91F41D75F8F7FBE Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1065579534394392579/1/6F1BDEE752DBE35C77308D3A9B775AC497B50C04.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1065579534394392579/1/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Fri 29 May 2026 08:53:40 +0000 Certificate not after: Fri 28 May 2027 08:58:40 +0000 Subordinate resources: IP: 167.220.244.0/22 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Jun 2026 13:43:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:c3:55:2e:1f:9c:bc:3e:fc:d0:f1:a3:c9:1f:41:d7:5f:8f:7f:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=CB0214A5C404D6F840433B120CACBB5B8C59E613 Validity Not Before: May 29 08:53:40 2026 GMT Not After : May 28 08:58:40 2027 GMT Subject: CN=6F1BDEE752DBE35C77308D3A9B775AC497B50C04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:00:f1:01:76:7d:99:84:5b:bf:af:16:3f:6a: 06:88:41:8f:7f:11:bc:f9:76:18:35:15:e3:20:4c: af:c8:00:c0:47:47:23:22:3a:1a:a4:03:92:3f:0b: 99:cc:9f:85:12:65:39:2a:e7:ca:26:c0:96:48:ca: fd:25:28:44:ef:a5:62:8e:f1:a5:8e:b3:a7:43:40: 69:c4:c3:6e:f0:2b:65:71:78:cb:8e:ea:bb:d9:55: 78:db:73:f6:f6:82:05:d3:ef:46:f0:6d:ec:f0:ce: 1a:cb:0b:34:c6:c9:c5:14:fc:ef:85:b2:a7:ea:73: b6:39:cd:3b:e1:6e:e8:85:7e:2a:63:bc:be:39:ce: b7:81:11:eb:5a:c8:8a:09:f8:2b:d7:12:e4:cc:99: fa:1d:52:05:70:a6:ea:66:73:97:2e:14:80:ef:4a: 93:c5:00:87:d8:f7:72:df:c8:cd:b5:c2:c8:45:b5: fe:16:a9:6d:50:05:d7:72:71:e1:0c:16:3d:28:1f: 01:2f:5a:48:c5:fa:8d:a9:51:47:46:fc:cd:b4:8f: 21:d9:5b:88:c7:39:c7:1d:df:31:45:85:6b:8e:44: 47:b1:0a:43:1f:8e:70:65:1b:39:97:3e:c0:f3:43: 05:03:96:ee:2e:53:c2:1c:bd:8b:e2:d5:98:d2:69: ed:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 6F:1B:DE:E7:52:DB:E3:5C:77:30:8D:3A:9B:77:5A:C4:97:B5:0C:04 X509v3 Authority Key Identifier: keyid:CB:02:14:A5:C4:04:D6:F8:40:43:3B:12:0C:AC:BB:5B:8C:59:E6:13 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394392579/1/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394392579/1/6F1BDEE752DBE35C77308D3A9B775AC497B50C04.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 167.220.244.0/22 Signature Algorithm: sha256WithRSAEncryption 7d:92:5d:c5:da:f1:13:d3:4e:79:ff:d5:00:7d:3d:35:70:87: 0b:74:f6:b2:4f:b2:42:01:c6:c1:8f:dc:c1:d0:db:c9:e9:f7: 94:77:3c:89:78:97:3c:8e:f0:61:3c:92:a7:8a:30:d1:dc:3c: 6a:57:e5:df:c6:ab:c8:b6:a9:57:e1:88:07:2f:ec:4b:1f:61: 19:5c:0d:52:1a:7b:d4:db:e0:40:49:37:d7:2e:83:4b:85:24: 67:d0:88:58:65:56:2d:3d:e1:f0:e3:39:34:31:75:91:76:a0: 71:ad:e5:09:0a:06:50:d5:77:6f:67:f6:1d:de:5b:79:b0:30: 81:62:2d:38:dd:72:21:de:ae:ad:c5:6f:6a:e4:25:de:b7:1b: 32:69:11:62:b8:f4:93:c5:ff:5a:49:36:b3:e1:b1:14:59:8a: 60:3d:74:9d:aa:08:64:80:ac:a8:60:3e:7e:dc:8c:a9:ee:49: e1:66:9e:9d:aa:a2:9c:2c:e9:38:dd:ef:1d:e3:1a:56:eb:e6: ce:82:82:63:30:de:bd:fa:97:de:34:aa:96:91:32:87:0c:2a: da:3d:97:3f:21:a5:c6:a8:c6:7d:2e:4d:45:30:f2:12:03:a8: 19:f3:de:13:11:a9:eb:82:98:22:22:61:c1:cc:e5:1f:a9:9f: 71:46:65:e6 -----BEGIN CERTIFICATE----- MIIFpzCCBI+gAwIBAgIUDMNVLh+cvD780PGjyR9B11+Pf74wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhDQjAyMTRBNUM0 MDRENkY4NDA0MzNCMTIwQ0FDQkI1QjhDNTlFNjEzMB4XDTI2MDUyOTA4NTM0MFoX DTI3MDUyODA4NTg0MFowMzExMC8GA1UEAxMoNkYxQkRFRTc1MkRCRTM1Qzc3MzA4 RDNBOUI3NzVBQzQ5N0I1MEMwNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAPUA8QF2fZmEW7+vFj9qBohBj38RvPl2GDUV4yBMr8gAwEdHIyI6GqQDkj8L mcyfhRJlOSrnyibAlkjK/SUoRO+lYo7xpY6zp0NAacTDbvArZXF4y47qu9lVeNtz 9vaCBdPvRvBt7PDOGssLNMbJxRT874Wyp+pztjnNO+Fu6IV+KmO8vjnOt4ER61rI ign4K9cS5MyZ+h1SBXCm6mZzly4UgO9Kk8UAh9j3ct/IzbXCyEW1/hapbVAF13Jx 4QwWPSgfAS9aSMX6jalRR0b8zbSPIdlbiMc5xx3fMUWFa45ER7EKQx+OcGUbOZc+ wPNDBQOW7i5Twhy9i+LVmNJp7ZcCAwEAAaOCApowggKWMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFG8b3udS2+NcdzCNOpt3WsSXtQwEMB8GA1UdIwQYMBaAFMsC FKXEBNb4QEM7Egysu1uMWeYTMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMC9DQjAyMTRBNUM0MDRENkY4NDA0MzNCMTIwQ0FDQkI1QjhDNTlF NjEzLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CM0EyNEYyMDFENjYxMUUyOEFDODgzN0M3 MkZEMUZGMi95d0lVcGNRRTF2aEFRenNTREt5N1c0eFo1aE0uY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTA2NTU3OTUzNDM5NDM5MjU3OS8xLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDY1NTc5NTM0Mzk0MzkyNTc5 LzEvNkYxQkRFRTc1MkRCRTM1Qzc3MzA4RDNBOUI3NzVBQzQ5N0I1MEMwNC5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAKn3PQwDQYJKoZIhvcNAQELBQADggEBAH2SXcXa 8RPTTnn/1QB9PTVwhwt09rJPskIBxsGP3MHQ28np95R3PIl4lzyO8GE8kqeKMNHc PGpX5d/Gq8i2qVfhiAcv7EsfYRlcDVIae9Tb4EBJN9cug0uFJGfQiFhlVi094fDj OTQxdZF2oHGt5QkKBlDVd29n9h3eW3mwMIFiLTjdciHerq3Fb2rkJd63GzJpEWK4 9JPF/1pJNrPhsRRZimA9dJ2qCGSArKhgPn7cjKnuSeFmnp2qopws6Tjd7x3jGlbr 5s6CgmMw3r36l940qpaRMocMKto9lz8hpcaoxn0uTUUw8hIDqBnz3hMRqeuCmCIi YcHM5R+pn3FGZeY= -----END CERTIFICATE-----Generated at Thu Jun 4 14:12:18 2026 by rpki-client