$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/0/8046423AC6A5B7D6D11E9BCB978AC4065EE9CA76.cer File: 8046423AC6A5B7D6D11E9BCB978AC4065EE9CA76.cer (raw, json) Hash identifier: trwi5681meY1eWSoG3TQ5fg/inla8/dCsYfZTHAEJLg= Subject key identifier: 80:46:42:3A:C6:A5:B7:D6:D1:1E:9B:CB:97:8A:C4:06:5E:E9:CA:76 Authority key identifier: CB:02:14:A5:C4:04:D6:F8:40:43:3B:12:0C:AC:BB:5B:8C:59:E6:13 Certificate issuer: /CN=A9162E3D0001/serialNumber=CB0214A5C404D6F840433B120CACBB5B8C59E613 Certificate serial: 0EFBC0B3A95BE4F09984898A19A1E9195A89C45B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1065588335524773889/1/8046423AC6A5B7D6D11E9BCB978AC4065EE9CA76.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1065588335524773889/1/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Mon 01 Jun 2026 01:45:14 +0000 Certificate not after: Mon 31 May 2027 01:50:14 +0000 Subordinate resources: IP: 140.210.0.0/22 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Jun 2026 13:43:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:fb:c0:b3:a9:5b:e4:f0:99:84:89:8a:19:a1:e9:19:5a:89:c4:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=CB0214A5C404D6F840433B120CACBB5B8C59E613 Validity Not Before: Jun 1 01:45:14 2026 GMT Not After : May 31 01:50:14 2027 GMT Subject: CN=8046423AC6A5B7D6D11E9BCB978AC4065EE9CA76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:48:8d:b3:cd:47:ac:98:3f:80:ee:20:3c:e0: e8:ce:6f:75:36:e2:14:0f:01:dd:af:26:1e:bb:9f: a6:c6:0b:e0:da:86:a0:d2:c4:47:80:5b:bc:68:0e: e6:08:33:d1:1d:84:6e:af:d1:81:47:de:41:b9:11: 51:f1:12:68:bf:45:64:c7:05:37:a5:54:1c:9c:81: e8:4c:bf:cd:8b:81:6b:54:da:38:66:15:3c:c6:1a: 20:31:0b:f0:be:4b:53:fe:2f:48:d6:c1:4b:5b:1e: d6:b7:e7:9f:20:2b:1f:d8:99:33:c4:26:0d:0d:03: 6a:12:20:60:e6:83:f7:de:c9:e9:b0:88:05:e4:a3: ee:b4:78:3e:9f:4a:16:39:6e:f2:e1:4b:3a:c4:9e: f9:75:69:00:1b:13:5a:a5:d2:f3:0c:43:e8:7e:a3: 13:bb:d9:03:c5:e5:0f:f8:73:44:18:43:73:ca:37: 79:af:f0:8c:0f:4d:9b:c4:34:03:b8:bf:6b:03:f6: 7d:42:44:4c:12:b0:0e:cb:73:90:fb:df:7b:34:ee: fd:c1:fc:7f:8e:aa:a8:1f:c3:d6:a3:d8:c0:b0:04: 86:d6:d1:f4:fb:42:3c:c4:db:bc:5c:a9:b6:07:7f: 38:8e:8a:fe:83:2d:89:ba:99:6c:50:4e:a0:41:26: d0:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 80:46:42:3A:C6:A5:B7:D6:D1:1E:9B:CB:97:8A:C4:06:5E:E9:CA:76 X509v3 Authority Key Identifier: keyid:CB:02:14:A5:C4:04:D6:F8:40:43:3B:12:0C:AC:BB:5B:8C:59:E6:13 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335524773889/1/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335524773889/1/8046423AC6A5B7D6D11E9BCB978AC4065EE9CA76.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 140.210.0.0/22 Signature Algorithm: sha256WithRSAEncryption a6:ec:bb:05:e0:f2:3d:39:73:d4:cf:5a:80:de:3d:f4:8a:42: 51:1d:d0:b5:65:8b:e4:eb:f7:db:11:01:a2:d3:9b:26:b3:d4: f0:83:29:fe:16:fe:3f:17:3a:64:e8:b3:bf:f1:d7:5a:9b:de: d3:41:3c:a4:2e:d2:f7:f3:c6:cb:31:41:c2:09:13:b1:46:a0: 29:ca:c9:57:f0:52:35:73:6c:28:65:26:35:b6:a2:a7:c5:26: 79:2e:c4:f8:13:da:99:9b:b4:e6:bc:42:26:cb:0c:84:0b:75: ca:bc:b2:2e:8b:1a:70:e7:86:89:35:2a:b0:c4:2a:9e:19:1d: b0:61:f2:69:53:30:7e:16:d9:23:53:a6:03:77:dc:04:12:22: 7c:df:c3:c2:12:3a:5a:6f:51:06:13:39:99:7f:56:2d:30:f5: d7:1a:64:d0:1c:01:2b:b0:c3:eb:88:59:56:74:72:c6:81:b8: bf:98:2d:4f:cb:64:65:2d:d5:b4:d8:e6:1a:52:a0:f6:ae:c3: 37:8b:2e:24:63:6f:b3:43:28:a9:06:bc:c9:b8:ba:45:11:ea: bf:ad:81:6b:a1:a1:00:3f:e1:17:4d:27:6c:3f:77:f9:4c:65: fb:ff:58:6e:13:f9:81:6f:08:f8:da:c3:51:54:4e:b5:f9:b8: 79:53:d5:b3 -----BEGIN CERTIFICATE----- MIIFpzCCBI+gAwIBAgIUDvvAs6lb5PCZhImKGaHpGVqJxFswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhDQjAyMTRBNUM0 MDRENkY4NDA0MzNCMTIwQ0FDQkI1QjhDNTlFNjEzMB4XDTI2MDYwMTAxNDUxNFoX DTI3MDUzMTAxNTAxNFowMzExMC8GA1UEAxMoODA0NjQyM0FDNkE1QjdENkQxMUU5 QkNCOTc4QUM0MDY1RUU5Q0E3NjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAK9IjbPNR6yYP4DuIDzg6M5vdTbiFA8B3a8mHrufpsYL4NqGoNLER4BbvGgO 5ggz0R2Ebq/RgUfeQbkRUfESaL9FZMcFN6VUHJyB6Ey/zYuBa1TaOGYVPMYaIDEL 8L5LU/4vSNbBS1se1rfnnyArH9iZM8QmDQ0DahIgYOaD997J6bCIBeSj7rR4Pp9K Fjlu8uFLOsSe+XVpABsTWqXS8wxD6H6jE7vZA8XlD/hzRBhDc8o3ea/wjA9Nm8Q0 A7i/awP2fUJETBKwDstzkPvfezTu/cH8f46qqB/D1qPYwLAEhtbR9PtCPMTbvFyp tgd/OI6K/oMtibqZbFBOoEEm0OsCAwEAAaOCApowggKWMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFIBGQjrGpbfW0R6by5eKxAZe6cp2MB8GA1UdIwQYMBaAFMsC FKXEBNb4QEM7Egysu1uMWeYTMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMC9DQjAyMTRBNUM0MDRENkY4NDA0MzNCMTIwQ0FDQkI1QjhDNTlF NjEzLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CM0EyNEYyMDFENjYxMUUyOEFDODgzN0M3 MkZEMUZGMi95d0lVcGNRRTF2aEFRenNTREt5N1c0eFo1aE0uY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTA2NTU4ODMzNTUyNDc3Mzg4OS8xLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDY1NTg4MzM1NTI0NzczODg5 LzEvODA0NjQyM0FDNkE1QjdENkQxMUU5QkNCOTc4QUM0MDY1RUU5Q0E3Ni5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAKM0gAwDQYJKoZIhvcNAQELBQADggEBAKbsuwXg 8j05c9TPWoDePfSKQlEd0LVli+Tr99sRAaLTmyaz1PCDKf4W/j8XOmTos7/x11qb 3tNBPKQu0vfzxssxQcIJE7FGoCnKyVfwUjVzbChlJjW2oqfFJnkuxPgT2pmbtOa8 QibLDIQLdcq8si6LGnDnhok1KrDEKp4ZHbBh8mlTMH4W2SNTpgN33AQSInzfw8IS OlpvUQYTOZl/Vi0w9dcaZNAcASuww+uIWVZ0csaBuL+YLU/LZGUt1bTY5hpSoPau wzeLLiRjb7NDKKkGvMm4ukUR6r+tgWuhoQA/4RdNJ2w/d/lMZfv/WG4T+YFvCPja w1FUTrX5uHlT1bM= -----END CERTIFICATE-----Generated at Thu Jun 4 14:12:17 2026 by rpki-client