$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/0/8BD835B2E215D686F24FB31A8AECEEE44FBDBDC8.cer File: 8BD835B2E215D686F24FB31A8AECEEE44FBDBDC8.cer (raw, json) Hash identifier: Cs/BwodOa3B2Ht2G/ArIJq4urxmvoREmrZdEFUk/Bj0= Subject key identifier: 8B:D8:35:B2:E2:15:D6:86:F2:4F:B3:1A:8A:EC:EE:E4:4F:BD:BD:C8 Authority key identifier: CB:02:14:A5:C4:04:D6:F8:40:43:3B:12:0C:AC:BB:5B:8C:59:E6:13 Certificate issuer: /CN=A9162E3D0001/serialNumber=CB0214A5C404D6F840433B120CACBB5B8C59E613 Certificate serial: 6897E90CCBD7C5F0978AF1E8B5EE3B8F3DE96CC9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1065585911217586179/1/8BD835B2E215D686F24FB31A8AECEEE44FBDBDC8.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1065585911217586179/1/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Mon 01 Jun 2026 01:40:20 +0000 Certificate not after: Mon 31 May 2027 01:45:20 +0000 Subordinate resources: IP: 161.248.84.0/23 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Jun 2026 07:23:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:97:e9:0c:cb:d7:c5:f0:97:8a:f1:e8:b5:ee:3b:8f:3d:e9:6c:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=CB0214A5C404D6F840433B120CACBB5B8C59E613 Validity Not Before: Jun 1 01:40:20 2026 GMT Not After : May 31 01:45:20 2027 GMT Subject: CN=8BD835B2E215D686F24FB31A8AECEEE44FBDBDC8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:e8:ac:e2:92:58:6b:80:1e:f2:77:1d:b5:54: 1f:77:82:78:f9:cd:02:23:0e:94:65:63:07:7f:8d: 41:de:43:e2:aa:49:0d:46:ec:c5:ef:78:19:8d:c1: 30:51:e8:c0:62:04:1e:c5:72:c0:6e:51:5f:07:29: 8e:01:de:8b:7f:00:18:07:13:4d:57:62:a1:f1:47: 0c:9d:36:09:df:d4:0f:36:18:b7:97:84:3b:fc:27: 5a:fd:02:7b:ee:8a:5d:2e:4a:00:18:df:35:7e:68: a0:00:50:e5:a1:b7:f6:f2:e7:97:44:72:20:3d:17: b8:0b:15:7e:f4:4b:37:10:43:ec:86:24:8c:7c:6b: e0:5a:51:8a:47:df:f6:e0:23:99:48:87:fb:22:15: 03:41:29:e4:aa:ea:38:f9:e2:77:82:78:f9:89:f2: fc:01:59:2e:b4:f4:f4:ee:af:27:d5:36:9f:e0:40: dc:db:91:09:b1:35:54:b3:99:54:27:50:ad:75:78: f6:fa:65:f5:0d:13:96:03:d6:3c:91:28:85:ec:2a: 2f:3e:79:8e:fd:ae:59:83:4b:36:69:03:a3:89:33: 18:38:84:05:71:b1:2d:43:ad:2a:5a:d9:d8:dc:81: c0:ce:8b:0e:30:c7:51:0e:a2:21:87:04:71:b4:a4: 47:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 8B:D8:35:B2:E2:15:D6:86:F2:4F:B3:1A:8A:EC:EE:E4:4F:BD:BD:C8 X509v3 Authority Key Identifier: keyid:CB:02:14:A5:C4:04:D6:F8:40:43:3B:12:0C:AC:BB:5B:8C:59:E6:13 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217586179/1/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217586179/1/8BD835B2E215D686F24FB31A8AECEEE44FBDBDC8.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 161.248.84.0/23 Signature Algorithm: sha256WithRSAEncryption 7a:f8:12:65:a1:14:67:76:d9:2e:0f:0a:7e:b4:c1:49:24:0e: c6:ea:e0:a6:c1:84:08:0d:64:a7:d5:e1:d7:71:20:a4:b2:75: 53:86:5f:33:ac:f0:b8:bf:51:e7:a4:ac:fa:74:68:a3:14:f6: d8:ad:b6:d0:cf:9b:cc:ba:23:16:ea:8e:8b:7a:59:a8:26:cd: 74:28:c8:9a:e1:0e:9c:23:56:f0:60:a0:f8:9d:95:df:db:16: 46:d8:8a:40:15:4a:b6:8f:ee:7a:9f:de:13:80:90:ee:cb:02: c4:d0:a9:a0:16:46:cf:1e:8f:16:88:1a:26:3f:67:13:2c:d0: be:d8:f5:fc:05:37:a4:e5:b1:98:51:e4:3b:88:c0:9f:f4:35: ed:33:c0:7c:e4:68:c8:e4:ef:43:dc:00:3d:b7:4d:e2:af:0a: e7:bc:17:0c:3d:a4:91:03:c1:d6:e7:94:4e:9d:2f:ae:71:2a: d8:8b:30:23:d5:07:3f:5c:73:6f:d9:0f:b2:cb:ef:05:62:83: 32:ab:9a:d2:34:7c:41:2d:4c:2c:e3:c1:51:d6:9d:22:bc:7d: 67:6f:b2:5f:77:9f:f0:b8:d2:0e:9e:19:60:a2:c3:fd:7e:b8: c4:71:db:2d:9f:30:a3:bc:93:ad:d3:da:89:ca:99:61:d2:7b: 25:a5:eb:9d -----BEGIN CERTIFICATE----- MIIFpzCCBI+gAwIBAgIUaJfpDMvXxfCXivHote47jz3pbMkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhDQjAyMTRBNUM0 MDRENkY4NDA0MzNCMTIwQ0FDQkI1QjhDNTlFNjEzMB4XDTI2MDYwMTAxNDAyMFoX DTI3MDUzMTAxNDUyMFowMzExMC8GA1UEAxMoOEJEODM1QjJFMjE1RDY4NkYyNEZC MzFBOEFFQ0VFRTQ0RkJEQkRDODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALLorOKSWGuAHvJ3HbVUH3eCePnNAiMOlGVjB3+NQd5D4qpJDUbsxe94GY3B MFHowGIEHsVywG5RXwcpjgHei38AGAcTTVdiofFHDJ02Cd/UDzYYt5eEO/wnWv0C e+6KXS5KABjfNX5ooABQ5aG39vLnl0RyID0XuAsVfvRLNxBD7IYkjHxr4FpRikff 9uAjmUiH+yIVA0Ep5KrqOPnid4J4+Yny/AFZLrT09O6vJ9U2n+BA3NuRCbE1VLOZ VCdQrXV49vpl9Q0TlgPWPJEohewqLz55jv2uWYNLNmkDo4kzGDiEBXGxLUOtKlrZ 2NyBwM6LDjDHUQ6iIYcEcbSkR/MCAwEAAaOCApowggKWMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFIvYNbLiFdaG8k+zGors7uRPvb3IMB8GA1UdIwQYMBaAFMsC FKXEBNb4QEM7Egysu1uMWeYTMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMC9DQjAyMTRBNUM0MDRENkY4NDA0MzNCMTIwQ0FDQkI1QjhDNTlF NjEzLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CM0EyNEYyMDFENjYxMUUyOEFDODgzN0M3 MkZEMUZGMi95d0lVcGNRRTF2aEFRenNTREt5N1c0eFo1aE0uY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTA2NTU4NTkxMTIxNzU4NjE3OS8xLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDY1NTg1OTExMjE3NTg2MTc5 LzEvOEJEODM1QjJFMjE1RDY4NkYyNEZCMzFBOEFFQ0VFRTQ0RkJEQkRDOC5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAGh+FQwDQYJKoZIhvcNAQELBQADggEBAHr4EmWh FGd22S4PCn60wUkkDsbq4KbBhAgNZKfV4ddxIKSydVOGXzOs8Li/UeekrPp0aKMU 9titttDPm8y6Ixbqjot6WagmzXQoyJrhDpwjVvBgoPidld/bFkbYikAVSraP7nqf 3hOAkO7LAsTQqaAWRs8ejxaIGiY/ZxMs0L7Y9fwFN6TlsZhR5DuIwJ/0Ne0zwHzk aMjk70PcAD23TeKvCue8Fww9pJEDwdbnlE6dL65xKtiLMCPVBz9cc2/ZD7LL7wVi gzKrmtI0fEEtTCzjwVHWnSK8fWdvsl93n/C40g6eGWCiw/1+uMRx2y2fMKO8k63T 2onKmWHSeyWl650= -----END CERTIFICATE-----Generated at Thu Jun 11 17:54:07 2026 by rpki-client