$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/0/BF61A6EB2CD2942DFFBA1347B940D5B97D99DDD2.cer File: BF61A6EB2CD2942DFFBA1347B940D5B97D99DDD2.cer (raw, json) Hash identifier: tNak5xZVitF9TtX/2I8c3soLOoRfiJjPqcpRI/xy1Zs= Subject key identifier: BF:61:A6:EB:2C:D2:94:2D:FF:BA:13:47:B9:40:D5:B9:7D:99:DD:D2 Authority key identifier: CB:02:14:A5:C4:04:D6:F8:40:43:3B:12:0C:AC:BB:5B:8C:59:E6:13 Certificate issuer: /CN=A9162E3D0001/serialNumber=CB0214A5C404D6F840433B120CACBB5B8C59E613 Certificate serial: 725A202E2EE77AB2B2319B81E3E214EFB3DE1B41 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1065580055121559554/1/BF61A6EB2CD2942DFFBA1347B940D5B97D99DDD2.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1065580055121559554/1/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Mon 01 Jun 2026 01:09:56 +0000 Certificate not after: Mon 31 May 2027 01:14:56 +0000 Subordinate resources: IP: 139.159.96.0 -- 139.159.115.255 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Jun 2026 13:43:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:5a:20:2e:2e:e7:7a:b2:b2:31:9b:81:e3:e2:14:ef:b3:de:1b:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=CB0214A5C404D6F840433B120CACBB5B8C59E613 Validity Not Before: Jun 1 01:09:56 2026 GMT Not After : May 31 01:14:56 2027 GMT Subject: CN=BF61A6EB2CD2942DFFBA1347B940D5B97D99DDD2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:6c:d2:90:a0:b9:5e:24:20:10:a9:ae:d3:1b: 2a:cf:a4:dc:47:a0:a8:8a:03:d4:2f:d1:72:2e:fb: 96:cd:f9:87:2d:38:45:5b:c4:ac:73:fa:f2:13:19: 90:99:1b:5f:ea:fd:2d:55:73:43:1a:f4:de:5c:c8: d8:20:d5:ce:14:fa:cd:1d:c7:8c:aa:d3:ba:1d:39: 47:b9:2b:7d:9e:20:41:50:7b:67:7f:32:e3:9c:06: 10:a4:eb:05:a2:cb:10:cf:00:fc:01:c1:39:24:0d: a4:27:16:f1:0a:1f:9c:08:37:36:dc:f7:91:88:c4: 12:58:52:26:65:10:30:ec:0d:5b:f6:5b:d8:ef:d5: 7e:49:47:e0:ae:10:8a:03:d0:ff:39:c9:97:f9:ec: d2:0b:be:4e:95:14:0e:88:d9:78:5b:7a:70:b4:b6: 11:0e:f9:8e:e8:71:91:2e:27:10:b6:48:70:0b:aa: 69:73:44:70:c8:03:a3:2f:c7:00:c2:d6:ef:79:ad: 63:03:78:3e:cd:ce:ce:7e:0c:b5:9b:35:b1:54:71: 2d:c4:a4:4d:34:ca:3f:68:6c:33:fa:3f:4d:87:cd: f9:c2:1b:8d:f9:9c:1e:c5:a7:7b:aa:35:d5:eb:80: d4:5b:2a:75:d3:4b:2a:fd:04:37:1f:c7:46:2f:49: 4c:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: BF:61:A6:EB:2C:D2:94:2D:FF:BA:13:47:B9:40:D5:B9:7D:99:DD:D2 X509v3 Authority Key Identifier: keyid:CB:02:14:A5:C4:04:D6:F8:40:43:3B:12:0C:AC:BB:5B:8C:59:E6:13 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121559554/1/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121559554/1/BF61A6EB2CD2942DFFBA1347B940D5B97D99DDD2.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 139.159.96.0-139.159.115.255 Signature Algorithm: sha256WithRSAEncryption 0a:94:7a:05:56:4e:31:bc:06:c8:79:77:11:fa:21:17:7c:94: 82:c1:02:37:48:1e:88:52:c3:4f:7d:dc:13:91:3b:45:15:22: 3a:bd:c7:1b:62:95:76:23:2e:27:ee:d4:b7:02:1f:0b:94:ac: 16:cc:d9:5a:cb:fd:90:99:98:c0:0c:ef:57:50:38:65:a7:0e: 4a:12:61:58:46:e6:0a:41:1f:53:8e:de:62:3f:ed:37:29:ab: 11:a6:4c:a6:d6:70:b5:b2:fb:f9:ba:51:49:61:8d:e2:43:38: 9f:86:de:ce:d1:92:cd:6c:41:c5:ea:57:e8:12:fb:38:c9:f1: fc:ff:8c:a4:6d:fa:8a:06:b7:ea:0d:4b:65:95:71:1d:2b:31: c6:4b:f3:51:ec:38:10:14:0b:d1:a4:f4:5f:12:4d:ba:0d:9a: 9c:b1:7a:3e:97:f0:cb:10:3e:b9:e2:44:c5:57:54:da:a1:f1: f9:b2:dd:54:eb:67:eb:a8:a8:cd:02:82:94:c7:59:bd:c3:32: dd:32:b0:07:5b:29:51:31:83:bc:d9:3c:b4:4a:0c:56:8e:0d: f1:90:30:df:96:1d:72:35:ed:77:16:2c:de:93:cd:fc:03:87: 0d:0c:52:08:1f:c8:40:20:c1:f0:da:18:47:07:93:7e:34:27: f7:c7:c0:ac -----BEGIN CERTIFICATE----- MIIFrzCCBJegAwIBAgIUclogLi7nerKyMZuB4+IU77PeG0EwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhDQjAyMTRBNUM0 MDRENkY4NDA0MzNCMTIwQ0FDQkI1QjhDNTlFNjEzMB4XDTI2MDYwMTAxMDk1NloX DTI3MDUzMTAxMTQ1NlowMzExMC8GA1UEAxMoQkY2MUE2RUIyQ0QyOTQyREZGQkEx MzQ3Qjk0MEQ1Qjk3RDk5REREMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALts0pCguV4kIBCprtMbKs+k3EegqIoD1C/Rci77ls35hy04RVvErHP68hMZ kJkbX+r9LVVzQxr03lzI2CDVzhT6zR3HjKrTuh05R7krfZ4gQVB7Z38y45wGEKTr BaLLEM8A/AHBOSQNpCcW8QofnAg3Ntz3kYjEElhSJmUQMOwNW/Zb2O/VfklH4K4Q igPQ/znJl/ns0gu+TpUUDojZeFt6cLS2EQ75juhxkS4nELZIcAuqaXNEcMgDoy/H AMLW73mtYwN4Ps3Ozn4MtZs1sVRxLcSkTTTKP2hsM/o/TYfN+cIbjfmcHsWne6o1 1euA1FsqddNLKv0ENx/HRi9JTLkCAwEAAaOCAqIwggKeMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFL9hpuss0pQt/7oTR7lA1bl9md3SMB8GA1UdIwQYMBaAFMsC FKXEBNb4QEM7Egysu1uMWeYTMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMC9DQjAyMTRBNUM0MDRENkY4NDA0MzNCMTIwQ0FDQkI1QjhDNTlF NjEzLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CM0EyNEYyMDFENjYxMUUyOEFDODgzN0M3 MkZEMUZGMi95d0lVcGNRRTF2aEFRenNTREt5N1c0eFo1aE0uY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTA2NTU4MDA1NTEyMTU1OTU1NC8xLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDY1NTgwMDU1MTIxNTU5NTU0 LzEvQkY2MUE2RUIyQ0QyOTQyREZGQkExMzQ3Qjk0MEQ1Qjk3RDk5REREMi5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwJwYIKwYBBQUH AQcBAf8EGDAWMBQEAgABMA4wDAMEBYufYAMEAoufcDANBgkqhkiG9w0BAQsFAAOC AQEACpR6BVZOMbwGyHl3EfohF3yUgsECN0geiFLDT33cE5E7RRUiOr3HG2KVdiMu J+7UtwIfC5SsFszZWsv9kJmYwAzvV1A4ZacOShJhWEbmCkEfU47eYj/tNymrEaZM ptZwtbL7+bpRSWGN4kM4n4beztGSzWxBxepX6BL7OMnx/P+MpG36iga36g1LZZVx HSsxxkvzUew4EBQL0aT0XxJNug2anLF6PpfwyxA+ueJExVdU2qHx+bLdVOtn66io zQKClMdZvcMy3TKwB1spUTGDvNk8tEoMVo4N8ZAw35YdcjXtdxYs3pPN/AOHDQxS CB/IQCDB8NoYRweTfjQn98fArA== -----END CERTIFICATE-----Generated at Thu Jun 4 13:08:13 2026 by rpki-client