$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/0/F8291D72985D2225F7CB1A97A84837BBD2F5FE88.cer File: F8291D72985D2225F7CB1A97A84837BBD2F5FE88.cer (raw, json) Hash identifier: g0yKDZIJM2RmM8/hAmCbh67xy6mw/vAmY6IXViJ4s54= Subject key identifier: F8:29:1D:72:98:5D:22:25:F7:CB:1A:97:A8:48:37:BB:D2:F5:FE:88 Authority key identifier: CB:02:14:A5:C4:04:D6:F8:40:43:3B:12:0C:AC:BB:5B:8C:59:E6:13 Certificate issuer: /CN=A9162E3D0001/serialNumber=CB0214A5C404D6F840433B120CACBB5B8C59E613 Certificate serial: 5A77E9B345DFA0306EA492DB7F4BBB8E9FF8C65B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1065588335524708353/1/F8291D72985D2225F7CB1A97A84837BBD2F5FE88.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1065588335524708353/1/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Fri 29 May 2026 08:09:06 +0000 Certificate not after: Fri 28 May 2027 08:14:06 +0000 Subordinate resources: IP: 157.10.112.0/23 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Jun 2026 13:43:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:77:e9:b3:45:df:a0:30:6e:a4:92:db:7f:4b:bb:8e:9f:f8:c6:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=CB0214A5C404D6F840433B120CACBB5B8C59E613 Validity Not Before: May 29 08:09:06 2026 GMT Not After : May 28 08:14:06 2027 GMT Subject: CN=F8291D72985D2225F7CB1A97A84837BBD2F5FE88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fa:d9:e4:c4:25:2c:af:41:88:f6:cd:e4:30:79: 42:80:93:6a:06:ef:f1:74:4c:09:f2:ac:b2:54:75: c0:95:77:08:cb:61:00:57:d4:f0:20:c8:46:b1:05: 86:d9:91:3b:f8:e4:3d:85:86:76:8b:82:b8:4c:c3: e5:de:cb:b2:4c:02:66:2e:0e:72:6f:cc:c7:1e:65: 46:4e:2e:56:35:d6:f1:7c:f1:8d:40:0e:03:05:a0: 1b:b6:b8:1a:e4:af:b9:04:8e:2d:f0:a9:59:10:3c: 04:79:c6:9f:19:25:c5:26:5f:47:98:ee:d9:f5:a1: bc:d6:41:58:1e:49:db:2f:ab:fb:62:32:d3:c3:7a: bb:a4:de:c8:09:81:89:cf:17:e2:64:29:b7:3d:b7: f7:fa:20:96:65:05:1c:7c:7a:e9:6f:64:25:ca:5b: 87:ac:f7:a8:2b:59:46:26:a5:a4:ef:e7:db:bd:95: 1e:2f:cf:8e:9e:4d:ad:d7:7f:fa:28:88:87:8e:d3: 65:01:aa:c1:97:88:60:df:d1:46:5a:84:13:be:05: dd:4c:09:df:e3:20:22:c2:3e:f7:dc:30:2d:f9:a5: f2:53:32:ab:72:08:91:45:64:09:c5:d1:57:aa:b4: 53:8a:45:43:98:e1:e3:ae:36:d0:05:77:f0:89:f6: 5a:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: F8:29:1D:72:98:5D:22:25:F7:CB:1A:97:A8:48:37:BB:D2:F5:FE:88 X509v3 Authority Key Identifier: keyid:CB:02:14:A5:C4:04:D6:F8:40:43:3B:12:0C:AC:BB:5B:8C:59:E6:13 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335524708353/1/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335524708353/1/F8291D72985D2225F7CB1A97A84837BBD2F5FE88.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.10.112.0/23 Signature Algorithm: sha256WithRSAEncryption a3:12:0a:ab:7e:6b:92:97:27:e6:c2:8b:63:99:02:a3:24:f0: 51:7e:8f:ef:92:2f:47:bd:cc:6a:73:f2:72:d2:13:39:9c:e9: ac:8c:bb:37:7d:94:05:8d:06:1e:59:ae:5e:6d:a6:b6:dc:24: 5a:4c:3b:70:fa:a9:6b:79:ae:a9:e1:15:6e:10:e3:14:68:49: b2:73:3f:ab:da:52:75:a1:71:72:30:41:c5:91:91:7f:c0:1f: 32:d3:6f:6a:df:59:0c:6b:45:14:39:70:39:7e:ea:c1:3a:33: 08:6d:18:5e:f6:74:2a:9e:d8:77:a3:21:ec:d6:99:7b:e9:8a: ee:47:a7:d4:92:2b:c9:1a:60:40:8c:8a:40:eb:3a:65:1e:fd: a9:4d:77:62:f2:1b:b8:d5:0e:40:40:aa:d1:2a:8d:39:80:45: 6b:14:8f:e8:2f:67:0d:93:cd:a2:c9:e2:5f:d8:e4:ed:db:d0: 05:27:01:15:7a:5f:bd:88:c5:15:d1:3e:b1:46:cd:d8:74:20: 22:11:f8:a8:a9:42:04:ee:91:f4:32:3d:fd:e5:7f:6c:c2:64: 73:be:69:ee:da:9d:d7:3a:10:a9:4b:7a:32:76:52:f9:6b:69: b4:b7:50:79:09:13:22:75:2e:42:48:af:75:13:55:af:08:6d: 9d:51:9e:26 -----BEGIN CERTIFICATE----- MIIFpzCCBI+gAwIBAgIUWnfps0XfoDBupJLbf0u7jp/4xlswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhDQjAyMTRBNUM0 MDRENkY4NDA0MzNCMTIwQ0FDQkI1QjhDNTlFNjEzMB4XDTI2MDUyOTA4MDkwNloX DTI3MDUyODA4MTQwNlowMzExMC8GA1UEAxMoRjgyOTFENzI5ODVEMjIyNUY3Q0Ix QTk3QTg0ODM3QkJEMkY1RkU4ODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAPrZ5MQlLK9BiPbN5DB5QoCTagbv8XRMCfKsslR1wJV3CMthAFfU8CDIRrEF htmRO/jkPYWGdouCuEzD5d7LskwCZi4Ocm/Mxx5lRk4uVjXW8XzxjUAOAwWgG7a4 GuSvuQSOLfCpWRA8BHnGnxklxSZfR5ju2fWhvNZBWB5J2y+r+2Iy08N6u6TeyAmB ic8X4mQptz239/oglmUFHHx66W9kJcpbh6z3qCtZRialpO/n272VHi/Pjp5Nrdd/ +iiIh47TZQGqwZeIYN/RRlqEE74F3UwJ3+MgIsI+99wwLfml8lMyq3IIkUVkCcXR V6q0U4pFQ5jh46420AV38In2WiUCAwEAAaOCApowggKWMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFPgpHXKYXSIl98sal6hIN7vS9f6IMB8GA1UdIwQYMBaAFMsC FKXEBNb4QEM7Egysu1uMWeYTMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMC9DQjAyMTRBNUM0MDRENkY4NDA0MzNCMTIwQ0FDQkI1QjhDNTlF NjEzLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CM0EyNEYyMDFENjYxMUUyOEFDODgzN0M3 MkZEMUZGMi95d0lVcGNRRTF2aEFRenNTREt5N1c0eFo1aE0uY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTA2NTU4ODMzNTUyNDcwODM1My8xLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDY1NTg4MzM1NTI0NzA4MzUz LzEvRjgyOTFENzI5ODVEMjIyNUY3Q0IxQTk3QTg0ODM3QkJEMkY1RkU4OC5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAGdCnAwDQYJKoZIhvcNAQELBQADggEBAKMSCqt+ a5KXJ+bCi2OZAqMk8FF+j++SL0e9zGpz8nLSEzmc6ayMuzd9lAWNBh5Zrl5tprbc JFpMO3D6qWt5rqnhFW4Q4xRoSbJzP6vaUnWhcXIwQcWRkX/AHzLTb2rfWQxrRRQ5 cDl+6sE6MwhtGF72dCqe2HejIezWmXvpiu5Hp9SSK8kaYECMikDrOmUe/alNd2Ly G7jVDkBAqtEqjTmARWsUj+gvZw2TzaLJ4l/Y5O3b0AUnARV6X72IxRXRPrFGzdh0 ICIR+KipQgTukfQyPf3lf2zCZHO+ae7andc6EKlLejJ2UvlrabS3UHkJEyJ1LkJI r3UTVa8IbZ1RniY= -----END CERTIFICATE-----Generated at Thu Jun 4 14:12:17 2026 by rpki-client