$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/0/F8EFF99E092A172620E148B3D7996FD9A2D8B852.cer File: F8EFF99E092A172620E148B3D7996FD9A2D8B852.cer (raw, json) Hash identifier: GZK2qKuhs0tRV2BYaXGfk2mfsaeAXw5GkzXF6jYfv/s= Subject key identifier: F8:EF:F9:9E:09:2A:17:26:20:E1:48:B3:D7:99:6F:D9:A2:D8:B8:52 Authority key identifier: CB:02:14:A5:C4:04:D6:F8:40:43:3B:12:0C:AC:BB:5B:8C:59:E6:13 Certificate issuer: /CN=A9162E3D0001/serialNumber=CB0214A5C404D6F840433B120CACBB5B8C59E613 Certificate serial: 02EB6DEA50A4CE2321781F46A3B3AF754FDE733D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1065585911217651715/1/F8EFF99E092A172620E148B3D7996FD9A2D8B852.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1065585911217651715/1/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Mon 01 Jun 2026 01:43:09 +0000 Certificate not after: Mon 31 May 2027 01:48:09 +0000 Subordinate resources: IP: 165.101.70.0/23 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Jun 2026 03:36:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:eb:6d:ea:50:a4:ce:23:21:78:1f:46:a3:b3:af:75:4f:de:73:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=CB0214A5C404D6F840433B120CACBB5B8C59E613 Validity Not Before: Jun 1 01:43:09 2026 GMT Not After : May 31 01:48:09 2027 GMT Subject: CN=F8EFF99E092A172620E148B3D7996FD9A2D8B852 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:d4:6c:47:8b:3f:f3:bc:aa:62:e3:4b:06:73: 60:25:2f:5f:86:9f:37:30:db:99:87:0d:95:69:fb: 26:85:65:3f:62:72:53:3a:e4:8e:84:53:96:a4:a2: 16:c7:87:6f:95:1f:b0:51:9b:ab:3f:24:3e:07:3d: 01:60:b3:f3:5f:ae:d8:a2:83:fd:13:e9:9e:bf:ce: f4:ae:52:35:d1:97:1f:8b:12:18:e8:73:1a:fb:9c: 00:fe:a6:88:4f:3d:be:02:23:27:c2:ad:eb:62:a7: b6:ec:b2:b2:5b:94:e2:91:c1:75:98:52:d2:b2:19: 9a:04:e6:62:5f:f1:6f:0d:5d:66:9d:65:18:d0:bc: 8f:a1:ae:71:5f:77:27:a2:f2:dd:7e:c2:b4:ee:99: c9:19:bd:86:dc:7f:76:13:98:d4:5d:3d:91:49:59: f3:55:13:46:28:a4:8f:d4:22:98:8a:0e:37:a5:8c: 5b:f4:28:de:06:40:75:be:0f:12:1d:fd:2f:14:f9: 2a:14:96:9c:5b:1f:20:60:bd:78:d8:88:b1:c4:f5: 1d:d1:6c:08:b5:99:e4:fa:c8:0b:6e:ba:d0:85:73: b3:79:08:c8:05:d2:b9:82:71:5c:35:c5:36:df:f7: da:7e:3f:de:6f:30:f5:60:9e:71:45:ca:03:b6:db: 6d:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: F8:EF:F9:9E:09:2A:17:26:20:E1:48:B3:D7:99:6F:D9:A2:D8:B8:52 X509v3 Authority Key Identifier: keyid:CB:02:14:A5:C4:04:D6:F8:40:43:3B:12:0C:AC:BB:5B:8C:59:E6:13 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217651715/1/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217651715/1/F8EFF99E092A172620E148B3D7996FD9A2D8B852.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 165.101.70.0/23 Signature Algorithm: sha256WithRSAEncryption b8:a2:4d:96:52:1d:5f:df:67:4e:c8:62:4b:72:29:1c:96:51: 1d:1f:16:3c:38:eb:43:49:a0:f0:d9:b9:77:3a:5c:d6:09:12: fa:ea:e6:8d:a8:75:3c:b1:e6:44:c1:88:1b:b0:22:d5:5c:e1: bf:f0:76:c8:2d:6b:8d:9c:c6:32:ec:49:47:46:dc:f8:87:bf: e3:ed:be:d7:8e:d7:ed:39:df:19:80:62:b2:c5:d0:20:12:c2: 14:b5:91:ee:d7:35:7a:88:45:8c:dc:de:16:27:a0:5e:5f:58: 9d:a3:31:fb:d0:92:9a:63:b1:8b:3e:a3:7b:4f:2f:ad:cc:f9: a2:31:67:ef:cf:9a:f0:c7:a3:09:4b:68:c7:59:dc:d3:46:d4: b4:fd:d8:0b:db:20:6b:00:1c:0c:6c:65:6c:aa:da:08:67:03: 65:d6:f3:76:cb:e7:38:23:32:2b:b0:06:df:7f:0a:a4:3b:b5: 42:41:a6:33:9b:da:13:35:aa:a7:47:ce:c4:a0:8a:ef:19:e8: 57:ce:e3:6d:10:5c:c5:73:8b:5a:87:18:84:43:19:ac:ed:b2: 9e:6c:44:d4:c7:f9:d6:cf:bf:ff:46:14:aa:0c:9d:1d:7b:68: 13:ae:77:f5:ff:83:bb:84:ab:8c:3a:ff:d7:0d:15:9d:ff:83: 55:0c:fc:13 -----BEGIN CERTIFICATE----- MIIFpzCCBI+gAwIBAgIUAutt6lCkziMheB9Go7OvdU/ecz0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhDQjAyMTRBNUM0 MDRENkY4NDA0MzNCMTIwQ0FDQkI1QjhDNTlFNjEzMB4XDTI2MDYwMTAxNDMwOVoX DTI3MDUzMTAxNDgwOVowMzExMC8GA1UEAxMoRjhFRkY5OUUwOTJBMTcyNjIwRTE0 OEIzRDc5OTZGRDlBMkQ4Qjg1MjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANPUbEeLP/O8qmLjSwZzYCUvX4afNzDbmYcNlWn7JoVlP2JyUzrkjoRTlqSi FseHb5UfsFGbqz8kPgc9AWCz81+u2KKD/RPpnr/O9K5SNdGXH4sSGOhzGvucAP6m iE89vgIjJ8Kt62KntuyysluU4pHBdZhS0rIZmgTmYl/xbw1dZp1lGNC8j6GucV93 J6Ly3X7CtO6ZyRm9htx/dhOY1F09kUlZ81UTRiikj9QimIoON6WMW/Qo3gZAdb4P Eh39LxT5KhSWnFsfIGC9eNiIscT1HdFsCLWZ5PrIC2660IVzs3kIyAXSuYJxXDXF Nt/32n4/3m8w9WCecUXKA7bbbccCAwEAAaOCApowggKWMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFPjv+Z4JKhcmIOFIs9eZb9mi2LhSMB8GA1UdIwQYMBaAFMsC FKXEBNb4QEM7Egysu1uMWeYTMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMC9DQjAyMTRBNUM0MDRENkY4NDA0MzNCMTIwQ0FDQkI1QjhDNTlF NjEzLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CM0EyNEYyMDFENjYxMUUyOEFDODgzN0M3 MkZEMUZGMi95d0lVcGNRRTF2aEFRenNTREt5N1c0eFo1aE0uY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTA2NTU4NTkxMTIxNzY1MTcxNS8xLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDY1NTg1OTExMjE3NjUxNzE1 LzEvRjhFRkY5OUUwOTJBMTcyNjIwRTE0OEIzRDc5OTZGRDlBMkQ4Qjg1Mi5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAGlZUYwDQYJKoZIhvcNAQELBQADggEBALiiTZZS HV/fZ07IYktyKRyWUR0fFjw460NJoPDZuXc6XNYJEvrq5o2odTyx5kTBiBuwItVc 4b/wdsgta42cxjLsSUdG3PiHv+PtvteO1+053xmAYrLF0CASwhS1ke7XNXqIRYzc 3hYnoF5fWJ2jMfvQkppjsYs+o3tPL63M+aIxZ+/PmvDHowlLaMdZ3NNG1LT92Avb IGsAHAxsZWyq2ghnA2XW83bL5zgjMiuwBt9/CqQ7tUJBpjOb2hM1qqdHzsSgiu8Z 6FfO420QXMVzi1qHGIRDGaztsp5sRNTH+dbPv/9GFKoMnR17aBOud/X/g7uEq4w6 /9cNFZ3/g1UM/BM= -----END CERTIFICATE-----Generated at Fri Jun 12 07:55:29 2026 by rpki-client