$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/08C7DE894A4A88622BA78BC9E41DFA5CC6E3034F.cer File: 08C7DE894A4A88622BA78BC9E41DFA5CC6E3034F.cer (raw, json) Hash identifier: ZYdIcjxVfjOYEYZ/lrOXgfKvHTwzuV+a97GL6zdi+SE= Subject key identifier: 08:C7:DE:89:4A:4A:88:62:2B:A7:8B:C9:E4:1D:FA:5C:C6:E3:03:4F Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Certificate serial: 3E622FE3DF8ED22D8A94667356E7808E41B7B3CA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1110017641860300821/0/08C7DE894A4A88622BA78BC9E41DFA5CC6E3034F.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1110017641860300821/0/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Fri 22 May 2026 01:28:51 +0000 Certificate not after: Fri 21 May 2027 01:33:51 +0000 Subordinate resources: AS: 137721 IP: 2406:e3c0::/32 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 15:28:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:62:2f:e3:df:8e:d2:2d:8a:94:66:73:56:e7:80:8e:41:b7:b3:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Validity Not Before: May 22 01:28:51 2026 GMT Not After : May 21 01:33:51 2027 GMT Subject: CN=08C7DE894A4A88622BA78BC9E41DFA5CC6E3034F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:c7:ed:b3:d2:4c:7e:1d:cb:c0:0f:1c:4c:95: 22:ed:f0:12:94:3e:6a:88:fb:a6:d6:0c:45:fc:08: 32:78:6f:1d:6e:f0:c1:e3:0c:79:11:04:b6:71:60: d7:e6:38:cd:3e:97:0b:2c:94:5c:5d:db:27:21:bd: 08:a8:4d:b2:c9:eb:0e:e9:ec:ff:11:ca:59:ff:df: 27:84:5d:25:d7:7d:3c:d0:f0:0c:5f:16:2e:fd:46: 3b:2f:f3:9c:f5:a0:91:b4:2a:fd:3f:59:56:81:8e: 62:4e:d8:0a:03:d8:84:00:38:78:dd:7f:5b:c7:5b: 8f:6f:4a:da:8c:c0:7f:c0:95:85:f7:c5:a9:f7:b8: 4d:b2:d8:dd:ed:bb:36:3d:21:83:22:40:5d:56:b8: 93:eb:32:57:f0:60:86:2b:61:6d:53:9a:d7:75:95: a2:00:6c:5c:a3:9b:d1:3d:98:f5:3c:68:29:a8:75: 00:ba:b1:53:4c:da:3a:a0:b8:ee:00:05:fc:4d:f4: 04:cd:03:e8:04:80:f9:1d:2c:e7:c1:1f:e5:a4:1d: 79:74:32:44:75:46:1e:89:d3:64:bf:52:d0:63:89: f3:93:a8:5e:5d:2e:e2:46:dd:ea:e1:13:10:53:8d: 15:ee:a7:ee:d9:31:dc:22:47:87:9f:be:9b:37:7d: 4c:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 08:C7:DE:89:4A:4A:88:62:2B:A7:8B:C9:E4:1D:FA:5C:C6:E3:03:4F X509v3 Authority Key Identifier: keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1110017641860300821/0/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1110017641860300821/0/08C7DE894A4A88622BA78BC9E41DFA5CC6E3034F.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:e3c0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 137721 Signature Algorithm: sha256WithRSAEncryption 76:40:40:5b:a1:4d:25:20:7d:0c:36:1d:3b:20:7a:64:f0:3b: ba:92:0b:fc:cd:8a:56:51:8c:b3:89:01:62:69:4f:af:91:3c: f0:fc:2f:09:d3:97:30:09:42:a3:68:02:2d:53:1b:00:45:0d: 5a:88:7d:0f:0c:77:85:76:5f:db:4c:2a:2d:f3:6a:a9:2e:8e: 06:4d:71:b5:43:4f:5a:49:61:2e:f9:46:fd:7b:72:7a:2c:c9: 32:63:e4:ef:09:ba:3d:0c:3c:03:7e:f6:73:eb:28:de:84:5b: d4:23:a3:33:c7:73:57:ed:be:da:1a:3f:3d:81:cb:8c:8c:13: f2:47:84:4e:4d:70:bd:30:c6:96:8b:b6:b9:3b:ff:2a:80:c3: 29:71:a7:f0:78:d3:d6:38:a7:06:71:0f:e7:03:06:7e:70:2a: e0:0e:87:7e:01:09:64:dc:59:39:60:a7:62:e6:b2:be:79:0f: 46:0e:cc:ca:1c:b9:77:bf:77:a7:5e:2e:56:b8:3b:3e:ac:9d: a0:cf:56:4d:fd:ce:95:94:e0:20:9f:a2:22:eb:a6:12:89:c0: e8:a2:5c:1c:8d:07:b3:42:f7:1e:7d:d1:61:19:6e:2f:80:03: 7a:11:8f:83:35:0b:5b:98:d3:b3:18:f0:7d:a2:06:39:6b:55: df:31:f2:b4 -----BEGIN CERTIFICATE----- MIIFxDCCBKygAwIBAgIUPmIv49+O0i2KlGZzVueAjkG3s8owDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDUyMjAxMjg1MVoX DTI3MDUyMTAxMzM1MVowMzExMC8GA1UEAxMoMDhDN0RFODk0QTRBODg2MjJCQTc4 QkM5RTQxREZBNUNDNkUzMDM0RjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKrH7bPSTH4dy8APHEyVIu3wEpQ+aoj7ptYMRfwIMnhvHW7wweMMeREEtnFg 1+Y4zT6XCyyUXF3bJyG9CKhNssnrDuns/xHKWf/fJ4RdJdd9PNDwDF8WLv1GOy/z nPWgkbQq/T9ZVoGOYk7YCgPYhAA4eN1/W8dbj29K2ozAf8CVhffFqfe4TbLY3e27 Nj0hgyJAXVa4k+syV/BghithbVOa13WVogBsXKOb0T2Y9TxoKah1ALqxU0zaOqC4 7gAF/E30BM0D6ASA+R0s58Ef5aQdeXQyRHVGHonTZL9S0GOJ85OoXl0u4kbd6uET EFONFe6n7tkx3CJHh5++mzd9TNECAwEAAaOCArcwggKzMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFAjH3olKSohiK6eLyeQd+lzG4wNPMB8GA1UdIwQYMBaAFKVu hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTExMDAxNzY0MTg2MDMwMDgyMS8wLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMTEwMDE3NjQxODYwMzAwODIx LzAvMDhDN0RFODk0QTRBODg2MjJCQTc4QkM5RTQxREZBNUNDNkUzMDM0Ri5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUH AQcBAf8EETAPMA0EAgACMAcDBQAkBuPAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwIZ+TANBgkqhkiG9w0BAQsFAAOCAQEAdkBAW6FNJSB9DDYdOyB6ZPA7upIL/M2K VlGMs4kBYmlPr5E88PwvCdOXMAlCo2gCLVMbAEUNWoh9Dwx3hXZf20wqLfNqqS6O Bk1xtUNPWklhLvlG/XtyeizJMmPk7wm6PQw8A372c+so3oRb1COjM8dzV+2+2ho/ PYHLjIwT8keETk1wvTDGlou2uTv/KoDDKXGn8HjT1jinBnEP5wMGfnAq4A6HfgEJ ZNxZOWCnYuayvnkPRg7Myhy5d793p14uVrg7PqydoM9WTf3OlZTgIJ+iIuumEonA 6KJcHI0Hs0L3Hn3RYRluL4ADehGPgzULW5jTsxjwfaIGOWtV3zHytA== -----END CERTIFICATE-----Generated at Fri May 29 21:11:44 2026 by rpki-client