$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0EAFEB7E7346E8F278FFE2D0AA8D4E12960EB7C7.cer File: 0EAFEB7E7346E8F278FFE2D0AA8D4E12960EB7C7.cer (raw, json) Hash identifier: BmroXgRytTwiKKDGUVEBmBtNs+yPF/GkhgAtSzbYo7E= Subject key identifier: 0E:AF:EB:7E:73:46:E8:F2:78:FF:E2:D0:AA:8D:4E:12:96:0E:B7:C7 Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Certificate serial: 721CFE73461868CEC1D4C684A71257B5DC257CC1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1065585389265354753/0/0EAFEB7E7346E8F278FFE2D0AA8D4E12960EB7C7.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1065585389265354753/0/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Fri 29 May 2026 01:32:58 +0000 Certificate not after: Fri 28 May 2027 01:37:58 +0000 Subordinate resources: AS: 139119 IP: 103.157.234.0/23 IP: 2406:a7c0::/32 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 15:28:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:1c:fe:73:46:18:68:ce:c1:d4:c6:84:a7:12:57:b5:dc:25:7c:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Validity Not Before: May 29 01:32:58 2026 GMT Not After : May 28 01:37:58 2027 GMT Subject: CN=0EAFEB7E7346E8F278FFE2D0AA8D4E12960EB7C7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:3a:a7:58:7f:35:fa:57:e8:17:da:1f:2e:69: cd:88:5d:be:d3:91:5a:70:06:16:68:3c:f4:40:88: 0b:49:d0:00:48:b9:5f:cd:ab:4d:29:cc:41:45:7b: 8f:97:9c:70:ca:61:0c:de:4d:2a:ff:f9:45:65:3d: ef:27:96:cf:f9:56:b8:88:30:53:d8:9f:c1:17:a3: bb:de:4f:41:ed:ac:ee:7f:80:55:14:cb:c5:09:d5: 57:c4:ea:18:99:31:04:95:f2:3b:de:8e:02:f6:26: 38:d8:fe:f4:a0:d2:5e:d3:55:e9:ec:6c:04:31:3f: e4:1c:16:4c:f9:1c:05:44:b8:5f:9f:39:fe:60:ac: ff:c9:e5:d0:d9:c9:84:96:62:77:48:5e:c1:e0:0d: 04:80:96:53:06:06:4f:41:f7:bb:1b:68:4e:76:32: 84:c4:27:a4:fb:7f:c4:ba:fd:14:93:ea:a4:5e:52: 55:1f:32:ee:3f:2d:a3:20:a7:ce:40:e8:57:ba:6c: 2b:eb:14:f7:db:6b:08:02:72:c4:57:32:ba:b0:7c: 83:10:a1:66:fc:b6:27:9c:79:04:7f:10:ba:0e:c7: 4b:12:51:b6:26:8f:de:e0:ee:83:4d:01:11:cf:8d: 5d:d2:4f:9f:5c:af:53:a3:fd:25:54:ea:81:20:6e: 56:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 0E:AF:EB:7E:73:46:E8:F2:78:FF:E2:D0:AA:8D:4E:12:96:0E:B7:C7 X509v3 Authority Key Identifier: keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265354753/0/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265354753/0/0EAFEB7E7346E8F278FFE2D0AA8D4E12960EB7C7.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.157.234.0/23 IPv6: 2406:a7c0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 139119 Signature Algorithm: sha256WithRSAEncryption 76:6a:e7:68:62:b2:92:26:95:fd:df:fc:3c:18:fd:22:c4:8b: c6:ec:c5:5c:0f:94:60:65:c0:f1:c9:f6:5b:09:12:da:67:82: b9:81:ac:6d:88:51:a8:d4:63:d9:fc:10:28:21:9a:5e:f8:4b: 99:c3:1c:18:a0:2c:af:b3:48:8d:61:6a:c8:df:99:cb:e6:ce: e6:29:d0:11:d8:93:53:88:99:d4:6d:62:e1:e2:04:8f:ee:e0: 55:45:8a:8c:e9:f6:44:19:99:80:7f:bc:f4:60:3c:cf:52:f6: 98:4c:eb:8d:ad:17:1e:a4:2a:8e:f0:fe:e9:73:83:79:c1:47: 9b:7e:90:1d:d8:b4:82:31:3b:bf:5e:bf:19:fc:03:93:4d:3e: 33:97:2d:dc:df:38:41:83:75:a4:dc:64:fd:2c:12:dc:ca:c4: 35:5b:2e:e4:51:e5:a2:a0:b2:88:45:c8:41:2c:ce:b2:c1:f2: f4:84:ba:69:e9:d1:6f:ba:a5:ca:ea:60:6b:b1:60:a4:dd:cf: 1c:2a:7c:a7:99:99:e6:11:ba:b9:bb:28:8e:b8:82:fe:0b:18: 83:02:3d:c5:cc:07:8d:bd:91:c3:df:f3:af:de:34:8d:b7:f5: 4c:26:d2:36:88:8b:46:58:25:d5:83:5e:39:43:59:1c:00:69: 2c:b1:13:97 -----BEGIN CERTIFICATE----- MIIF0jCCBLqgAwIBAgIUchz+c0YYaM7B1MaEpxJXtdwlfMEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDUyOTAxMzI1OFoX DTI3MDUyODAxMzc1OFowMzExMC8GA1UEAxMoMEVBRkVCN0U3MzQ2RThGMjc4RkZF MkQwQUE4RDRFMTI5NjBFQjdDNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANo6p1h/NfpX6BfaHy5pzYhdvtORWnAGFmg89ECIC0nQAEi5X82rTSnMQUV7 j5eccMphDN5NKv/5RWU97yeWz/lWuIgwU9ifwReju95PQe2s7n+AVRTLxQnVV8Tq GJkxBJXyO96OAvYmONj+9KDSXtNV6exsBDE/5BwWTPkcBUS4X585/mCs/8nl0NnJ hJZid0heweANBICWUwYGT0H3uxtoTnYyhMQnpPt/xLr9FJPqpF5SVR8y7j8toyCn zkDoV7psK+sU99trCAJyxFcyurB8gxChZvy2J5x5BH8Qug7HSxJRtiaP3uDug00B Ec+NXdJPn1yvU6P9JVTqgSBuVlsCAwEAAaOCAsUwggLBMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFA6v635zRujyeP/i0KqNThKWDrfHMB8GA1UdIwQYMBaAFKVu hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTA2NTU4NTM4OTI2NTM1NDc1My8wLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDY1NTg1Mzg5MjY1MzU0NzUz LzAvMEVBRkVCN0U3MzQ2RThGMjc4RkZFMkQwQUE4RDRFMTI5NjBFQjdDNy5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUH AQcBAf8EHzAdMAwEAgABMAYDBAFnneowDQQCAAIwBwMFACQGp8AwGgYIKwYBBQUH AQgBAf8ECzAJoAcwBQIDAh9vMA0GCSqGSIb3DQEBCwUAA4IBAQB2audoYrKSJpX9 3/w8GP0ixIvG7MVcD5RgZcDxyfZbCRLaZ4K5gaxtiFGo1GPZ/BAoIZpe+EuZwxwY oCyvs0iNYWrI35nL5s7mKdAR2JNTiJnUbWLh4gSP7uBVRYqM6fZEGZmAf7z0YDzP UvaYTOuNrRcepCqO8P7pc4N5wUebfpAd2LSCMTu/Xr8Z/AOTTT4zly3c3zhBg3Wk 3GT9LBLcysQ1Wy7kUeWioLKIRchBLM6ywfL0hLpp6dFvuqXK6mBrsWCk3c8cKnyn mZnmEbq5uyiOuIL+CxiDAj3FzAeNvZHD3/Ov3jSNt/VMJtI2iItGWCXVg145Q1kc AGkssROX -----END CERTIFICATE-----Generated at Fri May 29 21:13:20 2026 by rpki-client