$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.cer File: 2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.cer (raw, json) Hash identifier: 6SVvODCdUH45Qfk59pIfGtIkgLhLU4oLReZ4Dxu+xpI= Subject key identifier: 2F:2C:83:39:CC:8E:44:46:7D:F5:BA:5D:0F:66:14:3C:18:D6:B3:60 Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Certificate serial: 22F93B71FFD59AFE95E658E9AE8B85F0C008919E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1065576199948140547/0/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1065576199948140547/0/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Thu 28 May 2026 04:49:45 +0000 Certificate not after: Thu 27 May 2027 04:54:45 +0000 Subordinate resources: AS: 24426 IP: 43.239.32.0 -- 43.239.51.255 IP: 43.246.0.0 -- 43.246.99.255 IP: 103.35.32.0 -- 103.35.51.255 IP: 103.236.0.0 -- 103.236.51.255 IP: 110.44.144.0/20 IP: 202.10.64.0/20 IP: 2400:9a00::/32 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 15:28:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:f9:3b:71:ff:d5:9a:fe:95:e6:58:e9:ae:8b:85:f0:c0:08:91:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Validity Not Before: May 28 04:49:45 2026 GMT Not After : May 27 04:54:45 2027 GMT Subject: CN=2F2C8339CC8E44467DF5BA5D0F66143C18D6B360 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:5a:45:47:25:8b:67:19:23:7a:4e:73:78:e0: 6f:53:df:ba:91:b1:5d:40:87:0b:f3:3f:9c:7f:06: 59:9b:0d:4d:86:8e:d6:fb:ee:a9:c6:8b:d9:d4:a2: 3e:35:c2:bb:6d:b3:90:96:c5:a3:b2:64:f3:ce:4d: ee:2c:74:de:2d:21:f7:e1:47:07:50:5c:2c:c8:36: 35:82:80:07:78:a8:47:46:47:c9:85:4d:7e:80:a0: 0a:18:ea:dd:85:74:69:7e:fe:70:78:b1:b6:1c:c9: 50:fc:df:d5:7c:32:97:ee:b3:8e:91:16:ea:de:4d: 7d:d6:a5:07:60:bc:d9:00:46:0f:7e:32:15:2d:64: c0:0d:c0:3b:2c:ce:ce:97:85:0e:ff:f7:fc:c1:1c: 7b:c6:d2:f5:72:96:ea:09:d3:74:42:fa:8f:28:d0: 36:e8:89:2b:ca:ec:2c:e9:27:36:9f:72:21:57:08: 55:fd:59:e5:56:7a:f6:2f:74:48:e6:e7:70:9b:04: be:26:75:d2:f7:ae:ff:74:a9:44:13:43:f2:9f:e5: 52:e8:73:15:53:07:fa:7e:b7:f2:c7:dc:0a:e6:1a: a7:bb:59:b8:af:5d:73:44:de:31:cb:2a:45:f9:5d: 43:07:40:1c:e6:16:1a:65:f4:23:6b:49:8f:92:df: b7:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 2F:2C:83:39:CC:8E:44:46:7D:F5:BA:5D:0F:66:14:3C:18:D6:B3:60 X509v3 Authority Key Identifier: keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948140547/0/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948140547/0/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.239.32.0-43.239.51.255 43.246.0.0-43.246.99.255 103.35.32.0-103.35.51.255 103.236.0.0-103.236.51.255 110.44.144.0/20 202.10.64.0/20 IPv6: 2400:9a00::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 24426 Signature Algorithm: sha256WithRSAEncryption 00:fd:61:63:a0:e0:17:bc:d3:59:30:d1:49:84:02:98:b1:4b: 87:d9:fb:0e:7c:24:16:0d:cb:a1:7f:5c:3e:6f:28:bf:ed:bf: c5:28:a4:c5:c4:75:ff:1f:d0:f8:73:a9:1f:04:e4:10:a6:37: ce:96:18:bf:be:af:ad:67:1f:35:e8:f2:53:62:d1:64:cd:5b: 26:16:c7:92:0f:f4:03:1b:02:c5:80:d4:10:d9:3c:6f:02:c8: 92:60:89:2f:f0:98:c2:e5:a2:6b:97:3a:99:7f:5b:95:46:aa: 77:fc:79:93:f8:4c:46:70:fd:54:5b:7a:cf:64:1a:8c:56:d6: 1b:07:c6:3e:65:40:5f:a2:32:45:e7:7c:5e:41:5e:32:76:b6: f7:17:e2:c2:15:83:dc:95:e1:f9:b1:75:20:d5:c0:75:23:3d: 66:f7:dd:48:63:42:d2:21:11:06:7b:2b:23:1e:9a:69:c0:b4: b0:97:89:b0:ad:b6:62:20:89:19:04:71:ba:f1:c1:aa:b8:74: c2:39:02:c5:c9:13:a4:c2:6d:ee:c4:6f:91:95:1a:d0:a6:84: 6b:d2:ef:57:8d:fe:6d:06:67:df:9c:e0:00:e9:f8:6e:d7:64: 84:aa:bd:fe:00:b4:ca:85:02:46:53:7c:7a:39:99:59:fe:b5: 45:ba:b7:2d -----BEGIN CERTIFICATE----- MIIGDTCCBPWgAwIBAgIUIvk7cf/Vmv6V5ljprouF8MAIkZ4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDUyODA0NDk0NVoX DTI3MDUyNzA0NTQ0NVowMzExMC8GA1UEAxMoMkYyQzgzMzlDQzhFNDQ0NjdERjVC QTVEMEY2NjE0M0MxOEQ2QjM2MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANZaRUcli2cZI3pOc3jgb1PfupGxXUCHC/M/nH8GWZsNTYaO1vvuqcaL2dSi PjXCu22zkJbFo7Jk885N7ix03i0h9+FHB1BcLMg2NYKAB3ioR0ZHyYVNfoCgChjq 3YV0aX7+cHixthzJUPzf1Xwyl+6zjpEW6t5NfdalB2C82QBGD34yFS1kwA3AOyzO zpeFDv/3/MEce8bS9XKW6gnTdEL6jyjQNuiJK8rsLOknNp9yIVcIVf1Z5VZ69i90 SObncJsEviZ10veu/3SpRBND8p/lUuhzFVMH+n638sfcCuYap7tZuK9dc0TeMcsq RfldQwdAHOYWGmX0I2tJj5Lft18CAwEAAaOCAwAwggL8MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFC8sgznMjkRGffW6XQ9mFDwY1rNgMB8GA1UdIwQYMBaAFKVu hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTA2NTU3NjE5OTk0ODE0MDU0Ny8wLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDY1NTc2MTk5OTQ4MTQwNTQ3 LzAvMkYyQzgzMzlDQzhFNDQ0NjdERjVCQTVEMEY2NjE0M0MxOEQ2QjM2MC5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwagYIKwYBBQUH AQcBAf8EWzBZMEgEAgABMEIwDAMEBSvvIAMEAivvMDALAwMBK/YDBAIr9mAwDAME BWcjIAMEAmcjMDALAwMCZ+wDBAJn7DADBARuLJADBATKCkAwDQQCAAIwBwMFACQA mgAwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAICX2owDQYJKoZIhvcNAQELBQADggEB AAD9YWOg4Be801kw0UmEApixS4fZ+w58JBYNy6F/XD5vKL/tv8UopMXEdf8f0Phz qR8E5BCmN86WGL++r61nHzXo8lNi0WTNWyYWx5IP9AMbAsWA1BDZPG8CyJJgiS/w mMLlomuXOpl/W5VGqnf8eZP4TEZw/VRbes9kGoxW1hsHxj5lQF+iMkXnfF5BXjJ2 tvcX4sIVg9yV4fmxdSDVwHUjPWb33UhjQtIhEQZ7KyMemmnAtLCXibCttmIgiRkE cbrxwaq4dMI5AsXJE6TCbe7Eb5GVGtCmhGvS71eN/m0GZ9+c4ADp+G7XZISqvf4A tMqFAkZTfHo5mVn+tUW6ty0= -----END CERTIFICATE-----Generated at Fri May 29 21:12:52 2026 by rpki-client