$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6CAF996274F565DC55326AACAFD54F19EBA53FF9.cer File: 6CAF996274F565DC55326AACAFD54F19EBA53FF9.cer (raw, json) Hash identifier: Ij5uxukz+Hzs86WvnQy2szWJ+TV1FP/THxMc+A+qE9U= Subject key identifier: 6C:AF:99:62:74:F5:65:DC:55:32:6A:AC:AF:D5:4F:19:EB:A5:3F:F9 Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Certificate serial: 3F52BF5BE0CE48CB493DAB6A75C316438440CADF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1079237873846255617/0/6CAF996274F565DC55326AACAFD54F19EBA53FF9.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1079237873846255617/0/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Fri 29 May 2026 07:15:47 +0000 Certificate not after: Fri 28 May 2027 07:20:47 +0000 Subordinate resources: IP: 2402:4d60::/32 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 15:28:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:52:bf:5b:e0:ce:48:cb:49:3d:ab:6a:75:c3:16:43:84:40:ca:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Validity Not Before: May 29 07:15:47 2026 GMT Not After : May 28 07:20:47 2027 GMT Subject: CN=6CAF996274F565DC55326AACAFD54F19EBA53FF9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:e2:da:8a:e2:4f:41:f7:0b:11:a4:01:17:aa: 98:a1:40:e3:3f:df:89:df:e0:34:0c:f6:84:cd:3c: df:47:d5:1b:92:2e:c9:20:de:a4:ff:34:51:46:b9: 89:e6:f4:da:4b:5f:c5:0c:d5:d0:fb:60:77:f6:d0: d6:ea:64:9f:43:41:4b:ee:aa:73:2b:8c:31:23:9f: 5c:e3:dd:44:03:e6:99:0c:a7:20:58:df:07:3f:31: d1:99:b1:db:58:7f:d2:ac:2f:4b:78:f2:3b:ae:4a: 11:7d:5d:ac:bc:0a:72:49:9b:2f:a4:96:af:c3:79: fe:1e:14:eb:da:a3:80:3d:29:e8:e2:00:e1:2d:5d: 5a:b4:b1:a3:72:80:6d:6a:9b:87:36:64:fd:db:e5: c3:cf:03:86:1a:0b:07:61:cb:1b:91:13:22:3b:cb: 02:79:23:49:81:e5:ca:11:70:07:df:11:60:a9:f6: 97:67:67:9e:95:72:d3:e1:5d:22:11:b7:d3:c6:44: a5:9f:c3:8a:6f:8a:07:8b:73:e6:af:48:e7:11:d9: 44:e1:18:98:04:4b:9e:51:cd:6f:06:08:35:ea:29: 12:03:3e:61:5a:d9:4a:75:28:1f:a7:91:23:ba:67: fc:d6:47:af:5f:ff:c5:4b:43:24:5c:99:93:f3:85: 0e:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 6C:AF:99:62:74:F5:65:DC:55:32:6A:AC:AF:D5:4F:19:EB:A5:3F:F9 X509v3 Authority Key Identifier: keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1079237873846255617/0/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1079237873846255617/0/6CAF996274F565DC55326AACAFD54F19EBA53FF9.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2402:4d60::/32 Signature Algorithm: sha256WithRSAEncryption 3c:43:7d:2f:43:0f:d8:d3:cb:ec:07:3f:5f:56:76:4d:57:39: ba:66:41:0f:c3:0a:6c:6a:96:c5:4d:b8:91:9a:42:81:b1:ec: b3:54:82:79:14:ec:07:45:52:16:a5:2e:e7:04:8d:14:ae:f5: 74:c4:9e:15:c4:94:79:97:96:db:a8:c5:9b:16:51:51:63:b2: e0:6e:6e:6e:8c:5f:c8:21:5f:02:82:c7:2a:2c:8f:b7:f4:e1: f8:bb:2d:4c:3b:88:b1:04:22:81:05:69:1e:c1:e6:4d:14:77: ac:fe:94:01:0e:e2:b0:b3:c2:d5:d3:ca:ee:9f:d2:ce:d9:ff: 86:74:4f:92:fd:0e:d5:70:2a:53:8c:79:fb:19:06:b3:3c:d6: 19:e7:03:2f:22:ab:19:2c:8d:58:f9:4f:29:98:ab:bb:f9:79: db:e0:50:1a:33:51:31:24:8c:85:3e:5e:bd:36:58:ac:dc:70: 31:8a:8c:a4:71:6c:2f:3e:74:59:b6:93:b2:bc:62:62:13:30: 62:c4:66:a7:62:33:82:20:09:32:2a:a2:b8:b4:41:17:4c:a2: 63:0a:55:5e:cc:f7:47:fc:fa:81:bc:41:25:2c:1b:46:2d:0c: 67:34:77:f2:bb:33:d7:16:86:67:6d:ba:ad:1e:ab:f3:5e:d8: 52:b5:7a:44 -----BEGIN CERTIFICATE----- MIIFqDCCBJCgAwIBAgIUP1K/W+DOSMtJPatqdcMWQ4RAyt8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDUyOTA3MTU0N1oX DTI3MDUyODA3MjA0N1owMzExMC8GA1UEAxMoNkNBRjk5NjI3NEY1NjVEQzU1MzI2 QUFDQUZENTRGMTlFQkE1M0ZGOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALzi2oriT0H3CxGkAReqmKFA4z/fid/gNAz2hM0830fVG5IuySDepP80UUa5 ieb02ktfxQzV0Ptgd/bQ1upkn0NBS+6qcyuMMSOfXOPdRAPmmQynIFjfBz8x0Zmx 21h/0qwvS3jyO65KEX1drLwKckmbL6SWr8N5/h4U69qjgD0p6OIA4S1dWrSxo3KA bWqbhzZk/dvlw88DhhoLB2HLG5ETIjvLAnkjSYHlyhFwB98RYKn2l2dnnpVy0+Fd IhG308ZEpZ/Dim+KB4tz5q9I5xHZROEYmARLnlHNbwYINeopEgM+YVrZSnUoH6eR I7pn/NZHr1//xUtDJFyZk/OFDmECAwEAAaOCApswggKXMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFGyvmWJ09WXcVTJqrK/VTxnrpT/5MB8GA1UdIwQYMBaAFKVu hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTA3OTIzNzg3Mzg0NjI1NTYxNy8wLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDc5MjM3ODczODQ2MjU1NjE3 LzAvNkNBRjk5NjI3NEY1NjVEQzU1MzI2QUFDQUZENTRGMTlFQkE1M0ZGOS5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUH AQcBAf8EETAPMA0EAgACMAcDBQAkAk1gMA0GCSqGSIb3DQEBCwUAA4IBAQA8Q30v Qw/Y08vsBz9fVnZNVzm6ZkEPwwpsapbFTbiRmkKBseyzVIJ5FOwHRVIWpS7nBI0U rvV0xJ4VxJR5l5bbqMWbFlFRY7Lgbm5ujF/IIV8CgscqLI+39OH4uy1MO4ixBCKB BWkeweZNFHes/pQBDuKws8LV08run9LO2f+GdE+S/Q7VcCpTjHn7GQazPNYZ5wMv IqsZLI1Y+U8pmKu7+Xnb4FAaM1ExJIyFPl69Nlis3HAxioykcWwvPnRZtpOyvGJi EzBixGanYjOCIAkyKqK4tEEXTKJjClVezPdH/PqBvEElLBtGLQxnNHfyuzPXFoZn bbqtHqvzXthStXpE -----END CERTIFICATE-----Generated at Fri May 29 21:13:21 2026 by rpki-client