$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6DB7BEC2F251B209F570DD156FE1574B6D030B3D.cer File: 6DB7BEC2F251B209F570DD156FE1574B6D030B3D.cer (raw, json) Hash identifier: 4NZ5YDiul37gTD6OQKQWjN12xV09w+LQNDenzAZj/Aw= Subject key identifier: 6D:B7:BE:C2:F2:51:B2:09:F5:70:DD:15:6F:E1:57:4B:6D:03:0B:3D Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Certificate serial: 11F1C3BE4971AF654AB5800C518F7FBF600E6028 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1095955785751461891/0/6DB7BEC2F251B209F570DD156FE1574B6D030B3D.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1095955785751461891/0/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Mon 13 Apr 2026 06:12:02 +0000 Certificate not after: Mon 12 Apr 2027 06:17:02 +0000 Subordinate resources: IP: 43.225.216.0 -- 43.225.247.255 IP: 103.44.176.0/22 IP: 103.44.196.0 -- 103.44.207.255 IP: 103.79.204.0/22 IP: 103.79.212.0/22 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 12:10:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:f1:c3:be:49:71:af:65:4a:b5:80:0c:51:8f:7f:bf:60:0e:60:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Validity Not Before: Apr 13 06:12:02 2026 GMT Not After : Apr 12 06:17:02 2027 GMT Subject: CN=6DB7BEC2F251B209F570DD156FE1574B6D030B3D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:a7:cd:ac:9c:a9:84:eb:a4:8f:23:5d:86:94: a3:2a:e8:23:d7:61:74:0e:47:ac:ed:1e:fe:8b:c3: d0:5f:08:a3:e3:7b:5e:a0:67:cc:bc:c6:89:19:f6: 7e:84:ac:d4:a9:19:ee:55:d3:03:14:b3:d7:1a:fb: 38:e5:6d:5e:8c:15:17:60:39:68:c7:91:37:31:02: 21:fc:0c:25:65:fa:eb:fd:f5:59:e4:5c:c0:a0:2a: 20:2d:a5:f9:3c:32:67:40:4d:11:54:88:0f:67:73: dc:c7:d8:cb:11:3e:1c:50:a9:dd:7c:09:c1:ce:54: c4:56:e8:a1:89:61:dc:a1:7a:44:20:18:22:fc:99: 23:88:12:ec:ec:de:0f:b6:a1:40:17:b8:dd:3d:65: a0:40:86:77:4b:93:d2:8e:0f:9c:99:d0:1d:d1:fa: d2:43:9a:ae:94:27:3c:99:6c:23:d1:a0:68:b3:43: 37:94:11:cd:da:73:3f:2c:97:1f:1a:6a:52:dd:dd: 8b:15:84:9f:fb:1e:f5:14:46:15:b3:df:72:22:43: 2e:b1:e0:85:5c:f0:79:0c:f1:7f:29:0b:d9:13:85: cc:01:e4:2c:71:ef:53:85:f8:aa:66:2c:99:f4:7c: 6a:c8:ec:5a:25:a8:04:14:5f:87:8f:05:24:78:aa: 27:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 6D:B7:BE:C2:F2:51:B2:09:F5:70:DD:15:6F:E1:57:4B:6D:03:0B:3D X509v3 Authority Key Identifier: keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1095955785751461891/0/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1095955785751461891/0/6DB7BEC2F251B209F570DD156FE1574B6D030B3D.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.225.216.0-43.225.247.255 103.44.176.0/22 103.44.196.0-103.44.207.255 103.79.204.0/22 103.79.212.0/22 Signature Algorithm: sha256WithRSAEncryption 6a:b3:f4:ec:aa:98:38:61:aa:bd:84:b3:46:76:b0:94:c0:c1: 27:de:d5:47:ed:99:65:35:d9:b0:b9:78:e4:7b:e7:68:b2:ef: 42:5f:5a:e1:42:7f:52:58:75:73:2d:67:13:01:c2:51:73:71: d5:8b:e1:3b:45:e7:6a:af:58:b4:ad:3c:28:1d:70:8c:53:94: 83:c3:15:dd:fa:0a:8b:e3:a9:86:d2:a1:99:ad:6b:c0:7e:32: 0c:1c:81:d6:f9:9b:4f:3a:90:81:4d:57:52:b0:b4:07:73:ac: ff:26:4a:79:0a:fc:a5:a9:a6:13:bd:57:b1:79:ff:d7:55:e3: ea:1d:5f:01:45:24:2f:ed:8e:2c:20:d5:fa:cc:0f:92:0a:da: ed:8f:5b:f7:49:d3:91:a1:c9:e8:83:6d:c0:e0:5e:63:9e:81: b2:d2:7c:32:8c:cf:1f:d8:03:de:72:a3:10:60:b1:b2:d7:f5: a6:60:be:4d:e3:a7:cf:29:9b:49:49:c5:69:7a:04:7a:27:c2: 96:ce:9c:24:df:2e:6a:63:96:79:70:0e:8e:d8:a4:d4:41:5f: 33:52:99:9e:b8:55:b2:d7:2d:68:6f:b5:44:0c:3e:a1:9e:47: f3:34:a6:a7:16:89:4a:e8:1a:74:f9:e2:a8:f1:9b:c2:43:c4: 39:0e:95:05 -----BEGIN CERTIFICATE----- MIIFzzCCBLegAwIBAgIUEfHDvklxr2VKtYAMUY9/v2AOYCgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDQxMzA2MTIwMloX DTI3MDQxMjA2MTcwMlowMzExMC8GA1UEAxMoNkRCN0JFQzJGMjUxQjIwOUY1NzBE RDE1NkZFMTU3NEI2RDAzMEIzRDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALynzaycqYTrpI8jXYaUoyroI9dhdA5HrO0e/ovD0F8Io+N7XqBnzLzGiRn2 foSs1KkZ7lXTAxSz1xr7OOVtXowVF2A5aMeRNzECIfwMJWX66/31WeRcwKAqIC2l +TwyZ0BNEVSID2dz3MfYyxE+HFCp3XwJwc5UxFbooYlh3KF6RCAYIvyZI4gS7Oze D7ahQBe43T1loECGd0uT0o4PnJnQHdH60kOarpQnPJlsI9GgaLNDN5QRzdpzPyyX HxpqUt3dixWEn/se9RRGFbPfciJDLrHghVzweQzxfykL2ROFzAHkLHHvU4X4qmYs mfR8asjsWiWoBBRfh48FJHiqJ48CAwEAAaOCAsIwggK+MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFG23vsLyUbIJ9XDdFW/hV0ttAws9MB8GA1UdIwQYMBaAFKVu hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTA5NTk1NTc4NTc1MTQ2MTg5MS8wLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDk1OTU1Nzg1NzUxNDYxODkx LzAvNkRCN0JFQzJGMjUxQjIwOUY1NzBERDE1NkZFMTU3NEI2RDAzMEIzRC5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwRwYIKwYBBQUH AQcBAf8EODA2MDQEAgABMC4wDAMEAyvh2AMEAyvh8AMEAmcssDAMAwQCZyzEAwQE ZyzAAwQCZ0/MAwQCZ0/UMA0GCSqGSIb3DQEBCwUAA4IBAQBqs/Tsqpg4Yaq9hLNG drCUwMEn3tVH7ZllNdmwuXjke+dosu9CX1rhQn9SWHVzLWcTAcJRc3HVi+E7Redq r1i0rTwoHXCMU5SDwxXd+gqL46mG0qGZrWvAfjIMHIHW+ZtPOpCBTVdSsLQHc6z/ Jkp5CvylqaYTvVexef/XVePqHV8BRSQv7Y4sINX6zA+SCtrtj1v3SdORocnog23A 4F5jnoGy0nwyjM8f2APecqMQYLGy1/WmYL5N46fPKZtJScVpegR6J8KWzpwk3y5q Y5Z5cA6O2KTUQV8zUpmeuFWy1y1ob7VEDD6hnkfzNKanFolK6Bp0+eKo8ZvCQ8Q5 DpUF -----END CERTIFICATE-----Generated at Mon Apr 13 09:28:15 2026 by rpki-client