$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7168563389D6040E01C75892D6228B15ABD8EFB5.cer File: 7168563389D6040E01C75892D6228B15ABD8EFB5.cer (raw, json) Hash identifier: 3WxeLuaV+pt2/z+V4gFO3xAGK8St6kZrhmcsoEtn/tM= Subject key identifier: 71:68:56:33:89:D6:04:0E:01:C7:58:92:D6:22:8B:15:AB:D8:EF:B5 Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Certificate serial: 2EB4BD66A31125EFCB61E8C9C2D810D2B38B485E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1114728285448699927/0/7168563389D6040E01C75892D6228B15ABD8EFB5.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1114728285448699927/0/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Thu 04 Jun 2026 01:27:15 +0000 Certificate not after: Thu 03 Jun 2027 01:32:15 +0000 Subordinate resources: IP: 113.213.0.0/17 IP: 118.88.32.0/19 IP: 2400:5600::/32 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Jun 2026 04:35:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:b4:bd:66:a3:11:25:ef:cb:61:e8:c9:c2:d8:10:d2:b3:8b:48:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Validity Not Before: Jun 4 01:27:15 2026 GMT Not After : Jun 3 01:32:15 2027 GMT Subject: CN=7168563389D6040E01C75892D6228B15ABD8EFB5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:86:f8:ff:fe:e2:bf:b4:3a:91:2a:c8:65:64: 82:a7:30:85:c3:4c:70:b0:67:79:72:af:0b:c9:18: f3:33:d9:cd:88:f8:c9:4e:a9:b5:75:cc:bf:ef:38: ad:1b:5e:fc:0c:d7:24:df:60:3e:dd:94:6d:0b:6b: d5:21:c7:8c:dd:f3:52:e6:ac:fd:04:48:ea:55:28: ba:b0:82:8f:e8:4a:9b:6d:29:99:00:bb:2b:f9:2d: 40:7e:62:f4:26:24:c4:67:53:6d:ae:af:21:fe:67: e9:37:8a:ab:6d:91:66:fe:55:fb:c7:ae:ed:f2:5c: 40:ec:dd:e9:19:58:40:73:03:a7:b3:43:f6:23:0f: 25:7e:dd:ac:3b:b7:63:9a:19:35:10:82:c7:da:7f: d4:cb:7f:79:5f:f6:ca:16:3a:5c:4f:0e:0f:6d:b5: 2d:94:b2:c5:ec:f6:40:aa:23:f0:ad:ab:a2:4e:09: f4:08:d2:41:02:b0:4e:70:67:3a:b0:c9:7c:bb:ff: d9:39:01:15:10:45:a0:c6:87:a3:13:31:2f:29:e9: 3e:87:e5:fb:95:df:d6:f7:56:ee:08:58:a5:cf:e6: 4e:a6:cd:67:31:a2:01:c9:32:25:78:6b:ec:25:f3: c2:11:c1:11:5f:f1:a3:a5:98:50:b9:1d:6a:ff:88: c6:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 71:68:56:33:89:D6:04:0E:01:C7:58:92:D6:22:8B:15:AB:D8:EF:B5 X509v3 Authority Key Identifier: keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1114728285448699927/0/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1114728285448699927/0/7168563389D6040E01C75892D6228B15ABD8EFB5.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 113.213.0.0/17 118.88.32.0/19 IPv6: 2400:5600::/32 Signature Algorithm: sha256WithRSAEncryption 2c:94:b7:6e:d6:04:7c:4a:f6:88:0c:17:0b:f1:8c:83:91:9b: f6:81:d7:d6:c8:7f:38:94:ad:39:4c:db:81:d2:b9:f1:84:7c: 31:8f:76:c7:2a:74:36:ad:8f:d7:0e:6d:31:25:44:34:68:66: df:4a:8b:01:65:3a:83:26:79:2c:d3:78:6a:fe:9f:85:e6:ee: fe:8d:6d:ac:60:7d:20:05:82:3a:34:7a:4b:e0:13:f7:4e:10: ae:0d:e4:57:5d:be:2b:42:8b:6a:9f:9a:d3:d9:35:68:91:75: a7:7f:bb:d1:55:e5:14:e1:fc:d1:fe:8c:da:94:d2:b8:d3:cf: 2d:40:f6:27:31:c0:be:72:d3:7a:af:71:77:55:2c:45:80:61: 5d:c7:19:4a:58:f6:71:39:fc:50:83:c7:7b:93:7d:5c:31:dd: 7f:ab:98:5f:6d:5e:0c:9e:43:ac:ba:04:38:29:42:16:c0:5e: 30:80:f9:74:19:56:b9:93:1a:ed:ad:2a:d6:e6:d8:b5:ed:0e: b0:4b:16:10:c7:d7:2f:05:dd:ff:63:7d:8b:2d:04:7c:b1:3d: 20:fc:57:9a:a4:d7:98:eb:bc:74:f1:b6:67:da:35:c2:c3:ca: 8b:63:19:3d:d9:75:75:59:2d:2f:b7:7b:38:7b:af:ef:47:81: 41:d6:09:84 -----BEGIN CERTIFICATE----- MIIFvDCCBKSgAwIBAgIULrS9ZqMRJe/LYejJwtgQ0rOLSF4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDYwNDAxMjcxNVoX DTI3MDYwMzAxMzIxNVowMzExMC8GA1UEAxMoNzE2ODU2MzM4OUQ2MDQwRTAxQzc1 ODkyRDYyMjhCMTVBQkQ4RUZCNTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOKG+P/+4r+0OpEqyGVkgqcwhcNMcLBneXKvC8kY8zPZzYj4yU6ptXXMv+84 rRte/AzXJN9gPt2UbQtr1SHHjN3zUuas/QRI6lUourCCj+hKm20pmQC7K/ktQH5i 9CYkxGdTba6vIf5n6TeKq22RZv5V+8eu7fJcQOzd6RlYQHMDp7ND9iMPJX7drDu3 Y5oZNRCCx9p/1Mt/eV/2yhY6XE8OD221LZSyxez2QKoj8K2rok4J9AjSQQKwTnBn OrDJfLv/2TkBFRBFoMaHoxMxLynpPofl+5Xf1vdW7ghYpc/mTqbNZzGiAckyJXhr 7CXzwhHBEV/xo6WYULkdav+IxmUCAwEAAaOCAq8wggKrMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFHFoVjOJ1gQOAcdYktYiixWr2O+1MB8GA1UdIwQYMBaAFKVu hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTExNDcyODI4NTQ0ODY5OTkyNy8wLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMTE0NzI4Mjg1NDQ4Njk5OTI3 LzAvNzE2ODU2MzM4OUQ2MDQwRTAxQzc1ODkyRDYyMjhCMTVBQkQ4RUZCNS5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwNAYIKwYBBQUH AQcBAf8EJTAjMBIEAgABMAwDBAdx1QADBAV2WCAwDQQCAAIwBwMFACQAVgAwDQYJ KoZIhvcNAQELBQADggEBACyUt27WBHxK9ogMFwvxjIORm/aB19bIfziUrTlM24HS ufGEfDGPdscqdDatj9cObTElRDRoZt9KiwFlOoMmeSzTeGr+n4Xm7v6NbaxgfSAF gjo0ekvgE/dOEK4N5FddvitCi2qfmtPZNWiRdad/u9FV5RTh/NH+jNqU0rjTzy1A 9icxwL5y03qvcXdVLEWAYV3HGUpY9nE5/FCDx3uTfVwx3X+rmF9tXgyeQ6y6BDgp QhbAXjCA+XQZVrmTGu2tKtbm2LXtDrBLFhDH1y8F3f9jfYstBHyxPSD8V5qk15jr vHTxtmfaNcLDyotjGT3ZdXVZLS+3ezh7r+9HgUHWCYQ= -----END CERTIFICATE-----Generated at Fri Jun 12 07:50:19 2026 by rpki-client