$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/718B6BD31D40E3621C7D523F0E9CC510E42CC2EC.cer File: 718B6BD31D40E3621C7D523F0E9CC510E42CC2EC.cer (raw, json) Hash identifier: uJq7P+fqZeFvWzk+lwV/EBe1/HT/O7D4qECy9aeZ23M= Subject key identifier: 71:8B:6B:D3:1D:40:E3:62:1C:7D:52:3F:0E:9C:C5:10:E4:2C:C2:EC Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Certificate serial: 76E6639D10FA6F005C99B981FB1FB7183016F5C7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1112641844421918741/0/718B6BD31D40E3621C7D523F0E9CC510E42CC2EC.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1112641844421918741/0/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Fri 29 May 2026 07:26:25 +0000 Certificate not after: Fri 28 May 2027 07:31:25 +0000 Subordinate resources: AS: 59014 IP: 43.229.168.0 -- 43.229.183.255 IP: 103.48.216.0 -- 103.48.231.255 IP: 219.83.160.0/19 IP: 2400:eda0::/32 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 15:28:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:e6:63:9d:10:fa:6f:00:5c:99:b9:81:fb:1f:b7:18:30:16:f5:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Validity Not Before: May 29 07:26:25 2026 GMT Not After : May 28 07:31:25 2027 GMT Subject: CN=718B6BD31D40E3621C7D523F0E9CC510E42CC2EC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:d9:95:0e:44:32:32:c8:02:8d:40:d2:ec:5e: bd:fc:30:81:fb:f6:d4:06:90:b1:5d:33:6e:16:c6: ec:d1:c4:73:8b:96:c4:65:d3:1f:63:9c:d2:33:38: 25:a3:c0:1c:c4:1a:ad:8d:2a:ec:28:7f:ba:9d:63: 08:bd:5e:bf:f1:1e:a8:cc:5d:26:25:68:5e:89:7e: 0c:47:e2:e6:ec:33:3f:38:1c:7b:87:7e:38:13:5e: b7:7e:6e:bf:89:dd:1b:38:f0:98:bc:5a:aa:61:60: c3:5b:45:47:4e:9d:b5:4a:b4:18:7e:04:ad:be:f3: 7b:d0:9b:77:ca:c1:e5:d4:55:f5:24:84:05:a2:89: e5:fe:10:45:36:a4:d8:68:30:6d:fa:cb:85:f5:bb: 23:d9:d2:cb:56:4c:17:bb:0b:2d:61:5d:56:68:fd: fa:ae:0b:22:32:4c:e1:8f:ed:fa:21:c1:3c:ef:dd: 38:e2:3b:cd:de:bc:32:62:5a:3a:bb:80:37:be:4c: 52:cf:ce:c4:6a:7c:57:6d:7b:75:7a:0c:57:da:0d: ce:62:d8:60:40:88:fa:35:b0:0e:fe:9a:d4:17:91: 3c:e2:d1:c6:60:10:a6:af:83:f4:ba:0c:c0:17:79: 9d:3b:f7:8d:59:20:1a:00:24:44:75:2b:16:99:19: 52:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 71:8B:6B:D3:1D:40:E3:62:1C:7D:52:3F:0E:9C:C5:10:E4:2C:C2:EC X509v3 Authority Key Identifier: keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1112641844421918741/0/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1112641844421918741/0/718B6BD31D40E3621C7D523F0E9CC510E42CC2EC.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.229.168.0-43.229.183.255 103.48.216.0-103.48.231.255 219.83.160.0/19 IPv6: 2400:eda0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 59014 Signature Algorithm: sha256WithRSAEncryption 96:db:d7:f9:68:5c:66:df:7f:e6:f9:df:05:14:61:18:e3:5f: 49:c0:55:6d:c6:48:a9:6a:b4:85:ad:ac:70:0f:68:ef:dc:8b: 32:f1:32:b0:1b:cf:05:15:8f:8f:59:b6:fa:9c:21:74:ba:d0: 35:49:ca:e3:a1:42:37:5d:3c:a4:2f:8b:25:86:4b:58:9b:61: 13:48:15:62:cc:35:46:26:bc:65:78:e1:0a:0e:fa:e9:5e:44: c2:02:19:48:79:d1:67:cb:80:c9:bf:e9:8c:02:7a:4a:79:61: ae:68:99:07:dc:1a:3f:e1:2e:8e:dd:0a:86:5a:ec:01:67:12: 84:df:a8:88:9b:18:7b:1b:28:b1:42:c9:aa:cb:d7:66:53:87: 57:4a:38:52:fc:28:34:fe:6e:da:9f:e8:f2:d4:63:bb:d7:ab: 8d:a7:4d:0c:ea:7f:1b:d0:d0:9d:74:cf:2b:f6:4b:a8:3a:5f: 9b:fb:5b:f1:83:25:7f:72:e3:f5:f0:39:0d:f8:b4:81:e3:9b: ec:08:4e:99:d9:57:6f:77:19:af:0f:36:36:f6:94:5f:ef:76: ad:04:ec:4a:11:e8:ec:af:d2:c4:54:fa:fc:0b:40:ad:7a:3a: 23:cd:66:6c:99:ba:9e:94:bc:d2:28:d0:47:6a:e6:0f:59:74: c9:8a:22:b5 -----BEGIN CERTIFICATE----- MIIF7jCCBNagAwIBAgIUduZjnRD6bwBcmbmB+x+3GDAW9ccwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDUyOTA3MjYyNVoX DTI3MDUyODA3MzEyNVowMzExMC8GA1UEAxMoNzE4QjZCRDMxRDQwRTM2MjFDN0Q1 MjNGMEU5Q0M1MTBFNDJDQzJFQzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANLZlQ5EMjLIAo1A0uxevfwwgfv21AaQsV0zbhbG7NHEc4uWxGXTH2Oc0jM4 JaPAHMQarY0q7Ch/up1jCL1ev/EeqMxdJiVoXol+DEfi5uwzPzgce4d+OBNet35u v4ndGzjwmLxaqmFgw1tFR06dtUq0GH4Erb7ze9Cbd8rB5dRV9SSEBaKJ5f4QRTak 2GgwbfrLhfW7I9nSy1ZMF7sLLWFdVmj9+q4LIjJM4Y/t+iHBPO/dOOI7zd68MmJa OruAN75MUs/OxGp8V217dXoMV9oNzmLYYECI+jWwDv6a1BeRPOLRxmAQpq+D9LoM wBd5nTv3jVkgGgAkRHUrFpkZUiUCAwEAAaOCAuEwggLdMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFHGLa9MdQONiHH1SPw6cxRDkLMLsMB8GA1UdIwQYMBaAFKVu hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTExMjY0MTg0NDQyMTkxODc0MS8wLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMTEyNjQxODQ0NDIxOTE4NzQx LzAvNzE4QjZCRDMxRDQwRTM2MjFDN0Q1MjNGMEU5Q0M1MTBFNDJDQzJFQy5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwSgYIKwYBBQUH AQcBAf8EOzA5MCgEAgABMCIwDAMEAyvlqAMEAyvlsDAMAwQDZzDYAwQDZzDgAwQF 21OgMA0EAgACMAcDBQAkAO2gMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwDmhjAN BgkqhkiG9w0BAQsFAAOCAQEAltvX+WhcZt9/5vnfBRRhGONfScBVbcZIqWq0ha2s cA9o79yLMvEysBvPBRWPj1m2+pwhdLrQNUnK46FCN108pC+LJYZLWJthE0gVYsw1 Ria8ZXjhCg766V5EwgIZSHnRZ8uAyb/pjAJ6SnlhrmiZB9waP+Eujt0KhlrsAWcS hN+oiJsYexsosULJqsvXZlOHV0o4UvwoNP5u2p/o8tRju9erjadNDOp/G9DQnXTP K/ZLqDpfm/tb8YMlf3Lj9fA5Dfi0geOb7AhOmdlXb3cZrw82NvaUX+92rQTsShHo 7K/SxFT6/AtArXo6I81mbJm6npS80ijQR2rmD1l0yYoitQ== -----END CERTIFICATE-----Generated at Fri May 29 21:12:20 2026 by rpki-client