$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7F08B8DC6E267E8B159C15F2F20AB10B347C7A20.cer File: 7F08B8DC6E267E8B159C15F2F20AB10B347C7A20.cer (raw, json) Hash identifier: K3MiR83f4uV5YsIiF6GiZaK5Gfki6dODYtk1JwApaTs= Subject key identifier: 7F:08:B8:DC:6E:26:7E:8B:15:9C:15:F2:F2:0A:B1:0B:34:7C:7A:20 Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Certificate serial: 2368713DE45EF1175F855AFF3EF24008AAE2C8DD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1065582330346733569/0/7F08B8DC6E267E8B159C15F2F20AB10B347C7A20.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1065582330346733569/0/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Thu 28 May 2026 08:25:50 +0000 Certificate not after: Thu 27 May 2027 08:30:50 +0000 Subordinate resources: AS: 131482 IP: 103.72.120.0/22 IP: 2406:dd80::/32 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 15:28:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:68:71:3d:e4:5e:f1:17:5f:85:5a:ff:3e:f2:40:08:aa:e2:c8:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Validity Not Before: May 28 08:25:50 2026 GMT Not After : May 27 08:30:50 2027 GMT Subject: CN=7F08B8DC6E267E8B159C15F2F20AB10B347C7A20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:0f:c7:87:6d:a3:a4:50:76:56:b6:4a:2e:ee: 39:96:6e:4a:68:62:ed:7c:64:03:9c:d8:51:e9:72: 16:00:74:5e:2d:55:31:80:71:25:7e:8f:a6:f9:d3: cb:52:46:05:f9:1c:d8:50:92:7f:a4:d9:fb:ba:df: f3:2d:3d:8d:b6:b5:0d:97:3e:83:bc:e7:0a:77:0e: 68:0a:37:ea:a6:14:45:3e:86:3a:ff:0f:a3:d7:e8: 9e:eb:ae:15:9f:fe:d2:f3:66:54:ab:1b:33:30:d0: 54:2c:3c:ce:3f:00:51:ab:e2:e1:ff:b3:74:74:39: 24:85:02:4e:92:63:26:f4:ba:3c:c3:4d:db:a0:7b: 61:7f:32:5a:11:34:19:24:af:2c:2c:39:2c:f3:f5: b2:c3:d5:43:ff:19:df:51:28:ee:b0:3b:05:41:b8: b2:02:1c:16:8e:1f:25:53:82:37:87:97:e4:b3:bf: 9f:10:c5:9c:0d:c9:87:1c:18:24:20:1a:f1:cd:f9: 0a:af:d4:1e:87:82:bd:14:30:6f:23:a6:f0:aa:c8: 93:32:f9:95:70:7c:a6:50:a1:f4:4f:16:d4:cc:56: ac:62:31:18:71:33:7c:b0:33:6a:c0:85:fe:38:c3: 2d:9a:69:42:14:5c:11:bb:fb:4d:c6:5d:7b:a9:7a: b3:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 7F:08:B8:DC:6E:26:7E:8B:15:9C:15:F2:F2:0A:B1:0B:34:7C:7A:20 X509v3 Authority Key Identifier: keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330346733569/0/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330346733569/0/7F08B8DC6E267E8B159C15F2F20AB10B347C7A20.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.72.120.0/22 IPv6: 2406:dd80::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 131482 Signature Algorithm: sha256WithRSAEncryption 4c:89:55:75:37:93:7b:22:55:ce:b2:2b:a0:ba:1d:12:6a:7f: 2a:23:82:04:b3:54:64:d4:f9:7e:b1:1e:3c:55:4a:70:fe:f1: 1b:05:8d:67:6d:fe:3b:b3:79:83:51:64:c2:2c:5b:15:1b:7f: 36:1b:e4:1e:da:8c:68:e0:23:99:3f:08:64:be:bb:72:3b:cd: d6:15:7b:62:18:7c:61:da:dc:5c:9f:2e:46:4a:0c:68:5c:9a: eb:f9:dd:90:8a:a8:b2:01:81:f6:c4:3f:11:64:40:d2:be:55: c0:51:94:74:4c:47:ad:00:cd:19:8c:8f:71:d1:2d:50:79:82: 70:e9:8d:c5:da:c7:ef:60:f6:5d:51:4f:fe:a9:6c:49:d2:a4: 11:3f:75:05:2d:68:ed:65:c4:ae:6f:3a:16:c3:b6:0d:22:a2: 36:2a:bd:b4:81:19:8f:f4:ae:01:04:5d:b2:1e:00:af:68:95: 73:70:4f:a0:ff:63:8e:89:da:b5:9a:08:9e:d1:7f:c5:4d:74: 48:b9:8a:93:3c:06:d0:bd:69:54:3c:93:de:83:a9:43:05:9a: 09:f2:4a:b1:25:2e:3b:12:56:72:04:f3:5a:4b:a8:af:85:0d: 6e:10:86:13:20:92:fb:c3:1b:b7:fc:30:bd:21:ed:a9:ed:4a: 9c:7c:f4:9e -----BEGIN CERTIFICATE----- MIIF0jCCBLqgAwIBAgIUI2hxPeRe8RdfhVr/PvJACKriyN0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDUyODA4MjU1MFoX DTI3MDUyNzA4MzA1MFowMzExMC8GA1UEAxMoN0YwOEI4REM2RTI2N0U4QjE1OUMx NUYyRjIwQUIxMEIzNDdDN0EyMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJgPx4dto6RQdla2Si7uOZZuSmhi7XxkA5zYUelyFgB0Xi1VMYBxJX6PpvnT y1JGBfkc2FCSf6TZ+7rf8y09jba1DZc+g7znCncOaAo36qYURT6GOv8Po9fonuuu FZ/+0vNmVKsbMzDQVCw8zj8AUavi4f+zdHQ5JIUCTpJjJvS6PMNN26B7YX8yWhE0 GSSvLCw5LPP1ssPVQ/8Z31Eo7rA7BUG4sgIcFo4fJVOCN4eX5LO/nxDFnA3JhxwY JCAa8c35Cq/UHoeCvRQwbyOm8KrIkzL5lXB8plCh9E8W1MxWrGIxGHEzfLAzasCF /jjDLZppQhRcEbv7TcZde6l6s6ECAwEAAaOCAsUwggLBMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFH8IuNxuJn6LFZwV8vIKsQs0fHogMB8GA1UdIwQYMBaAFKVu hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTA2NTU4MjMzMDM0NjczMzU2OS8wLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDY1NTgyMzMwMzQ2NzMzNTY5 LzAvN0YwOEI4REM2RTI2N0U4QjE1OUMxNUYyRjIwQUIxMEIzNDdDN0EyMC5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUH AQcBAf8EHzAdMAwEAgABMAYDBAJnSHgwDQQCAAIwBwMFACQG3YAwGgYIKwYBBQUH AQgBAf8ECzAJoAcwBQIDAgGaMA0GCSqGSIb3DQEBCwUAA4IBAQBMiVV1N5N7IlXO siuguh0San8qI4IEs1Rk1Pl+sR48VUpw/vEbBY1nbf47s3mDUWTCLFsVG382G+Qe 2oxo4COZPwhkvrtyO83WFXtiGHxh2txcny5GSgxoXJrr+d2QiqiyAYH2xD8RZEDS vlXAUZR0TEetAM0ZjI9x0S1QeYJw6Y3F2sfvYPZdUU/+qWxJ0qQRP3UFLWjtZcSu bzoWw7YNIqI2Kr20gRmP9K4BBF2yHgCvaJVzcE+g/2OOidq1mgie0X/FTXRIuYqT PAbQvWlUPJPeg6lDBZoJ8kqxJS47ElZyBPNaS6ivhQ1uEIYTIJL7wxu3/DC9Ie2p 7UqcfPSe -----END CERTIFICATE-----Generated at Fri May 29 21:13:52 2026 by rpki-client