$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A59FB55F8B3E4069427878BD5BA7FF41A1691B5B.cer File: A59FB55F8B3E4069427878BD5BA7FF41A1691B5B.cer (raw, json) Hash identifier: w3oFR+8GnalRXBUwao9DdXk9s2klWagpXSrfObu27jo= Subject key identifier: A5:9F:B5:5F:8B:3E:40:69:42:78:78:BD:5B:A7:FF:41:A1:69:1B:5B Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Certificate serial: 06157B435BDA34D7A8EA6465BCE1F9AB67BC0732 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1065582741577465858/0/A59FB55F8B3E4069427878BD5BA7FF41A1691B5B.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1065582741577465858/0/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Thu 28 May 2026 08:59:54 +0000 Certificate not after: Thu 27 May 2027 09:04:54 +0000 Subordinate resources: AS: 131567 IP: 103.96.8.0/22 IP: 2401:7240::/32 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 15:28:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:15:7b:43:5b:da:34:d7:a8:ea:64:65:bc:e1:f9:ab:67:bc:07:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Validity Not Before: May 28 08:59:54 2026 GMT Not After : May 27 09:04:54 2027 GMT Subject: CN=A59FB55F8B3E4069427878BD5BA7FF41A1691B5B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:d8:f5:36:41:22:99:b7:9f:8b:33:98:4f:bd: da:01:ab:65:db:96:34:ca:25:2a:c5:71:f7:72:15: fa:22:b4:dc:91:10:f5:20:b7:8c:8c:d2:06:d2:48: b6:5c:aa:e1:5a:b4:a7:48:fb:41:1a:58:b4:96:17: 76:9f:cd:22:37:94:0b:20:d0:78:92:10:dc:9c:c9: 3d:70:d0:31:1d:c2:6c:ba:fc:e1:61:64:55:d1:27: 66:90:c5:a9:63:5f:fb:08:c9:50:33:a0:f8:ab:50: b9:a3:ba:8e:a3:d0:a1:99:96:18:54:bc:9e:1f:6d: 30:56:85:19:39:1b:b9:c6:79:55:60:92:b6:1d:1e: b3:d0:a9:a6:4b:9f:f1:9a:6c:45:a1:b4:25:f2:15: 94:40:f6:05:0b:68:92:32:c7:bc:46:01:b5:c6:9e: 0c:6a:fa:1b:d7:0d:2f:11:f9:58:2b:85:02:11:f8: b6:45:c7:e5:8c:02:9d:be:f3:56:df:d3:af:39:55: e2:db:5a:87:b4:cd:5c:00:f4:06:d5:bf:57:a7:93: 3f:de:1a:a8:39:c0:1e:70:79:78:04:d4:1f:99:f9: bf:3e:2a:da:44:c3:79:7e:48:f6:a4:82:ce:da:b8: 4e:ac:8d:1a:db:73:f6:18:43:1f:17:25:36:1f:86: dc:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: A5:9F:B5:5F:8B:3E:40:69:42:78:78:BD:5B:A7:FF:41:A1:69:1B:5B X509v3 Authority Key Identifier: keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577465858/0/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577465858/0/A59FB55F8B3E4069427878BD5BA7FF41A1691B5B.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.96.8.0/22 IPv6: 2401:7240::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 131567 Signature Algorithm: sha256WithRSAEncryption 65:36:29:bb:7f:99:77:55:81:87:aa:4d:35:26:b6:20:3c:b5: df:01:f3:06:1f:f6:82:18:c7:fb:22:97:85:06:d1:61:da:7e: c4:7c:62:a9:f1:ac:f5:a4:9e:cb:70:cf:d2:e5:b6:13:08:d5: d7:a5:1d:b7:09:c5:52:de:d3:f4:9c:52:5b:56:f7:12:b4:c6: 3e:6c:d4:2b:59:66:6a:77:cd:cc:dc:68:ee:f1:dc:98:62:f5: b2:1c:b5:5d:29:fc:cc:09:ed:5b:65:02:aa:c1:43:c4:d2:5d: ff:f7:7c:a3:57:69:22:7a:ac:66:d3:25:52:f7:72:c7:c0:f0: 39:d0:36:22:4f:fd:4b:d3:98:49:2b:bf:ac:7e:3f:ff:5c:d8: 53:40:d2:60:b4:6e:fa:c3:f5:f9:45:1c:ca:7a:d8:30:9a:b8: 19:3e:ea:e2:1e:5a:50:c5:7c:43:d5:bb:10:38:48:78:13:7a: d5:10:47:2d:1d:5d:b2:42:e8:2b:8c:c1:e7:64:d9:eb:1f:f1: f5:53:01:0d:3b:ce:c4:85:22:01:a9:69:15:8f:04:e8:66:89: 05:9f:97:51:68:7b:fa:89:86:ac:7b:c2:73:0c:85:3a:3c:4f: d9:a0:9d:53:a5:fd:0c:ca:ac:11:23:0e:3f:70:8c:62:c3:bb: e9:0e:40:61 -----BEGIN CERTIFICATE----- MIIF0jCCBLqgAwIBAgIUBhV7Q1vaNNeo6mRlvOH5q2e8BzIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDUyODA4NTk1NFoX DTI3MDUyNzA5MDQ1NFowMzExMC8GA1UEAxMoQTU5RkI1NUY4QjNFNDA2OTQyNzg3 OEJENUJBN0ZGNDFBMTY5MUI1QjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMDY9TZBIpm3n4szmE+92gGrZduWNMolKsVx93IV+iK03JEQ9SC3jIzSBtJI tlyq4Vq0p0j7QRpYtJYXdp/NIjeUCyDQeJIQ3JzJPXDQMR3CbLr84WFkVdEnZpDF qWNf+wjJUDOg+KtQuaO6jqPQoZmWGFS8nh9tMFaFGTkbucZ5VWCSth0es9Cppkuf 8ZpsRaG0JfIVlED2BQtokjLHvEYBtcaeDGr6G9cNLxH5WCuFAhH4tkXH5YwCnb7z Vt/TrzlV4ttah7TNXAD0BtW/V6eTP94aqDnAHnB5eATUH5n5vz4q2kTDeX5I9qSC ztq4TqyNGttz9hhDHxclNh+G3LkCAwEAAaOCAsUwggLBMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFKWftV+LPkBpQnh4vVun/0GhaRtbMB8GA1UdIwQYMBaAFKVu hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTA2NTU4Mjc0MTU3NzQ2NTg1OC8wLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDY1NTgyNzQxNTc3NDY1ODU4 LzAvQTU5RkI1NUY4QjNFNDA2OTQyNzg3OEJENUJBN0ZGNDFBMTY5MUI1Qi5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUH AQcBAf8EHzAdMAwEAgABMAYDBAJnYAgwDQQCAAIwBwMFACQBckAwGgYIKwYBBQUH AQgBAf8ECzAJoAcwBQIDAgHvMA0GCSqGSIb3DQEBCwUAA4IBAQBlNim7f5l3VYGH qk01JrYgPLXfAfMGH/aCGMf7IpeFBtFh2n7EfGKp8az1pJ7LcM/S5bYTCNXXpR23 CcVS3tP0nFJbVvcStMY+bNQrWWZqd83M3Gju8dyYYvWyHLVdKfzMCe1bZQKqwUPE 0l3/93yjV2kieqxm0yVS93LHwPA50DYiT/1L05hJK7+sfj//XNhTQNJgtG76w/X5 RRzKetgwmrgZPuriHlpQxXxD1bsQOEh4E3rVEEctHV2yQugrjMHnZNnrH/H1UwEN O87EhSIBqWkVjwToZokFn5dRaHv6iYase8JzDIU6PE/ZoJ1Tpf0MyqwRIw4/cIxi w7vpDkBh -----END CERTIFICATE-----Generated at Fri May 29 21:14:31 2026 by rpki-client