$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A687EA30FD9E95B0BB466DADF0E27AF98F217CF7.cer File: A687EA30FD9E95B0BB466DADF0E27AF98F217CF7.cer (raw, json) Hash identifier: o+asfqmmnu3AwARwRybtqhq+H/QKwxYlfsrZqW+GsqE= Subject key identifier: A6:87:EA:30:FD:9E:95:B0:BB:46:6D:AD:F0:E2:7A:F9:8F:21:7C:F7 Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Certificate serial: 28B04C5BCD3F686AA051C3977555DC1D23C55C71 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1111552433223434259/0/A687EA30FD9E95B0BB466DADF0E27AF98F217CF7.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1111552433223434259/0/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Tue 26 May 2026 07:15:16 +0000 Certificate not after: Tue 25 May 2027 07:20:16 +0000 Subordinate resources: AS: 137746 IP: 103.135.192.0/22 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 15:28:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:b0:4c:5b:cd:3f:68:6a:a0:51:c3:97:75:55:dc:1d:23:c5:5c:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Validity Not Before: May 26 07:15:16 2026 GMT Not After : May 25 07:20:16 2027 GMT Subject: CN=A687EA30FD9E95B0BB466DADF0E27AF98F217CF7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:f0:81:b7:1e:20:b9:5b:c8:fc:c9:97:67:ee: 64:5d:29:47:d1:fc:04:9e:c5:4a:70:80:94:fe:42: e4:54:6b:ca:6d:7b:0b:0c:46:78:c7:93:de:cf:7a: 5f:c6:bd:61:3f:25:81:64:84:33:be:c4:f2:6b:dc: ee:52:5a:2a:fd:73:23:16:89:0f:67:8e:d3:df:e8: 02:97:86:34:12:2a:09:30:10:79:55:3f:c9:1d:3a: 9f:0c:5b:4f:4a:e6:f5:72:24:61:4b:32:fe:b1:91: 3d:2f:e3:5d:7f:2a:29:02:09:c9:a5:33:08:98:cb: 13:ad:ed:2c:d9:61:1b:91:fa:4e:b4:1e:15:ef:f0: 44:c2:c1:b7:d2:1c:48:4a:5f:a8:ff:53:fe:90:82: 02:49:44:09:2d:79:5a:9b:9b:0a:4d:59:d9:84:dc: e8:a4:56:a8:2d:01:6a:87:b6:90:84:fe:f7:df:65: 76:83:13:00:f3:42:df:ed:9e:8c:88:54:72:6a:1b: d8:85:47:dd:5f:3e:f4:2d:34:9a:6f:7f:43:34:94: 12:62:74:55:46:e1:30:85:23:ab:2d:d9:a6:c4:3b: d1:fc:37:7d:21:7a:d4:44:34:ca:88:c1:1e:5d:1e: 96:88:79:37:d3:78:45:4f:f8:2f:f5:42:a5:e9:a2: 26:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: A6:87:EA:30:FD:9E:95:B0:BB:46:6D:AD:F0:E2:7A:F9:8F:21:7C:F7 X509v3 Authority Key Identifier: keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1111552433223434259/0/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1111552433223434259/0/A687EA30FD9E95B0BB466DADF0E27AF98F217CF7.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.135.192.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 137746 Signature Algorithm: sha256WithRSAEncryption 82:e3:fe:0b:1a:8a:85:d9:fc:e3:7a:49:5a:d8:5b:96:a2:4a: 5a:a2:87:a2:71:3a:eb:6f:7d:42:80:d4:7d:1f:14:06:82:ad: 3a:89:e6:4f:a6:7c:8b:c8:6e:0e:a0:57:fe:b2:96:4a:bc:57: 57:dd:fb:3e:03:f1:6d:8a:08:f0:61:6b:32:91:2e:f5:a5:a2: 3d:aa:ab:6b:70:66:a3:cf:ec:9a:7c:17:0d:aa:b4:cb:8a:f5: d5:a5:5b:06:58:95:49:7f:8f:ff:44:0b:a7:66:99:b2:f3:4d: 15:22:0d:eb:cb:3b:f3:e5:fb:26:8e:11:e0:7b:ed:25:93:61: 38:22:15:2c:ca:a8:4a:6b:a9:dc:cf:fd:b8:47:df:8c:4d:f7: 43:3c:6a:2e:23:01:c9:2d:01:de:eb:61:4b:14:6c:7c:1a:ac: 42:c5:73:4d:ef:41:5e:1f:eb:ac:80:4d:b7:25:52:56:18:c3: 74:fe:46:b3:d4:a8:45:a3:d8:6d:46:5d:f0:54:b7:3d:4e:84: 28:83:85:9e:0e:35:b6:78:73:ee:26:ae:1a:e1:ae:95:43:a3: 79:93:a3:24:52:2c:e1:b2:4d:6e:1a:c8:77:b3:2c:10:a8:b7: a4:12:84:50:f9:74:b6:ac:79:14:2e:67:db:16:c7:0f:3c:e0: 67:85:6a:7f -----BEGIN CERTIFICATE----- MIIFwzCCBKugAwIBAgIUKLBMW80/aGqgUcOXdVXcHSPFXHEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDUyNjA3MTUxNloX DTI3MDUyNTA3MjAxNlowMzExMC8GA1UEAxMoQTY4N0VBMzBGRDlFOTVCMEJCNDY2 REFERjBFMjdBRjk4RjIxN0NGNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMXwgbceILlbyPzJl2fuZF0pR9H8BJ7FSnCAlP5C5FRrym17CwxGeMeT3s96 X8a9YT8lgWSEM77E8mvc7lJaKv1zIxaJD2eO09/oApeGNBIqCTAQeVU/yR06nwxb T0rm9XIkYUsy/rGRPS/jXX8qKQIJyaUzCJjLE63tLNlhG5H6TrQeFe/wRMLBt9Ic SEpfqP9T/pCCAklECS15WpubCk1Z2YTc6KRWqC0Baoe2kIT+999ldoMTAPNC3+2e jIhUcmob2IVH3V8+9C00mm9/QzSUEmJ0VUbhMIUjqy3ZpsQ70fw3fSF61EQ0yojB Hl0eloh5N9N4RU/4L/VCpemiJmMCAwEAAaOCArYwggKyMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFKaH6jD9npWwu0ZtrfDievmPIXz3MB8GA1UdIwQYMBaAFKVu hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTExMTU1MjQzMzIyMzQzNDI1OS8wLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMTExNTUyNDMzMjIzNDM0MjU5 LzAvQTY4N0VBMzBGRDlFOTVCMEJCNDY2REFERjBFMjdBRjk4RjIxN0NGNy5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAJnh8AwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQID AhoSMA0GCSqGSIb3DQEBCwUAA4IBAQCC4/4LGoqF2fzjekla2FuWokpaooeicTrr b31CgNR9HxQGgq06ieZPpnyLyG4OoFf+spZKvFdX3fs+A/FtigjwYWsykS71paI9 qqtrcGajz+yafBcNqrTLivXVpVsGWJVJf4//RAunZpmy800VIg3ryzvz5fsmjhHg e+0lk2E4IhUsyqhKa6ncz/24R9+MTfdDPGouIwHJLQHe62FLFGx8GqxCxXNN70Fe H+usgE23JVJWGMN0/kaz1KhFo9htRl3wVLc9ToQog4WeDjW2eHPuJq4a4a6VQ6N5 k6MkUizhsk1uGsh3sywQqLekEoRQ+XS2rHkULmfbFscPPOBnhWp/ -----END CERTIFICATE-----Generated at Fri May 29 21:11:49 2026 by rpki-client