$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AB70D36DCE8717D2389FFFB9BADCC60ECDC117B5.cer File: AB70D36DCE8717D2389FFFB9BADCC60ECDC117B5.cer (raw, json) Hash identifier: GgN84OhDd19jAMLWW4wsnqfW1L4AGRzYX4QmA/LX1AA= Subject key identifier: AB:70:D3:6D:CE:87:17:D2:38:9F:FF:B9:BA:DC:C6:0E:CD:C1:17:B5 Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Certificate serial: 2D34E0A5D5B940742AEBDE485BC14ADB23D2E840 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1114108580660772883/0/AB70D36DCE8717D2389FFFB9BADCC60ECDC117B5.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1114108580660772883/0/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Tue 02 Jun 2026 08:24:46 +0000 Certificate not after: Tue 01 Jun 2027 08:29:46 +0000 Subordinate resources: AS: 45115 IP: 103.107.220.0/22 IP: 2402:5f40::/32 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Jun 2026 19:04:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:34:e0:a5:d5:b9:40:74:2a:eb:de:48:5b:c1:4a:db:23:d2:e8:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Validity Not Before: Jun 2 08:24:46 2026 GMT Not After : Jun 1 08:29:46 2027 GMT Subject: CN=AB70D36DCE8717D2389FFFB9BADCC60ECDC117B5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:e1:af:91:f2:6f:57:a0:8f:2e:c9:2d:12:c4: 56:e4:b0:fc:df:be:cf:00:c7:fc:29:3d:6b:1b:b6: 36:07:70:b8:40:e4:a5:49:4d:0d:20:b2:65:e0:59: d3:81:af:a2:58:d7:40:c2:8d:6f:f4:49:be:bc:35: 35:99:26:28:c7:e6:20:11:93:63:bd:0d:ff:07:bf: d1:50:29:c7:e8:6f:d1:78:f0:a9:40:20:2a:2d:92: c5:33:20:db:4e:75:47:4d:84:df:25:09:63:10:2e: d2:33:07:ca:07:f5:4b:04:2b:1b:ac:f4:6e:b9:b5: d3:2a:2b:fa:80:f1:1a:30:82:46:d8:17:22:e7:9b: 0d:80:38:d6:6a:c4:e5:f6:f1:3b:9c:99:c0:d9:03: aa:df:a2:e8:8f:d6:c5:bb:88:95:f2:7f:ff:00:c2: 2b:94:c5:ca:35:09:60:fe:88:ac:14:db:ef:ec:3c: c8:c1:9c:a3:3b:58:85:52:ad:3c:61:a7:5c:e5:8c: 02:d7:f3:5a:d0:e8:d6:d1:14:19:ae:5d:88:33:30: e2:66:22:15:42:6f:c2:b7:89:0e:97:1a:5b:c9:c7: 7e:e2:d2:23:b8:ee:29:da:c4:87:9f:a2:d1:a9:1b: 0a:0f:01:12:70:c0:ae:54:e5:ef:47:82:c0:07:ec: 1a:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: AB:70:D3:6D:CE:87:17:D2:38:9F:FF:B9:BA:DC:C6:0E:CD:C1:17:B5 X509v3 Authority Key Identifier: keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1114108580660772883/0/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1114108580660772883/0/AB70D36DCE8717D2389FFFB9BADCC60ECDC117B5.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.107.220.0/22 IPv6: 2402:5f40::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 45115 Signature Algorithm: sha256WithRSAEncryption 16:7c:86:f0:ee:7a:fc:60:30:6e:4f:0f:80:2e:d0:d3:15:3e: 7c:46:70:b0:4c:65:64:53:ae:78:92:68:64:5a:d3:6f:db:e4: 56:42:e6:04:15:fd:1d:8e:1f:60:4c:2c:f7:28:37:ef:e4:6a: 81:16:00:ea:9e:3d:6d:9a:cc:8c:2f:ef:2d:d9:e2:be:3b:c0: eb:cb:5a:b5:3b:a8:08:55:76:94:61:9a:8b:86:33:46:8f:64: 52:05:7d:5b:ec:47:a4:e7:f3:99:96:2e:8a:92:58:f1:46:90: 25:e7:9b:98:89:83:e3:32:21:a4:fa:39:69:0b:17:05:f7:bc: 27:63:07:bc:11:18:ce:e6:b9:a6:cf:61:c0:d3:72:7c:62:d5: c7:58:89:f9:69:5e:cf:2a:08:35:ca:32:03:f3:3f:15:30:c1: 18:7e:5c:7b:4b:37:92:41:b3:26:95:3f:52:85:27:27:db:07: b6:43:92:de:18:dc:c6:74:1a:ef:60:f8:05:c0:55:c5:3a:3f: 7d:d8:8e:b3:70:a2:5c:38:cd:fd:ce:3b:28:a8:44:0d:ee:03: 19:50:89:ff:64:ac:2b:4a:3e:51:50:80:ee:59:fd:95:f2:ee: 55:07:94:ee:36:ed:08:28:4a:10:20:bd:37:5a:92:8c:d1:fd: 12:74:c9:fc -----BEGIN CERTIFICATE----- MIIF0jCCBLqgAwIBAgIULTTgpdW5QHQq695IW8FK2yPS6EAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDYwMjA4MjQ0NloX DTI3MDYwMTA4Mjk0NlowMzExMC8GA1UEAxMoQUI3MEQzNkRDRTg3MTdEMjM4OUZG RkI5QkFEQ0M2MEVDREMxMTdCNTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALvhr5Hyb1egjy7JLRLEVuSw/N++zwDH/Ck9axu2NgdwuEDkpUlNDSCyZeBZ 04GvoljXQMKNb/RJvrw1NZkmKMfmIBGTY70N/we/0VApx+hv0XjwqUAgKi2SxTMg 2051R02E3yUJYxAu0jMHygf1SwQrG6z0brm10yor+oDxGjCCRtgXIuebDYA41mrE 5fbxO5yZwNkDqt+i6I/WxbuIlfJ//wDCK5TFyjUJYP6IrBTb7+w8yMGcoztYhVKt PGGnXOWMAtfzWtDo1tEUGa5diDMw4mYiFUJvwreJDpcaW8nHfuLSI7juKdrEh5+i 0akbCg8BEnDArlTl70eCwAfsGuMCAwEAAaOCAsUwggLBMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFKtw023OhxfSOJ//ubrcxg7NwRe1MB8GA1UdIwQYMBaAFKVu hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTExNDEwODU4MDY2MDc3Mjg4My8wLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMTE0MTA4NTgwNjYwNzcyODgz LzAvQUI3MEQzNkRDRTg3MTdEMjM4OUZGRkI5QkFEQ0M2MEVDREMxMTdCNS5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUH AQcBAf8EHzAdMAwEAgABMAYDBAJna9wwDQQCAAIwBwMFACQCX0AwGgYIKwYBBQUH AQgBAf8ECzAJoAcwBQIDALA7MA0GCSqGSIb3DQEBCwUAA4IBAQAWfIbw7nr8YDBu Tw+ALtDTFT58RnCwTGVkU654kmhkWtNv2+RWQuYEFf0djh9gTCz3KDfv5GqBFgDq nj1tmsyML+8t2eK+O8Dry1q1O6gIVXaUYZqLhjNGj2RSBX1b7Eek5/OZli6Kkljx RpAl55uYiYPjMiGk+jlpCxcF97wnYwe8ERjO5rmmz2HA03J8YtXHWIn5aV7PKgg1 yjID8z8VMMEYflx7SzeSQbMmlT9ShScn2we2Q5LeGNzGdBrvYPgFwFXFOj992I6z cKJcOM39zjsoqEQN7gMZUIn/ZKwrSj5RUIDuWf2V8u5VB5TuNu0IKEoQIL03WpKM 0f0SdMn8 -----END CERTIFICATE-----Generated at Fri Jun 12 03:33:25 2026 by rpki-client