$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AC68C3A56C2B8FB70DEE75D5F58493ACBE260538.cer File: AC68C3A56C2B8FB70DEE75D5F58493ACBE260538.cer (raw, json) Hash identifier: +J6Eqrx6jxwEHlEuTHM2mBnUb6OUyImcPUbV4sP/NUc= Subject key identifier: AC:68:C3:A5:6C:2B:8F:B7:0D:EE:75:D5:F5:84:93:AC:BE:26:05:38 Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Certificate serial: 68691FC9CC2DBEA108A9444CC92DBB41F33C0B28 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1108600868493590547/0/AC68C3A56C2B8FB70DEE75D5F58493ACBE260538.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1108600868493590547/0/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Mon 17 Aug 2026 01:27:25 +0000 Certificate not after: Mon 16 Aug 2027 01:32:25 +0000 Subordinate resources: IP: 124.240.128.0/18 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 31 Aug 2026 15:20:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:69:1f:c9:cc:2d:be:a1:08:a9:44:4c:c9:2d:bb:41:f3:3c:0b:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Validity Not Before: Aug 17 01:27:25 2026 GMT Not After : Aug 16 01:32:25 2027 GMT Subject: CN=AC68C3A56C2B8FB70DEE75D5F58493ACBE260538 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:dd:a9:b6:a5:12:09:88:fa:0e:bc:ab:bf:9d: 81:36:1e:15:2f:61:a1:9a:bc:a6:22:22:d2:ad:c4: c4:96:39:6b:e2:dc:28:64:bd:48:d3:cc:3a:7a:dc: 4a:6c:39:ca:c6:42:ce:a8:72:68:8d:86:29:7d:5e: c3:af:6c:b4:4c:f3:84:55:c3:fe:09:ff:17:3e:0b: 1b:01:ce:40:73:fc:30:18:7d:6e:d9:cc:97:af:d7: 02:8a:84:91:d8:42:a6:74:1f:7a:ee:f7:cc:ca:f5: 06:82:3b:4f:5e:af:bc:63:1c:f7:0b:60:cb:9b:fa: b2:35:bf:e8:e9:9f:6a:33:ac:59:83:4b:f7:11:da: 5e:8a:20:58:79:00:54:08:c5:83:4f:c6:75:89:68: 53:48:bb:6c:b2:c8:a0:45:e9:52:92:91:c7:6c:2c: b9:59:a6:81:d9:3c:be:b8:97:7c:ca:27:4c:31:93: c2:91:37:fc:b3:cf:4f:50:9d:6c:e8:45:4b:f5:f6: 53:ec:78:92:c9:c5:84:90:c9:ba:2d:9f:63:31:e4: 84:74:36:c0:c0:2f:f4:8a:a0:8c:a5:87:61:04:fe: 98:4e:f7:68:3f:bc:3f:6c:37:ce:3e:07:3b:25:ba: 93:b5:b1:6b:b4:ce:1c:d6:3a:aa:15:fd:a0:66:b3: d7:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: AC:68:C3:A5:6C:2B:8F:B7:0D:EE:75:D5:F5:84:93:AC:BE:26:05:38 X509v3 Authority Key Identifier: keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1108600868493590547/0/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1108600868493590547/0/AC68C3A56C2B8FB70DEE75D5F58493ACBE260538.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 124.240.128.0/18 Signature Algorithm: sha256WithRSAEncryption 3e:41:12:85:47:29:c6:a9:e5:94:53:e5:e3:55:ac:82:c9:03: 5d:32:1e:7a:1f:3f:11:da:17:1d:b1:39:8d:dd:d0:a3:d9:a4: 66:3f:cd:f1:48:e6:81:63:f1:6c:f9:ff:dc:0d:ae:97:f7:cd: 2e:2d:8a:14:ec:30:00:1c:2e:32:24:78:94:ad:23:25:82:7c: 2e:d4:9c:67:98:c9:60:f9:82:ab:d7:8a:00:6d:4a:0c:b3:d9: a9:ef:d8:3d:a6:c6:23:3e:b9:3b:40:5c:81:b4:4f:e7:1b:d1: 7a:5d:8c:73:01:a1:01:40:4d:4c:89:4b:f5:e9:b1:69:d8:e5: 84:f4:a2:ee:21:81:48:41:30:68:4c:cc:5d:a8:3d:52:78:6f: 4a:51:4c:8b:15:0f:ff:3e:8e:95:f6:0c:04:27:4c:c1:f6:63: 2c:f7:1e:81:fd:3f:73:c1:92:15:1e:b1:3e:db:b7:3f:9f:f7: 40:b9:96:0a:f2:27:64:1d:ba:bd:77:3b:91:dc:29:c4:45:58: a6:65:93:09:dd:59:64:35:41:66:e7:69:55:57:57:60:38:15: 7e:c8:c1:83:ea:51:79:29:3c:e8:5a:06:45:ce:5d:a8:bc:0f: 4d:3b:74:23:ab:ca:a7:20:76:c8:0a:f0:c8:24:5d:d7:e2:e3: b9:e4:cc:83 -----BEGIN CERTIFICATE----- MIIFpzCCBI+gAwIBAgIUaGkfycwtvqEIqURMyS27QfM8CygwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDgxNzAxMjcyNVoX DTI3MDgxNjAxMzIyNVowMzExMC8GA1UEAxMoQUM2OEMzQTU2QzJCOEZCNzBERUU3 NUQ1RjU4NDkzQUNCRTI2MDUzODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANjdqbalEgmI+g68q7+dgTYeFS9hoZq8piIi0q3ExJY5a+LcKGS9SNPMOnrc Smw5ysZCzqhyaI2GKX1ew69stEzzhFXD/gn/Fz4LGwHOQHP8MBh9btnMl6/XAoqE kdhCpnQfeu73zMr1BoI7T16vvGMc9wtgy5v6sjW/6OmfajOsWYNL9xHaXoogWHkA VAjFg0/GdYloU0i7bLLIoEXpUpKRx2wsuVmmgdk8vriXfMonTDGTwpE3/LPPT1Cd bOhFS/X2U+x4ksnFhJDJui2fYzHkhHQ2wMAv9IqgjKWHYQT+mE73aD+8P2w3zj4H OyW6k7Wxa7TOHNY6qhX9oGaz16ECAwEAAaOCApowggKWMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFKxow6VsK4+3De511fWEk6y+JgU4MB8GA1UdIwQYMBaAFKVu hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTEwODYwMDg2ODQ5MzU5MDU0Ny8wLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMTA4NjAwODY4NDkzNTkwNTQ3 LzAvQUM2OEMzQTU2QzJCOEZCNzBERUU3NUQ1RjU4NDkzQUNCRTI2MDUzOC5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAZ88IAwDQYJKoZIhvcNAQELBQADggEBAD5BEoVH Kcap5ZRT5eNVrILJA10yHnofPxHaFx2xOY3d0KPZpGY/zfFI5oFj8Wz5/9wNrpf3 zS4tihTsMAAcLjIkeJStIyWCfC7UnGeYyWD5gqvXigBtSgyz2anv2D2mxiM+uTtA XIG0T+cb0XpdjHMBoQFATUyJS/XpsWnY5YT0ou4hgUhBMGhMzF2oPVJ4b0pRTIsV D/8+jpX2DAQnTMH2Yyz3HoH9P3PBkhUesT7btz+f90C5lgryJ2Qdur13O5HcKcRF WKZlkwndWWQ1QWbnaVVXV2A4FX7IwYPqUXkpPOhaBkXOXai8D007dCOryqcgdsgK 8MgkXdfi47nkzIM= -----END CERTIFICATE-----Generated at Sat Aug 29 05:54:19 2026 by rpki-client