$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AF78431646A0FABBD8F081F9FF34BCAE995EB126.cer File: AF78431646A0FABBD8F081F9FF34BCAE995EB126.cer (raw, json) Hash identifier: 8d9NQfTfCCaKTUA3b7yJE52g1stBX2zTZ2IlpHoQSfw= Subject key identifier: AF:78:43:16:46:A0:FA:BB:D8:F0:81:F9:FF:34:BC:AE:99:5E:B1:26 Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Certificate serial: 5D42DA70BCD253EEA7812690899A82A6FC423C00 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1065579534394392579/0/AF78431646A0FABBD8F081F9FF34BCAE995EB126.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1065579534394392579/0/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Fri 29 May 2026 08:53:40 +0000 Certificate not after: Fri 28 May 2027 08:58:40 +0000 Subordinate resources: AS: 58862 IP: 103.25.157.0 -- 103.25.159.255 IP: 150.242.48.0/22 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 15:28:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:42:da:70:bc:d2:53:ee:a7:81:26:90:89:9a:82:a6:fc:42:3c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Validity Not Before: May 29 08:53:40 2026 GMT Not After : May 28 08:58:40 2027 GMT Subject: CN=AF78431646A0FABBD8F081F9FF34BCAE995EB126 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:8d:d8:0b:0c:45:7b:34:cd:84:d2:7a:77:22: dc:10:3b:d3:b5:3c:0d:4e:43:fb:54:b8:32:66:e9: 7c:d6:df:a8:8c:b3:ea:ed:9f:ba:61:7e:75:65:6b: 57:6e:8d:98:99:99:6b:50:3c:d6:e0:55:19:c4:f6: 07:aa:3c:03:12:f8:e1:60:08:00:00:8b:9a:bb:9f: ad:e8:a3:ca:ae:51:a9:c7:f8:c5:a6:bf:fc:e9:5b: cc:f4:1d:55:f7:3d:28:bc:e0:d1:95:a7:d1:19:56: 58:e2:1f:6d:da:4a:13:5e:69:63:62:fb:56:40:3b: 00:89:99:b7:2c:b4:8b:12:ad:b2:5d:9a:0d:d1:8d: a2:a6:49:7d:d3:b4:1d:a6:a0:bd:9b:6c:38:78:f2: 14:eb:2e:93:39:15:d8:90:94:68:89:ef:9e:77:77: 66:c0:80:5e:43:72:b4:cf:52:d9:69:cc:d2:70:af: 87:26:8e:98:c3:21:c6:c9:45:d1:20:95:cf:66:71: 2b:c6:d2:52:87:93:a8:83:a1:ce:3b:e5:2d:f4:09: 43:8c:5d:81:95:49:fb:9d:f8:9e:41:b7:17:7b:d7: ff:7f:b6:f9:a3:56:5e:7b:17:97:2b:56:6f:a8:8c: ae:d5:98:e7:9e:91:67:17:f0:6d:39:3d:52:c8:3a: 6e:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: AF:78:43:16:46:A0:FA:BB:D8:F0:81:F9:FF:34:BC:AE:99:5E:B1:26 X509v3 Authority Key Identifier: keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394392579/0/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394392579/0/AF78431646A0FABBD8F081F9FF34BCAE995EB126.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.25.157.0-103.25.159.255 150.242.48.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 58862 Signature Algorithm: sha256WithRSAEncryption 21:d0:76:cc:9c:ae:e5:4a:a4:5a:59:96:bc:4d:31:ae:45:77: 1b:7a:cd:4a:38:75:52:d3:04:6b:cb:de:1f:4f:f8:8d:ec:2e: 3e:29:f8:41:14:eb:48:a1:df:c1:0c:83:6a:9c:5a:e4:bf:ea: 44:0a:36:f4:3f:b3:c2:29:20:17:7b:35:a0:1f:9a:ac:6a:19: ce:7d:3a:ff:58:1f:a4:58:4a:b4:5f:78:72:32:e3:39:6d:fd: ee:7a:0a:a0:a3:02:32:47:0f:bd:65:7f:fb:f2:95:09:48:5f: cf:66:44:d8:41:8e:54:6a:36:79:f3:09:d2:41:cc:49:14:10: 4a:f7:58:59:76:0d:d6:9d:5d:8a:ad:8c:89:48:36:a3:e2:0d: f7:0d:b4:cb:f6:5e:d0:4f:30:a9:50:17:d6:66:04:81:66:0a: dd:0b:ff:f1:20:79:4f:12:fe:2e:0b:92:46:85:2b:4d:c4:59: ed:3b:71:9a:d1:6d:e7:f0:e6:f3:7a:70:1d:ce:8a:f8:9d:b6: f2:08:f8:4e:11:a2:9a:15:6b:4d:0d:32:4f:fc:37:31:e9:b1: b1:47:2b:5e:a1:04:2b:76:68:ed:4d:3a:2e:05:db:2c:1f:b8: 83:38:a8:3e:41:73:4a:bf:76:4b:83:84:ca:be:65:76:2a:a3: 4b:71:f6:ac -----BEGIN CERTIFICATE----- MIIF0TCCBLmgAwIBAgIUXULacLzSU+6ngSaQiZqCpvxCPAAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDUyOTA4NTM0MFoX DTI3MDUyODA4NTg0MFowMzExMC8GA1UEAxMoQUY3ODQzMTY0NkEwRkFCQkQ4RjA4 MUY5RkYzNEJDQUU5OTVFQjEyNjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAM+N2AsMRXs0zYTSenci3BA707U8DU5D+1S4MmbpfNbfqIyz6u2fumF+dWVr V26NmJmZa1A81uBVGcT2B6o8AxL44WAIAACLmrufreijyq5Rqcf4xaa//OlbzPQd Vfc9KLzg0ZWn0RlWWOIfbdpKE15pY2L7VkA7AImZtyy0ixKtsl2aDdGNoqZJfdO0 HaagvZtsOHjyFOsukzkV2JCUaInvnnd3ZsCAXkNytM9S2WnM0nCvhyaOmMMhxslF 0SCVz2ZxK8bSUoeTqIOhzjvlLfQJQ4xdgZVJ+534nkG3F3vX/3+2+aNWXnsXlytW b6iMrtWY556RZxfwbTk9Usg6bs8CAwEAAaOCAsQwggLAMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFK94QxZGoPq72PCB+f80vK6ZXrEmMB8GA1UdIwQYMBaAFKVu hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTA2NTU3OTUzNDM5NDM5MjU3OS8wLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDY1NTc5NTM0Mzk0MzkyNTc5 LzAvQUY3ODQzMTY0NkEwRkFCQkQ4RjA4MUY5RkYzNEJDQUU5OTVFQjEyNi5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwLQYIKwYBBQUH AQcBAf8EHjAcMBoEAgABMBQwDAMEAGcZnQMEBWcZgAMEApbyMDAaBggrBgEFBQcB CAEB/wQLMAmgBzAFAgMA5e4wDQYJKoZIhvcNAQELBQADggEBACHQdsycruVKpFpZ lrxNMa5Fdxt6zUo4dVLTBGvL3h9P+I3sLj4p+EEU60ih38EMg2qcWuS/6kQKNvQ/ s8IpIBd7NaAfmqxqGc59Ov9YH6RYSrRfeHIy4zlt/e56CqCjAjJHD71lf/vylQlI X89mRNhBjlRqNnnzCdJBzEkUEEr3WFl2DdadXYqtjIlINqPiDfcNtMv2XtBPMKlQ F9ZmBIFmCt0L//EgeU8S/i4LkkaFK03EWe07cZrRbefw5vN6cB3OividtvII+E4R opoVa00NMk/8NzHpsbFHK16hBCt2aO1NOi4F2ywfuIM4qD5Bc0q/dkuDhMq+ZXYq o0tx9qw= -----END CERTIFICATE-----Generated at Fri May 29 21:13:53 2026 by rpki-client