$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BF7230B41A75F66CC3D2372CC0CFFA248AFD961E.cer File: BF7230B41A75F66CC3D2372CC0CFFA248AFD961E.cer (raw, json) Hash identifier: C4/h+LmzOmbHfCN61Vol+a9/dhG/h3VmgBYPhwZVKjE= Subject key identifier: BF:72:30:B4:1A:75:F6:6C:C3:D2:37:2C:C0:CF:FA:24:8A:FD:96:1E Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Certificate serial: 49C4E81AE51588742479FEF055FE67F9D6027A25 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1065582741577728002/0/BF7230B41A75F66CC3D2372CC0CFFA248AFD961E.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1065582741577728002/0/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Fri 29 May 2026 01:03:18 +0000 Certificate not after: Fri 28 May 2027 01:08:18 +0000 Subordinate resources: AS: 9392 IP: 103.122.240.0/22 IP: 2405:94c0::/32 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 15:28:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:c4:e8:1a:e5:15:88:74:24:79:fe:f0:55:fe:67:f9:d6:02:7a:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Validity Not Before: May 29 01:03:18 2026 GMT Not After : May 28 01:08:18 2027 GMT Subject: CN=BF7230B41A75F66CC3D2372CC0CFFA248AFD961E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:34:56:7b:83:3b:fe:7f:85:e8:ca:1d:c7:71: 7c:9d:96:3e:20:5f:d4:ac:32:32:20:ee:65:43:6c: c3:ab:93:7b:22:4d:9b:a9:26:c0:a0:30:a2:54:b4: 92:e4:49:1a:28:d9:d3:30:f3:14:e5:5e:8f:f9:bc: 65:49:7e:8f:4b:03:9b:08:87:62:ba:40:62:d7:2b: 51:69:48:cd:e2:8a:8b:b6:f6:14:10:d8:15:5a:b7: 11:07:f0:35:05:e6:ea:62:6e:14:7f:c0:93:8f:5f: 20:4f:01:6e:5b:ee:62:82:c8:73:a7:3b:ea:00:42: 67:29:7b:94:92:6e:24:e7:6e:a2:b8:f3:bb:6a:04: 51:16:e6:d2:e7:0b:fd:37:65:3e:2f:b3:95:d5:8e: 97:df:db:c1:78:b4:23:13:9c:27:7c:f8:25:e6:52: bd:99:13:51:35:cf:c2:ab:45:db:d0:4d:72:2e:29: 4d:74:34:2c:ef:30:bc:ea:0f:d5:93:ef:4c:9e:75: 69:7b:70:c5:ab:c4:34:4b:0a:0b:0b:80:23:51:7c: 50:3c:4d:66:8c:10:b7:fa:82:47:2e:bc:a7:8f:a6: 05:6a:8b:2c:8c:4a:a7:0b:27:54:82:c3:8d:7a:a2: 36:65:f9:08:b6:59:cc:14:1f:0e:ae:95:c8:6c:2e: 6c:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: BF:72:30:B4:1A:75:F6:6C:C3:D2:37:2C:C0:CF:FA:24:8A:FD:96:1E X509v3 Authority Key Identifier: keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577728002/0/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577728002/0/BF7230B41A75F66CC3D2372CC0CFFA248AFD961E.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.122.240.0/22 IPv6: 2405:94c0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 9392 Signature Algorithm: sha256WithRSAEncryption 6d:0b:6d:f9:0a:e7:37:a7:2b:a3:bb:de:0f:f7:a0:f6:e4:0a: 5e:13:f8:a9:17:c4:d4:08:20:62:d1:9a:84:4f:ac:7e:04:e5: 35:86:06:78:49:c2:f5:37:0b:7a:86:da:18:37:e1:e5:da:cc: 90:1e:7c:1c:2c:0c:16:00:04:98:8d:c9:b2:3e:59:4a:9b:02: 9a:91:a1:ff:1b:c8:92:14:8a:12:4b:f2:bf:9e:bd:37:9a:8d: 5d:ad:5d:ca:d8:39:98:0b:dc:1e:3c:1c:ab:37:a5:a3:cb:c9: c5:23:6b:7e:d8:64:5e:e5:42:84:98:4e:79:b5:d3:e7:82:58: 15:02:88:8d:74:01:9b:3c:5e:13:2e:41:67:a1:3d:58:00:d7: 05:87:8a:a0:61:ad:b2:5f:7c:57:ee:ee:f9:00:9e:2d:6c:69: 26:5d:df:83:64:65:73:fc:a4:b4:3e:8e:bf:ea:6c:68:7c:99: c4:35:28:99:8a:19:99:c0:ee:64:17:fc:e1:90:ec:e3:94:b5: 77:5a:83:2c:f3:c2:4a:d2:05:d5:99:cc:65:ac:86:bb:5f:27: 7f:ec:7b:88:2c:cc:fd:c0:f0:74:3b:5e:31:8a:a0:1f:20:09: a3:07:1b:e7:68:27:59:8d:36:89:00:63:b6:54:d4:92:36:5f: 5f:0c:18:57 -----BEGIN CERTIFICATE----- MIIF0TCCBLmgAwIBAgIUScToGuUViHQkef7wVf5n+dYCeiUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDUyOTAxMDMxOFoX DTI3MDUyODAxMDgxOFowMzExMC8GA1UEAxMoQkY3MjMwQjQxQTc1RjY2Q0MzRDIz NzJDQzBDRkZBMjQ4QUZEOTYxRTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANA0VnuDO/5/hejKHcdxfJ2WPiBf1KwyMiDuZUNsw6uTeyJNm6kmwKAwolS0 kuRJGijZ0zDzFOVej/m8ZUl+j0sDmwiHYrpAYtcrUWlIzeKKi7b2FBDYFVq3EQfw NQXm6mJuFH/Ak49fIE8BblvuYoLIc6c76gBCZyl7lJJuJOduorjzu2oEURbm0ucL /TdlPi+zldWOl9/bwXi0IxOcJ3z4JeZSvZkTUTXPwqtF29BNci4pTXQ0LO8wvOoP 1ZPvTJ51aXtwxavENEsKCwuAI1F8UDxNZowQt/qCRy68p4+mBWqLLIxKpwsnVILD jXqiNmX5CLZZzBQfDq6VyGwubFcCAwEAAaOCAsQwggLAMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFL9yMLQadfZsw9I3LMDP+iSK/ZYeMB8GA1UdIwQYMBaAFKVu hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTA2NTU4Mjc0MTU3NzcyODAwMi8wLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDY1NTgyNzQxNTc3NzI4MDAy LzAvQkY3MjMwQjQxQTc1RjY2Q0MzRDIzNzJDQzBDRkZBMjQ4QUZEOTYxRS5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUH AQcBAf8EHzAdMAwEAgABMAYDBAJnevAwDQQCAAIwBwMFACQFlMAwGQYIKwYBBQUH AQgBAf8ECjAIoAYwBAICJLAwDQYJKoZIhvcNAQELBQADggEBAG0LbfkK5zenK6O7 3g/3oPbkCl4T+KkXxNQIIGLRmoRPrH4E5TWGBnhJwvU3C3qG2hg34eXazJAefBws DBYABJiNybI+WUqbApqRof8byJIUihJL8r+evTeajV2tXcrYOZgL3B48HKs3paPL ycUja37YZF7lQoSYTnm10+eCWBUCiI10AZs8XhMuQWehPVgA1wWHiqBhrbJffFfu 7vkAni1saSZd34NkZXP8pLQ+jr/qbGh8mcQ1KJmKGZnA7mQX/OGQ7OOUtXdagyzz wkrSBdWZzGWshrtfJ3/se4gszP3A8HQ7XjGKoB8gCaMHG+doJ1mNNokAY7ZU1JI2 X18MGFc= -----END CERTIFICATE-----Generated at Fri May 29 21:13:22 2026 by rpki-client