$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BF857965C9231C5EF57CBBE7A09D87C2FC6E8C7C.cer File: BF857965C9231C5EF57CBBE7A09D87C2FC6E8C7C.cer (raw, json) Hash identifier: T1oSRHREsMzDyFChIdZ8KJiTD/ttjrxg8YFsaEw7kd0= Subject key identifier: BF:85:79:65:C9:23:1C:5E:F5:7C:BB:E7:A0:9D:87:C2:FC:6E:8C:7C Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Certificate serial: 5D7DF71E6B8BAD9D6444A1E83CDAB2567CC730B6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1121692552068595751/0/BF857965C9231C5EF57CBBE7A09D87C2FC6E8C7C.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1121692552068595751/0/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Tue 23 Jun 2026 06:40:46 +0000 Certificate not after: Tue 22 Jun 2027 06:45:46 +0000 Subordinate resources: IP: 163.61.202.0/23 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 Jul 2026 20:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:7d:f7:1e:6b:8b:ad:9d:64:44:a1:e8:3c:da:b2:56:7c:c7:30:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Validity Not Before: Jun 23 06:40:46 2026 GMT Not After : Jun 22 06:45:46 2027 GMT Subject: CN=BF857965C9231C5EF57CBBE7A09D87C2FC6E8C7C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:47:50:09:10:be:42:69:f0:a7:53:d1:73:db: d7:b6:df:b6:7f:ab:64:f0:fc:34:13:8a:e2:4e:ba: 8f:be:80:68:dc:98:89:6c:01:58:54:04:8d:2a:ff: 78:e6:23:1d:3c:08:aa:17:16:4a:36:60:36:e1:0b: b1:4d:65:b4:0a:44:e2:d8:fb:8f:87:a6:18:f8:c1: 96:05:23:75:28:63:b9:5f:51:1e:d3:f5:e2:b2:fc: 7c:07:25:6a:20:aa:7b:5d:b4:12:ee:ed:5b:1e:bb: 87:bf:8e:b4:b2:61:55:b9:1a:33:66:69:aa:7e:39: b9:a2:aa:f9:c6:2c:d9:0b:da:45:e1:8c:d5:dc:e5: 0f:88:d1:60:4e:3c:12:3b:83:f1:0d:c7:54:b2:a2: e5:4e:d2:2c:b9:2f:d7:e6:6c:42:e8:68:11:3f:f7: b0:98:36:c1:84:a0:49:b8:fc:76:15:04:a2:8f:b2: e7:3f:da:02:e6:4a:a4:1e:12:f5:77:4f:ea:99:4a: 81:44:2c:bb:e5:ad:fb:9c:88:e1:0f:29:49:fe:ca: ea:52:9b:1c:cb:e2:b6:f3:84:ec:0f:14:3c:fd:49: c9:90:2c:f7:bf:cb:be:c4:0a:32:be:f0:9d:4c:d2: 4c:a4:97:a5:3a:10:e0:e8:01:94:c4:48:1b:a4:a7: b6:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: BF:85:79:65:C9:23:1C:5E:F5:7C:BB:E7:A0:9D:87:C2:FC:6E:8C:7C X509v3 Authority Key Identifier: keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1121692552068595751/0/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1121692552068595751/0/BF857965C9231C5EF57CBBE7A09D87C2FC6E8C7C.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 163.61.202.0/23 Signature Algorithm: sha256WithRSAEncryption 63:14:36:81:dd:13:a9:c6:f0:71:13:74:97:58:a6:12:e9:27: b7:7a:97:45:51:13:53:17:1a:8b:45:22:30:dd:cf:31:c1:60: c0:ad:3b:57:41:5d:f4:4c:39:56:5f:98:3d:94:91:8f:68:aa: e1:94:1d:c8:4e:8d:26:11:b2:6c:9c:ce:e0:a4:c1:25:c6:06: e5:f0:12:94:46:b1:69:5a:b8:6d:e2:b2:06:fc:a1:02:ec:c0: 22:02:3b:2e:4c:b1:cf:c8:95:c2:cd:28:81:f3:92:70:c6:35: 6d:4e:b2:d5:4d:39:6b:d8:37:fa:ea:d4:16:f0:a6:95:1e:1d: f3:d7:3e:06:92:98:12:03:79:d9:17:e3:e5:1f:05:a3:71:17: c1:91:06:f6:71:9b:9a:d9:47:07:4e:5c:1a:dd:f9:af:11:28: 6b:8e:37:34:df:f5:ef:30:ec:8d:c2:a3:14:80:ca:8c:66:dd: b3:6e:05:59:0f:8a:c2:46:e8:2e:51:20:a5:c7:f3:62:97:3a: d1:63:0b:68:aa:42:ce:88:8f:22:8e:f2:13:b1:c9:55:b6:6b: b6:b0:98:f3:51:8a:dd:63:bb:ed:45:52:df:f8:f0:8b:da:a6: 09:a0:2d:63:5a:fc:df:09:9b:c5:ab:9e:31:fc:8d:51:41:8d: f1:37:13:a4 -----BEGIN CERTIFICATE----- MIIFpzCCBI+gAwIBAgIUXX33HmuLrZ1kRKHoPNqyVnzHMLYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDYyMzA2NDA0NloX DTI3MDYyMjA2NDU0NlowMzExMC8GA1UEAxMoQkY4NTc5NjVDOTIzMUM1RUY1N0NC QkU3QTA5RDg3QzJGQzZFOEM3QzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMxHUAkQvkJp8KdT0XPb17bftn+rZPD8NBOK4k66j76AaNyYiWwBWFQEjSr/ eOYjHTwIqhcWSjZgNuELsU1ltApE4tj7j4emGPjBlgUjdShjuV9RHtP14rL8fAcl aiCqe120Eu7tWx67h7+OtLJhVbkaM2Zpqn45uaKq+cYs2QvaReGM1dzlD4jRYE48 EjuD8Q3HVLKi5U7SLLkv1+ZsQuhoET/3sJg2wYSgSbj8dhUEoo+y5z/aAuZKpB4S 9XdP6plKgUQsu+Wt+5yI4Q8pSf7K6lKbHMvitvOE7A8UPP1JyZAs97/LvsQKMr7w nUzSTKSXpToQ4OgBlMRIG6SntqcCAwEAAaOCApowggKWMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFL+FeWXJIxxe9Xy756Cdh8L8box8MB8GA1UdIwQYMBaAFKVu hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTEyMTY5MjU1MjA2ODU5NTc1MS8wLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMTIxNjkyNTUyMDY4NTk1NzUx LzAvQkY4NTc5NjVDOTIzMUM1RUY1N0NCQkU3QTA5RDg3QzJGQzZFOEM3Qy5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAGjPcowDQYJKoZIhvcNAQELBQADggEBAGMUNoHd E6nG8HETdJdYphLpJ7d6l0VRE1MXGotFIjDdzzHBYMCtO1dBXfRMOVZfmD2UkY9o quGUHchOjSYRsmyczuCkwSXGBuXwEpRGsWlauG3isgb8oQLswCICOy5Msc/IlcLN KIHzknDGNW1OstVNOWvYN/rq1BbwppUeHfPXPgaSmBIDedkX4+UfBaNxF8GRBvZx m5rZRwdOXBrd+a8RKGuONzTf9e8w7I3CoxSAyoxm3bNuBVkPisJG6C5RIKXH82KX OtFjC2iqQs6IjyKO8hOxyVW2a7awmPNRit1ju+1FUt/48IvapgmgLWNa/N8Jm8Wr njH8jVFBjfE3E6Q= -----END CERTIFICATE-----Generated at Tue Jul 14 19:08:51 2026 by rpki-client