$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D30F9089F9EA5836000B8AE4BE085A88276E9D0E.cer File: D30F9089F9EA5836000B8AE4BE085A88276E9D0E.cer (raw, json) Hash identifier: 3CWrmcE85EpucpJlUApX2fs8FxGox59+CH5O95FQ9Tg= Subject key identifier: D3:0F:90:89:F9:EA:58:36:00:0B:8A:E4:BE:08:5A:88:27:6E:9D:0E Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Certificate serial: 1F7A34E7223090E3EC3B409CE3D5899CE4F04F51 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1107106254473396241/0/D30F9089F9EA5836000B8AE4BE085A88276E9D0E.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1107106254473396241/0/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Thu 14 May 2026 00:40:01 +0000 Certificate not after: Thu 13 May 2027 00:45:01 +0000 Subordinate resources: AS: 151312 IP: 103.232.166.0/23 IP: 2401:1320::/32 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 15:28:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:7a:34:e7:22:30:90:e3:ec:3b:40:9c:e3:d5:89:9c:e4:f0:4f:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Validity Not Before: May 14 00:40:01 2026 GMT Not After : May 13 00:45:01 2027 GMT Subject: CN=D30F9089F9EA5836000B8AE4BE085A88276E9D0E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:4b:69:ea:01:2a:bf:cc:96:50:cd:79:fe:f8: de:e3:0d:59:da:d0:a8:b1:69:26:a5:76:39:7a:7f: ad:cf:93:d9:83:c2:d4:8a:3b:c4:c2:7e:45:e8:12: b4:60:84:74:68:98:3d:5a:bc:49:7a:a8:22:d5:e6: d8:b8:2b:ae:08:0b:38:6c:c6:e8:84:13:d0:01:2d: e1:6e:a9:ee:2d:18:76:00:7d:17:97:b7:17:a9:61: 64:32:33:b1:f7:b9:e0:3c:aa:18:bd:0d:eb:79:ec: d8:38:50:18:35:f7:5f:48:6c:46:85:be:fb:d7:f7: ff:d7:15:70:86:16:b3:8d:6b:ff:0a:91:2f:26:8a: 59:fc:d0:35:46:a2:fc:cc:49:b6:0e:9e:b1:51:30: 5f:63:67:4e:3e:24:22:7d:13:87:e1:99:db:57:67: cf:d2:73:62:e0:fb:12:f2:b8:2c:58:57:f0:03:ec: 39:5a:1b:e0:8c:3d:d8:bf:f0:59:81:01:1b:da:83: df:59:58:6e:08:bc:41:95:ec:0f:d7:94:2c:e1:5b: 64:ce:d2:cd:07:7b:35:f9:24:a9:2d:f3:c9:78:80: 5a:a9:0a:84:49:e5:26:9b:b6:db:13:80:84:58:58: 65:f0:98:a6:37:45:1c:b7:97:d7:c7:c6:97:45:c1: a4:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: D3:0F:90:89:F9:EA:58:36:00:0B:8A:E4:BE:08:5A:88:27:6E:9D:0E X509v3 Authority Key Identifier: keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1107106254473396241/0/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1107106254473396241/0/D30F9089F9EA5836000B8AE4BE085A88276E9D0E.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.232.166.0/23 IPv6: 2401:1320::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 151312 Signature Algorithm: sha256WithRSAEncryption 19:c0:f3:b0:c2:ab:7d:06:43:6c:c6:c7:15:aa:ee:e6:96:e9: 3e:4b:63:df:24:a3:3d:b7:6e:7a:72:ae:82:a7:6c:67:1b:d6: 65:5b:42:54:2b:58:d2:6c:c7:86:8e:3e:90:88:d8:eb:d1:40: 1a:70:bd:98:cf:c8:f0:f0:26:18:cb:d0:e5:41:88:68:f4:1f: 38:31:cc:2c:66:57:52:69:89:d1:12:2b:e6:8a:73:d0:c1:8e: 6a:3c:27:45:1b:64:a2:e8:92:8b:ab:9d:84:7c:53:3f:46:3a: 43:71:c6:4a:1d:ac:ce:da:de:8c:4b:44:73:5e:77:c9:b7:6d: 54:00:3e:b0:8f:47:4e:b0:0b:50:fe:77:72:6f:30:eb:98:47: 3d:7c:45:d1:8d:c7:d7:1a:64:83:44:4a:1b:e5:d5:a4:c8:4b: c0:ee:8c:d6:5b:41:86:84:08:ea:86:da:aa:6f:87:e6:a7:cd: af:d5:b9:09:ac:e6:d6:ed:25:b4:20:7f:3f:e9:ed:72:9c:c1: 51:dd:45:e1:79:eb:29:f4:4c:19:2e:2b:ce:ab:8a:d4:ec:72: 9e:76:7d:6b:5c:da:ff:76:27:5c:d2:1d:92:0e:80:91:f7:84: e2:09:ce:99:e6:e3:a8:89:29:c4:37:54:76:83:e6:5e:9a:c1: 6f:a4:63:ea -----BEGIN CERTIFICATE----- MIIF0jCCBLqgAwIBAgIUH3o05yIwkOPsO0Cc49WJnOTwT1EwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDUxNDAwNDAwMVoX DTI3MDUxMzAwNDUwMVowMzExMC8GA1UEAxMoRDMwRjkwODlGOUVBNTgzNjAwMEI4 QUU0QkUwODVBODgyNzZFOUQwRTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAN5LaeoBKr/MllDNef743uMNWdrQqLFpJqV2OXp/rc+T2YPC1Io7xMJ+RegS tGCEdGiYPVq8SXqoItXm2LgrrggLOGzG6IQT0AEt4W6p7i0YdgB9F5e3F6lhZDIz sfe54DyqGL0N63ns2DhQGDX3X0hsRoW++9f3/9cVcIYWs41r/wqRLyaKWfzQNUai /MxJtg6esVEwX2NnTj4kIn0Th+GZ21dnz9JzYuD7EvK4LFhX8APsOVob4Iw92L/w WYEBG9qD31lYbgi8QZXsD9eULOFbZM7SzQd7NfkkqS3zyXiAWqkKhEnlJpu22xOA hFhYZfCYpjdFHLeX18fGl0XBpJ0CAwEAAaOCAsUwggLBMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFNMPkIn56lg2AAuK5L4IWognbp0OMB8GA1UdIwQYMBaAFKVu hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTEwNzEwNjI1NDQ3MzM5NjI0MS8wLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMTA3MTA2MjU0NDczMzk2MjQx LzAvRDMwRjkwODlGOUVBNTgzNjAwMEI4QUU0QkUwODVBODgyNzZFOUQwRS5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUH AQcBAf8EHzAdMAwEAgABMAYDBAFn6KYwDQQCAAIwBwMFACQBEyAwGgYIKwYBBQUH AQgBAf8ECzAJoAcwBQIDAk8QMA0GCSqGSIb3DQEBCwUAA4IBAQAZwPOwwqt9BkNs xscVqu7mluk+S2PfJKM9t256cq6Cp2xnG9ZlW0JUK1jSbMeGjj6QiNjr0UAacL2Y z8jw8CYYy9DlQYho9B84McwsZldSaYnREivminPQwY5qPCdFG2Si6JKLq52EfFM/ RjpDccZKHazO2t6MS0RzXnfJt21UAD6wj0dOsAtQ/ndybzDrmEc9fEXRjcfXGmSD REob5dWkyEvA7ozWW0GGhAjqhtqqb4fmp82v1bkJrObW7SW0IH8/6e1ynMFR3UXh eesp9EwZLivOq4rU7HKedn1rXNr/didc0h2SDoCR94TiCc6Z5uOoiSnEN1R2g+Ze msFvpGPq -----END CERTIFICATE-----Generated at Fri May 29 21:11:58 2026 by rpki-client