$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D35F90D8A73FFC160A310A96BC00BEAB7DA2911D.cer File: D35F90D8A73FFC160A310A96BC00BEAB7DA2911D.cer (raw, json) Hash identifier: xosQPzTpTfIP77zchE8LEnWeEYPxEDNNq0quo2L+s4Q= Subject key identifier: D3:5F:90:D8:A7:3F:FC:16:0A:31:0A:96:BC:00:BE:AB:7D:A2:91:1D Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Certificate serial: 2F1DD8E9E233BBF4D23519BE40976BEFE85F6F69 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1065585911217324035/0/D35F90D8A73FFC160A310A96BC00BEAB7DA2911D.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1065585911217324035/0/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Fri 29 May 2026 03:08:53 +0000 Certificate not after: Fri 28 May 2027 03:13:53 +0000 Subordinate resources: AS: 146761 -- 146762 IP: 103.2.156.0/22 IP: 103.183.26.0/23 IP: 114.111.176.0/20 IP: 2400:5f60::/32 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Jun 2026 19:04:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:1d:d8:e9:e2:33:bb:f4:d2:35:19:be:40:97:6b:ef:e8:5f:6f:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Validity Not Before: May 29 03:08:53 2026 GMT Not After : May 28 03:13:53 2027 GMT Subject: CN=D35F90D8A73FFC160A310A96BC00BEAB7DA2911D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:23:39:46:2f:73:80:f6:45:45:d9:76:56:7c: 5f:e3:4b:ac:43:3c:a2:85:15:03:f3:c7:c0:73:cd: bf:08:95:17:91:cf:bb:a3:84:b7:69:e2:67:39:a0: 47:71:43:e7:c4:f5:ae:ab:e1:a2:09:07:83:50:be: ce:3b:a3:6c:3b:a1:41:f2:d3:4e:2b:05:80:52:36: 70:91:cd:b0:82:7d:2b:fb:9d:e0:6b:25:9e:63:65: de:da:d3:18:13:ba:88:f1:21:9e:60:85:c8:6a:d5: 7b:0b:5f:5d:8a:dc:c0:c7:fe:95:71:a1:a0:2a:72: b3:49:f9:4b:47:97:77:1c:fe:92:a7:ce:5a:1c:fb: 5d:36:20:83:0e:45:c7:c5:ac:07:49:81:fe:5d:8d: 56:cf:81:fc:ce:30:73:b1:f5:6f:e0:0d:47:05:3b: af:43:90:7d:7c:95:92:6f:9a:4d:67:ed:e6:eb:08: 65:1c:e6:19:50:cd:b5:8c:66:c2:2d:63:e0:2d:d4: 10:b8:a5:2d:88:1d:bb:0f:64:13:f0:a7:d7:1c:19: f1:f4:48:d6:1e:26:01:c6:83:24:f9:50:95:f3:2d: 3c:24:e3:3f:8f:d2:ca:b9:31:40:6c:c0:42:40:b2: 23:10:4f:1c:ac:95:f2:da:4a:e4:4f:e2:56:d7:a8: 26:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: D3:5F:90:D8:A7:3F:FC:16:0A:31:0A:96:BC:00:BE:AB:7D:A2:91:1D X509v3 Authority Key Identifier: keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217324035/0/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217324035/0/D35F90D8A73FFC160A310A96BC00BEAB7DA2911D.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.2.156.0/22 103.183.26.0/23 114.111.176.0/20 IPv6: 2400:5f60::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 146761-146762 Signature Algorithm: sha256WithRSAEncryption 68:54:78:24:62:f4:74:58:28:91:84:da:38:06:4d:b3:e2:ea: 00:d9:43:86:56:bd:06:82:6d:0c:72:88:38:fb:fd:09:9e:04: b4:05:5b:01:3f:3b:b9:15:97:45:4d:32:b6:ea:50:f7:d6:2f: eb:d8:24:51:26:d7:d2:7a:67:15:38:8c:47:e8:99:13:03:fb: 88:a7:28:98:3c:a7:4f:a5:f0:57:44:5d:2b:5b:da:f5:ef:4c: 54:a7:c3:4c:35:ab:05:36:37:a9:2a:d1:40:fa:ad:52:df:cc: b9:8e:3d:bf:c5:53:91:b7:93:78:cd:1d:fe:22:5c:09:31:5d: 68:1f:f5:c4:c4:9c:a4:4f:20:76:b6:20:d5:7c:55:fc:66:24: 99:b1:8c:27:fc:5b:05:6d:82:7c:c1:a0:78:46:70:ce:d4:6a: a1:0b:66:72:40:7b:09:1b:af:cf:64:98:06:4a:05:8e:cf:48: 34:f2:d6:c8:3a:9a:f9:f1:ab:d3:a3:a9:40:65:f4:70:45:40: fe:6a:fe:6d:e9:d6:2f:70:a8:50:4c:64:07:14:05:3d:9f:34: e8:2e:af:d1:28:66:4f:91:a0:3c:67:96:e3:bd:84:e3:fc:dc: a4:62:97:ff:05:66:eb:01:fe:3a:d4:54:5e:83:72:11:d4:9d: 2e:8a:32:f7 -----BEGIN CERTIFICATE----- MIIF5TCCBM2gAwIBAgIULx3Y6eIzu/TSNRm+QJdr7+hfb2kwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDUyOTAzMDg1M1oX DTI3MDUyODAzMTM1M1owMzExMC8GA1UEAxMoRDM1RjkwRDhBNzNGRkMxNjBBMzEw QTk2QkMwMEJFQUI3REEyOTExRDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALgjOUYvc4D2RUXZdlZ8X+NLrEM8ooUVA/PHwHPNvwiVF5HPu6OEt2niZzmg R3FD58T1rqvhogkHg1C+zjujbDuhQfLTTisFgFI2cJHNsIJ9K/ud4GslnmNl3trT GBO6iPEhnmCFyGrVewtfXYrcwMf+lXGhoCpys0n5S0eXdxz+kqfOWhz7XTYggw5F x8WsB0mB/l2NVs+B/M4wc7H1b+ANRwU7r0OQfXyVkm+aTWft5usIZRzmGVDNtYxm wi1j4C3UELilLYgduw9kE/Cn1xwZ8fRI1h4mAcaDJPlQlfMtPCTjP4/SyrkxQGzA QkCyIxBPHKyV8tpK5E/iVteoJjECAwEAAaOCAtgwggLUMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFNNfkNinP/wWCjEKlrwAvqt9opEdMB8GA1UdIwQYMBaAFKVu hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTA2NTU4NTkxMTIxNzMyNDAzNS8wLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDY1NTg1OTExMjE3MzI0MDM1 LzAvRDM1RjkwRDhBNzNGRkMxNjBBMzEwQTk2QkMwMEJFQUI3REEyOTExRC5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwOgYIKwYBBQUH AQcBAf8EKzApMBgEAgABMBIDBAJnApwDBAFntxoDBARyb7AwDQQCAAIwBwMFACQA X2AwIQYIKwYBBQUHAQgBAf8EEjAQoA4wDDAKAgMCPUkCAwI9SjANBgkqhkiG9w0B AQsFAAOCAQEAaFR4JGL0dFgokYTaOAZNs+LqANlDhla9BoJtDHKIOPv9CZ4EtAVb AT87uRWXRU0ytupQ99Yv69gkUSbX0npnFTiMR+iZEwP7iKcomDynT6XwV0RdK1va 9e9MVKfDTDWrBTY3qSrRQPqtUt/MuY49v8VTkbeTeM0d/iJcCTFdaB/1xMScpE8g drYg1XxV/GYkmbGMJ/xbBW2CfMGgeEZwztRqoQtmckB7CRuvz2SYBkoFjs9INPLW yDqa+fGr06OpQGX0cEVA/mr+benWL3CoUExkBxQFPZ806C6v0ShmT5GgPGeW472E 4/zcpGKX/wVm6wH+OtRUXoNyEdSdLooy9w== -----END CERTIFICATE-----Generated at Thu Jun 11 22:41:30 2026 by rpki-client