$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D6FB3E7668FDC6CD18106EE853D1C6458896BE4D.cer File: D6FB3E7668FDC6CD18106EE853D1C6458896BE4D.cer (raw, json) Hash identifier: UnDEssDdgwQOLvuDTwlGKXskj2J1Mtk2ULjBVBSpgCU= Subject key identifier: D6:FB:3E:76:68:FD:C6:CD:18:10:6E:E8:53:D1:C6:45:88:96:BE:4D Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Certificate serial: 65676FB7F5750C12D030AAF989326CBC58AF745A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1068702911388712962/0/D6FB3E7668FDC6CD18106EE853D1C6458896BE4D.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1068702911388712962/0/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Wed 28 Jan 2026 01:18:50 +0000 Certificate not after: Wed 27 Jan 2027 01:23:50 +0000 Subordinate resources: AS: 131495 IP: 123.58.16.0/21 IP: 2402:da40::/32 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 23 Feb 2026 09:42:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:67:6f:b7:f5:75:0c:12:d0:30:aa:f9:89:32:6c:bc:58:af:74:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Validity Not Before: Jan 28 01:18:50 2026 GMT Not After : Jan 27 01:23:50 2027 GMT Subject: CN=D6FB3E7668FDC6CD18106EE853D1C6458896BE4D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:24:fa:d1:5b:31:bf:1f:d0:c4:06:2c:5c:7e: c4:78:de:33:88:da:20:ed:2b:6c:45:d8:13:f2:6d: 2b:a2:96:06:bf:f9:7d:ac:e7:07:c8:3a:05:42:c7: 06:36:86:38:e3:71:33:60:0a:e6:5f:42:ac:40:49: f4:7a:57:c1:3f:a9:84:a1:94:51:9e:59:58:c5:24: 9a:99:29:d8:dc:94:eb:01:9b:ec:9c:bc:93:dc:42: e6:98:39:ee:5f:f0:a0:03:9f:b5:51:27:20:cc:93: 02:03:c9:35:9b:3a:e7:77:8e:31:46:45:96:93:83: e9:62:5b:64:31:b8:9c:c6:53:68:c5:79:8d:1e:a2: 79:61:a7:16:4a:f4:58:3c:6e:e9:e5:dc:d4:7f:ec: 23:e4:4d:be:ef:f5:98:01:a0:2e:0b:a2:9e:3b:12: fa:f9:1d:6e:18:3b:1b:05:5e:9b:5c:e5:a3:ab:e4: 4d:4c:53:3b:1d:c2:54:6e:f5:bd:b6:16:20:a9:3f: 99:86:25:0f:ed:a6:ad:db:d9:2a:ff:e9:c1:6c:04: ec:02:06:cd:12:0a:e0:a4:09:41:1f:19:b1:2b:0c: f5:6e:57:ed:5f:f3:aa:8f:ba:28:b0:2b:a6:9d:f8: 2b:3e:56:ee:73:47:bf:ad:57:9f:f3:0a:cb:80:d2: 7f:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: D6:FB:3E:76:68:FD:C6:CD:18:10:6E:E8:53:D1:C6:45:88:96:BE:4D X509v3 Authority Key Identifier: keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1068702911388712962/0/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1068702911388712962/0/D6FB3E7668FDC6CD18106EE853D1C6458896BE4D.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 123.58.16.0/21 IPv6: 2402:da40::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 131495 Signature Algorithm: sha256WithRSAEncryption 2a:09:f4:d7:ce:4e:50:63:7e:f8:2b:82:65:84:91:ee:cf:eb: 16:dc:5e:43:87:64:dc:26:4d:72:2f:3f:3d:c7:b7:df:28:8f: ad:64:3a:5a:83:7d:09:31:c1:e7:a5:3e:98:97:bb:91:dd:b5: 4a:9e:a8:80:f9:e5:c2:5d:77:24:2f:de:0f:a8:67:d8:eb:34: 02:65:49:38:c3:52:bb:5c:0b:0b:db:03:63:5c:bc:2f:b3:a6: 33:50:32:2b:0b:90:8f:44:3a:28:8d:4e:af:8c:c6:23:e4:20: a1:a1:b4:21:04:e6:84:54:03:e9:de:d5:3b:8a:52:4c:78:47: 73:7c:f5:c7:ec:a5:37:6e:51:cb:82:d1:b8:b0:46:4b:f7:31: 45:4d:34:f4:ed:f1:c7:32:ac:ea:44:9b:96:39:ef:70:d1:b0: d4:ff:f9:2a:fb:08:08:fd:c3:c9:8f:3f:a0:7c:01:57:30:a5: f7:45:64:4c:1b:2a:a2:b8:ad:fe:50:05:ed:c9:2b:36:e3:4e: d0:96:1a:7c:8c:2b:5f:e7:e3:a1:03:4a:4f:4b:18:f3:5b:f9: f3:21:8f:da:71:c3:b9:4f:29:4e:db:aa:ef:56:c5:44:36:85: 8e:57:af:5e:f2:5d:a3:86:4f:11:0a:96:1f:09:d2:df:42:23: 1c:d6:bc:1e -----BEGIN CERTIFICATE----- MIIF0jCCBLqgAwIBAgIUZWdvt/V1DBLQMKr5iTJsvFivdFowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDEyODAxMTg1MFoX DTI3MDEyNzAxMjM1MFowMzExMC8GA1UEAxMoRDZGQjNFNzY2OEZEQzZDRDE4MTA2 RUU4NTNEMUM2NDU4ODk2QkU0RDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKMk+tFbMb8f0MQGLFx+xHjeM4jaIO0rbEXYE/JtK6KWBr/5faznB8g6BULH BjaGOONxM2AK5l9CrEBJ9HpXwT+phKGUUZ5ZWMUkmpkp2NyU6wGb7Jy8k9xC5pg5 7l/woAOftVEnIMyTAgPJNZs653eOMUZFlpOD6WJbZDG4nMZTaMV5jR6ieWGnFkr0 WDxu6eXc1H/sI+RNvu/1mAGgLguinjsS+vkdbhg7GwVem1zlo6vkTUxTOx3CVG71 vbYWIKk/mYYlD+2mrdvZKv/pwWwE7AIGzRIK4KQJQR8ZsSsM9W5X7V/zqo+6KLAr pp34Kz5W7nNHv61Xn/MKy4DSfwcCAwEAAaOCAsUwggLBMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFNb7PnZo/cbNGBBu6FPRxkWIlr5NMB8GA1UdIwQYMBaAFKVu hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTA2ODcwMjkxMTM4ODcxMjk2Mi8wLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDY4NzAyOTExMzg4NzEyOTYy LzAvRDZGQjNFNzY2OEZEQzZDRDE4MTA2RUU4NTNEMUM2NDU4ODk2QkU0RC5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUH AQcBAf8EHzAdMAwEAgABMAYDBAN7OhAwDQQCAAIwBwMFACQC2kAwGgYIKwYBBQUH AQgBAf8ECzAJoAcwBQIDAgGnMA0GCSqGSIb3DQEBCwUAA4IBAQAqCfTXzk5QY374 K4JlhJHuz+sW3F5Dh2TcJk1yLz89x7ffKI+tZDpag30JMcHnpT6Yl7uR3bVKnqiA +eXCXXckL94PqGfY6zQCZUk4w1K7XAsL2wNjXLwvs6YzUDIrC5CPRDoojU6vjMYj 5CChobQhBOaEVAPp3tU7ilJMeEdzfPXH7KU3blHLgtG4sEZL9zFFTTT07fHHMqzq RJuWOe9w0bDU//kq+wgI/cPJjz+gfAFXMKX3RWRMGyqiuK3+UAXtySs2407Qlhp8 jCtf5+OhA0pPSxjzW/nzIY/accO5TylO26rvVsVENoWOV69e8l2jhk8RCpYfCdLf QiMc1rwe -----END CERTIFICATE-----Generated at Mon Feb 23 00:54:26 2026 by rpki-client