$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D6FB3E7668FDC6CD18106EE853D1C6458896BE4D.cer File: D6FB3E7668FDC6CD18106EE853D1C6458896BE4D.cer (raw, json) Hash identifier: F+XjzAJA6wqbooh7MzEwWg/thAbnuSC8+YCNwxj3/TA= Subject key identifier: D6:FB:3E:76:68:FD:C6:CD:18:10:6E:E8:53:D1:C6:45:88:96:BE:4D Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Certificate serial: 71BA73C8992BE4DD11B1A2C5107C74E2F660196E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1068702911388712962/0/D6FB3E7668FDC6CD18106EE853D1C6458896BE4D.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1068702911388712962/0/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Fri 29 May 2026 06:57:39 +0000 Certificate not after: Fri 28 May 2027 07:02:39 +0000 Subordinate resources: AS: 131495 IP: 123.58.16.0/21 IP: 2402:da40::/32 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 15:28:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:ba:73:c8:99:2b:e4:dd:11:b1:a2:c5:10:7c:74:e2:f6:60:19:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Validity Not Before: May 29 06:57:39 2026 GMT Not After : May 28 07:02:39 2027 GMT Subject: CN=D6FB3E7668FDC6CD18106EE853D1C6458896BE4D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:24:fa:d1:5b:31:bf:1f:d0:c4:06:2c:5c:7e: c4:78:de:33:88:da:20:ed:2b:6c:45:d8:13:f2:6d: 2b:a2:96:06:bf:f9:7d:ac:e7:07:c8:3a:05:42:c7: 06:36:86:38:e3:71:33:60:0a:e6:5f:42:ac:40:49: f4:7a:57:c1:3f:a9:84:a1:94:51:9e:59:58:c5:24: 9a:99:29:d8:dc:94:eb:01:9b:ec:9c:bc:93:dc:42: e6:98:39:ee:5f:f0:a0:03:9f:b5:51:27:20:cc:93: 02:03:c9:35:9b:3a:e7:77:8e:31:46:45:96:93:83: e9:62:5b:64:31:b8:9c:c6:53:68:c5:79:8d:1e:a2: 79:61:a7:16:4a:f4:58:3c:6e:e9:e5:dc:d4:7f:ec: 23:e4:4d:be:ef:f5:98:01:a0:2e:0b:a2:9e:3b:12: fa:f9:1d:6e:18:3b:1b:05:5e:9b:5c:e5:a3:ab:e4: 4d:4c:53:3b:1d:c2:54:6e:f5:bd:b6:16:20:a9:3f: 99:86:25:0f:ed:a6:ad:db:d9:2a:ff:e9:c1:6c:04: ec:02:06:cd:12:0a:e0:a4:09:41:1f:19:b1:2b:0c: f5:6e:57:ed:5f:f3:aa:8f:ba:28:b0:2b:a6:9d:f8: 2b:3e:56:ee:73:47:bf:ad:57:9f:f3:0a:cb:80:d2: 7f:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: D6:FB:3E:76:68:FD:C6:CD:18:10:6E:E8:53:D1:C6:45:88:96:BE:4D X509v3 Authority Key Identifier: keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1068702911388712962/0/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1068702911388712962/0/D6FB3E7668FDC6CD18106EE853D1C6458896BE4D.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 123.58.16.0/21 IPv6: 2402:da40::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 131495 Signature Algorithm: sha256WithRSAEncryption 92:8f:11:64:ec:b6:90:41:17:bb:7c:48:59:6b:bb:b8:9c:05: a9:43:44:5a:82:74:5f:38:0e:33:6a:cb:00:81:5c:bd:f4:c3: 01:80:14:b3:58:bd:08:67:ae:94:51:b6:1b:09:b5:38:ca:0d: db:5e:d0:9c:34:92:4e:ce:6d:aa:da:c5:9a:c6:36:92:29:4d: f6:b5:25:8b:6e:76:67:80:c0:47:e0:c8:d8:18:34:f0:32:92: da:4b:b1:09:bd:d5:c6:b5:df:12:1d:a0:39:7d:8f:89:b4:70: 8c:53:ba:14:74:b3:54:cd:53:df:00:2f:76:0a:8d:cb:51:64: cd:cf:db:82:29:5f:1d:80:f5:6c:19:53:8c:fe:95:f1:5f:11: 05:0c:30:2b:3f:1a:9a:05:00:47:18:89:2e:e0:31:48:ba:c6: d9:0d:97:dd:9c:ab:bd:7c:bf:27:77:58:21:c7:10:f5:6f:60: 08:4f:f2:ed:e8:6a:8b:6f:a9:71:2d:2b:25:01:db:14:52:e6: 16:1d:f5:1f:ad:92:5c:cd:dd:33:1e:de:7e:5a:52:aa:35:e3: 26:83:ba:b5:7c:0d:d8:70:c1:5e:a8:93:6b:84:f3:6a:48:06: e2:c4:7f:6c:db:e7:97:04:dd:64:42:71:fd:08:41:90:c8:c8: 2f:18:14:d2 -----BEGIN CERTIFICATE----- MIIF0jCCBLqgAwIBAgIUcbpzyJkr5N0RsaLFEHx04vZgGW4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDUyOTA2NTczOVoX DTI3MDUyODA3MDIzOVowMzExMC8GA1UEAxMoRDZGQjNFNzY2OEZEQzZDRDE4MTA2 RUU4NTNEMUM2NDU4ODk2QkU0RDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKMk+tFbMb8f0MQGLFx+xHjeM4jaIO0rbEXYE/JtK6KWBr/5faznB8g6BULH BjaGOONxM2AK5l9CrEBJ9HpXwT+phKGUUZ5ZWMUkmpkp2NyU6wGb7Jy8k9xC5pg5 7l/woAOftVEnIMyTAgPJNZs653eOMUZFlpOD6WJbZDG4nMZTaMV5jR6ieWGnFkr0 WDxu6eXc1H/sI+RNvu/1mAGgLguinjsS+vkdbhg7GwVem1zlo6vkTUxTOx3CVG71 vbYWIKk/mYYlD+2mrdvZKv/pwWwE7AIGzRIK4KQJQR8ZsSsM9W5X7V/zqo+6KLAr pp34Kz5W7nNHv61Xn/MKy4DSfwcCAwEAAaOCAsUwggLBMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFNb7PnZo/cbNGBBu6FPRxkWIlr5NMB8GA1UdIwQYMBaAFKVu hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTA2ODcwMjkxMTM4ODcxMjk2Mi8wLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDY4NzAyOTExMzg4NzEyOTYy LzAvRDZGQjNFNzY2OEZEQzZDRDE4MTA2RUU4NTNEMUM2NDU4ODk2QkU0RC5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUH AQcBAf8EHzAdMAwEAgABMAYDBAN7OhAwDQQCAAIwBwMFACQC2kAwGgYIKwYBBQUH AQgBAf8ECzAJoAcwBQIDAgGnMA0GCSqGSIb3DQEBCwUAA4IBAQCSjxFk7LaQQRe7 fEhZa7u4nAWpQ0RagnRfOA4zassAgVy99MMBgBSzWL0IZ66UUbYbCbU4yg3bXtCc NJJOzm2q2sWaxjaSKU32tSWLbnZngMBH4MjYGDTwMpLaS7EJvdXGtd8SHaA5fY+J tHCMU7oUdLNUzVPfAC92Co3LUWTNz9uCKV8dgPVsGVOM/pXxXxEFDDArPxqaBQBH GIku4DFIusbZDZfdnKu9fL8nd1ghxxD1b2AIT/Lt6GqLb6lxLSslAdsUUuYWHfUf rZJczd0zHt5+WlKqNeMmg7q1fA3YcMFeqJNrhPNqSAbixH9s2+eXBN1kQnH9CEGQ yMgvGBTS -----END CERTIFICATE-----Generated at Fri May 29 21:13:08 2026 by rpki-client