$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F071BDCFD00F17B0D2CB7A04E39F7FC3C33A0B8D.cer File: F071BDCFD00F17B0D2CB7A04E39F7FC3C33A0B8D.cer (raw, json) Hash identifier: LT3LGGg4JOeWygsefCu7Z1EVfkle6Z8gQrQiVh50JrU= Subject key identifier: F0:71:BD:CF:D0:0F:17:B0:D2:CB:7A:04:E3:9F:7F:C3:C3:3A:0B:8D Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Certificate serial: 6D3930F13DAFA9D0AC94E870649B9FE0F993FCCB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1111469242210844693/0/F071BDCFD00F17B0D2CB7A04E39F7FC3C33A0B8D.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1111469242210844693/0/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Tue 26 May 2026 01:36:59 +0000 Certificate not after: Tue 25 May 2027 01:41:59 +0000 Subordinate resources: AS: 131562 IP: 103.96.216.0/22 IP: 119.44.0.0/18 IP: 119.44.192.0/18 IP: 2401:7d40::/32 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 15:28:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:39:30:f1:3d:af:a9:d0:ac:94:e8:70:64:9b:9f:e0:f9:93:fc:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Validity Not Before: May 26 01:36:59 2026 GMT Not After : May 25 01:41:59 2027 GMT Subject: CN=F071BDCFD00F17B0D2CB7A04E39F7FC3C33A0B8D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:20:76:56:7d:91:c9:02:d2:06:fc:4f:14:6b: bb:5e:ec:eb:2a:b0:22:84:8d:88:e7:a0:a6:1b:23: 38:9d:22:2c:73:09:0a:57:53:8d:df:fa:90:4c:21: c1:91:03:e7:5f:c7:fa:45:4d:36:21:2a:18:64:b4: 00:df:39:eb:d1:4e:6f:44:00:4e:9e:de:48:6b:96: 48:d4:4f:0b:6b:38:9b:df:62:1c:2d:bf:8d:21:1c: 17:7e:0e:44:70:d3:4c:e1:f6:76:38:42:5e:97:12: 32:97:1f:24:b4:39:6d:a9:e2:aa:b7:09:96:d2:74: e2:2f:18:c2:4c:a7:9e:6e:0a:ca:ee:7e:b3:3e:97: 04:1f:2d:4b:56:49:ad:a2:40:6a:e0:fd:54:41:22: 41:75:41:5b:90:13:37:cd:cc:11:4e:f2:82:21:aa: 25:19:11:c7:92:4b:b5:97:9f:c5:4d:43:3a:d4:07: 7a:f2:76:c2:1f:8f:e7:18:32:57:88:6d:38:1b:18: 4e:9a:f8:52:b8:9c:28:08:d5:df:45:e9:17:a3:33: 9f:a3:71:82:12:3c:b6:85:03:88:1b:1a:f7:3b:be: 3e:a7:c5:a0:a7:48:e4:53:68:89:e0:e3:dd:33:a1: 26:71:4e:04:64:16:c4:a5:c6:a4:69:5e:9f:5e:b5: 67:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: F0:71:BD:CF:D0:0F:17:B0:D2:CB:7A:04:E3:9F:7F:C3:C3:3A:0B:8D X509v3 Authority Key Identifier: keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1111469242210844693/0/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1111469242210844693/0/F071BDCFD00F17B0D2CB7A04E39F7FC3C33A0B8D.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.96.216.0/22 119.44.0.0/18 119.44.192.0/18 IPv6: 2401:7d40::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 131562 Signature Algorithm: sha256WithRSAEncryption 1f:af:1c:a3:c3:cb:36:89:99:d8:a8:6b:36:9a:fa:59:29:b3: 83:1f:ed:71:ca:90:0d:43:97:a9:2c:1a:cf:7a:92:2a:fd:25: e5:46:3a:e2:0e:5e:8f:4f:d0:e6:3b:6f:24:f7:8a:c6:4a:93: c2:4b:a0:37:9d:76:b0:51:35:dd:83:90:71:db:12:0f:00:30: 7b:f0:70:4a:5a:c7:4c:1d:26:c3:bd:ce:13:45:ea:1d:78:43: 32:8c:1d:6f:96:4f:5b:33:75:9c:59:58:3a:e2:9f:7a:f9:0c: cc:39:7b:62:ad:8d:39:22:a7:7a:3b:e2:b8:0c:9e:29:51:26: 56:54:e7:76:2b:f2:cb:d4:40:51:35:03:ef:cc:1a:6f:86:e6: ec:63:14:de:cb:c7:ed:70:f6:fc:98:17:d5:f7:b5:dc:23:f6: 10:1f:b8:6f:af:71:a0:92:30:fd:99:bd:b7:6a:b5:79:2f:fe: ba:fa:f6:13:95:5c:2e:6e:f0:b9:f4:a8:9a:4d:f1:6d:e7:1b: f2:fe:20:1e:77:ce:54:88:2d:df:e1:de:f9:62:05:fd:08:9c: 3b:6d:90:da:44:3b:77:51:31:8f:96:ec:42:40:26:9b:98:8f: 8e:bd:39:1d:f9:6e:4a:b0:91:b2:e7:20:fe:45:06:53:d5:6e: dd:1b:27:c8 -----BEGIN CERTIFICATE----- MIIF3jCCBMagAwIBAgIUbTkw8T2vqdCslOhwZJuf4PmT/MswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDUyNjAxMzY1OVoX DTI3MDUyNTAxNDE1OVowMzExMC8GA1UEAxMoRjA3MUJEQ0ZEMDBGMTdCMEQyQ0I3 QTA0RTM5RjdGQzNDMzNBMEI4RDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKcgdlZ9kckC0gb8TxRru17s6yqwIoSNiOegphsjOJ0iLHMJCldTjd/6kEwh wZED51/H+kVNNiEqGGS0AN8569FOb0QATp7eSGuWSNRPC2s4m99iHC2/jSEcF34O RHDTTOH2djhCXpcSMpcfJLQ5baniqrcJltJ04i8Ywkynnm4Kyu5+sz6XBB8tS1ZJ raJAauD9VEEiQXVBW5ATN83MEU7ygiGqJRkRx5JLtZefxU1DOtQHevJ2wh+P5xgy V4htOBsYTpr4UricKAjV30XpF6Mzn6NxghI8toUDiBsa9zu+PqfFoKdI5FNoieDj 3TOhJnFOBGQWxKXGpGlen161Z5sCAwEAAaOCAtEwggLNMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFPBxvc/QDxew0st6BOOff8PDOguNMB8GA1UdIwQYMBaAFKVu hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTExMTQ2OTI0MjIxMDg0NDY5My8wLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMTExNDY5MjQyMjEwODQ0Njkz LzAvRjA3MUJEQ0ZEMDBGMTdCMEQyQ0I3QTA0RTM5RjdGQzNDMzNBMEI4RC5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwOgYIKwYBBQUH AQcBAf8EKzApMBgEAgABMBIDBAJnYNgDBAZ3LAADBAZ3LMAwDQQCAAIwBwMFACQB fUAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDAgHqMA0GCSqGSIb3DQEBCwUAA4IB AQAfrxyjw8s2iZnYqGs2mvpZKbODH+1xypANQ5epLBrPepIq/SXlRjriDl6PT9Dm O28k94rGSpPCS6A3nXawUTXdg5Bx2xIPADB78HBKWsdMHSbDvc4TReodeEMyjB1v lk9bM3WcWVg64p96+QzMOXtirY05Iqd6O+K4DJ4pUSZWVOd2K/LL1EBRNQPvzBpv hubsYxTey8ftcPb8mBfV97XcI/YQH7hvr3GgkjD9mb23arV5L/66+vYTlVwubvC5 9KiaTfFt5xvy/iAed85UiC3f4d75YgX9CJw7bZDaRDt3UTGPluxCQCabmI+OvTkd +W5KsJGy5yD+RQZT1W7dGyfI -----END CERTIFICATE-----Generated at Fri May 29 21:11:24 2026 by rpki-client