$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F354F915FD6A0C20C9E625C28D36C4BC552B6A04.cer File: F354F915FD6A0C20C9E625C28D36C4BC552B6A04.cer (raw, json) Hash identifier: gcUS2nx6cSa4k9RcJvyhIY4LHsYuKUFfLAMf58IyIL8= Subject key identifier: F3:54:F9:15:FD:6A:0C:20:C9:E6:25:C2:8D:36:C4:BC:55:2B:6A:04 Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Certificate serial: 3D8EBAD228EC07FE87B30417EE8C16277DA3274E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1121693257609248803/0/F354F915FD6A0C20C9E625C28D36C4BC552B6A04.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1121693257609248803/0/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Tue 23 Jun 2026 06:43:35 +0000 Certificate not after: Tue 22 Jun 2027 06:48:35 +0000 Subordinate resources: AS: 131543 IP: 103.102.200.0/22 IP: 2401:e8c0::/32 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 Jul 2026 20:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:8e:ba:d2:28:ec:07:fe:87:b3:04:17:ee:8c:16:27:7d:a3:27:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Validity Not Before: Jun 23 06:43:35 2026 GMT Not After : Jun 22 06:48:35 2027 GMT Subject: CN=F354F915FD6A0C20C9E625C28D36C4BC552B6A04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:74:65:b0:45:cb:ab:2a:0d:70:52:91:0c:cc: bf:58:47:07:6c:6e:1f:87:2b:e8:9a:9d:36:fd:f2: ce:ed:f4:9b:85:62:69:8d:b4:dc:e3:4e:6a:40:a6: 1f:d2:fa:d9:b3:c8:14:1c:7e:1b:7a:f2:12:35:dd: a6:a8:54:87:06:a7:7d:60:f4:54:0e:d6:8b:85:34: 2a:da:c8:1a:24:25:9c:14:a6:b1:66:b6:c3:d1:51: ac:74:7e:df:02:3e:25:c7:5c:a8:fa:f1:eb:85:40: c2:9b:f7:44:44:84:42:11:2a:71:b4:89:96:60:43: c7:49:77:93:ac:45:de:f5:a1:39:d8:2a:2b:bf:2d: 90:bd:fa:a6:e0:bb:b5:bd:ab:05:5f:a8:fe:e4:cf: bb:b9:be:a8:86:4a:07:eb:44:bd:59:ce:b9:f7:38: 9c:49:35:a5:b2:d1:a7:16:fe:b7:b6:b1:36:da:4b: 13:6b:82:0c:13:94:29:f5:de:bb:f6:73:0c:ac:4a: 4d:df:8c:15:41:a7:c9:8f:af:ab:d4:94:74:03:dc: 56:44:3d:c7:24:3e:3b:d3:dc:20:d7:13:8f:f1:68: 3c:42:de:f9:5a:19:16:30:42:bd:c5:fc:d2:9d:85: 5f:25:57:d4:24:2f:9e:0c:40:27:2d:89:4e:c7:df: 28:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: F3:54:F9:15:FD:6A:0C:20:C9:E6:25:C2:8D:36:C4:BC:55:2B:6A:04 X509v3 Authority Key Identifier: keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1121693257609248803/0/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1121693257609248803/0/F354F915FD6A0C20C9E625C28D36C4BC552B6A04.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.102.200.0/22 IPv6: 2401:e8c0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 131543 Signature Algorithm: sha256WithRSAEncryption 60:f9:2b:8d:89:33:ee:d2:28:a2:a8:b7:9b:1d:2f:fc:df:7c: 55:0e:ef:1c:fe:ff:1f:8f:a6:5f:d3:80:fd:db:67:1f:7e:c1: a0:40:34:78:37:52:77:0e:0f:65:19:7d:c4:b7:71:24:b3:21: 42:01:f7:fb:1b:b5:16:99:72:d5:53:38:bc:9f:79:b2:66:82: 04:0e:0e:43:72:de:ae:a0:f4:ee:0f:09:27:7c:c6:a7:bf:68: d7:a4:31:cd:44:82:25:48:8e:89:fd:bf:11:ca:7c:2e:4e:51: c3:44:87:b3:7f:db:a3:5a:bd:f3:93:05:25:4b:00:e0:c6:18: 07:bd:55:39:d1:1b:21:a0:16:94:9f:2b:72:63:e5:c9:7c:4e: 61:bf:af:a4:9c:f2:d1:84:fd:db:c0:00:9b:1a:04:f8:40:3c: a3:6b:22:38:8d:59:5f:2e:ed:c0:ee:53:9c:d0:27:4e:9a:6f: 40:ec:09:17:ce:9d:ab:97:58:28:a9:32:8f:48:b3:ee:bd:f3: 63:45:7d:61:82:dd:b2:9d:0c:4b:e8:a7:5d:c3:8d:aa:50:8b: 4b:44:ac:66:1c:24:88:c8:99:cf:79:2e:27:e6:a2:e6:2b:02: e9:90:b8:b2:06:8e:c0:02:50:76:02:a4:a7:d4:91:68:ab:47: aa:19:67:13 -----BEGIN CERTIFICATE----- MIIF0jCCBLqgAwIBAgIUPY660ijsB/6HswQX7owWJ32jJ04wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDYyMzA2NDMzNVoX DTI3MDYyMjA2NDgzNVowMzExMC8GA1UEAxMoRjM1NEY5MTVGRDZBMEMyMEM5RTYy NUMyOEQzNkM0QkM1NTJCNkEwNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAM90ZbBFy6sqDXBSkQzMv1hHB2xuH4cr6JqdNv3yzu30m4ViaY203ONOakCm H9L62bPIFBx+G3ryEjXdpqhUhwanfWD0VA7Wi4U0KtrIGiQlnBSmsWa2w9FRrHR+ 3wI+JcdcqPrx64VAwpv3RESEQhEqcbSJlmBDx0l3k6xF3vWhOdgqK78tkL36puC7 tb2rBV+o/uTPu7m+qIZKB+tEvVnOufc4nEk1pbLRpxb+t7axNtpLE2uCDBOUKfXe u/ZzDKxKTd+MFUGnyY+vq9SUdAPcVkQ9xyQ+O9PcINcTj/FoPELe+VoZFjBCvcX8 0p2FXyVX1CQvngxAJy2JTsffKIkCAwEAAaOCAsUwggLBMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFPNU+RX9agwgyeYlwo02xLxVK2oEMB8GA1UdIwQYMBaAFKVu hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTEyMTY5MzI1NzYwOTI0ODgwMy8wLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMTIxNjkzMjU3NjA5MjQ4ODAz LzAvRjM1NEY5MTVGRDZBMEMyMEM5RTYyNUMyOEQzNkM0QkM1NTJCNkEwNC5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUH AQcBAf8EHzAdMAwEAgABMAYDBAJnZsgwDQQCAAIwBwMFACQB6MAwGgYIKwYBBQUH AQgBAf8ECzAJoAcwBQIDAgHXMA0GCSqGSIb3DQEBCwUAA4IBAQBg+SuNiTPu0iii qLebHS/833xVDu8c/v8fj6Zf04D922cffsGgQDR4N1J3Dg9lGX3Et3EksyFCAff7 G7UWmXLVUzi8n3myZoIEDg5Dct6uoPTuDwknfManv2jXpDHNRIIlSI6J/b8Rynwu TlHDRIezf9ujWr3zkwUlSwDgxhgHvVU50RshoBaUnytyY+XJfE5hv6+knPLRhP3b wACbGgT4QDyjayI4jVlfLu3A7lOc0CdOmm9A7AkXzp2rl1goqTKPSLPuvfNjRX1h gt2ynQxL6Kddw42qUItLRKxmHCSIyJnPeS4n5qLmKwLpkLiyBo7AAlB2AqSn1JFo q0eqGWcT -----END CERTIFICATE-----Generated at Tue Jul 14 19:08:54 2026 by rpki-client