$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FA453AF3F4AB166551FD4C322D5FD2384364BAEA.cer File: FA453AF3F4AB166551FD4C322D5FD2384364BAEA.cer (raw, json) Hash identifier: 7MOq9mGfgR0gAeXnAjjmTpiNJHj647g0fSgasm7ivFI= Subject key identifier: FA:45:3A:F3:F4:AB:16:65:51:FD:4C:32:2D:5F:D2:38:43:64:BA:EA Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Certificate serial: 0791D3F17D46183EAD3ED32EFD5C2F8AA26D8150 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1106055295731236875/0/FA453AF3F4AB166551FD4C322D5FD2384364BAEA.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1106055295731236875/0/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Thu 21 May 2026 02:55:48 +0000 Certificate not after: Thu 20 May 2027 03:00:48 +0000 Subordinate resources: AS: 137780 IP: 103.135.160.0/21 IP: 103.242.200.0/22 IP: 2403:6740::/32 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 15:28:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:91:d3:f1:7d:46:18:3e:ad:3e:d3:2e:fd:5c:2f:8a:a2:6d:81:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Validity Not Before: May 21 02:55:48 2026 GMT Not After : May 20 03:00:48 2027 GMT Subject: CN=FA453AF3F4AB166551FD4C322D5FD2384364BAEA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:9a:f1:3f:b2:25:60:22:1c:5f:79:f3:de:26: 53:77:00:b8:60:80:9b:3e:04:85:55:11:05:fe:23: d4:b6:88:cd:80:cb:d6:c8:1a:a9:be:01:e6:b2:d6: e6:37:6f:19:60:e4:a5:ba:f3:ac:96:be:27:fd:58: 5f:ec:88:5b:51:2f:09:d6:2e:a5:b4:5d:83:ff:27: 94:87:41:5b:f5:af:cb:14:9d:9a:f2:42:b9:92:26: da:0f:32:70:f6:36:63:a8:c6:2f:03:9b:0e:4a:56: 4a:c3:da:4b:3e:53:7e:af:62:61:3c:5a:1a:c1:4d: 7c:64:7c:22:79:87:36:4e:4d:32:d9:f3:72:2d:2e: f8:85:25:f0:0b:2a:b3:10:8e:c8:76:cc:68:f0:a9: 2d:13:14:b5:58:cf:12:60:74:c8:7f:f0:22:20:ec: 74:f4:9c:c2:f2:fd:66:d8:f5:0b:2e:69:b1:1d:c2: 93:a5:2a:9f:2b:b1:34:f0:45:f8:ab:fe:d1:7d:e6: 95:52:92:64:d2:db:f8:a4:2e:2a:c9:80:8d:ac:44: 05:8c:99:81:ff:aa:7b:55:81:1e:73:8b:85:3d:48: 07:df:9f:44:3e:11:3f:4b:2a:4d:fd:e8:12:13:b9: 97:96:15:f8:3b:8e:26:6b:ce:12:16:09:78:57:41: 1b:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: FA:45:3A:F3:F4:AB:16:65:51:FD:4C:32:2D:5F:D2:38:43:64:BA:EA X509v3 Authority Key Identifier: keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1106055295731236875/0/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1106055295731236875/0/FA453AF3F4AB166551FD4C322D5FD2384364BAEA.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.135.160.0/21 103.242.200.0/22 IPv6: 2403:6740::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 137780 Signature Algorithm: sha256WithRSAEncryption 3a:3b:56:ef:9d:a1:98:2f:60:60:b1:4b:cd:19:a7:74:52:8a: 54:f1:12:93:2f:b4:9d:8e:f8:4d:67:44:97:c2:fd:7e:7b:23: 8c:49:c4:c9:b6:3e:77:43:3d:e3:dd:f7:7c:db:f6:93:cd:46: 70:47:b2:54:bb:32:55:2c:36:ca:fa:48:e9:93:9e:7b:ca:45: 79:e0:28:27:06:21:ee:45:6d:d7:ec:8d:37:71:3c:29:51:a6: 13:a1:4e:37:5f:c7:24:da:75:3f:95:d1:15:01:9d:3c:9d:c4: 4d:44:27:10:10:97:78:b4:e9:dc:cd:a1:12:f5:99:94:64:03: f8:61:90:5e:ef:de:a9:a9:f2:fa:82:33:25:06:e4:a7:c5:46: d4:d9:38:1b:6b:d4:fe:cb:f5:c7:f5:b3:4a:06:8f:dc:ab:ef: 25:f6:64:38:9f:12:29:f6:ba:73:4a:82:af:19:23:bc:0f:79: 62:3c:57:ac:b3:7d:80:ba:7a:73:ec:93:68:84:25:86:a8:3e: df:a6:41:fe:b0:d4:e7:2e:af:fa:fb:5e:ff:d4:8f:7c:19:41: c8:61:9d:5e:3c:f6:3f:87:1c:61:fe:66:af:c1:4a:d0:58:57: fb:b7:d4:76:a2:6d:69:e7:0a:94:ee:64:5e:9b:bd:c1:46:79: 32:51:44:d7 -----BEGIN CERTIFICATE----- MIIF2DCCBMCgAwIBAgIUB5HT8X1GGD6tPtMu/VwviqJtgVAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDUyMTAyNTU0OFoX DTI3MDUyMDAzMDA0OFowMzExMC8GA1UEAxMoRkE0NTNBRjNGNEFCMTY2NTUxRkQ0 QzMyMkQ1RkQyMzg0MzY0QkFFQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMia8T+yJWAiHF95894mU3cAuGCAmz4EhVURBf4j1LaIzYDL1sgaqb4B5rLW 5jdvGWDkpbrzrJa+J/1YX+yIW1EvCdYupbRdg/8nlIdBW/WvyxSdmvJCuZIm2g8y cPY2Y6jGLwObDkpWSsPaSz5Tfq9iYTxaGsFNfGR8InmHNk5NMtnzci0u+IUl8Asq sxCOyHbMaPCpLRMUtVjPEmB0yH/wIiDsdPScwvL9Ztj1Cy5psR3Ck6UqnyuxNPBF +Kv+0X3mlVKSZNLb+KQuKsmAjaxEBYyZgf+qe1WBHnOLhT1IB9+fRD4RP0sqTf3o EhO5l5YV+DuOJmvOEhYJeFdBG60CAwEAAaOCAsswggLHMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFPpFOvP0qxZlUf1MMi1f0jhDZLrqMB8GA1UdIwQYMBaAFKVu hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTEwNjA1NTI5NTczMTIzNjg3NS8wLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMTA2MDU1Mjk1NzMxMjM2ODc1 LzAvRkE0NTNBRjNGNEFCMTY2NTUxRkQ0QzMyMkQ1RkQyMzg0MzY0QkFFQS5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwNAYIKwYBBQUH AQcBAf8EJTAjMBIEAgABMAwDBANnh6ADBAJn8sgwDQQCAAIwBwMFACQDZ0AwGgYI KwYBBQUHAQgBAf8ECzAJoAcwBQIDAho0MA0GCSqGSIb3DQEBCwUAA4IBAQA6O1bv naGYL2BgsUvNGad0UopU8RKTL7SdjvhNZ0SXwv1+eyOMScTJtj53Qz3j3fd82/aT zUZwR7JUuzJVLDbK+kjpk557ykV54CgnBiHuRW3X7I03cTwpUaYToU43X8ck2nU/ ldEVAZ08ncRNRCcQEJd4tOnczaES9ZmUZAP4YZBe796pqfL6gjMlBuSnxUbU2Tgb a9T+y/XH9bNKBo/cq+8l9mQ4nxIp9rpzSoKvGSO8D3liPFess32Aunpz7JNohCWG qD7fpkH+sNTnLq/6+17/1I98GUHIYZ1ePPY/hxxh/mavwUrQWFf7t9R2om1p5wqU 7mRem73BRnkyUUTX -----END CERTIFICATE-----Generated at Fri May 29 21:11:23 2026 by rpki-client