$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FA62588C3B4D3CDF54721D0241DB9830A49DA29E.cer File: FA62588C3B4D3CDF54721D0241DB9830A49DA29E.cer (raw, json) Hash identifier: kjEiCyo/fJpkv2iTeZNiz6uVrI9AbuVVZ5ufp7aqoKg= Subject key identifier: FA:62:58:8C:3B:4D:3C:DF:54:72:1D:02:41:DB:98:30:A4:9D:A2:9E Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Certificate serial: 28C71E8A98848FB6DF070CFAFBD45B801C4BB7DB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1112577106547572755/0/FA62588C3B4D3CDF54721D0241DB9830A49DA29E.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1112577106547572755/0/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Fri 29 May 2026 02:59:15 +0000 Certificate not after: Fri 28 May 2027 03:04:15 +0000 Subordinate resources: AS: 131132 IP: 45.113.12.0/22 IP: 103.52.160.0/22 IP: 116.199.64.0/18 IP: 119.32.64.0 -- 119.35.255.255 IP: 124.40.128.0/18 IP: 125.31.192.0/18 IP: 2400:5e80::/32 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 15:28:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:c7:1e:8a:98:84:8f:b6:df:07:0c:fa:fb:d4:5b:80:1c:4b:b7:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Validity Not Before: May 29 02:59:15 2026 GMT Not After : May 28 03:04:15 2027 GMT Subject: CN=FA62588C3B4D3CDF54721D0241DB9830A49DA29E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:e7:38:f3:3f:f1:00:86:31:ed:5e:57:38:5a: 18:b0:3b:3f:cc:21:a2:23:b6:ef:32:aa:cd:c4:4e: a1:08:97:b2:9f:04:76:5d:f4:96:3a:ba:7e:9b:f0: 68:40:69:38:2d:bf:4b:2e:d5:96:96:7a:f8:a8:2e: 5d:f4:7e:32:35:57:f6:70:45:73:7b:ab:82:20:d0: 54:91:eb:46:66:b6:87:37:75:ee:27:6c:7a:99:7b: af:8b:cd:fe:de:fc:5c:f2:f9:fa:a1:b0:97:12:69: 00:5c:b4:ac:7f:c0:1c:c0:6b:9a:63:d6:fe:ce:cc: f0:4a:5f:43:52:53:a4:d3:7a:42:1f:e5:56:18:f1: 06:d2:17:a0:66:a7:4c:c4:76:e9:b5:6d:6c:6c:77: b0:29:bf:dd:31:3c:e9:d5:94:29:ed:57:5d:d7:ed: 06:1c:6b:1c:a0:d2:a8:cd:33:14:7e:c4:90:05:77: af:af:8f:10:47:86:b3:c7:d2:96:91:33:8c:8a:6b: 9a:91:53:d8:ff:80:0e:93:81:b9:58:b1:eb:f3:7e: 12:ad:24:31:1e:5e:ec:65:c9:8c:92:c2:fc:9a:e0: f1:b6:16:29:c3:d7:90:94:ee:b4:47:30:58:07:4d: 36:6e:1e:7f:db:91:59:9e:6e:84:02:75:4a:58:8d: 58:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: FA:62:58:8C:3B:4D:3C:DF:54:72:1D:02:41:DB:98:30:A4:9D:A2:9E X509v3 Authority Key Identifier: keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1112577106547572755/0/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1112577106547572755/0/FA62588C3B4D3CDF54721D0241DB9830A49DA29E.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.113.12.0/22 103.52.160.0/22 116.199.64.0/18 119.32.64.0-119.35.255.255 124.40.128.0/18 125.31.192.0/18 IPv6: 2400:5e80::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 131132 Signature Algorithm: sha256WithRSAEncryption 6c:e3:1b:36:77:2a:e1:19:bd:0c:58:fe:92:1a:10:e8:6b:f4: 3c:36:06:4a:86:11:e9:8d:cf:99:40:0b:bb:e5:71:6c:0f:10: 72:43:0f:bb:84:42:fa:e3:eb:25:aa:91:ac:0f:27:12:04:24: 54:28:09:45:27:a5:62:f9:2c:66:f4:f3:85:11:22:b0:00:e9: 17:94:01:a9:34:da:d9:84:71:76:b5:35:d6:14:48:bb:1a:c0: f2:1b:a9:36:16:73:56:3e:80:45:ce:a9:b5:f6:af:9a:62:a4: 7d:bf:a3:c6:3d:2a:0b:c4:0a:74:95:f0:56:ce:b4:11:43:7d: 4e:1c:b7:8c:4e:2f:9e:65:b5:71:57:27:ec:ed:c0:78:7e:6b: 81:1a:15:0c:cb:7f:ab:70:8b:86:83:98:87:a9:c9:4c:1f:7a: ca:51:8e:ae:74:20:bc:51:7c:e0:89:2d:a8:0a:26:2e:81:cb: 12:db:57:a5:73:21:a5:f4:1e:85:38:e2:58:19:72:34:56:9d: 77:e9:b1:ae:80:7c:fc:8b:ab:dd:67:92:19:f9:2a:ca:1b:ec: c1:3a:76:65:bb:15:4c:06:d5:d1:5a:ae:b3:93:43:02:5e:2f: 53:0d:be:a9:0e:86:6d:48:8a:2d:e6:04:d4:a4:93:99:a0:0f: 06:c3:1c:f4 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUKMceipiEj7bfBwz6+9RbgBxLt9swDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDUyOTAyNTkxNVoX DTI3MDUyODAzMDQxNVowMzExMC8GA1UEAxMoRkE2MjU4OEMzQjREM0NERjU0NzIx RDAyNDFEQjk4MzBBNDlEQTI5RTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKfnOPM/8QCGMe1eVzhaGLA7P8whoiO27zKqzcROoQiXsp8Edl30ljq6fpvw aEBpOC2/Sy7VlpZ6+KguXfR+MjVX9nBFc3urgiDQVJHrRma2hzd17idsepl7r4vN /t78XPL5+qGwlxJpAFy0rH/AHMBrmmPW/s7M8EpfQ1JTpNN6Qh/lVhjxBtIXoGan TMR26bVtbGx3sCm/3TE86dWUKe1XXdftBhxrHKDSqM0zFH7EkAV3r6+PEEeGs8fS lpEzjIprmpFT2P+ADpOBuVix6/N+Eq0kMR5e7GXJjJLC/Jrg8bYWKcPXkJTutEcw WAdNNm4ef9uRWZ5uhAJ1SliNWAMCAwEAAaOCAuowggLmMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFPpiWIw7TTzfVHIdAkHbmDCknaKeMB8GA1UdIwQYMBaAFKVu hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTExMjU3NzEwNjU0NzU3Mjc1NS8wLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMTEyNTc3MTA2NTQ3NTcyNzU1 LzAvRkE2MjU4OEMzQjREM0NERjU0NzIxRDAyNDFEQjk4MzBBNDlEQTI5RS5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwUwYIKwYBBQUH AQcBAf8ERDBCMDEEAgABMCsDBAItcQwDBAJnNKADBAZ0x0AwCwMEBncgQAMDAncg AwQGfCiAAwQGfR/AMA0EAgACMAcDBQAkAF6AMBoGCCsGAQUFBwEIAQH/BAswCaAH MAUCAwIAPDANBgkqhkiG9w0BAQsFAAOCAQEAbOMbNncq4Rm9DFj+khoQ6Gv0PDYG SoYR6Y3PmUALu+VxbA8QckMPu4RC+uPrJaqRrA8nEgQkVCgJRSelYvksZvTzhREi sADpF5QBqTTa2YRxdrU11hRIuxrA8hupNhZzVj6ARc6ptfavmmKkfb+jxj0qC8QK dJXwVs60EUN9Thy3jE4vnmW1cVcn7O3AeH5rgRoVDMt/q3CLhoOYh6nJTB96ylGO rnQgvFF84IktqAomLoHLEttXpXMhpfQehTjiWBlyNFadd+mxroB8/Iur3WeSGfkq yhvswTp2ZbsVTAbV0Vqus5NDAl4vUw2+qQ6GbUiKLeYE1KSTmaAPBsMc9A== -----END CERTIFICATE-----Generated at Fri May 29 21:11:45 2026 by rpki-client