$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FB7B794F123725FE800A647F3F7E8BE99B1F5B2C.cer File: FB7B794F123725FE800A647F3F7E8BE99B1F5B2C.cer (raw, json) Hash identifier: IcrwR8b8SAmS4qaY+TU9pwkukTjUnmZVzotjEWIKlmY= Subject key identifier: FB:7B:79:4F:12:37:25:FE:80:0A:64:7F:3F:7E:8B:E9:9B:1F:5B:2C Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Certificate serial: 0ABE1A97799F1CD9F15439851435858A9CED8AF1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1065576723372048386/0/FB7B794F123725FE800A647F3F7E8BE99B1F5B2C.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1065576723372048386/0/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Fri 29 May 2026 08:48:21 +0000 Certificate not after: Fri 28 May 2027 08:53:21 +0000 Subordinate resources: AS: 23771 AS: 45078 IP: 59.153.4.0/22 IP: 103.197.228.0/22 IP: 124.22.0.0/15 IP: 124.47.0.0/18 IP: 182.80.0.0/14 IP: 202.150.16.0/20 IP: 203.152.64.0/19 IP: 210.87.128.0/18 IP: 2405:e600::/32 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 15:28:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:be:1a:97:79:9f:1c:d9:f1:54:39:85:14:35:85:8a:9c:ed:8a:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Validity Not Before: May 29 08:48:21 2026 GMT Not After : May 28 08:53:21 2027 GMT Subject: CN=FB7B794F123725FE800A647F3F7E8BE99B1F5B2C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:d6:ad:ee:ff:fd:2f:ce:ca:4a:1a:b9:a1:33: cc:28:68:ef:1c:31:e3:91:5b:be:0e:9f:b5:55:5e: b9:bf:99:44:fc:0b:47:76:47:06:b3:aa:d5:c9:d3: 83:d5:65:32:c3:32:cc:64:75:22:25:1e:c1:7f:de: 74:9f:b9:91:b8:b4:0d:b4:94:82:5c:56:51:c1:98: dc:ba:f5:7d:41:bc:02:f0:22:67:b4:95:0e:b9:34: 4a:c6:7f:5c:7e:81:0a:0f:f3:48:84:fa:b7:92:3a: 3d:2a:f8:73:f9:cf:db:63:06:13:2d:aa:33:7e:e2: 4d:be:07:d5:3b:3e:34:ff:39:00:e5:bc:ff:a5:ed: 7e:cd:c4:b0:ad:f4:ea:9a:2b:c1:5e:71:d7:24:5c: 9a:36:fc:f4:23:f8:83:24:96:6c:35:6c:7a:ac:12: 71:c4:b9:a9:82:08:48:b5:c8:c1:ad:e4:ce:6f:7a: 0c:75:31:84:84:b7:93:16:91:f8:28:3b:e1:ef:32: 68:15:99:c5:a7:a4:37:9b:0b:36:d8:78:0b:7a:dd: 1d:35:04:0d:b5:58:56:8d:38:84:80:db:47:c5:9a: 1b:9b:d7:3c:60:d4:fa:d3:e3:1c:e1:ad:33:39:06: 3f:fa:eb:0c:b5:c1:32:8f:bd:84:e3:dd:8e:ae:d5: 2f:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: FB:7B:79:4F:12:37:25:FE:80:0A:64:7F:3F:7E:8B:E9:9B:1F:5B:2C X509v3 Authority Key Identifier: keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372048386/0/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372048386/0/FB7B794F123725FE800A647F3F7E8BE99B1F5B2C.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 59.153.4.0/22 103.197.228.0/22 124.22.0.0/15 124.47.0.0/18 182.80.0.0/14 202.150.16.0/20 203.152.64.0/19 210.87.128.0/18 IPv6: 2405:e600::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 23771 45078 Signature Algorithm: sha256WithRSAEncryption 80:b2:32:a6:d1:b5:81:bf:a3:24:c1:1e:fa:73:c2:e5:76:53: 5e:1b:b4:6a:dd:16:75:ea:25:5a:95:6e:d8:94:45:f2:82:13: 0f:ea:3f:e9:c5:8f:7b:3f:0f:41:da:bf:6f:2d:02:4d:05:a8: 87:f1:aa:fb:b6:6c:02:ef:ea:20:61:77:9f:42:23:f8:5e:a2: a9:94:35:fc:5f:1d:da:10:47:5f:51:fa:39:96:fa:34:23:e1: 4e:40:cf:cc:17:f5:04:4f:52:15:16:f8:75:97:b7:a8:16:0e: 1b:67:4e:c9:80:4b:0a:54:ba:9b:00:8a:c2:9a:98:3e:ee:77: e4:92:30:f7:fb:51:38:ce:8e:ef:b8:28:1d:5e:ec:a2:51:4c: 09:0b:54:2d:15:3b:2c:6c:f5:5e:a8:41:ef:f3:99:e1:17:1f: 02:aa:9f:9f:58:6f:2e:e9:d9:76:59:05:df:bc:ee:64:08:7d: 1f:ed:58:87:af:bb:40:5f:08:f2:41:3d:8a:45:21:4f:f6:45: 7b:ab:49:07:a6:f1:a9:77:68:00:eb:f4:56:69:aa:3f:91:00: ca:5c:79:e6:56:71:7c:cc:d4:0f:1b:ee:9b:62:69:a5:b6:84: 9b:26:b3:29:8a:74:d4:30:2c:da:a4:2e:13:fd:f6:93:ef:50: 07:8d:a6:41 -----BEGIN CERTIFICATE----- MIIF/jCCBOagAwIBAgIUCr4al3mfHNnxVDmFFDWFipztivEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDUyOTA4NDgyMVoX DTI3MDUyODA4NTMyMVowMzExMC8GA1UEAxMoRkI3Qjc5NEYxMjM3MjVGRTgwMEE2 NDdGM0Y3RThCRTk5QjFGNUIyQzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAK7Wre7//S/OykoauaEzzCho7xwx45Fbvg6ftVVeub+ZRPwLR3ZHBrOq1cnT g9VlMsMyzGR1IiUewX/edJ+5kbi0DbSUglxWUcGY3Lr1fUG8AvAiZ7SVDrk0SsZ/ XH6BCg/zSIT6t5I6PSr4c/nP22MGEy2qM37iTb4H1Ts+NP85AOW8/6Xtfs3EsK30 6porwV5x1yRcmjb89CP4gySWbDVseqwSccS5qYIISLXIwa3kzm96DHUxhIS3kxaR +Cg74e8yaBWZxaekN5sLNth4C3rdHTUEDbVYVo04hIDbR8WaG5vXPGDU+tPjHOGt MzkGP/rrDLXBMo+9hOPdjq7VLxMCAwEAAaOCAvEwggLtMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFPt7eU8SNyX+gApkfz9+i+mbH1ssMB8GA1UdIwQYMBaAFKVu hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTA2NTU3NjcyMzM3MjA0ODM4Ni8wLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDY1NTc2NzIzMzcyMDQ4Mzg2 LzAvRkI3Qjc5NEYxMjM3MjVGRTgwMEE2NDdGM0Y3RThCRTk5QjFGNUIyQy5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwVgYIKwYBBQUH AQcBAf8ERzBFMDQEAgABMC4DBAI7mQQDBAJnxeQDAwF8FgMEBnwvAAMDArZQAwQE ypYQAwQFy5hAAwQG0leAMA0EAgACMAcDBQAkBeYAMB4GCCsGAQUFBwEIAQH/BA8w DaALMAkCAlzbAgMAsBYwDQYJKoZIhvcNAQELBQADggEBAICyMqbRtYG/oyTBHvpz wuV2U14btGrdFnXqJVqVbtiURfKCEw/qP+nFj3s/D0Hav28tAk0FqIfxqvu2bALv 6iBhd59CI/heoqmUNfxfHdoQR19R+jmW+jQj4U5Az8wX9QRPUhUW+HWXt6gWDhtn TsmASwpUupsAisKamD7ud+SSMPf7UTjOju+4KB1e7KJRTAkLVC0VOyxs9V6oQe/z meEXHwKqn59Yby7p2XZZBd+87mQIfR/tWIevu0BfCPJBPYpFIU/2RXurSQem8al3 aADr9FZpqj+RAMpceeZWcXzM1A8b7ptiaaW2hJsmsymKdNQwLNqkLhP99pPvUAeN pkE= -----END CERTIFICATE-----Generated at Fri May 29 21:12:33 2026 by rpki-client