$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FF4E68ED10AAB07D8F4EEC05FD03457953F937E1.cer File: FF4E68ED10AAB07D8F4EEC05FD03457953F937E1.cer (raw, json) Hash identifier: Alwu+Z1nAurhhveiUK6p29zWGJFYv4ixShi5iwwFFqY= Subject key identifier: FF:4E:68:ED:10:AA:B0:7D:8F:4E:EC:05:FD:03:45:79:53:F9:37:E1 Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Certificate serial: 71908371A26564A2F96C439B6114D9C01CB0BEDB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1065588553129590787/0/FF4E68ED10AAB07D8F4EEC05FD03457953F937E1.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1065588553129590787/0/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Fri 29 May 2026 03:25:12 +0000 Certificate not after: Fri 28 May 2027 03:30:12 +0000 Subordinate resources: IP: 103.20.44.0/22 IP: 114.112.0.0/22 IP: 114.112.14.0/23 IP: 116.196.14.0/23 IP: 182.50.4.0/22 IP: 183.81.172.0/22 IP: 202.69.6.0/23 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 15:28:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:90:83:71:a2:65:64:a2:f9:6c:43:9b:61:14:d9:c0:1c:b0:be:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Validity Not Before: May 29 03:25:12 2026 GMT Not After : May 28 03:30:12 2027 GMT Subject: CN=FF4E68ED10AAB07D8F4EEC05FD03457953F937E1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:7d:0d:b9:85:9e:af:81:f3:c0:e6:7f:ec:25: fc:d4:35:59:5f:ec:e5:98:b1:c1:03:b6:46:ba:3c: 18:62:f1:bb:29:57:6a:99:c5:de:f8:d1:bd:e3:74: 64:d4:5b:14:29:bd:f1:12:17:b3:0c:4c:3e:bf:f9: 1f:7b:35:7a:f9:58:39:5d:da:29:67:90:0f:b1:01: d0:5a:b4:41:fe:2d:7d:d7:d2:36:a2:35:89:48:d0: fb:5e:9e:9d:4c:be:0d:a3:1e:a8:f2:96:b0:9b:e1: 3a:b2:f5:e8:4b:be:4a:dd:78:3f:67:08:1d:b4:fe: 1b:ca:85:6d:55:a7:4a:13:8b:a0:e6:bf:fd:53:19: 02:ff:7e:60:c7:57:54:ac:82:c1:e2:d8:30:5d:26: d6:bc:4b:1e:2b:c2:75:a1:0e:3e:7d:73:26:f6:7c: 3a:65:74:92:cc:55:69:29:ae:03:00:d6:c2:de:5e: 6c:f1:b7:8a:ea:2e:b6:27:02:c0:15:f4:03:ad:e4: b2:f1:cd:0e:cd:20:c0:39:d3:f6:cf:01:36:e9:c0: 58:62:77:72:14:b8:8b:db:c1:a8:47:25:2f:93:c2: 4d:70:a9:4d:6d:a0:fb:c7:cd:7e:be:ee:df:b4:6d: fc:53:10:d2:13:c1:01:d8:91:74:34:58:2d:0e:c5: 7a:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: FF:4E:68:ED:10:AA:B0:7D:8F:4E:EC:05:FD:03:45:79:53:F9:37:E1 X509v3 Authority Key Identifier: keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129590787/0/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129590787/0/FF4E68ED10AAB07D8F4EEC05FD03457953F937E1.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.20.44.0/22 114.112.0.0/22 114.112.14.0/23 116.196.14.0/23 182.50.4.0/22 183.81.172.0/22 202.69.6.0/23 Signature Algorithm: sha256WithRSAEncryption 94:8d:79:40:b1:8f:2a:71:48:5d:2d:d5:93:cb:e4:41:88:ba: 9d:82:b0:80:de:56:1b:eb:7e:0a:39:71:f9:ce:e4:2d:aa:7a: ac:75:9c:7e:d8:fe:d0:58:f4:b1:3c:aa:58:20:78:81:dd:f5: f8:cc:2a:52:0e:d5:b0:c8:b5:df:4f:e2:9d:aa:32:a3:61:c9: 7b:54:0a:f6:9e:9a:26:2e:c7:a4:d8:60:d8:3e:2b:eb:ed:30: b9:d3:cc:2f:3b:7b:7d:70:e4:39:4d:ed:a6:3f:39:33:7a:eb: d4:a0:b6:30:85:e4:ae:f2:10:aa:18:92:ab:26:7c:76:78:5f: 2a:41:9b:11:53:f2:f7:81:ea:19:2f:fb:c7:61:9b:2c:c1:47: 25:e8:65:12:f9:17:99:f7:93:d3:dc:80:52:8e:e2:8c:86:fc: 36:59:19:6d:e5:0e:0e:8f:cd:49:33:57:53:f2:32:65:09:52: 07:d1:10:42:78:aa:7f:d6:97:5f:9d:71:7e:8e:a9:ff:db:1f: e5:6a:e2:4f:4d:0b:57:e5:75:aa:75:12:8a:fe:14:d8:fd:21: ae:6a:b6:c3:e9:61:1b:65:ff:ff:06:8d:2d:80:25:3f:4d:4d: e4:27:c5:51:b9:0d:b0:ad:7e:c5:17:c4:41:30:2e:d9:f6:1f: fe:a6:3f:49 -----BEGIN CERTIFICATE----- MIIFyzCCBLOgAwIBAgIUcZCDcaJlZKL5bEObYRTZwBywvtswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDUyOTAzMjUxMloX DTI3MDUyODAzMzAxMlowMzExMC8GA1UEAxMoRkY0RTY4RUQxMEFBQjA3RDhGNEVF QzA1RkQwMzQ1Nzk1M0Y5MzdFMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAN19DbmFnq+B88Dmf+wl/NQ1WV/s5ZixwQO2Rro8GGLxuylXapnF3vjRveN0 ZNRbFCm98RIXswxMPr/5H3s1evlYOV3aKWeQD7EB0Fq0Qf4tfdfSNqI1iUjQ+16e nUy+DaMeqPKWsJvhOrL16Eu+St14P2cIHbT+G8qFbVWnShOLoOa//VMZAv9+YMdX VKyCweLYMF0m1rxLHivCdaEOPn1zJvZ8OmV0ksxVaSmuAwDWwt5ebPG3iuouticC wBX0A63ksvHNDs0gwDnT9s8BNunAWGJ3chS4i9vBqEclL5PCTXCpTW2g+8fNfr7u 37Rt/FMQ0hPBAdiRdDRYLQ7Fej0CAwEAAaOCAr4wggK6MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFP9OaO0QqrB9j07sBf0DRXlT+TfhMB8GA1UdIwQYMBaAFKVu hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTA2NTU4ODU1MzEyOTU5MDc4Ny8wLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDY1NTg4NTUzMTI5NTkwNzg3 LzAvRkY0RTY4RUQxMEFBQjA3RDhGNEVFQzA1RkQwMzQ1Nzk1M0Y5MzdFMS5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwQwYIKwYBBQUH AQcBAf8ENDAyMDAEAgABMCoDBAJnFCwDBAJycAADBAFycA4DBAF0xA4DBAK2MgQD BAK3UawDBAHKRQYwDQYJKoZIhvcNAQELBQADggEBAJSNeUCxjypxSF0t1ZPL5EGI up2CsIDeVhvrfgo5cfnO5C2qeqx1nH7Y/tBY9LE8qlggeIHd9fjMKlIO1bDItd9P 4p2qMqNhyXtUCvaemiYux6TYYNg+K+vtMLnTzC87e31w5DlN7aY/OTN669SgtjCF 5K7yEKoYkqsmfHZ4XypBmxFT8veB6hkv+8dhmyzBRyXoZRL5F5n3k9PcgFKO4oyG /DZZGW3lDg6PzUkzV1PyMmUJUgfREEJ4qn/Wl1+dcX6Oqf/bH+Vq4k9NC1fldap1 Eor+FNj9Ia5qtsPpYRtl//8GjS2AJT9NTeQnxVG5DbCtfsUXxEEwLtn2H/6mP0k= -----END CERTIFICATE-----Generated at Fri May 29 21:12:52 2026 by rpki-client