$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FFF96F8B13C936AC197ADB438E27C4E998F8642E.cer File: FFF96F8B13C936AC197ADB438E27C4E998F8642E.cer (raw, json) Hash identifier: OH1F8hSPpX2SS60Adhaj9IaTeOogMn1i9NR8CoT+sc8= Subject key identifier: FF:F9:6F:8B:13:C9:36:AC:19:7A:DB:43:8E:27:C4:E9:98:F8:64:2E Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Certificate serial: 696A2C9069C79EC0046393F933B45E06081C2898 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1114457741306429463/0/FFF96F8B13C936AC197ADB438E27C4E998F8642E.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1114457741306429463/0/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Wed 03 Jun 2026 07:32:55 +0000 Certificate not after: Wed 02 Jun 2027 07:37:55 +0000 Subordinate resources: IP: 43.247.252.0/22 IP: 103.238.56.0/22 IP: 119.2.0.0/19 IP: 202.91.176.0/20 IP: 202.93.252.0/22 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Jun 2026 19:04:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:6a:2c:90:69:c7:9e:c0:04:63:93:f9:33:b4:5e:06:08:1c:28:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Validity Not Before: Jun 3 07:32:55 2026 GMT Not After : Jun 2 07:37:55 2027 GMT Subject: CN=FFF96F8B13C936AC197ADB438E27C4E998F8642E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:88:fd:79:79:de:52:94:66:26:3a:ca:6e:82: 4a:78:fd:b1:b0:3f:26:a1:47:b6:92:a8:21:32:10: 43:04:8b:88:47:3c:2f:c5:e6:c2:37:ef:29:77:15: 74:68:2b:3b:8e:9a:6a:e9:b3:f4:b1:0f:88:10:05: 6f:51:6b:88:0a:fc:80:c7:ce:7c:71:b1:f5:47:54: 10:30:ac:77:7b:33:12:ec:b0:40:86:86:49:f8:84: 1e:2c:62:de:c2:cf:1e:22:9d:3a:e5:43:1b:83:30: b7:0a:f7:29:8c:09:fc:43:fa:3c:6f:4d:08:06:9c: ce:6d:06:4e:0a:86:ba:1f:d1:94:48:21:0e:f9:af: 42:3f:94:af:19:21:ab:b9:85:06:2e:a3:cd:7e:a0: 32:88:91:84:45:34:05:1f:c3:9e:46:45:97:d9:eb: 7c:f2:9f:1b:b5:98:5f:06:54:20:a6:a1:f6:4d:ef: 23:93:9b:06:37:f4:a2:b9:dd:f0:12:2c:5c:82:3d: a3:72:7c:ff:cb:ac:2b:e7:33:57:2a:c7:b0:40:ea: a9:30:35:30:df:f0:3f:59:65:56:8f:3b:f7:44:ef: 80:89:3b:d9:12:34:9a:f1:a7:50:85:50:fc:aa:b9: a7:e3:a4:1c:9c:dc:22:16:44:49:96:f5:53:21:e4: 50:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: FF:F9:6F:8B:13:C9:36:AC:19:7A:DB:43:8E:27:C4:E9:98:F8:64:2E X509v3 Authority Key Identifier: keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1114457741306429463/0/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1114457741306429463/0/FFF96F8B13C936AC197ADB438E27C4E998F8642E.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.247.252.0/22 103.238.56.0/22 119.2.0.0/19 202.91.176.0/20 202.93.252.0/22 Signature Algorithm: sha256WithRSAEncryption 83:d1:d4:4f:5e:60:1b:2b:06:be:45:b9:bc:3b:79:b0:6d:da: 4c:c2:36:a4:9c:5b:e5:02:65:7d:f9:52:65:be:bb:e6:cd:66: 1e:72:17:93:43:99:43:a4:56:db:8a:6a:c1:d6:c1:69:23:1a: 28:72:a6:70:44:4e:c7:6b:dc:41:b7:9d:c8:f7:d2:b3:b8:eb: 8a:de:dc:df:a2:bf:cd:7a:17:7e:a1:b4:10:8c:d9:4c:62:25: d8:fb:03:2b:d0:32:6d:32:04:4b:5d:fc:c0:81:d1:08:60:22: 8f:ad:7b:48:31:9f:af:34:81:11:0e:d7:ab:d4:aa:5f:10:3e: a1:84:c3:b1:2d:c3:c4:39:22:ef:0a:be:f7:55:f6:fb:72:56: ae:02:7f:3e:24:4d:5e:21:b8:39:09:9e:18:6e:c1:95:3c:cd: 7c:ba:d2:3a:5f:8d:4c:a6:68:c6:93:61:5e:4a:47:47:2d:86: 8a:d9:a5:fc:19:3d:f7:63:12:c0:6d:c8:3b:a7:b7:4c:42:ea: ad:99:e4:54:7d:80:dd:e6:b4:da:e5:58:62:8b:30:8d:cf:63: 6f:71:2c:73:77:c3:4b:45:9f:d9:be:bb:af:a6:64:9a:b4:54: 8d:a2:a7:51:5b:22:3b:62:a9:f2:30:b5:97:79:23:f4:66:3b: 15:61:f4:b8 -----BEGIN CERTIFICATE----- MIIFvzCCBKegAwIBAgIUaWoskGnHnsAEY5P5M7ReBggcKJgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDYwMzA3MzI1NVoX DTI3MDYwMjA3Mzc1NVowMzExMC8GA1UEAxMoRkZGOTZGOEIxM0M5MzZBQzE5N0FE QjQzOEUyN0M0RTk5OEY4NjQyRTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALGI/Xl53lKUZiY6ym6CSnj9sbA/JqFHtpKoITIQQwSLiEc8L8XmwjfvKXcV dGgrO46aaumz9LEPiBAFb1FriAr8gMfOfHGx9UdUEDCsd3szEuywQIaGSfiEHixi 3sLPHiKdOuVDG4Mwtwr3KYwJ/EP6PG9NCAaczm0GTgqGuh/RlEghDvmvQj+Urxkh q7mFBi6jzX6gMoiRhEU0BR/DnkZFl9nrfPKfG7WYXwZUIKah9k3vI5ObBjf0ornd 8BIsXII9o3J8/8usK+czVyrHsEDqqTA1MN/wP1llVo8790TvgIk72RI0mvGnUIVQ /Kq5p+OkHJzcIhZESZb1UyHkUEkCAwEAAaOCArIwggKuMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFP/5b4sTyTasGXrbQ44nxOmY+GQuMB8GA1UdIwQYMBaAFKVu hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTExNDQ1Nzc0MTMwNjQyOTQ2My8wLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMTE0NDU3NzQxMzA2NDI5NDYz LzAvRkZGOTZGOEIxM0M5MzZBQzE5N0FEQjQzOEUyN0M0RTk5OEY4NjQyRS5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwNwYIKwYBBQUH AQcBAf8EKDAmMCQEAgABMB4DBAIr9/wDBAJn7jgDBAV3AgADBATKW7ADBALKXfww DQYJKoZIhvcNAQELBQADggEBAIPR1E9eYBsrBr5Fubw7ebBt2kzCNqScW+UCZX35 UmW+u+bNZh5yF5NDmUOkVtuKasHWwWkjGihypnBETsdr3EG3ncj30rO464re3N+i v816F36htBCM2UxiJdj7AyvQMm0yBEtd/MCB0QhgIo+te0gxn680gREO16vUql8Q PqGEw7Etw8Q5Iu8KvvdV9vtyVq4Cfz4kTV4huDkJnhhuwZU8zXy60jpfjUymaMaT YV5KR0cthorZpfwZPfdjEsBtyDunt0xC6q2Z5FR9gN3mtNrlWGKLMI3PY29xLHN3 w0tFn9m+u6+mZJq0VI2ip1FbIjtiqfIwtZd5I/RmOxVh9Lg= -----END CERTIFICATE-----Generated at Fri Jun 12 03:34:23 2026 by rpki-client