$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B231F5DF7535BF86CFFEB85A0B28E0A447CBD52.cer File: 6B231F5DF7535BF86CFFEB85A0B28E0A447CBD52.cer (raw, json) Hash identifier: v25fzRaMV22VUJSaxI0q3U2yf/RuQ9ebO3au4lCwdV4= Subject key identifier: 6B:23:1F:5D:F7:53:5B:F8:6C:FF:EB:85:A0:B2:8E:0A:44:7C:BD:52 Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Certificate serial: 34258056BCFBA933EC145333CA4D87F3CC1DD41D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1106106457318752269/0/6B231F5DF7535BF86CFFEB85A0B28E0A447CBD52.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1106106457318752269/0/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Mon 11 May 2026 06:27:11 +0000 Certificate not after: Mon 10 May 2027 06:32:11 +0000 Subordinate resources: AS: 59011 IP: 110.40.0.0 -- 110.40.16.255 IP: 120.92.240.0/20 IP: 120.131.88.0/21 IP: 120.131.124.0 -- 120.131.255.255 IP: 2402:9440::/32 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 11:49:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:25:80:56:bc:fb:a9:33:ec:14:53:33:ca:4d:87:f3:cc:1d:d4:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Validity Not Before: May 11 06:27:11 2026 GMT Not After : May 10 06:32:11 2027 GMT Subject: CN=6B231F5DF7535BF86CFFEB85A0B28E0A447CBD52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:16:38:fd:f7:34:75:1a:e5:68:4d:5a:ed:7e: ce:34:d9:8d:79:ef:97:bd:a9:4e:89:1d:ff:50:34: f3:60:17:65:3c:c7:11:80:a8:f0:38:b5:45:38:ca: 43:cb:1b:c8:c0:59:73:22:fc:66:f2:f8:a3:07:fa: 55:09:84:77:18:28:18:ee:43:f1:72:34:54:ee:be: d0:ad:5c:1b:77:02:fd:f6:66:cc:65:67:74:5e:45: c3:61:b2:99:05:af:82:12:4f:c3:f4:50:71:64:24: ef:b0:4a:12:19:b0:4d:cc:98:de:e2:ae:a5:f7:68: fc:98:4b:aa:2f:32:4c:43:05:5b:8e:9e:2c:d3:db: 53:38:bf:33:16:1b:d0:79:f7:f7:d7:1d:bb:f5:34: 40:94:a7:7d:31:0b:c2:0d:4a:1a:8b:d0:e8:f1:20: 3c:bf:94:51:99:d7:7a:be:5e:4c:56:24:89:6c:68: 11:35:d2:e7:0e:b5:ee:3a:6a:07:8d:fb:07:bd:40: c0:fd:a3:37:75:66:d9:6b:10:87:bc:6b:fb:9b:29: b5:ac:c7:6e:33:17:9e:bf:4b:66:ca:e0:81:af:0a: 87:61:f2:cc:ad:3c:69:4a:10:9c:72:bf:66:ea:8f: 48:dd:f0:7e:55:67:4c:24:d8:ef:97:ae:9d:66:6d: cf:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 6B:23:1F:5D:F7:53:5B:F8:6C:FF:EB:85:A0:B2:8E:0A:44:7C:BD:52 X509v3 Authority Key Identifier: keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1106106457318752269/0/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1106106457318752269/0/6B231F5DF7535BF86CFFEB85A0B28E0A447CBD52.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 110.40.0.0-110.40.16.255 120.92.240.0/20 120.131.88.0/21 120.131.124.0-120.131.255.255 IPv6: 2402:9440::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 59011 Signature Algorithm: sha256WithRSAEncryption 79:a5:5f:00:b1:ae:9e:e2:7d:0b:a2:6a:99:75:ae:99:b8:cd: 7a:ed:8a:b1:dd:32:2f:ab:9e:bb:32:2a:81:6f:56:80:c0:58: 62:e9:21:05:b5:c8:fb:6c:6c:b4:14:91:8f:01:a5:8e:43:ea: f4:27:7c:5b:64:ee:8f:de:f1:c3:cd:9b:ea:65:91:d2:ec:be: 79:83:9f:03:ff:29:ed:ef:0b:66:85:fe:26:fd:50:e6:4e:39: 88:d9:85:53:a9:03:04:7a:84:7b:e6:b0:cf:8e:4c:b3:7a:fd: d1:24:59:3a:bc:a2:c8:80:df:3d:34:8f:18:7b:4b:e1:b0:02: 08:16:70:e6:0a:95:76:07:2f:cc:67:7e:04:a7:b9:bb:14:68: c0:09:8d:99:07:b8:27:10:4d:8d:51:a0:1a:3f:70:c7:fc:d0: 2a:49:68:f6:7d:9e:ab:9f:11:f8:16:a5:e5:55:84:da:fc:d0: e7:cc:97:23:98:5c:ad:24:cf:a4:a7:4a:be:5d:3c:16:52:6a: 86:03:79:4d:ba:e6:de:a2:dd:5c:89:ca:98:92:c9:bb:63:80: e1:53:a4:b4:38:8d:fd:46:ab:cb:30:c9:9d:c3:80:02:ad:b3: 61:f2:77:99:ee:12:d4:80:83:2f:a8:d2:fb:6e:72:bb:73:e3: 73:dc:b6:d4 -----BEGIN CERTIFICATE----- MIIF8jCCBNqgAwIBAgIUNCWAVrz7qTPsFFMzyk2H88wd1B0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDUxMTA2MjcxMVoX DTI3MDUxMDA2MzIxMVowMzExMC8GA1UEAxMoNkIyMzFGNURGNzUzNUJGODZDRkZF Qjg1QTBCMjhFMEE0NDdDQkQ1MjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMMWOP33NHUa5WhNWu1+zjTZjXnvl72pTokd/1A082AXZTzHEYCo8Di1RTjK Q8sbyMBZcyL8ZvL4owf6VQmEdxgoGO5D8XI0VO6+0K1cG3cC/fZmzGVndF5Fw2Gy mQWvghJPw/RQcWQk77BKEhmwTcyY3uKupfdo/JhLqi8yTEMFW46eLNPbUzi/MxYb 0Hn399cdu/U0QJSnfTELwg1KGovQ6PEgPL+UUZnXer5eTFYkiWxoETXS5w617jpq B437B71AwP2jN3Vm2WsQh7xr+5sptazHbjMXnr9LZsrgga8Kh2HyzK08aUoQnHK/ ZuqPSN3wflVnTCTY75eunWZtz0sCAwEAAaOCAuUwggLhMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFGsjH133U1v4bP/rhaCyjgpEfL1SMB8GA1UdIwQYMBaAFKVu hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTEwNjEwNjQ1NzMxODc1MjI2OS8wLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMTA2MTA2NDU3MzE4NzUyMjY5 LzAvNkIyMzFGNURGNzUzNUJGODZDRkZFQjg1QTBCMjhFMEE0NDdDQkQ1Mi5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwTgYIKwYBBQUH AQcBAf8EPzA9MCwEAgABMCYwCwMDA24oAwQAbigQAwQEeFzwAwQDeINYMAsDBAJ4 g3wDAwJ4gDANBAIAAjAHAwUAJAKUQDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMA 5oMwDQYJKoZIhvcNAQELBQADggEBAHmlXwCxrp7ifQuiapl1rpm4zXrtirHdMi+r nrsyKoFvVoDAWGLpIQW1yPtsbLQUkY8BpY5D6vQnfFtk7o/e8cPNm+plkdLsvnmD nwP/Ke3vC2aF/ib9UOZOOYjZhVOpAwR6hHvmsM+OTLN6/dEkWTq8osiA3z00jxh7 S+GwAggWcOYKlXYHL8xnfgSnubsUaMAJjZkHuCcQTY1RoBo/cMf80CpJaPZ9nquf EfgWpeVVhNr80OfMlyOYXK0kz6SnSr5dPBZSaoYDeU265t6i3VyJypiSybtjgOFT pLQ4jf1Gq8swyZ3DgAKts2Hyd5nuEtSAgy+o0vtucrtz43PcttQ= -----END CERTIFICATE-----Generated at Wed May 13 15:39:03 2026 by rpki-client