$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6D1CE626B3B34809CAB0B0C8393AFA854F663330.cer File: 6D1CE626B3B34809CAB0B0C8393AFA854F663330.cer (raw, json) Hash identifier: 6l4CoQOinQpEuNTsbJzqB4aFL21BOCCXjHQWTqxM4lU= Subject key identifier: 6D:1C:E6:26:B3:B3:48:09:CA:B0:B0:C8:39:3A:FA:85:4F:66:33:30 Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Certificate serial: 3A5D88D745A60318EFAD9CEF7D9BE931A8B71AA9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1106817934849736725/0/6D1CE626B3B34809CAB0B0C8393AFA854F663330.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1106817934849736725/0/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Wed 13 May 2026 05:34:20 +0000 Certificate not after: Wed 12 May 2027 05:39:20 +0000 Subordinate resources: AS: 137783 IP: 103.199.252.0/22 IP: 119.30.48.0/20 IP: 203.83.12.0/22 IP: 203.110.160.0/19 IP: 203.156.192.0/18 IP: 210.74.224.0/19 IP: 211.156.0.0/19 IP: 211.167.128.0/19 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 11:49:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:5d:88:d7:45:a6:03:18:ef:ad:9c:ef:7d:9b:e9:31:a8:b7:1a:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Validity Not Before: May 13 05:34:20 2026 GMT Not After : May 12 05:39:20 2027 GMT Subject: CN=6D1CE626B3B34809CAB0B0C8393AFA854F663330 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:4a:d3:91:0d:c5:0c:cb:a5:44:0b:a1:86:53: a3:75:1a:8f:60:9a:f1:0b:80:9f:6b:85:30:c7:bb: 06:d7:96:c9:3d:b9:70:0a:68:2f:54:0c:c7:d1:01: d5:5c:cc:d3:e5:d7:92:bb:53:30:b2:e8:02:70:03: 4e:4a:14:ed:b8:bc:a7:69:e5:a8:3e:46:c3:3c:c8: b6:b5:e9:3d:be:7c:32:b2:e0:07:a0:49:08:c8:53: b1:9f:b8:ec:fb:c8:ba:c2:a1:80:78:cd:9e:4a:84: 21:0d:9d:39:f7:d7:0c:99:3b:1c:d5:ed:20:9e:c4: 63:e5:0f:d9:98:d3:f3:a9:f9:39:d8:47:cb:ef:40: 3f:d5:8c:52:1e:81:7c:12:18:ef:4f:ab:81:4b:72: 64:27:f1:cb:2d:1c:e8:e0:22:13:eb:5a:26:86:3e: e4:bb:cc:d5:28:d8:71:a1:30:59:a3:39:38:5a:ef: 0b:a6:f3:a0:32:72:ef:78:0a:c0:81:0a:d1:33:75: 75:e0:82:e6:57:9d:f6:d3:16:5e:f4:23:34:0b:a1: 86:a5:6d:d5:1a:f5:3f:54:6b:b2:18:6d:c7:06:9c: 75:20:c5:b7:7d:f4:47:bc:89:1f:3e:91:8a:0a:5a: c9:b7:04:61:b4:5d:15:b0:a1:d9:66:3a:4d:6a:99: 81:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 6D:1C:E6:26:B3:B3:48:09:CA:B0:B0:C8:39:3A:FA:85:4F:66:33:30 X509v3 Authority Key Identifier: keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1106817934849736725/0/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1106817934849736725/0/6D1CE626B3B34809CAB0B0C8393AFA854F663330.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.199.252.0/22 119.30.48.0/20 203.83.12.0/22 203.110.160.0/19 203.156.192.0/18 210.74.224.0/19 211.156.0.0/19 211.167.128.0/19 sbgp-autonomousSysNum: critical Autonomous System Numbers: 137783 Signature Algorithm: sha256WithRSAEncryption 63:d9:58:32:a8:f5:62:13:e1:c2:42:21:f7:fe:0a:be:23:ff: fe:ea:ee:14:5a:21:b0:dd:96:3a:ec:78:e1:3c:4b:cd:86:b8: 31:7f:73:74:d0:24:0c:b9:c0:b0:a8:29:27:a9:d4:69:6a:6f: 1c:48:7c:91:e0:17:fd:33:19:b4:91:88:03:df:ce:3f:7b:67: 6a:e2:88:c2:72:20:40:a0:b4:75:d8:1f:c1:d4:be:07:39:60: 79:ca:29:3e:d0:b8:14:be:d8:89:78:01:e6:a7:45:65:3d:90: b6:01:1d:b7:3a:75:0a:d6:ed:d2:93:10:a4:0b:2a:04:f4:27: 62:42:3c:44:e9:ac:49:d0:4c:13:66:02:61:24:28:86:9a:27: cb:d2:04:29:d1:fe:1d:84:fb:54:be:d5:e6:38:e7:64:fa:c4: 44:9e:36:8f:58:22:6a:f2:41:f4:9d:3d:c9:bf:39:1e:d7:f0: 45:dc:12:67:f8:ee:f8:76:0d:f0:69:27:b7:cf:76:4e:70:46: 00:94:c5:b3:be:4a:34:89:7c:48:73:40:f3:ea:67:ab:d6:a8: 34:a6:bc:00:a0:48:63:0e:f9:aa:8f:3c:2b:5c:76:02:a7:13: cd:ae:f1:10:ae:76:c2:3a:e4:e7:3c:e3:81:ab:7c:81:29:f5: d7:6b:be:7a -----BEGIN CERTIFICATE----- MIIF7TCCBNWgAwIBAgIUOl2I10WmAxjvrZzvfZvpMai3GqkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDUxMzA1MzQyMFoX DTI3MDUxMjA1MzkyMFowMzExMC8GA1UEAxMoNkQxQ0U2MjZCM0IzNDgwOUNBQjBC MEM4MzkzQUZBODU0RjY2MzMzMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANVK05ENxQzLpUQLoYZTo3Uaj2Ca8QuAn2uFMMe7BteWyT25cApoL1QMx9EB 1VzM0+XXkrtTMLLoAnADTkoU7bi8p2nlqD5GwzzItrXpPb58MrLgB6BJCMhTsZ+4 7PvIusKhgHjNnkqEIQ2dOffXDJk7HNXtIJ7EY+UP2ZjT86n5OdhHy+9AP9WMUh6B fBIY70+rgUtyZCfxyy0c6OAiE+taJoY+5LvM1SjYcaEwWaM5OFrvC6bzoDJy73gK wIEK0TN1deCC5led9tMWXvQjNAuhhqVt1Rr1P1RrshhtxwacdSDFt330R7yJHz6R igpaybcEYbRdFbCh2WY6TWqZgZ8CAwEAAaOCAuAwggLcMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFG0c5iazs0gJyrCwyDk6+oVPZjMwMB8GA1UdIwQYMBaAFKVu hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTEwNjgxNzkzNDg0OTczNjcyNS8wLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMTA2ODE3OTM0ODQ5NzM2NzI1 LzAvNkQxQ0U2MjZCM0IzNDgwOUNBQjBCMEM4MzkzQUZBODU0RjY2MzMzMC5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwSQYIKwYBBQUH AQcBAf8EOjA4MDYEAgABMDADBAJnx/wDBAR3HjADBALLUwwDBAXLbqADBAbLnMAD BAXSSuADBAXTnAADBAXTp4AwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDAho3MA0G CSqGSIb3DQEBCwUAA4IBAQBj2VgyqPViE+HCQiH3/gq+I//+6u4UWiGw3ZY67Hjh PEvNhrgxf3N00CQMucCwqCknqdRpam8cSHyR4Bf9Mxm0kYgD384/e2dq4ojCciBA oLR12B/B1L4HOWB5yik+0LgUvtiJeAHmp0VlPZC2AR23OnUK1u3SkxCkCyoE9Cdi QjxE6axJ0EwTZgJhJCiGmifL0gQp0f4dhPtUvtXmOOdk+sREnjaPWCJq8kH0nT3J vzke1/BF3BJn+O74dg3waSe3z3ZOcEYAlMWzvko0iXxIc0Dz6mer1qg0prwAoEhj DvmqjzwrXHYCpxPNrvEQrnbCOuTnPOOBq3yBKfXXa756 -----END CERTIFICATE-----Generated at Wed May 13 20:17:11 2026 by rpki-client