$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CFB23E5C25BCDF75B10365741E60EA1870019718.cer File: CFB23E5C25BCDF75B10365741E60EA1870019718.cer (raw, json) Hash identifier: NsZ3AGhuOI4sDG2C1sDCIVRHvggRQLo1EmL/P5TAhOE= Subject key identifier: CF:B2:3E:5C:25:BC:DF:75:B1:03:65:74:1E:60:EA:18:70:01:97:18 Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Certificate serial: 595A8245E5A5273859D300775DC6BF03436502C6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1098834824765898754/0/CFB23E5C25BCDF75B10365741E60EA1870019718.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1098834824765898754/0/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Tue 21 Apr 2026 04:52:18 +0000 Certificate not after: Tue 20 Apr 2027 04:57:18 +0000 Subordinate resources: AS: 63611 AS: 131560 IP: 103.159.134.0/23 IP: 103.235.140.0/22 IP: 150.242.160.0/22 IP: 2402:1600::/32 IP: 2406:d2c0::/32 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 11:49:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:5a:82:45:e5:a5:27:38:59:d3:00:77:5d:c6:bf:03:43:65:02:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Validity Not Before: Apr 21 04:52:18 2026 GMT Not After : Apr 20 04:57:18 2027 GMT Subject: CN=CFB23E5C25BCDF75B10365741E60EA1870019718 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:1c:72:60:6a:98:26:5e:6b:e0:da:ff:5c:de: 26:df:2f:87:fa:76:a4:7a:6e:2e:88:f0:6f:44:9e: 6d:8d:70:ca:a3:64:01:b0:3b:54:3b:e6:01:61:0f: 52:89:49:50:b3:cf:65:90:d4:61:05:44:ee:70:af: f9:0e:c8:85:28:da:41:a3:3b:1d:11:3d:ff:e5:9a: b0:30:e9:f0:76:83:0a:87:15:e0:6f:3c:47:d9:e6: 89:9b:5d:61:5b:02:3b:7c:e2:30:c2:4b:b4:d7:de: 71:ca:cd:a1:7f:91:50:c5:05:ee:03:3d:81:b2:4a: 3d:c8:3f:3a:1c:78:c0:2c:46:af:5a:bd:18:c4:2c: 78:70:f9:3f:d4:2a:c2:4a:4a:57:b7:dd:70:8f:d1: b5:f4:a3:15:f5:74:ca:c0:c0:dc:4a:1b:18:27:ef: c5:4b:f0:e8:c6:57:30:c5:c8:40:58:96:4d:6e:44: de:21:22:b9:4c:ed:fe:11:6f:5f:07:7c:43:f7:83: 1b:c6:18:7d:bc:e7:94:f8:7a:57:37:1c:d3:20:fc: 2a:67:74:b4:90:4a:e7:15:32:74:8b:22:71:20:00: 19:35:aa:ee:ce:fe:6f:80:8a:8d:81:b9:96:16:4e: 6b:ca:9c:41:5e:ea:61:f6:de:be:59:58:ab:6f:6f: 50:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: CF:B2:3E:5C:25:BC:DF:75:B1:03:65:74:1E:60:EA:18:70:01:97:18 X509v3 Authority Key Identifier: keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1098834824765898754/0/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1098834824765898754/0/CFB23E5C25BCDF75B10365741E60EA1870019718.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.159.134.0/23 103.235.140.0/22 150.242.160.0/22 IPv6: 2402:1600::/32 2406:d2c0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 63611 131560 Signature Algorithm: sha256WithRSAEncryption 95:e9:30:b9:ec:cb:84:a8:e5:a4:d3:dd:6d:5c:3a:0b:b0:dd: d5:e3:26:a4:07:ba:1b:be:6f:ad:cf:db:35:68:f7:ca:cf:66: 38:73:d5:15:c3:57:7e:ba:5e:68:37:ad:ce:dc:56:a2:8a:36: 5e:1f:a7:f4:67:4f:0f:77:82:d7:34:6f:83:d0:04:24:fb:8f: 37:3a:89:c2:05:a8:68:b0:fa:2d:71:fe:61:9d:37:2b:82:02: 21:bd:ce:44:f2:22:36:5f:89:0b:0d:cf:cf:65:97:5e:70:a1: 5b:6c:21:39:c0:9e:8d:00:4d:e5:34:46:cb:fb:b4:5f:a6:b7: bb:e7:10:e6:22:90:0a:62:d2:3f:75:35:c6:27:8c:ba:bc:3a: ce:54:c0:49:11:c3:bd:a9:6b:59:68:4d:eb:55:e3:70:8a:e2: 25:97:63:d0:43:77:21:ae:2c:5c:fb:e8:a5:8c:bc:48:63:3b: d2:61:f6:66:cb:09:d5:06:b2:80:1a:17:3b:02:40:90:36:e5: e2:58:97:96:e7:cb:ac:5c:9c:4e:45:0c:30:15:f1:49:9b:b0: a8:4b:e5:29:b7:3f:2f:52:89:c8:79:b8:48:36:95:ee:eb:61: b3:8d:ff:e5:00:f7:fa:64:e8:d2:86:d8:67:5a:7c:f6:f4:e0: b2:a8:1f:9b -----BEGIN CERTIFICATE----- MIIF6jCCBNKgAwIBAgIUWVqCReWlJzhZ0wB3Xca/A0NlAsYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDQyMTA0NTIxOFoX DTI3MDQyMDA0NTcxOFowMzExMC8GA1UEAxMoQ0ZCMjNFNUMyNUJDREY3NUIxMDM2 NTc0MUU2MEVBMTg3MDAxOTcxODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALMccmBqmCZea+Da/1zeJt8vh/p2pHpuLojwb0SebY1wyqNkAbA7VDvmAWEP UolJULPPZZDUYQVE7nCv+Q7IhSjaQaM7HRE9/+WasDDp8HaDCocV4G88R9nmiZtd YVsCO3ziMMJLtNfeccrNoX+RUMUF7gM9gbJKPcg/Ohx4wCxGr1q9GMQseHD5P9Qq wkpKV7fdcI/RtfSjFfV0ysDA3EobGCfvxUvw6MZXMMXIQFiWTW5E3iEiuUzt/hFv Xwd8Q/eDG8YYfbznlPh6Vzcc0yD8Kmd0tJBK5xUydIsicSAAGTWq7s7+b4CKjYG5 lhZOa8qcQV7qYfbevllYq29vUK8CAwEAAaOCAt0wggLZMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFM+yPlwlvN91sQNldB5g6hhwAZcYMB8GA1UdIwQYMBaAFKVu hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTA5ODgzNDgyNDc2NTg5ODc1NC8wLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDk4ODM0ODI0NzY1ODk4NzU0 LzAvQ0ZCMjNFNUMyNUJDREY3NUIxMDM2NTc0MUU2MEVBMTg3MDAxOTcxOC5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwQQYIKwYBBQUH AQcBAf8EMjAwMBgEAgABMBIDBAFnn4YDBAJn64wDBAKW8qAwFAQCAAIwDgMFACQC FgADBQAkBtLAMB8GCCsGAQUFBwEIAQH/BBAwDqAMMAoCAwD4ewIDAgHoMA0GCSqG SIb3DQEBCwUAA4IBAQCV6TC57MuEqOWk091tXDoLsN3V4yakB7obvm+tz9s1aPfK z2Y4c9UVw1d+ul5oN63O3FaiijZeH6f0Z08Pd4LXNG+D0AQk+483OonCBahosPot cf5hnTcrggIhvc5E8iI2X4kLDc/PZZdecKFbbCE5wJ6NAE3lNEbL+7Rfpre75xDm IpAKYtI/dTXGJ4y6vDrOVMBJEcO9qWtZaE3rVeNwiuIll2PQQ3chrixc++iljLxI YzvSYfZmywnVBrKAGhc7AkCQNuXiWJeW58usXJxORQwwFfFJm7CoS+Uptz8vUonI ebhINpXu62Gzjf/lAPf6ZOjShthnWnz29OCyqB+b -----END CERTIFICATE-----Generated at Wed May 13 16:05:02 2026 by rpki-client