$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F8BCDF52657E11F7CA8F45EAB8D002BB008F2043.cer File: F8BCDF52657E11F7CA8F45EAB8D002BB008F2043.cer (raw, json) Hash identifier: jVobjfOLux2eojnHpxHPQuofViZ8/R4Yo19KmoVq2B8= Subject key identifier: F8:BC:DF:52:65:7E:11:F7:CA:8F:45:EA:B8:D0:02:BB:00:8F:20:43 Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Certificate serial: 2B39001708D4535D371D070639D3B43996623B52 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1106868040269561873/0/F8BCDF52657E11F7CA8F45EAB8D002BB008F2043.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1106868040269561873/0/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Wed 13 May 2026 08:53:27 +0000 Certificate not after: Wed 12 May 2027 08:58:27 +0000 Subordinate resources: AS: 63580 IP: 103.61.104.0/22 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 11:49:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:39:00:17:08:d4:53:5d:37:1d:07:06:39:d3:b4:39:96:62:3b:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Validity Not Before: May 13 08:53:27 2026 GMT Not After : May 12 08:58:27 2027 GMT Subject: CN=F8BCDF52657E11F7CA8F45EAB8D002BB008F2043 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:35:58:77:4f:97:11:cc:da:6e:60:95:e3:be: 21:f5:46:91:13:f2:06:80:a0:8e:29:2a:5f:14:e7: cf:20:7b:07:70:07:b7:fb:96:05:67:7b:09:59:5f: e6:c3:f3:82:c6:c9:db:4d:72:44:f5:ee:1e:e8:b0: 30:98:0b:8a:cd:f9:31:97:6a:05:07:38:9e:d2:ca: e3:e1:86:c6:ba:79:0b:8c:01:52:63:84:3d:d4:15: 3e:45:35:61:ba:f6:e5:86:42:3e:f7:a9:56:ce:13: 1e:a4:95:ab:9f:68:0e:d5:39:55:a0:0e:a9:c3:3f: 30:27:2e:73:d1:1f:16:ab:f9:34:fb:17:17:bd:18: 4e:c9:d1:88:6a:92:4c:d0:fc:cb:5a:1b:f6:2d:19: 49:9f:4f:d5:47:fd:de:b7:1a:f1:77:82:73:5e:20: f7:7a:35:26:dd:8a:10:b5:7a:e2:15:a3:33:5c:a7: 0b:42:e6:ba:8b:e0:eb:ca:98:68:e4:8a:02:cb:5b: a0:00:c7:18:19:9c:af:a5:3b:99:9a:19:d7:ba:e4: 8b:d2:5c:85:b9:81:2b:13:0c:ca:58:84:89:a3:f4: 98:ed:00:ab:a3:c2:0e:65:0d:b2:0e:97:c0:3a:5f: a1:9d:44:f9:6b:55:5f:f7:cb:0c:65:04:ae:fc:dd: f6:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: F8:BC:DF:52:65:7E:11:F7:CA:8F:45:EA:B8:D0:02:BB:00:8F:20:43 X509v3 Authority Key Identifier: keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1106868040269561873/0/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1106868040269561873/0/F8BCDF52657E11F7CA8F45EAB8D002BB008F2043.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.61.104.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 63580 Signature Algorithm: sha256WithRSAEncryption 4d:68:e1:82:0d:30:b6:9f:b2:af:31:e9:23:17:4e:a4:05:de: 12:23:b2:64:09:1f:9d:a8:84:a3:21:8e:a2:75:0a:c9:09:9d: da:db:80:01:c1:34:a2:ce:3e:c3:32:58:98:d7:fd:1d:bd:fd: 70:f6:53:f5:aa:72:65:b5:ae:7f:84:e4:58:fe:55:eb:17:1b: a4:a0:b6:4e:9f:ff:5a:c4:28:1e:aa:16:6e:c9:1f:2b:e2:c9: bc:c2:71:34:59:73:de:b7:32:27:72:d1:e0:19:69:bf:02:76: 7e:70:a7:03:c2:3f:93:33:14:98:ea:76:78:56:74:52:60:22: 6c:16:80:88:79:05:93:66:9d:8c:21:58:e0:c1:8b:42:75:df: 11:b0:fb:05:e9:f2:30:a6:c9:6f:d3:d7:1d:9b:22:26:17:1d: 65:89:dd:4d:2e:56:67:b1:45:2e:8c:b1:b5:21:40:19:64:f2: 6e:b6:70:71:02:c8:9a:cf:5c:5a:91:2c:3b:02:aa:b5:e8:6d: 99:16:9a:11:d4:0a:22:c3:64:ac:f1:89:5c:54:62:cd:4f:72: 2f:be:d0:14:8d:37:67:57:d6:08:38:82:16:cd:5b:f1:b2:40: 74:6a:4e:a1:78:5d:c3:60:64:74:13:a5:ca:95:95:6e:30:7a: 89:4c:c5:99 -----BEGIN CERTIFICATE----- MIIFwzCCBKugAwIBAgIUKzkAFwjUU103HQcGOdO0OZZiO1IwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDUxMzA4NTMyN1oX DTI3MDUxMjA4NTgyN1owMzExMC8GA1UEAxMoRjhCQ0RGNTI2NTdFMTFGN0NBOEY0 NUVBQjhEMDAyQkIwMDhGMjA0MzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKk1WHdPlxHM2m5gleO+IfVGkRPyBoCgjikqXxTnzyB7B3AHt/uWBWd7CVlf 5sPzgsbJ201yRPXuHuiwMJgLis35MZdqBQc4ntLK4+GGxrp5C4wBUmOEPdQVPkU1 Ybr25YZCPvepVs4THqSVq59oDtU5VaAOqcM/MCcuc9EfFqv5NPsXF70YTsnRiGqS TND8y1ob9i0ZSZ9P1Uf93rca8XeCc14g93o1Jt2KELV64hWjM1ynC0Lmuovg68qY aOSKAstboADHGBmcr6U7mZoZ17rki9JchbmBKxMMyliEiaP0mO0Aq6PCDmUNsg6X wDpfoZ1E+WtVX/fLDGUErvzd9n8CAwEAAaOCArYwggKyMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFPi831JlfhH3yo9F6rjQArsAjyBDMB8GA1UdIwQYMBaAFKVu hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTEwNjg2ODA0MDI2OTU2MTg3My8wLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMTA2ODY4MDQwMjY5NTYxODcz LzAvRjhCQ0RGNTI2NTdFMTFGN0NBOEY0NUVBQjhEMDAyQkIwMDhGMjA0My5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAJnPWgwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQID APhcMA0GCSqGSIb3DQEBCwUAA4IBAQBNaOGCDTC2n7KvMekjF06kBd4SI7JkCR+d qISjIY6idQrJCZ3a24ABwTSizj7DMliY1/0dvf1w9lP1qnJlta5/hORY/lXrFxuk oLZOn/9axCgeqhZuyR8r4sm8wnE0WXPetzInctHgGWm/AnZ+cKcDwj+TMxSY6nZ4 VnRSYCJsFoCIeQWTZp2MIVjgwYtCdd8RsPsF6fIwpslv09cdmyImFx1lid1NLlZn sUUujLG1IUAZZPJutnBxAsiaz1xakSw7Aqq16G2ZFpoR1Aoiw2Ss8YlcVGLNT3Iv vtAUjTdnV9YIOIIWzVvxskB0ak6heF3DYGR0E6XKlZVuMHqJTMWZ -----END CERTIFICATE-----Generated at Wed May 13 20:17:13 2026 by rpki-client