$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F916D71CF28A7FC30E705FE11476FF473B105CD8.cer File: F916D71CF28A7FC30E705FE11476FF473B105CD8.cer (raw, json) Hash identifier: mP7D9VVQoKKpxzyq6bG/X0SmZxJDwkVlVN0DWfw0vPA= Subject key identifier: F9:16:D7:1C:F2:8A:7F:C3:0E:70:5F:E1:14:76:FF:47:3B:10:5C:D8 Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Certificate serial: 6F01252F9418FB0FBFA5779D824A245AC241238C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1099978515324862467/0/F916D71CF28A7FC30E705FE11476FF473B105CD8.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1099978515324862467/0/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Fri 24 Apr 2026 08:36:56 +0000 Certificate not after: Fri 23 Apr 2027 08:41:56 +0000 Subordinate resources: IP: 43.241.180.0/22 IP: 103.233.4.0/22 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 11:49:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:01:25:2f:94:18:fb:0f:bf:a5:77:9d:82:4a:24:5a:c2:41:23:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Validity Not Before: Apr 24 08:36:56 2026 GMT Not After : Apr 23 08:41:56 2027 GMT Subject: CN=F916D71CF28A7FC30E705FE11476FF473B105CD8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:a6:5d:26:54:8c:a2:8e:f8:72:93:a4:61:19: 0b:93:a0:b0:c2:50:2d:b3:68:2f:24:43:95:5c:d0: e5:45:a8:9a:5e:22:e3:d6:14:fc:f0:90:99:ff:03: ec:b3:d1:e6:29:31:94:52:2f:e3:dd:75:4b:2a:75: 2e:89:74:b1:47:10:8a:fd:2d:0f:45:18:d2:aa:c0: 33:ef:13:bf:b5:67:fe:23:dd:a0:98:13:c6:4d:fe: 6c:08:4d:61:c1:66:b3:7b:78:44:5a:11:8c:37:b4: 94:d7:20:31:51:fd:2c:0e:6f:d4:0f:73:12:c5:70: 29:dc:1a:33:97:54:a9:60:0e:39:ee:d1:50:c3:46: 2a:eb:d5:26:ab:15:f4:c7:da:32:89:0d:48:40:24: 0a:e6:48:09:22:97:c1:38:aa:dc:62:67:c9:13:a4: 2f:74:ec:6e:7b:a0:21:b8:f3:de:35:1c:0d:47:d1: 6a:c2:58:30:95:d5:3b:8d:94:56:a0:49:e3:d7:e6: c2:bd:2f:4e:82:55:1c:ba:02:ca:b7:87:47:0b:a8: 4d:38:a8:39:08:0f:e9:f7:29:95:da:34:88:d5:49: d3:a0:28:3c:e5:21:c9:c3:95:9f:ec:c4:57:3f:4b: fb:a9:70:fe:62:c1:bc:58:10:b3:11:a5:93:34:0a: 13:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: F9:16:D7:1C:F2:8A:7F:C3:0E:70:5F:E1:14:76:FF:47:3B:10:5C:D8 X509v3 Authority Key Identifier: keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1099978515324862467/0/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1099978515324862467/0/F916D71CF28A7FC30E705FE11476FF473B105CD8.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.241.180.0/22 103.233.4.0/22 Signature Algorithm: sha256WithRSAEncryption 1b:aa:9c:be:47:d2:5f:07:92:8a:53:7b:39:d8:58:9b:9e:e6: 89:3b:85:40:3b:f4:21:02:de:74:cf:a6:7f:7e:6b:7e:a8:fe: a7:1b:19:de:a2:77:68:da:01:2f:a1:c2:9f:42:cc:f0:9b:b7: 2d:70:b0:0e:75:41:18:35:6c:b1:88:0a:c9:09:70:43:16:1c: 6e:1b:a4:c3:1b:fc:ac:43:1a:be:56:81:f8:af:90:fc:18:f9: 81:4e:d4:9f:79:53:8c:2c:cd:88:e1:2b:eb:9f:ab:ef:b6:bd: f8:96:30:2c:87:5e:ce:3a:7f:53:6d:97:cc:8c:fb:9d:8f:43: 9a:43:04:a4:26:82:4a:7d:16:9c:e2:c3:95:5f:6b:58:e5:7b: e5:a6:67:c3:a8:9f:b7:6b:c1:ec:6b:d3:1e:6d:d0:12:73:1f: 7f:71:a3:9a:60:b8:b0:05:49:04:19:a1:e1:d4:f7:75:e0:74: c6:72:99:f5:dd:9f:55:3d:13:c4:c8:71:f6:64:3c:5f:49:99: ab:20:dc:60:8d:19:a1:9e:dc:c3:01:4e:19:e1:a8:26:5b:7d: 9b:4c:a6:6e:ce:1d:7c:30:60:24:10:ee:97:5c:e7:9a:10:6e: 57:4d:0c:5c:35:32:2e:cc:c4:99:ab:26:e6:fb:d6:e6:d2:ac: 7c:cc:6a:b7 -----BEGIN CERTIFICATE----- MIIFrTCCBJWgAwIBAgIUbwElL5QY+w+/pXedgkokWsJBI4wwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDQyNDA4MzY1NloX DTI3MDQyMzA4NDE1NlowMzExMC8GA1UEAxMoRjkxNkQ3MUNGMjhBN0ZDMzBFNzA1 RkUxMTQ3NkZGNDczQjEwNUNEODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKWmXSZUjKKO+HKTpGEZC5OgsMJQLbNoLyRDlVzQ5UWoml4i49YU/PCQmf8D 7LPR5ikxlFIv4911Syp1Lol0sUcQiv0tD0UY0qrAM+8Tv7Vn/iPdoJgTxk3+bAhN YcFms3t4RFoRjDe0lNcgMVH9LA5v1A9zEsVwKdwaM5dUqWAOOe7RUMNGKuvVJqsV 9MfaMokNSEAkCuZICSKXwTiq3GJnyROkL3TsbnugIbjz3jUcDUfRasJYMJXVO42U VqBJ49fmwr0vToJVHLoCyreHRwuoTTioOQgP6fcpldo0iNVJ06AoPOUhycOVn+zE Vz9L+6lw/mLBvFgQsxGlkzQKEzMCAwEAAaOCAqAwggKcMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFPkW1xzyin/DDnBf4RR2/0c7EFzYMB8GA1UdIwQYMBaAFKVu hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTA5OTk3ODUxNTMyNDg2MjQ2Ny8wLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDk5OTc4NTE1MzI0ODYyNDY3 LzAvRjkxNkQ3MUNGMjhBN0ZDMzBFNzA1RkUxMTQ3NkZGNDczQjEwNUNEOC5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwJQYIKwYBBQUH AQcBAf8EFjAUMBIEAgABMAwDBAIr8bQDBAJn6QQwDQYJKoZIhvcNAQELBQADggEB ABuqnL5H0l8HkopTeznYWJue5ok7hUA79CEC3nTPpn9+a36o/qcbGd6id2jaAS+h wp9CzPCbty1wsA51QRg1bLGICskJcEMWHG4bpMMb/KxDGr5WgfivkPwY+YFO1J95 U4wszYjhK+ufq++2vfiWMCyHXs46f1Ntl8yM+52PQ5pDBKQmgkp9Fpziw5Vfa1jl e+WmZ8Oon7drwexr0x5t0BJzH39xo5pguLAFSQQZoeHU93XgdMZymfXdn1U9E8TI cfZkPF9Jmasg3GCNGaGe3MMBThnhqCZbfZtMpm7OHXwwYCQQ7pdc55oQbldNDFw1 Mi7MxJmrJub71ubSrHzMarc= -----END CERTIFICATE-----Generated at Wed May 13 20:17:15 2026 by rpki-client