$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FE8131D7DBA164F8DF2D1951AC1299884223E6A9.cer File: FE8131D7DBA164F8DF2D1951AC1299884223E6A9.cer (raw, json) Hash identifier: TEXVvcP8UsRTCN/BJu5GyMUxD86bXvPWLYTuds+KRy8= Subject key identifier: FE:81:31:D7:DB:A1:64:F8:DF:2D:19:51:AC:12:99:88:42:23:E6:A9 Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Certificate serial: 71DBB8EB4075A40D7CF62E34A85DD7F019E4880A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1106458132172767251/0/FE8131D7DBA164F8DF2D1951AC1299884223E6A9.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1106458132172767251/0/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Tue 12 May 2026 05:44:37 +0000 Certificate not after: Tue 11 May 2027 05:49:37 +0000 Subordinate resources: AS: 23610 AS: 24139 IP: 36.255.116.0/22 IP: 43.247.244.0/22 IP: 58.100.0.0/15 IP: 103.209.112.0/22 IP: 103.238.52.0/22 IP: 113.214.0.0/15 IP: 125.210.0.0/16 IP: 218.108.0.0/15 IP: 219.82.0.0/16 IP: 2401:ce00::/32 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 11:49:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:db:b8:eb:40:75:a4:0d:7c:f6:2e:34:a8:5d:d7:f0:19:e4:88:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Validity Not Before: May 12 05:44:37 2026 GMT Not After : May 11 05:49:37 2027 GMT Subject: CN=FE8131D7DBA164F8DF2D1951AC1299884223E6A9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:8e:ce:ec:18:4d:62:a1:22:d8:52:0c:cb:16: 57:2a:b0:6b:ab:9a:cb:a0:4d:dd:34:df:73:6e:42: 95:f4:1d:ca:25:80:11:64:74:67:f0:65:c5:4a:5f: f6:d6:cd:a8:44:12:49:97:3c:48:8f:1b:8b:2a:e7: ba:ed:09:dc:b4:07:f5:6c:e6:75:a6:a9:46:15:02: 9a:26:78:ae:e2:25:db:02:5d:97:73:6e:34:13:0d: 5a:3e:83:41:fa:98:ec:dc:d7:88:9f:e4:11:9f:af: 4a:47:b1:b1:23:4f:6d:39:1b:3c:d6:9d:a8:f9:51: c0:b7:b5:7f:cd:65:a6:dd:58:2f:6e:8b:41:9d:12: 10:bb:77:d0:cb:56:79:f3:72:2b:13:10:f5:86:8f: f3:f2:91:38:ba:9b:a7:fc:0e:b0:2f:52:2f:b8:bd: 69:b6:40:68:eb:6d:5e:c4:15:20:27:e8:97:c2:95: c3:28:f8:8d:5e:c9:13:12:fa:96:f6:fe:04:f5:02: cb:4c:ca:7f:8f:6c:f3:8b:31:cf:15:f6:9e:bc:03: f2:cd:70:30:d8:61:42:3a:d5:aa:63:94:57:d2:b2: 2c:0b:43:54:04:2d:1d:0a:ec:15:b0:83:2c:7d:f0: 39:40:45:65:f8:37:6d:a6:3f:7a:30:e2:d4:ea:0f: 6f:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: FE:81:31:D7:DB:A1:64:F8:DF:2D:19:51:AC:12:99:88:42:23:E6:A9 X509v3 Authority Key Identifier: keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1106458132172767251/0/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1106458132172767251/0/FE8131D7DBA164F8DF2D1951AC1299884223E6A9.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 36.255.116.0/22 43.247.244.0/22 58.100.0.0/15 103.209.112.0/22 103.238.52.0/22 113.214.0.0/15 125.210.0.0/16 218.108.0.0/15 219.82.0.0/16 IPv6: 2401:ce00::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 23610 24139 Signature Algorithm: sha256WithRSAEncryption 23:41:54:f6:5f:a1:f4:ef:da:a0:a9:8f:74:14:e5:53:3c:d4: 9d:76:d3:e7:aa:bd:ce:c1:58:60:02:cb:5c:5b:ea:2b:49:19: 6f:17:10:47:ba:a3:ce:44:fb:79:74:89:59:a8:16:74:1c:1d: d6:0f:89:57:81:19:e4:97:b6:fb:7f:0a:b9:0d:c3:e9:b8:17: 1c:65:fc:0e:d0:3b:0e:31:86:c6:e9:de:b2:b2:46:05:a5:85: fd:a4:31:8d:9c:8b:3e:b3:e7:b6:d8:fb:e5:d5:db:c9:d5:19: 8e:d3:cf:1a:9b:f7:42:23:88:7d:a7:48:1b:22:bd:32:02:9c: ce:19:db:14:f2:3f:d5:e1:32:80:e2:34:6e:90:6c:ce:d8:8c: eb:88:45:af:94:c6:72:5e:f2:32:3b:32:7c:db:05:43:e7:c3: 3e:cf:e3:90:d7:b8:d4:d3:71:cd:7e:71:3a:3c:70:33:55:43: b1:63:10:b7:47:e0:3d:17:58:45:ec:c3:f9:9e:d8:af:9b:d0: 28:b6:d1:c8:96:bc:df:08:15:83:4a:ee:44:22:04:76:da:39: 3c:30:a2:40:0d:72:7d:e8:e4:9e:13:29:5b:f6:c0:72:67:24: 2f:ed:2f:60:5c:1d:68:67:9d:09:31:db:ce:d0:8c:b3:f3:b2: 93:d5:16:70 -----BEGIN CERTIFICATE----- MIIGADCCBOigAwIBAgIUcdu460B1pA189i40qF3X8BnkiAowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDUxMjA1NDQzN1oX DTI3MDUxMTA1NDkzN1owMzExMC8GA1UEAxMoRkU4MTMxRDdEQkExNjRGOERGMkQx OTUxQUMxMjk5ODg0MjIzRTZBOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKiOzuwYTWKhIthSDMsWVyqwa6uay6BN3TTfc25ClfQdyiWAEWR0Z/BlxUpf 9tbNqEQSSZc8SI8biyrnuu0J3LQH9WzmdaapRhUCmiZ4ruIl2wJdl3NuNBMNWj6D QfqY7NzXiJ/kEZ+vSkexsSNPbTkbPNadqPlRwLe1f81lpt1YL26LQZ0SELt30MtW efNyKxMQ9YaP8/KROLqbp/wOsC9SL7i9abZAaOttXsQVICfol8KVwyj4jV7JExL6 lvb+BPUCy0zKf49s84sxzxX2nrwD8s1wMNhhQjrVqmOUV9KyLAtDVAQtHQrsFbCD LH3wOUBFZfg3baY/ejDi1OoPb8sCAwEAAaOCAvMwggLvMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFP6BMdfboWT43y0ZUawSmYhCI+apMB8GA1UdIwQYMBaAFKVu hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTEwNjQ1ODEzMjE3Mjc2NzI1MS8wLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMTA2NDU4MTMyMTcyNzY3MjUx LzAvRkU4MTMxRDdEQkExNjRGOERGMkQxOTUxQUMxMjk5ODg0MjIzRTZBOS5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwWQYIKwYBBQUH AQcBAf8ESjBIMDcEAgABMDEDBAIk/3QDBAIr9/QDAwE6ZAMEAmfRcAMEAmfuNAMD AXHWAwMAfdIDAwHabAMDANtSMA0EAgACMAcDBQAkAc4AMB0GCCsGAQUFBwEIAQH/ BA4wDKAKMAgCAlw6AgJeSzANBgkqhkiG9w0BAQsFAAOCAQEAI0FU9l+h9O/aoKmP dBTlUzzUnXbT56q9zsFYYALLXFvqK0kZbxcQR7qjzkT7eXSJWagWdBwd1g+JV4EZ 5Je2+38KuQ3D6bgXHGX8DtA7DjGGxunesrJGBaWF/aQxjZyLPrPnttj75dXbydUZ jtPPGpv3QiOIfadIGyK9MgKczhnbFPI/1eEygOI0bpBsztiM64hFr5TGcl7yMjsy fNsFQ+fDPs/jkNe41NNxzX5xOjxwM1VDsWMQt0fgPRdYRezD+Z7Yr5vQKLbRyJa8 3wgVg0ruRCIEdto5PDCiQA1yfejknhMpW/bAcmckL+0vYFwdaGedCTHbztCMs/Oy k9UWcA== -----END CERTIFICATE-----Generated at Wed May 13 20:17:15 2026 by rpki-client