$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/0/0015FCDA541FFF5EE26770C78E30B5EA894421E3.cer File: 0015FCDA541FFF5EE26770C78E30B5EA894421E3.cer (raw, json) Hash identifier: Uou4yZ4a0X76fIqvnI9zwcKNzmkqTgCZrgolZLchRyk= Subject key identifier: 00:15:FC:DA:54:1F:FF:5E:E2:67:70:C7:8E:30:B5:EA:89:44:21:E3 Authority key identifier: CB:02:14:A5:C4:04:D6:F8:40:43:3B:12:0C:AC:BB:5B:8C:59:E6:13 Certificate issuer: /CN=A9162E3D0001/serialNumber=CB0214A5C404D6F840433B120CACBB5B8C59E613 Certificate serial: 75F8AE5436885B9E83CB6F219AE561DE64BBD51E Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1096993931276582914/1/0015FCDA541FFF5EE26770C78E30B5EA894421E3.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1096993931276582914/1/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Mon 27 Jul 2026 06:53:20 +0000 Certificate not after: Mon 26 Jul 2027 06:58:20 +0000 Subordinate resources: IP: 160.236.162.0/23 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 05:19:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:f8:ae:54:36:88:5b:9e:83:cb:6f:21:9a:e5:61:de:64:bb:d5:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=CB0214A5C404D6F840433B120CACBB5B8C59E613 Validity Not Before: Jul 27 06:53:20 2026 GMT Not After : Jul 26 06:58:20 2027 GMT Subject: CN=0015FCDA541FFF5EE26770C78E30B5EA894421E3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:9e:5d:17:7e:95:b7:83:94:36:8f:64:a2:93: c5:76:5c:01:7f:6a:1d:80:d1:18:1c:85:7a:10:6d: 34:66:75:f7:98:0b:bc:77:85:9d:cd:48:c4:42:b1: de:e6:8c:b0:d0:e1:23:f7:9c:af:1f:49:18:76:69: 01:02:08:c1:68:78:07:51:6e:96:97:85:47:de:65: 64:38:72:5e:4f:4d:d7:4a:86:63:d0:00:f2:8b:d7: ec:fd:7f:fc:ca:b6:87:3e:d6:b0:6a:aa:90:90:ab: f5:3f:93:f1:c3:01:be:b3:2c:3a:f4:79:bb:95:8a: 91:50:f6:a3:3a:83:fc:bd:ad:0e:37:e6:07:6d:8d: 22:58:de:84:4c:fb:10:53:90:73:b5:95:a7:a7:4b: bc:29:36:d2:1a:9b:21:93:4d:2f:13:7d:1f:1e:f5: 8a:d2:53:cd:a9:11:81:c8:f9:29:0c:a1:46:9d:d0: 69:84:db:99:dc:6d:95:de:cb:0d:f3:86:0e:8f:db: c4:5c:7b:73:45:68:46:4c:dd:15:21:9b:6f:75:22: 9a:da:bb:13:18:65:e4:de:8c:36:53:a1:21:88:5b: 5a:ef:c1:b9:85:b9:08:1c:13:f3:fe:7b:4c:51:9f: 86:95:1e:cf:6d:85:e4:05:a0:c9:d9:8e:53:01:73: d1:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 00:15:FC:DA:54:1F:FF:5E:E2:67:70:C7:8E:30:B5:EA:89:44:21:E3 X509v3 Authority Key Identifier: keyid:CB:02:14:A5:C4:04:D6:F8:40:43:3B:12:0C:AC:BB:5B:8C:59:E6:13 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1096993931276582914/1/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1096993931276582914/1/0015FCDA541FFF5EE26770C78E30B5EA894421E3.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.236.162.0/23 Signature Algorithm: sha256WithRSAEncryption 16:d7:d8:f6:6b:12:f4:8a:42:09:2f:e1:02:96:55:64:22:75: ed:a8:b0:7d:c7:de:fe:72:36:59:3a:90:de:fe:79:fa:92:0f: 90:ab:43:91:28:4d:70:bc:03:a1:bf:17:d7:1e:8c:9a:25:e1: b2:f8:75:4c:c9:54:9f:c7:01:ca:74:80:2e:83:ad:ef:2f:5f: e8:92:47:c7:2d:26:c4:a8:60:06:d8:dd:dd:5f:e1:64:7a:f7: 92:e8:2d:49:88:66:83:f4:63:43:c8:93:ad:e8:1c:7f:19:98: e2:db:1d:2d:c1:0a:77:95:17:d8:6b:8c:51:6e:f6:12:45:e5: 8e:ce:f4:b1:89:5b:06:81:56:a7:95:ea:b3:19:c9:aa:df:52: 60:b4:80:a6:b3:28:63:c2:05:9d:48:e0:77:b0:07:12:f9:e0: 54:79:cb:27:c4:82:6b:5f:a8:00:66:e3:a9:0d:6d:1a:34:6b: 2c:3e:c4:21:01:54:16:b5:ad:e9:b9:dc:a6:ac:b9:7d:15:20: e3:40:34:7b:fa:25:a1:74:ee:e1:27:9a:76:90:48:3e:af:d3: be:ad:f4:cf:08:5f:1e:7d:40:df:3c:a3:49:e6:7b:37:b9:9c: 05:a5:26:06:9c:d4:30:b4:85:e6:eb:fb:8a:3f:0d:b2:28:79: c0:d9:8f:9e -----BEGIN CERTIFICATE----- MIIFpzCCBI+gAwIBAgIUdfiuVDaIW56Dy28hmuVh3mS71R4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhDQjAyMTRBNUM0 MDRENkY4NDA0MzNCMTIwQ0FDQkI1QjhDNTlFNjEzMB4XDTI2MDcyNzA2NTMyMFoX DTI3MDcyNjA2NTgyMFowMzExMC8GA1UEAxMoMDAxNUZDREE1NDFGRkY1RUUyNjc3 MEM3OEUzMEI1RUE4OTQ0MjFFMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANKeXRd+lbeDlDaPZKKTxXZcAX9qHYDRGByFehBtNGZ195gLvHeFnc1IxEKx 3uaMsNDhI/ecrx9JGHZpAQIIwWh4B1FulpeFR95lZDhyXk9N10qGY9AA8ovX7P1/ /Mq2hz7WsGqqkJCr9T+T8cMBvrMsOvR5u5WKkVD2ozqD/L2tDjfmB22NIljehEz7 EFOQc7WVp6dLvCk20hqbIZNNLxN9Hx71itJTzakRgcj5KQyhRp3QaYTbmdxtld7L DfOGDo/bxFx7c0VoRkzdFSGbb3Uimtq7Exhl5N6MNlOhIYhbWu/BuYW5CBwT8/57 TFGfhpUez22F5AWgydmOUwFz0dcCAwEAAaOCApowggKWMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFAAV/NpUH/9e4mdwx44wteqJRCHjMB8GA1UdIwQYMBaAFMsC FKXEBNb4QEM7Egysu1uMWeYTMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMC9DQjAyMTRBNUM0MDRENkY4NDA0MzNCMTIwQ0FDQkI1QjhDNTlF NjEzLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CM0EyNEYyMDFENjYxMUUyOEFDODgzN0M3 MkZEMUZGMi95d0lVcGNRRTF2aEFRenNTREt5N1c0eFo1aE0uY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTA5Njk5MzkzMTI3NjU4MjkxNC8xLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDk2OTkzOTMxMjc2NTgyOTE0 LzEvMDAxNUZDREE1NDFGRkY1RUUyNjc3MEM3OEUzMEI1RUE4OTQ0MjFFMy5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAGg7KIwDQYJKoZIhvcNAQELBQADggEBABbX2PZr EvSKQgkv4QKWVWQide2osH3H3v5yNlk6kN7+efqSD5CrQ5EoTXC8A6G/F9cejJol 4bL4dUzJVJ/HAcp0gC6Dre8vX+iSR8ctJsSoYAbY3d1f4WR695LoLUmIZoP0Y0PI k63oHH8ZmOLbHS3BCneVF9hrjFFu9hJF5Y7O9LGJWwaBVqeV6rMZyarfUmC0gKaz KGPCBZ1I4HewBxL54FR5yyfEgmtfqABm46kNbRo0ayw+xCEBVBa1rem53KasuX0V IONANHv6JaF07uEnmnaQSD6v076t9M8IXx59QN88o0nmeze5nAWlJgac1DC0hebr +4o/DbIoecDZj54= -----END CERTIFICATE-----Generated at Wed Jul 29 10:26:48 2026 by rpki-client