$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0AFFEB3DB5B290035312103A162969BF6E9D25E6.cer File: 0AFFEB3DB5B290035312103A162969BF6E9D25E6.cer (raw, json) Hash identifier: OQxqmXEyNZVzEta5ZFyyIsxdxHbEpsm3rqo/3MzWttE= Subject key identifier: 0A:FF:EB:3D:B5:B2:90:03:53:12:10:3A:16:29:69:BF:6E:9D:25:E6 Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Certificate serial: 33D65A9BF2B0ACC3783F1DB98FECEE1420F9572D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1065585911217389571/0/0AFFEB3DB5B290035312103A162969BF6E9D25E6.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1065585911217389571/0/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Mon 01 Jun 2026 01:34:25 +0000 Certificate not after: Mon 31 May 2027 01:39:25 +0000 Subordinate resources: AS: 151277 IP: 2401:bda0::/32 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 16:02:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:d6:5a:9b:f2:b0:ac:c3:78:3f:1d:b9:8f:ec:ee:14:20:f9:57:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Validity Not Before: Jun 1 01:34:25 2026 GMT Not After : May 31 01:39:25 2027 GMT Subject: CN=0AFFEB3DB5B290035312103A162969BF6E9D25E6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:b8:84:82:5e:8c:ac:0a:8a:70:2a:1f:93:19: be:d5:b3:b7:cf:29:4d:26:7a:9c:42:aa:64:a7:c3: b1:c9:7c:83:b3:81:f2:e1:56:ca:22:4a:80:fb:8d: ca:0e:ca:e3:e2:54:47:74:14:72:a1:33:a3:b5:ee: ea:3e:58:a4:f0:bc:0d:01:2a:dd:cc:94:09:1b:cf: c9:58:a9:86:a7:b9:20:41:2c:9b:f6:d4:0b:9b:24: cb:3b:89:e5:6b:58:71:f3:df:1e:d8:97:51:2e:49: 6e:9d:71:7b:9e:44:cb:fe:a5:95:df:8f:d6:b5:0d: 3d:fb:67:0f:ee:3e:1a:a5:9f:de:39:d2:26:4e:25: 97:c8:8b:c8:1b:1f:ba:07:4a:61:49:3c:a4:f8:9e: 6e:6c:ca:3a:81:1d:bb:94:01:24:09:d8:e5:4b:eb: 16:b8:7e:8b:a6:1e:2f:80:a1:01:3e:4c:93:cd:49: d8:87:73:35:8d:75:82:ce:45:de:18:06:77:64:8b: 67:c1:bb:d4:81:e7:67:34:cc:b2:ea:47:de:9c:61: b9:7e:13:99:0f:41:bb:11:3f:e9:33:ae:c6:c3:ba: f8:18:3a:3c:44:e9:e5:26:a1:c0:a3:30:7c:be:5f: f7:36:bb:ac:8b:a0:0e:b9:58:cf:26:7f:62:a1:ea: fe:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 0A:FF:EB:3D:B5:B2:90:03:53:12:10:3A:16:29:69:BF:6E:9D:25:E6 X509v3 Authority Key Identifier: keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217389571/0/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217389571/0/0AFFEB3DB5B290035312103A162969BF6E9D25E6.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2401:bda0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 151277 Signature Algorithm: sha256WithRSAEncryption 29:d1:23:b7:78:42:cc:bb:9b:2e:ca:31:82:cb:01:d1:70:0c: 76:1c:94:87:43:a0:93:65:b3:1e:22:c6:ac:b9:69:9c:8e:3b: 0a:29:8c:82:97:8d:98:f3:12:c4:4e:ef:0a:34:e5:08:44:2d: c4:f1:bf:3a:1b:26:43:0f:48:2a:56:44:22:00:37:fe:85:35: 4c:1a:ee:6e:d2:37:16:88:d6:ba:dc:0f:78:41:21:d3:55:f0: 59:1b:e5:0f:c5:93:11:7f:ea:92:d8:65:70:40:ba:1c:39:73: 35:09:25:3a:7d:ee:0b:46:53:bd:01:2b:11:40:cb:31:73:2e: ca:00:63:f5:2a:cf:74:19:1e:7e:df:fa:d0:32:ab:7e:3f:a2: d0:8a:6e:03:dd:9a:03:57:0a:61:66:f2:37:66:5b:7a:e2:24: ca:a4:24:3d:5f:87:69:d4:24:74:2b:91:46:e7:0e:61:30:93: 5f:b5:58:4d:e4:25:81:ab:67:68:8e:0d:f1:cb:e7:42:a1:ed: fa:40:31:5c:e5:a3:ac:a9:54:b1:0d:6b:ac:91:42:dd:f6:cb: 04:83:d0:0d:d1:21:a3:96:13:bb:1d:e0:8c:ec:0d:d3:87:9b: 4b:c2:06:52:f5:f2:2f:71:8f:3a:bc:18:e8:eb:ad:86:3d:4a: 64:42:72:0c -----BEGIN CERTIFICATE----- MIIFxDCCBKygAwIBAgIUM9Zam/KwrMN4Px25j+zuFCD5Vy0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDYwMTAxMzQyNVoX DTI3MDUzMTAxMzkyNVowMzExMC8GA1UEAxMoMEFGRkVCM0RCNUIyOTAwMzUzMTIx MDNBMTYyOTY5QkY2RTlEMjVFNjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALK4hIJejKwKinAqH5MZvtWzt88pTSZ6nEKqZKfDscl8g7OB8uFWyiJKgPuN yg7K4+JUR3QUcqEzo7Xu6j5YpPC8DQEq3cyUCRvPyViphqe5IEEsm/bUC5skyzuJ 5WtYcfPfHtiXUS5Jbp1xe55Ey/6lld+P1rUNPftnD+4+GqWf3jnSJk4ll8iLyBsf ugdKYUk8pPiebmzKOoEdu5QBJAnY5UvrFrh+i6YeL4ChAT5Mk81J2IdzNY11gs5F 3hgGd2SLZ8G71IHnZzTMsupH3pxhuX4TmQ9BuxE/6TOuxsO6+Bg6PETp5SahwKMw fL5f9za7rIugDrlYzyZ/YqHq/pMCAwEAAaOCArcwggKzMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFAr/6z21spADUxIQOhYpab9unSXmMB8GA1UdIwQYMBaAFKVu hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTA2NTU4NTkxMTIxNzM4OTU3MS8wLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDY1NTg1OTExMjE3Mzg5NTcx LzAvMEFGRkVCM0RCNUIyOTAwMzUzMTIxMDNBMTYyOTY5QkY2RTlEMjVFNi5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUH AQcBAf8EETAPMA0EAgACMAcDBQAkAb2gMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwJO7TANBgkqhkiG9w0BAQsFAAOCAQEAKdEjt3hCzLubLsoxgssB0XAMdhyUh0Og k2WzHiLGrLlpnI47CimMgpeNmPMSxE7vCjTlCEQtxPG/OhsmQw9IKlZEIgA3/oU1 TBrubtI3FojWutwPeEEh01XwWRvlD8WTEX/qkthlcEC6HDlzNQklOn3uC0ZTvQEr EUDLMXMuygBj9SrPdBkeft/60DKrfj+i0IpuA92aA1cKYWbyN2ZbeuIkyqQkPV+H adQkdCuRRucOYTCTX7VYTeQlgatnaI4N8cvnQqHt+kAxXOWjrKlUsQ1rrJFC3fbL BIPQDdEho5YTux3gjOwN04ebS8IGUvXyL3GPOrwY6Outhj1KZEJyDA== -----END CERTIFICATE-----Generated at Sun Jun 14 05:47:43 2026 by rpki-client