$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/108AF2F98E2BC0D03F28DC1BE3E30023BD005F65.cer File: 108AF2F98E2BC0D03F28DC1BE3E30023BD005F65.cer (raw, json) Hash identifier: g7VQJWcp/Gru1Vjys+W4P8j8FlMnD1dTeGK2OD6mQyY= Subject key identifier: 10:8A:F2:F9:8E:2B:C0:D0:3F:28:DC:1B:E3:E3:00:23:BD:00:5F:65 Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Certificate serial: 458523238773AF17C71D4B4668388E73E11DAF3C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1065585649346019330/0/108AF2F98E2BC0D03F28DC1BE3E30023BD005F65.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1065585649346019330/0/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Mon 01 Jun 2026 01:31:41 +0000 Certificate not after: Mon 31 May 2027 01:36:41 +0000 Subordinate resources: AS: 146787 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 16:02:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:85:23:23:87:73:af:17:c7:1d:4b:46:68:38:8e:73:e1:1d:af:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Validity Not Before: Jun 1 01:31:41 2026 GMT Not After : May 31 01:36:41 2027 GMT Subject: CN=108AF2F98E2BC0D03F28DC1BE3E30023BD005F65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:ab:d4:e9:c0:2f:fe:67:72:7e:53:c8:06:b9: 18:0a:ef:fe:67:e9:15:18:9b:8c:a7:ed:ac:c3:1b: f0:83:40:92:6a:c8:0d:d4:ef:e9:c3:01:56:09:07: 42:2b:7f:1a:9e:e9:90:92:07:27:07:4b:fc:0e:ec: 45:7e:37:a6:8a:4d:a7:62:70:93:60:99:16:ce:dc: da:d1:88:77:0c:3e:de:2c:d1:a8:f5:6c:2b:1e:f3: df:78:eb:4c:6d:9a:be:4e:2f:1a:fd:60:89:1f:16: 76:69:b1:ed:6a:e1:27:c6:f0:06:2a:0d:be:55:37: 8d:e7:ce:7d:41:2e:f9:f4:31:3c:f1:5f:19:d6:fc: cd:4c:f0:d3:25:bf:3c:72:d6:0e:21:c7:b4:c0:f6: fe:a2:3e:77:85:26:c7:46:5c:e2:3b:30:dc:1f:36: ff:22:2b:7c:52:2f:28:ef:40:9b:f8:68:b0:cd:2d: 20:05:f6:b1:7e:db:74:a5:b5:7e:64:ee:5e:84:9b: c8:a3:ee:b3:aa:47:72:d2:e0:4c:16:94:ab:cf:90: f6:2e:0f:b1:57:07:34:a6:eb:92:b0:76:d0:d8:ab: 4a:a4:12:6b:3a:4f:07:e9:bd:69:ec:7a:19:ed:e5: e2:83:c1:b8:2a:42:dc:fa:82:98:ab:be:ec:dc:6a: 15:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 10:8A:F2:F9:8E:2B:C0:D0:3F:28:DC:1B:E3:E3:00:23:BD:00:5F:65 X509v3 Authority Key Identifier: keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649346019330/0/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649346019330/0/108AF2F98E2BC0D03F28DC1BE3E30023BD005F65.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 146787 Signature Algorithm: sha256WithRSAEncryption 93:e4:ad:75:c0:3f:1e:d2:f7:a7:44:e1:60:07:e5:d1:3b:bf: 06:dc:9b:64:ed:64:65:62:3f:58:6d:b8:26:b7:a0:b2:6f:38: 02:8c:24:41:f0:72:fa:dc:21:85:ed:9d:eb:a3:56:5c:36:24: 5c:f0:a4:e2:67:52:75:b4:b6:b4:f8:3d:81:61:fc:61:46:75: 48:21:57:24:d5:32:7d:32:8f:2c:09:89:d5:ff:19:5e:2b:0a: 96:b0:6c:23:aa:bb:ea:f2:a3:8f:05:32:0f:41:1c:3e:dc:c9: b5:2a:30:43:83:14:c2:e3:c8:8b:8e:5e:4f:6a:88:85:41:39: 31:68:7d:3d:25:da:1a:f2:5e:c1:7d:6e:ee:04:4d:79:fa:bb: a8:04:8f:f0:07:ad:a6:29:83:ca:d4:89:6d:6d:37:8b:fb:79: 8c:c8:a3:b9:60:e8:57:fa:99:70:72:f9:26:e0:6d:23:0e:d8: c2:d7:00:0c:57:3b:13:78:51:20:68:be:d8:77:e3:cc:41:39: da:9f:8b:9b:f2:d6:66:cd:00:ec:07:fc:7d:47:2a:6a:45:95: 9c:dc:8d:90:90:2e:5a:35:e9:a2:6d:ce:72:4b:a7:97:4f:fc: e2:e0:d8:0a:ba:45:8d:bd:54:72:df:a5:1c:99:4f:8b:db:18: 6a:23:1c:bb -----BEGIN CERTIFICATE----- MIIFojCCBIqgAwIBAgIURYUjI4dzrxfHHUtGaDiOc+EdrzwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDYwMTAxMzE0MVoX DTI3MDUzMTAxMzY0MVowMzExMC8GA1UEAxMoMTA4QUYyRjk4RTJCQzBEMDNGMjhE QzFCRTNFMzAwMjNCRDAwNUY2NTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOar1OnAL/5ncn5TyAa5GArv/mfpFRibjKftrMMb8INAkmrIDdTv6cMBVgkH Qit/Gp7pkJIHJwdL/A7sRX43popNp2Jwk2CZFs7c2tGIdww+3izRqPVsKx7z33jr TG2avk4vGv1giR8Wdmmx7WrhJ8bwBioNvlU3jefOfUEu+fQxPPFfGdb8zUzw0yW/ PHLWDiHHtMD2/qI+d4Umx0Zc4jsw3B82/yIrfFIvKO9Am/hosM0tIAX2sX7bdKW1 fmTuXoSbyKPus6pHctLgTBaUq8+Q9i4PsVcHNKbrkrB20NirSqQSazpPB+m9aex6 Ge3l4oPBuCpC3PqCmKu+7NxqFXECAwEAAaOCApUwggKRMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFBCK8vmOK8DQPyjcG+PjACO9AF9lMB8GA1UdIwQYMBaAFKVu hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTA2NTU4NTY0OTM0NjAxOTMzMC8wLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDY1NTg1NjQ5MzQ2MDE5MzMw LzAvMTA4QUYyRjk4RTJCQzBEMDNGMjhEQzFCRTNFMzAwMjNCRDAwNUY2NS5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwGgYIKwYBBQUH AQgBAf8ECzAJoAcwBQIDAj1jMA0GCSqGSIb3DQEBCwUAA4IBAQCT5K11wD8e0ven ROFgB+XRO78G3Jtk7WRlYj9Ybbgmt6CybzgCjCRB8HL63CGF7Z3ro1ZcNiRc8KTi Z1J1tLa0+D2BYfxhRnVIIVck1TJ9Mo8sCYnV/xleKwqWsGwjqrvq8qOPBTIPQRw+ 3Mm1KjBDgxTC48iLjl5PaoiFQTkxaH09Jdoa8l7BfW7uBE15+ruoBI/wB62mKYPK 1IltbTeL+3mMyKO5YOhX+plwcvkm4G0jDtjC1wAMVzsTeFEgaL7Yd+PMQTnan4ub 8tZmzQDsB/x9RypqRZWc3I2QkC5aNemibc5yS6eXT/zi4NgKukWNvVRy36UcmU+L 2xhqIxy7 -----END CERTIFICATE-----Generated at Sun Jun 14 07:10:16 2026 by rpki-client