$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6CAF996274F565DC55326AACAFD54F19EBA53FF9.cer File: 6CAF996274F565DC55326AACAFD54F19EBA53FF9.cer (raw, json) Hash identifier: kVVaWa/W4dcE2ikIxi2AKqoJDB4MHYEISE37aV6OnNg= Subject key identifier: 6C:AF:99:62:74:F5:65:DC:55:32:6A:AC:AF:D5:4F:19:EB:A5:3F:F9 Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Certificate serial: 752666E7A5B8F8EE8CBDDAAD221993184545EFD0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1079237873846255617/0/6CAF996274F565DC55326AACAFD54F19EBA53FF9.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1079237873846255617/0/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Thu 26 Feb 2026 03:08:43 +0000 Certificate not after: Thu 25 Feb 2027 03:13:43 +0000 Subordinate resources: IP: 2402:4d60::/32 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 04:07:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:26:66:e7:a5:b8:f8:ee:8c:bd:da:ad:22:19:93:18:45:45:ef:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Validity Not Before: Feb 26 03:08:43 2026 GMT Not After : Feb 25 03:13:43 2027 GMT Subject: CN=6CAF996274F565DC55326AACAFD54F19EBA53FF9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:e2:da:8a:e2:4f:41:f7:0b:11:a4:01:17:aa: 98:a1:40:e3:3f:df:89:df:e0:34:0c:f6:84:cd:3c: df:47:d5:1b:92:2e:c9:20:de:a4:ff:34:51:46:b9: 89:e6:f4:da:4b:5f:c5:0c:d5:d0:fb:60:77:f6:d0: d6:ea:64:9f:43:41:4b:ee:aa:73:2b:8c:31:23:9f: 5c:e3:dd:44:03:e6:99:0c:a7:20:58:df:07:3f:31: d1:99:b1:db:58:7f:d2:ac:2f:4b:78:f2:3b:ae:4a: 11:7d:5d:ac:bc:0a:72:49:9b:2f:a4:96:af:c3:79: fe:1e:14:eb:da:a3:80:3d:29:e8:e2:00:e1:2d:5d: 5a:b4:b1:a3:72:80:6d:6a:9b:87:36:64:fd:db:e5: c3:cf:03:86:1a:0b:07:61:cb:1b:91:13:22:3b:cb: 02:79:23:49:81:e5:ca:11:70:07:df:11:60:a9:f6: 97:67:67:9e:95:72:d3:e1:5d:22:11:b7:d3:c6:44: a5:9f:c3:8a:6f:8a:07:8b:73:e6:af:48:e7:11:d9: 44:e1:18:98:04:4b:9e:51:cd:6f:06:08:35:ea:29: 12:03:3e:61:5a:d9:4a:75:28:1f:a7:91:23:ba:67: fc:d6:47:af:5f:ff:c5:4b:43:24:5c:99:93:f3:85: 0e:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 6C:AF:99:62:74:F5:65:DC:55:32:6A:AC:AF:D5:4F:19:EB:A5:3F:F9 X509v3 Authority Key Identifier: keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1079237873846255617/0/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1079237873846255617/0/6CAF996274F565DC55326AACAFD54F19EBA53FF9.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2402:4d60::/32 Signature Algorithm: sha256WithRSAEncryption 54:4a:5c:5f:4e:68:56:09:6c:49:42:78:2d:62:a5:bc:4a:84: 7a:07:fc:a6:41:ff:4e:86:aa:aa:04:3a:85:90:e3:a7:73:d1: c6:9d:ac:08:30:de:e3:c0:e1:30:10:9c:32:b4:0e:03:8e:e5: e8:b6:9c:95:7c:19:11:0d:54:80:98:3f:7e:2b:99:98:aa:2b: d1:ba:c8:44:a6:6d:a5:71:1f:95:43:a7:63:ae:26:dc:67:e6: ae:a6:6e:73:32:76:b2:72:b2:c7:81:af:ba:5b:05:e2:7d:59: fe:d6:ea:be:5c:62:0a:b9:b9:49:69:12:27:6f:7f:b6:81:03: 81:40:a6:69:5a:e7:41:13:50:24:24:dc:8a:8c:fb:93:c4:99: bb:38:79:e7:01:e1:3c:9d:d2:fd:50:d3:6b:ed:99:98:b4:d4: 66:90:dc:09:6a:71:d8:8b:28:a7:f9:f2:19:b3:df:eb:ff:20: 53:da:b2:4c:bf:47:82:f3:d4:53:ee:ff:96:48:9d:7c:f2:82: eb:00:96:58:33:e8:0f:29:61:cc:c0:a9:f5:e9:e3:d0:3a:33: 52:b8:22:3c:43:a1:20:7a:7d:82:cc:30:ec:c2:27:4c:70:e4: e1:ea:27:a9:99:19:67:4c:8c:b4:93:6b:7a:9f:35:ab:49:95: 0c:80:67:4a -----BEGIN CERTIFICATE----- MIIFqDCCBJCgAwIBAgIUdSZm56W4+O6MvdqtIhmTGEVF79AwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDIyNjAzMDg0M1oX DTI3MDIyNTAzMTM0M1owMzExMC8GA1UEAxMoNkNBRjk5NjI3NEY1NjVEQzU1MzI2 QUFDQUZENTRGMTlFQkE1M0ZGOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALzi2oriT0H3CxGkAReqmKFA4z/fid/gNAz2hM0830fVG5IuySDepP80UUa5 ieb02ktfxQzV0Ptgd/bQ1upkn0NBS+6qcyuMMSOfXOPdRAPmmQynIFjfBz8x0Zmx 21h/0qwvS3jyO65KEX1drLwKckmbL6SWr8N5/h4U69qjgD0p6OIA4S1dWrSxo3KA bWqbhzZk/dvlw88DhhoLB2HLG5ETIjvLAnkjSYHlyhFwB98RYKn2l2dnnpVy0+Fd IhG308ZEpZ/Dim+KB4tz5q9I5xHZROEYmARLnlHNbwYINeopEgM+YVrZSnUoH6eR I7pn/NZHr1//xUtDJFyZk/OFDmECAwEAAaOCApswggKXMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFGyvmWJ09WXcVTJqrK/VTxnrpT/5MB8GA1UdIwQYMBaAFKVu hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTA3OTIzNzg3Mzg0NjI1NTYxNy8wLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDc5MjM3ODczODQ2MjU1NjE3 LzAvNkNBRjk5NjI3NEY1NjVEQzU1MzI2QUFDQUZENTRGMTlFQkE1M0ZGOS5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUH AQcBAf8EETAPMA0EAgACMAcDBQAkAk1gMA0GCSqGSIb3DQEBCwUAA4IBAQBUSlxf TmhWCWxJQngtYqW8SoR6B/ymQf9OhqqqBDqFkOOnc9HGnawIMN7jwOEwEJwytA4D juXotpyVfBkRDVSAmD9+K5mYqivRushEpm2lcR+VQ6djribcZ+aupm5zMnaycrLH ga+6WwXifVn+1uq+XGIKublJaRInb3+2gQOBQKZpWudBE1AkJNyKjPuTxJm7OHnn AeE8ndL9UNNr7ZmYtNRmkNwJanHYiyin+fIZs9/r/yBT2rJMv0eC89RT7v+WSJ18 8oLrAJZYM+gPKWHMwKn16ePQOjNSuCI8Q6Egen2CzDDswidMcOTh6iepmRlnTIy0 k2t6nzWrSZUMgGdK -----END CERTIFICATE-----Generated at Mon Mar 2 11:41:40 2026 by rpki-client