$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7F15193CDE87FBC525A7E7A15CD52DDB22651E4D.cer File: 7F15193CDE87FBC525A7E7A15CD52DDB22651E4D.cer (raw, json) Hash identifier: A+iz4tgKy98SmMe5Wm5ZE1w/4wsU+kWW3efi1CHHG/g= Subject key identifier: 7F:15:19:3C:DE:87:FB:C5:25:A7:E7:A1:5C:D5:2D:DB:22:65:1E:4D Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Certificate serial: 532FD23258B19C24737AEA65565161FB8E30BBA7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1117287030460514331/1/7F15193CDE87FBC525A7E7A15CD52DDB22651E4D.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1117287030460514331/1/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Thu 11 Jun 2026 03:19:54 +0000 Certificate not after: Thu 10 Jun 2027 03:24:54 +0000 Subordinate resources: AS: 151250 IP: 124.14.2.0/24 IP: 124.14.6.0/24 IP: 124.14.9.0/24 IP: 124.14.52.0/22 IP: 211.161.98.0 -- 211.161.100.255 IP: 211.161.104.0/22 IP: 2402:3ba0::/32 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 16:02:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:2f:d2:32:58:b1:9c:24:73:7a:ea:65:56:51:61:fb:8e:30:bb:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Validity Not Before: Jun 11 03:19:54 2026 GMT Not After : Jun 10 03:24:54 2027 GMT Subject: CN=7F15193CDE87FBC525A7E7A15CD52DDB22651E4D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:5e:e1:b7:c4:7a:c0:e9:fc:19:e6:11:5d:0b: 0b:cb:67:92:99:7c:2f:68:24:d4:69:78:e1:cc:75: 8e:b7:0c:ea:d2:b5:78:bb:8d:a7:7a:6b:b2:51:e1: 6c:5e:55:40:06:f5:65:89:7d:05:53:a6:39:2b:73: d9:e9:97:62:d3:a3:77:4b:6e:73:6b:34:ed:d3:af: d3:7f:f9:9c:9f:8f:4b:0d:43:16:07:f7:49:99:47: 47:42:c6:71:3f:af:36:b8:ac:49:91:ea:d9:69:9c: bc:94:ec:f7:c4:fa:45:44:7b:c7:56:cd:36:f7:e9: c8:47:bb:16:b5:f9:85:c4:28:29:05:3a:8e:08:8d: c7:a9:1d:80:bd:cb:3a:34:3c:f9:ee:82:99:fc:39: 80:e4:a3:b6:58:da:fd:10:d8:4e:a8:8b:8c:6b:f8: 32:0e:7f:35:a6:1f:57:72:d1:82:37:63:73:4d:14: ee:16:78:53:49:bc:32:62:4e:0c:d4:72:36:5f:9e: fe:d5:a9:6d:6f:8d:f0:63:7c:0c:67:a3:32:65:6e: 76:99:64:bd:7f:25:2f:f7:a8:0e:8c:88:0a:e3:dd: dc:9a:d0:9a:a9:f7:eb:03:2d:10:34:7e:5d:a4:c7: 2e:b6:d2:e9:ce:4c:8e:42:f8:02:96:34:a0:25:0a: 90:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 7F:15:19:3C:DE:87:FB:C5:25:A7:E7:A1:5C:D5:2D:DB:22:65:1E:4D X509v3 Authority Key Identifier: keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1117287030460514331/1/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1117287030460514331/1/7F15193CDE87FBC525A7E7A15CD52DDB22651E4D.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 124.14.2.0/24 124.14.6.0/24 124.14.9.0/24 124.14.52.0/22 211.161.98.0-211.161.100.255 211.161.104.0/22 IPv6: 2402:3ba0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 151250 Signature Algorithm: sha256WithRSAEncryption 8c:f7:67:19:34:62:73:c5:fd:71:d2:1c:ab:1d:52:a9:90:95: 81:71:b0:e2:41:2d:56:1d:79:41:7e:f0:88:d9:24:34:50:0a: aa:8f:4e:db:b6:ca:b6:b6:e1:d3:dc:73:e1:28:65:b5:1b:c1: cb:88:cd:c1:1f:cc:08:94:f7:6d:64:cd:ca:ed:ed:11:eb:c9: 1c:e1:12:f0:4f:c3:be:e6:2a:79:2b:56:ed:90:c5:58:91:c3: cb:b2:0e:1e:71:c1:0c:53:67:82:2c:0a:e1:c4:dd:4e:4e:f3: 9f:55:64:79:f5:71:fd:cc:67:92:90:61:db:13:bb:e2:0c:63: 97:30:0a:b0:23:1b:d7:1a:6c:d1:3a:f3:ab:51:bd:18:43:17: aa:a2:fe:43:1f:18:25:9c:49:a8:6a:60:99:36:2c:f8:04:85: 48:6b:29:28:fa:18:86:09:30:87:6d:8c:87:22:b6:36:e3:d7: 48:fd:6d:25:cb:cc:5e:bf:91:50:0c:cb:2e:2d:6f:43:54:d9: 37:51:b8:d9:6d:aa:d5:f4:2f:6e:67:70:7d:30:3b:fb:42:75: 0b:e3:47:12:53:49:6d:2a:61:40:58:24:cf:51:bd:2a:5e:e9: b2:9d:ff:be:9e:e0:1e:e0:95:52:3a:0f:a1:0a:23:65:8c:49: 45:41:45:52 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUUy/SMlixnCRzeuplVlFh+44wu6cwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDYxMTAzMTk1NFoX DTI3MDYxMDAzMjQ1NFowMzExMC8GA1UEAxMoN0YxNTE5M0NERTg3RkJDNTI1QTdF N0ExNUNENTJEREIyMjY1MUU0RDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANNe4bfEesDp/BnmEV0LC8tnkpl8L2gk1Gl44cx1jrcM6tK1eLuNp3prslHh bF5VQAb1ZYl9BVOmOStz2emXYtOjd0tuc2s07dOv03/5nJ+PSw1DFgf3SZlHR0LG cT+vNrisSZHq2WmcvJTs98T6RUR7x1bNNvfpyEe7FrX5hcQoKQU6jgiNx6kdgL3L OjQ8+e6Cmfw5gOSjtlja/RDYTqiLjGv4Mg5/NaYfV3LRgjdjc00U7hZ4U0m8MmJO DNRyNl+e/tWpbW+N8GN8DGejMmVudplkvX8lL/eoDoyICuPd3JrQmqn36wMtEDR+ XaTHLrbS6c5MjkL4ApY0oCUKkM8CAwEAAaOCAuswggLnMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFH8VGTzeh/vFJafnoVzVLdsiZR5NMB8GA1UdIwQYMBaAFKVu hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTExNzI4NzAzMDQ2MDUxNDMzMS8xLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMTE3Mjg3MDMwNDYwNTE0MzMx LzEvN0YxNTE5M0NERTg3RkJDNTI1QTdFN0ExNUNENTJEREIyMjY1MUU0RC5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwVAYIKwYBBQUH AQcBAf8ERTBDMDIEAgABMCwDBAB8DgIDBAB8DgYDBAB8DgkDBAJ8DjQwDAMEAdOh YgMEANOhZAMEAtOhaDANBAIAAjAHAwUAJAI7oDAaBggrBgEFBQcBCAEB/wQLMAmg BzAFAgMCTtIwDQYJKoZIhvcNAQELBQADggEBAIz3Zxk0YnPF/XHSHKsdUqmQlYFx sOJBLVYdeUF+8IjZJDRQCqqPTtu2yra24dPcc+EoZbUbwcuIzcEfzAiU921kzcrt 7RHryRzhEvBPw77mKnkrVu2QxViRw8uyDh5xwQxTZ4IsCuHE3U5O859VZHn1cf3M Z5KQYdsTu+IMY5cwCrAjG9cabNE686tRvRhDF6qi/kMfGCWcSahqYJk2LPgEhUhr KSj6GIYJMIdtjIcitjbj10j9bSXLzF6/kVAMyy4tb0NU2TdRuNltqtX0L25ncH0w O/tCdQvjRxJTSW0qYUBYJM9RvSpe6bKd/76e4B7glVI6D6EKI2WMSUVBRVI= -----END CERTIFICATE-----Generated at Sun Jun 14 05:40:18 2026 by rpki-client