$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F0F3E3439565B918CE50D05087491A23A7E8FF40.cer File: F0F3E3439565B918CE50D05087491A23A7E8FF40.cer (raw, json) Hash identifier: h2ePdzEKB6cCUEZnHUJMLTOsE29ci6/FcoMhpdE/bzE= Subject key identifier: F0:F3:E3:43:95:65:B9:18:CE:50:D0:50:87:49:1A:23:A7:E8:FF:40 Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Certificate serial: 01C3577287B1DC519322A5E3055F084DF1257EBA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1097036477839179777/0/F0F3E3439565B918CE50D05087491A23A7E8FF40.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1097036477839179777/0/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Thu 16 Apr 2026 05:46:19 +0000 Certificate not after: Thu 15 Apr 2027 05:51:19 +0000 Subordinate resources: AS: 45071 IP: 203.118.248.0/22 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 17:12:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:c3:57:72:87:b1:dc:51:93:22:a5:e3:05:5f:08:4d:f1:25:7e:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Validity Not Before: Apr 16 05:46:19 2026 GMT Not After : Apr 15 05:51:19 2027 GMT Subject: CN=F0F3E3439565B918CE50D05087491A23A7E8FF40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:56:0c:d7:0a:5b:40:3e:1d:08:7b:b7:38:07: 61:fe:06:1a:7c:33:cd:8b:27:64:10:8d:3a:e3:8f: 42:f0:2f:f5:12:6c:45:bf:7e:30:bd:b0:b1:4c:3a: 60:e1:fe:25:16:f6:7c:bb:00:b1:3c:82:a3:5e:cf: 64:86:13:18:51:1f:15:b4:6c:66:af:25:0d:34:f8: bc:3d:fb:52:76:e1:21:ad:2d:96:2d:c3:3a:f3:bd: eb:d7:9d:64:90:95:8b:04:04:e8:dc:55:b7:d6:18: 2a:09:19:9e:15:c5:58:7f:07:fe:e3:5a:3c:9e:a6: 9c:2d:b6:0d:b1:1b:90:a7:6d:eb:18:92:1c:e3:4f: d3:1d:7e:c3:7f:27:36:01:97:72:ff:5c:ee:68:45: ff:99:23:d6:34:e2:a7:63:2c:65:c3:cb:51:cb:be: f7:ed:5c:14:bd:3a:43:46:07:dc:0b:f4:1a:77:fb: 98:ec:fa:b1:7b:c6:a4:1c:ae:81:a7:1b:14:9a:7b: 2a:72:13:19:3d:8e:74:e2:8c:6a:94:a1:5f:64:fe: a6:b8:28:ca:0c:6a:16:24:f5:71:56:98:98:92:1a: bd:80:00:73:9e:09:1f:ee:6d:95:d7:04:4a:1f:6e: 92:c0:1f:e0:95:a5:3f:37:31:06:0b:f0:da:30:df: 3d:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: F0:F3:E3:43:95:65:B9:18:CE:50:D0:50:87:49:1A:23:A7:E8:FF:40 X509v3 Authority Key Identifier: keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1097036477839179777/0/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1097036477839179777/0/F0F3E3439565B918CE50D05087491A23A7E8FF40.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 203.118.248.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 45071 Signature Algorithm: sha256WithRSAEncryption 83:f4:c5:09:ab:8f:af:7b:3f:ff:5f:df:fd:ce:7a:09:74:de: 6d:a3:f1:9c:34:66:ce:8a:e5:d0:d6:54:d9:cd:f4:ac:60:42: 8a:0f:b6:d4:32:ce:b0:95:26:65:d8:bb:da:67:19:f6:f7:c5: 9c:e1:67:b1:c9:f0:c2:a2:1f:ec:ae:31:1d:0a:45:c4:85:46: ea:6a:f1:0a:94:c3:06:60:d4:61:7b:cb:12:f2:17:66:47:60: 0e:e6:7c:f1:f6:95:72:35:c2:63:01:d5:a2:05:ce:6f:99:0a: 83:3c:67:90:65:d6:0a:7c:61:d3:ec:a4:e0:c9:ed:0b:42:b4: 94:b1:f2:96:e5:d8:55:21:4f:76:d7:d2:7a:72:af:c4:c0:39: e0:6c:76:20:07:97:04:bb:e2:14:67:e8:46:d4:ff:26:65:a2: 63:36:13:21:b5:e5:d0:27:38:90:be:ce:e9:98:4c:38:b4:41: c4:c8:ae:81:ab:32:88:38:4c:d5:7e:81:3a:ef:66:3a:52:2f: ab:4b:54:a6:e9:70:77:04:e9:13:b4:c9:bb:5e:1b:bc:32:f5: e3:c0:1f:6c:fd:1c:37:fc:57:08:10:c2:6c:b8:6e:5c:b5:3a: 8e:7d:0d:f4:b0:7c:5a:7d:fb:a1:28:b4:0c:6d:fa:44:4f:da: d1:ed:98:69 -----BEGIN CERTIFICATE----- MIIFwzCCBKugAwIBAgIUAcNXcoex3FGTIqXjBV8ITfElfrowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDQxNjA1NDYxOVoX DTI3MDQxNTA1NTExOVowMzExMC8GA1UEAxMoRjBGM0UzNDM5NTY1QjkxOENFNTBE MDUwODc0OTFBMjNBN0U4RkY0MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALZWDNcKW0A+HQh7tzgHYf4GGnwzzYsnZBCNOuOPQvAv9RJsRb9+ML2wsUw6 YOH+JRb2fLsAsTyCo17PZIYTGFEfFbRsZq8lDTT4vD37UnbhIa0tli3DOvO969ed ZJCViwQE6NxVt9YYKgkZnhXFWH8H/uNaPJ6mnC22DbEbkKdt6xiSHONP0x1+w38n NgGXcv9c7mhF/5kj1jTip2MsZcPLUcu+9+1cFL06Q0YH3Av0Gnf7mOz6sXvGpByu gacbFJp7KnITGT2OdOKMapShX2T+prgoygxqFiT1cVaYmJIavYAAc54JH+5tldcE Sh9uksAf4JWlPzcxBgvw2jDfPScCAwEAAaOCArYwggKyMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFPDz40OVZbkYzlDQUIdJGiOn6P9AMB8GA1UdIwQYMBaAFKVu hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTA5NzAzNjQ3NzgzOTE3OTc3Ny8wLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDk3MDM2NDc3ODM5MTc5Nzc3 LzAvRjBGM0UzNDM5NTY1QjkxOENFNTBEMDUwODc0OTFBMjNBN0U4RkY0MC5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBALLdvgwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQID ALAPMA0GCSqGSIb3DQEBCwUAA4IBAQCD9MUJq4+vez//X9/9znoJdN5to/GcNGbO iuXQ1lTZzfSsYEKKD7bUMs6wlSZl2LvaZxn298Wc4WexyfDCoh/srjEdCkXEhUbq avEKlMMGYNRhe8sS8hdmR2AO5nzx9pVyNcJjAdWiBc5vmQqDPGeQZdYKfGHT7KTg ye0LQrSUsfKW5dhVIU9219J6cq/EwDngbHYgB5cEu+IUZ+hG1P8mZaJjNhMhteXQ JziQvs7pmEw4tEHEyK6BqzKIOEzVfoE672Y6Ui+rS1Sm6XB3BOkTtMm7Xhu8MvXj wB9s/Rw3/FcIEMJsuG5ctTqOfQ30sHxaffuhKLQMbfpET9rR7Zhp -----END CERTIFICATE-----Generated at Sat Apr 18 06:06:12 2026 by rpki-client