$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F8B4FC29FEF20ADFAFB24A6DAF5F4415226EF8A8.cer File: F8B4FC29FEF20ADFAFB24A6DAF5F4415226EF8A8.cer (raw, json) Hash identifier: u7/Gw6+7eFS8SN//WTi7K/eA4wtOg2QZZIjaSR1o/c8= Subject key identifier: F8:B4:FC:29:FE:F2:0A:DF:AF:B2:4A:6D:AF:5F:44:15:22:6E:F8:A8 Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Certificate serial: 19DF0A78263B48A9DF979181A50E704B772AA4BF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1096586764014845955/0/F8B4FC29FEF20ADFAFB24A6DAF5F4415226EF8A8.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1096586764014845955/0/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Tue 14 Apr 2026 23:59:20 +0000 Certificate not after: Wed 14 Apr 2027 00:04:20 +0000 Subordinate resources: IP: 114.114.0.0/16 IP: 2404:3700::/32 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 17:12:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:df:0a:78:26:3b:48:a9:df:97:91:81:a5:0e:70:4b:77:2a:a4:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Validity Not Before: Apr 14 23:59:20 2026 GMT Not After : Apr 14 00:04:20 2027 GMT Subject: CN=F8B4FC29FEF20ADFAFB24A6DAF5F4415226EF8A8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:bb:e0:4d:a8:2c:58:01:6b:38:f4:c5:a0:d3: e9:9d:18:e6:6d:d4:8e:74:f6:d5:f5:63:55:15:09: fd:c9:00:ee:81:fe:52:1b:b7:f5:68:78:26:83:78: 8c:24:cc:35:2b:57:18:59:14:e7:5b:e5:94:90:3b: 91:c6:13:e0:2b:9d:6a:34:18:24:ff:df:59:23:81: 4e:74:65:a2:08:c8:40:20:7d:8d:92:8c:de:04:87: 76:3c:df:17:b0:e7:12:d7:27:3b:11:58:c4:ce:7c: 00:79:48:7c:0d:ab:d6:07:f8:40:33:5e:a8:6b:70: cf:ee:86:3e:f6:63:69:57:dc:e4:45:0c:5e:38:e2: 63:61:87:3b:fd:f0:eb:80:d8:0c:ea:c0:b9:a3:6b: 52:29:c6:3f:7b:cb:da:0a:db:23:da:d9:6e:7f:af: 80:69:bb:e8:9b:93:8b:87:c0:37:2c:6f:bd:6b:b1: 20:c4:18:4c:6c:12:2f:d7:b0:d8:c0:6b:73:cb:b6: 48:f7:32:8b:68:83:81:cd:8f:3c:f0:74:30:fc:e5: d5:1a:e5:f4:cc:ea:d2:a6:43:46:60:a9:6d:8c:21: 98:60:9c:f8:d3:4d:39:7d:f7:e4:ee:3c:3e:66:70: 27:5d:e9:e4:77:3a:c5:29:f4:c8:93:f1:3f:12:29: 10:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: F8:B4:FC:29:FE:F2:0A:DF:AF:B2:4A:6D:AF:5F:44:15:22:6E:F8:A8 X509v3 Authority Key Identifier: keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1096586764014845955/0/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1096586764014845955/0/F8B4FC29FEF20ADFAFB24A6DAF5F4415226EF8A8.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 114.114.0.0/16 IPv6: 2404:3700::/32 Signature Algorithm: sha256WithRSAEncryption 4f:fa:25:46:94:69:67:55:cb:b2:41:5a:7c:2d:07:f7:37:97: 18:74:bb:5a:c2:c6:5d:8b:e4:68:16:f2:c5:1c:eb:f7:4a:21: 82:bf:45:66:59:c1:1a:ee:c7:26:d8:f2:bf:47:ec:c2:42:f4: e4:69:14:a6:b4:d2:b5:c7:32:87:a2:8a:36:32:40:5c:93:89: bf:ed:89:f9:78:33:7e:0a:1c:ab:76:5f:a7:b1:08:6b:73:e5: 7b:e4:7a:f9:37:eb:0f:3c:42:5d:10:31:e6:fe:83:a9:fb:cb: 61:24:4d:ab:9f:ab:36:f5:ac:69:4c:35:72:9c:9b:72:9b:67: 8b:fd:50:d3:a0:bb:df:15:d1:1a:98:da:ff:4c:22:eb:4b:ab: 3a:4d:25:67:6c:3b:71:ce:d4:81:30:ad:88:d2:2f:a9:9a:6f: 9e:cd:a9:08:06:4a:ba:13:46:de:61:9c:fa:b6:4d:4c:0b:33: 82:3a:d6:a4:e3:11:32:83:51:cf:3c:90:ef:8f:a3:ba:44:3e: 7b:21:93:ea:43:9c:17:9c:78:92:40:6c:79:e9:0b:95:f7:72: c3:30:ca:77:fb:36:fe:2c:de:ca:3b:df:76:41:38:3f:12:0f: 9b:d8:ce:88:9d:cf:06:ca:0d:62:c5:cd:fd:26:0c:96:d0:64: 33:a8:08:2f -----BEGIN CERTIFICATE----- MIIFtTCCBJ2gAwIBAgIUGd8KeCY7SKnfl5GBpQ5wS3cqpL8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDQxNDIzNTkyMFoX DTI3MDQxNDAwMDQyMFowMzExMC8GA1UEAxMoRjhCNEZDMjlGRUYyMEFERkFGQjI0 QTZEQUY1RjQ0MTUyMjZFRjhBODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOC74E2oLFgBazj0xaDT6Z0Y5m3UjnT21fVjVRUJ/ckA7oH+Uhu39Wh4JoN4 jCTMNStXGFkU51vllJA7kcYT4CudajQYJP/fWSOBTnRlogjIQCB9jZKM3gSHdjzf F7DnEtcnOxFYxM58AHlIfA2r1gf4QDNeqGtwz+6GPvZjaVfc5EUMXjjiY2GHO/3w 64DYDOrAuaNrUinGP3vL2grbI9rZbn+vgGm76JuTi4fANyxvvWuxIMQYTGwSL9ew 2MBrc8u2SPcyi2iDgc2PPPB0MPzl1Rrl9Mzq0qZDRmCpbYwhmGCc+NNNOX335O48 PmZwJ13p5Hc6xSn0yJPxPxIpENUCAwEAAaOCAqgwggKkMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFPi0/Cn+8grfr7JKba9fRBUibvioMB8GA1UdIwQYMBaAFKVu hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTA5NjU4Njc2NDAxNDg0NTk1NS8wLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDk2NTg2NzY0MDE0ODQ1OTU1 LzAvRjhCNEZDMjlGRUYyMEFERkFGQjI0QTZEQUY1RjQ0MTUyMjZFRjhBOC5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwLQYIKwYBBQUH AQcBAf8EHjAcMAsEAgABMAUDAwBycjANBAIAAjAHAwUAJAQ3ADANBgkqhkiG9w0B AQsFAAOCAQEAT/olRpRpZ1XLskFafC0H9zeXGHS7WsLGXYvkaBbyxRzr90ohgr9F ZlnBGu7HJtjyv0fswkL05GkUprTStccyh6KKNjJAXJOJv+2J+Xgzfgocq3Zfp7EI a3Ple+R6+TfrDzxCXRAx5v6DqfvLYSRNq5+rNvWsaUw1cpybcptni/1Q06C73xXR Gpja/0wi60urOk0lZ2w7cc7UgTCtiNIvqZpvns2pCAZKuhNG3mGc+rZNTAszgjrW pOMRMoNRzzyQ74+jukQ+eyGT6kOcF5x4kkBseekLlfdywzDKd/s2/izeyjvfdkE4 PxIPm9jOiJ3PBsoNYsXN/SYMltBkM6gILw== -----END CERTIFICATE-----Generated at Fri Apr 17 22:56:09 2026 by rpki-client