$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/0/29B8B1FF56343A5304FFBEA524FE9B739C2E5923.cer File: 29B8B1FF56343A5304FFBEA524FE9B739C2E5923.cer (raw, json) Hash identifier: jOAm8ukdjzc+15l23kDlt//3XL5RurBL1w10JmD++Uk= Subject key identifier: 29:B8:B1:FF:56:34:3A:53:04:FF:BE:A5:24:FE:9B:73:9C:2E:59:23 Authority key identifier: CB:02:14:A5:C4:04:D6:F8:40:43:3B:12:0C:AC:BB:5B:8C:59:E6:13 Certificate issuer: /CN=A9162E3D0001/serialNumber=CB0214A5C404D6F840433B120CACBB5B8C59E613 Certificate serial: 50158DB4389AC86BD3EAA0F8B80F14C40C076343 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1132595094541565997/0/29B8B1FF56343A5304FFBEA524FE9B739C2E5923.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1132595094541565997/0/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Thu 23 Jul 2026 08:43:37 +0000 Certificate not after: Thu 22 Jul 2027 08:48:37 +0000 Subordinate resources: IP: 160.236.148.0/23 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 20:32:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:15:8d:b4:38:9a:c8:6b:d3:ea:a0:f8:b8:0f:14:c4:0c:07:63:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=CB0214A5C404D6F840433B120CACBB5B8C59E613 Validity Not Before: Jul 23 08:43:37 2026 GMT Not After : Jul 22 08:48:37 2027 GMT Subject: CN=29B8B1FF56343A5304FFBEA524FE9B739C2E5923 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:0c:1c:0b:2c:79:27:9c:4c:e8:43:76:03:fa: 93:bf:de:8e:84:c6:b4:a1:3c:54:31:dc:90:95:c1: f5:8a:9d:18:73:5c:37:26:68:13:c5:2e:fc:7f:44: d6:30:06:a9:75:4c:e6:73:3c:da:9f:a3:5a:3b:18: dc:94:42:e6:1c:ce:32:c4:8f:7e:e1:38:9a:e6:b2: d4:49:42:69:9c:ea:43:4a:06:1a:81:b3:ed:68:81: a6:01:73:53:fe:10:42:33:c0:ac:5a:c6:7a:8f:dd: aa:e0:48:13:b9:2d:bf:7f:3e:d3:99:66:2a:38:71: a0:8c:a4:d7:62:7c:a9:ed:1e:86:73:47:18:92:c4: 94:fe:0a:43:89:24:9e:f4:73:01:39:62:97:b0:93: 05:51:c7:98:41:76:b7:4b:79:dd:dc:d1:ef:12:32: 73:0e:90:4e:88:23:31:a4:e5:24:b5:cc:25:56:1a: 78:d6:08:41:c5:5e:55:6f:fd:8d:5b:ec:56:4f:40: ae:0e:32:18:9d:eb:88:b7:b5:84:43:e2:40:33:3f: 81:eb:3a:27:1f:6a:d5:45:ce:f0:17:dd:a1:31:d8: 1b:93:f3:68:e5:1e:4c:b1:4a:d1:41:b2:8f:0b:36: 65:94:3a:bf:6e:20:ed:b4:ec:91:f8:bf:0b:7c:4c: 67:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 29:B8:B1:FF:56:34:3A:53:04:FF:BE:A5:24:FE:9B:73:9C:2E:59:23 X509v3 Authority Key Identifier: keyid:CB:02:14:A5:C4:04:D6:F8:40:43:3B:12:0C:AC:BB:5B:8C:59:E6:13 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1132595094541565997/0/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1132595094541565997/0/29B8B1FF56343A5304FFBEA524FE9B739C2E5923.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.236.148.0/23 Signature Algorithm: sha256WithRSAEncryption c0:3b:08:ca:6a:2e:14:6b:90:86:5e:86:72:81:7b:e3:43:d5: 23:b5:f8:77:c3:b5:12:ff:4c:69:85:1d:28:8c:c1:23:29:5c: 33:5d:94:05:a8:90:d3:96:a4:0a:d4:48:0b:62:13:48:73:be: 5d:69:92:f7:f2:40:16:70:99:c7:a2:f1:3f:7d:d3:19:35:11: 5d:80:d5:ff:bc:c2:e7:a1:60:a0:05:07:3f:0e:fe:cc:96:ce: bc:0d:74:bf:ad:32:fc:25:0f:52:e4:c8:59:48:b0:eb:8c:1d: 0a:c6:a2:76:71:27:c2:29:ff:2b:cb:8c:68:3f:dc:8e:fb:fd: 40:40:ac:2f:54:55:37:59:c5:73:40:7d:c0:37:6c:83:5d:9e: 75:13:5e:7c:9f:b6:7e:f1:e4:b6:c7:2f:d3:85:5b:49:6f:ac: 25:30:75:8b:0a:cb:9c:46:63:0a:96:c8:55:6c:77:65:4b:89: d5:09:0d:da:5a:25:e9:7b:44:fc:09:ef:b8:cf:04:90:9b:f7: a2:21:0d:96:06:62:62:f5:4b:0e:e5:53:e1:07:11:25:de:6f: 68:9b:60:b9:c0:37:5c:66:ca:2a:84:4f:ff:96:b7:07:2a:86: 0f:d9:4a:5f:4a:cb:2b:3c:13:48:fe:87:52:7f:87:20:61:29: a6:db:16:b4 -----BEGIN CERTIFICATE----- MIIFpzCCBI+gAwIBAgIUUBWNtDiayGvT6qD4uA8UxAwHY0MwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhDQjAyMTRBNUM0 MDRENkY4NDA0MzNCMTIwQ0FDQkI1QjhDNTlFNjEzMB4XDTI2MDcyMzA4NDMzN1oX DTI3MDcyMjA4NDgzN1owMzExMC8GA1UEAxMoMjlCOEIxRkY1NjM0M0E1MzA0RkZC RUE1MjRGRTlCNzM5QzJFNTkyMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJsMHAsseSecTOhDdgP6k7/ejoTGtKE8VDHckJXB9YqdGHNcNyZoE8Uu/H9E 1jAGqXVM5nM82p+jWjsY3JRC5hzOMsSPfuE4muay1ElCaZzqQ0oGGoGz7WiBpgFz U/4QQjPArFrGeo/dquBIE7ktv38+05lmKjhxoIyk12J8qe0ehnNHGJLElP4KQ4kk nvRzATlil7CTBVHHmEF2t0t53dzR7xIycw6QTogjMaTlJLXMJVYaeNYIQcVeVW/9 jVvsVk9Arg4yGJ3riLe1hEPiQDM/ges6Jx9q1UXO8BfdoTHYG5PzaOUeTLFK0UGy jws2ZZQ6v24g7bTskfi/C3xMZ4cCAwEAAaOCApowggKWMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFCm4sf9WNDpTBP++pST+m3OcLlkjMB8GA1UdIwQYMBaAFMsC FKXEBNb4QEM7Egysu1uMWeYTMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMC9DQjAyMTRBNUM0MDRENkY4NDA0MzNCMTIwQ0FDQkI1QjhDNTlF NjEzLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CM0EyNEYyMDFENjYxMUUyOEFDODgzN0M3 MkZEMUZGMi95d0lVcGNRRTF2aEFRenNTREt5N1c0eFo1aE0uY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTEzMjU5NTA5NDU0MTU2NTk5Ny8wLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMTMyNTk1MDk0NTQxNTY1OTk3 LzAvMjlCOEIxRkY1NjM0M0E1MzA0RkZCRUE1MjRGRTlCNzM5QzJFNTkyMy5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAGg7JQwDQYJKoZIhvcNAQELBQADggEBAMA7CMpq LhRrkIZehnKBe+ND1SO1+HfDtRL/TGmFHSiMwSMpXDNdlAWokNOWpArUSAtiE0hz vl1pkvfyQBZwmcei8T990xk1EV2A1f+8wuehYKAFBz8O/syWzrwNdL+tMvwlD1Lk yFlIsOuMHQrGonZxJ8Ip/yvLjGg/3I77/UBArC9UVTdZxXNAfcA3bINdnnUTXnyf tn7x5LbHL9OFW0lvrCUwdYsKy5xGYwqWyFVsd2VLidUJDdpaJel7RPwJ77jPBJCb 96IhDZYGYmL1Sw7lU+EHESXeb2ibYLnAN1xmyiqET/+Wtwcqhg/ZSl9Kyys8E0j+ h1J/hyBhKabbFrQ= -----END CERTIFICATE-----Generated at Fri Jul 24 21:31:58 2026 by rpki-client