$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2627A556D37BF3696EF5EA9B0FF28A6155EA0AA6.cer File: 2627A556D37BF3696EF5EA9B0FF28A6155EA0AA6.cer (raw, json) Hash identifier: It00NNbpTgyzk4Xg/1cXiPdWuiNGqTIv3AZSP+JanQU= Subject key identifier: 26:27:A5:56:D3:7B:F3:69:6E:F5:EA:9B:0F:F2:8A:61:55:EA:0A:A6 Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Certificate serial: 16DA77270C3F7FFEF3AE0F30E573D897DDB42EDF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1104608188126199815/0/2627A556D37BF3696EF5EA9B0FF28A6155EA0AA6.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1104608188126199815/0/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Thu 07 May 2026 03:13:36 +0000 Certificate not after: Thu 06 May 2027 03:18:36 +0000 Subordinate resources: AS: 131565 IP: 43.254.168.0/22 IP: 45.115.200.0/22 IP: 45.116.152.0/22 IP: 45.119.116.0/22 IP: 103.55.228.0/22 IP: 103.59.164.0/22 IP: 103.230.200.0/22 IP: 202.164.0.0/20 IP: 2403:1340::/32 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 11:49:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:da:77:27:0c:3f:7f:fe:f3:ae:0f:30:e5:73:d8:97:dd:b4:2e:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Validity Not Before: May 7 03:13:36 2026 GMT Not After : May 6 03:18:36 2027 GMT Subject: CN=2627A556D37BF3696EF5EA9B0FF28A6155EA0AA6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:3e:c0:0a:c7:6f:46:4f:24:0a:2b:22:c6:30: 19:d8:8e:39:cf:eb:a4:0b:33:90:f9:86:84:ce:50: 35:71:3c:28:c3:b3:1b:f9:51:c3:0a:0a:4a:b4:30: 0b:16:54:bb:7f:ba:91:62:e0:31:e2:fa:e5:a4:11: da:cb:00:d7:ce:fd:2e:9f:68:03:35:a0:b1:b6:4d: 31:9f:cc:4e:08:28:78:bc:40:b3:f5:c9:4a:4d:7e: c8:52:e5:33:7b:9a:aa:b6:80:40:13:53:64:81:3b: 7f:f8:e9:07:0e:05:15:bc:e8:31:f7:87:fa:5f:e3: a1:c9:c7:b1:c1:dc:26:e5:ff:04:ed:8e:6b:72:2e: c7:cb:3a:9a:6b:de:60:60:5b:72:05:a4:26:e1:1f: 4f:c5:04:72:93:9b:cc:5d:e2:80:60:1a:8d:03:6f: 55:c1:ca:a3:5f:3d:51:9b:67:01:b0:41:e3:ec:8a: e5:e6:1d:60:bf:bd:9f:b5:9d:ff:a2:db:a5:ab:bb: 68:ff:97:8b:b6:9d:58:7f:d7:cb:d7:cb:8a:66:2f: 87:de:a6:0d:17:d6:ac:77:82:9d:7b:e4:89:a5:98: fb:1e:b5:b7:93:bd:cb:7b:c9:af:c3:54:1f:70:01: f7:b9:88:03:33:09:dc:86:27:ef:f9:e7:f5:fe:4d: 56:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 26:27:A5:56:D3:7B:F3:69:6E:F5:EA:9B:0F:F2:8A:61:55:EA:0A:A6 X509v3 Authority Key Identifier: keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1104608188126199815/0/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1104608188126199815/0/2627A556D37BF3696EF5EA9B0FF28A6155EA0AA6.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.254.168.0/22 45.115.200.0/22 45.116.152.0/22 45.119.116.0/22 103.55.228.0/22 103.59.164.0/22 103.230.200.0/22 202.164.0.0/20 IPv6: 2403:1340::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 131565 Signature Algorithm: sha256WithRSAEncryption 71:71:75:19:fe:96:e7:de:a0:9b:09:c6:a4:0c:3e:a2:f9:c2: 31:79:e9:03:d2:09:74:a8:b3:05:07:a6:92:dc:78:e5:dc:9f: 18:d5:86:a7:c3:35:35:83:ce:6a:79:c1:b2:55:6d:3f:1a:e6: 45:f7:30:0a:2a:d8:e5:ba:8d:38:94:2b:f6:c0:2f:e1:17:8f: 2f:89:be:48:74:46:c2:c9:5e:59:34:67:5c:95:c7:ab:be:10: b7:fe:b2:b4:96:24:3b:14:ec:0a:93:31:98:38:4d:df:60:fa: 32:cc:c5:14:26:22:98:59:0e:a1:e9:c3:e1:ee:94:8f:c1:5e: 56:74:1c:e3:b3:5e:f5:ab:eb:58:50:8a:d7:2c:7d:17:27:87: 15:c5:31:24:a5:88:7b:74:8c:79:cf:ae:2a:46:c5:2c:a6:d3: 80:1a:ee:e7:cc:56:43:9b:fa:3d:cd:48:5a:e8:5d:c9:be:29: 4a:87:10:de:81:49:b1:61:86:8d:b0:26:34:6d:78:6c:01:d8: 42:a8:69:1d:7c:80:8d:30:b8:4e:4d:02:50:a0:fb:cf:07:c0: a5:b1:96:9d:ec:e1:ee:b0:e4:50:d7:8b:fd:b1:b7:0b:d8:7e: 2f:4b:29:2b:c8:ed:d3:b2:2d:ad:44:f0:89:e8:25:66:89:3b: 0d:1a:52:60 -----BEGIN CERTIFICATE----- MIIF/DCCBOSgAwIBAgIUFtp3Jww/f/7zrg8w5XPYl920Lt8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDUwNzAzMTMzNloX DTI3MDUwNjAzMTgzNlowMzExMC8GA1UEAxMoMjYyN0E1NTZEMzdCRjM2OTZFRjVF QTlCMEZGMjhBNjE1NUVBMEFBNjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMQ+wArHb0ZPJAorIsYwGdiOOc/rpAszkPmGhM5QNXE8KMOzG/lRwwoKSrQw CxZUu3+6kWLgMeL65aQR2ssA1879Lp9oAzWgsbZNMZ/MTggoeLxAs/XJSk1+yFLl M3uaqraAQBNTZIE7f/jpBw4FFbzoMfeH+l/jocnHscHcJuX/BO2Oa3Iux8s6mmve YGBbcgWkJuEfT8UEcpObzF3igGAajQNvVcHKo189UZtnAbBB4+yK5eYdYL+9n7Wd /6Lbpau7aP+Xi7adWH/Xy9fLimYvh96mDRfWrHeCnXvkiaWY+x61t5O9y3vJr8NU H3AB97mIAzMJ3IYn7/nn9f5NVpsCAwEAAaOCAu8wggLrMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFCYnpVbTe/NpbvXqmw/yimFV6gqmMB8GA1UdIwQYMBaAFKVu hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTEwNDYwODE4ODEyNjE5OTgxNS8wLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMTA0NjA4MTg4MTI2MTk5ODE1 LzAvMjYyN0E1NTZEMzdCRjM2OTZFRjVFQTlCMEZGMjhBNjE1NUVBMEFBNi5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwWAYIKwYBBQUH AQcBAf8ESTBHMDYEAgABMDADBAIr/qgDBAItc8gDBAItdJgDBAItd3QDBAJnN+QD BAJnO6QDBAJn5sgDBATKpAAwDQQCAAIwBwMFACQDE0AwGgYIKwYBBQUHAQgBAf8E CzAJoAcwBQIDAgHtMA0GCSqGSIb3DQEBCwUAA4IBAQBxcXUZ/pbn3qCbCcakDD6i +cIxeekD0gl0qLMFB6aS3Hjl3J8Y1YanwzU1g85qecGyVW0/GuZF9zAKKtjluo04 lCv2wC/hF48vib5IdEbCyV5ZNGdclcervhC3/rK0liQ7FOwKkzGYOE3fYPoyzMUU JiKYWQ6h6cPh7pSPwV5WdBzjs171q+tYUIrXLH0XJ4cVxTEkpYh7dIx5z64qRsUs ptOAGu7nzFZDm/o9zUha6F3JvilKhxDegUmxYYaNsCY0bXhsAdhCqGkdfICNMLhO TQJQoPvPB8ClsZad7OHusORQ14v9sbcL2H4vSykryO3Tsi2tRPCJ6CVmiTsNGlJg -----END CERTIFICATE-----Generated at Wed May 13 19:39:23 2026 by rpki-client