$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/644F9AE827627B0357D7972FE08D569A0CB97C31.cer File: 644F9AE827627B0357D7972FE08D569A0CB97C31.cer (raw, json) Hash identifier: OHyjYc5Eh/xC700i4//m0M09j/RJVOvH/2CSZC0a7XE= Subject key identifier: 64:4F:9A:E8:27:62:7B:03:57:D7:97:2F:E0:8D:56:9A:0C:B9:7C:31 Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Certificate serial: 34A32E991C257269BAED31FE3DF25DC9C45147E4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1106871076220043283/0/644F9AE827627B0357D7972FE08D569A0CB97C31.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1106871076220043283/0/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Wed 13 May 2026 09:05:31 +0000 Certificate not after: Wed 12 May 2027 09:10:31 +0000 Subordinate resources: AS: 38367 IP: 119.38.192.0/20 IP: 2400:ae00::/32 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 11:49:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:a3:2e:99:1c:25:72:69:ba:ed:31:fe:3d:f2:5d:c9:c4:51:47:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Validity Not Before: May 13 09:05:31 2026 GMT Not After : May 12 09:10:31 2027 GMT Subject: CN=644F9AE827627B0357D7972FE08D569A0CB97C31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:8a:f4:49:f8:5b:55:75:ae:80:79:8a:81:22: b0:ee:5a:73:eb:10:b9:c1:1b:5b:fb:a4:67:25:ea: bc:c3:9b:ec:70:46:12:f8:7a:b9:38:2b:44:44:f0: 2d:ac:47:21:51:74:ce:58:a6:c1:58:75:65:c1:5c: 13:6d:de:87:0b:9c:67:a0:93:14:dd:7d:cb:4f:84: 12:50:a0:ba:80:3d:39:67:93:76:7b:79:88:18:8e: cf:5e:98:03:f7:21:57:a6:90:a9:2c:a7:5d:80:e6: 63:ae:37:a9:33:e0:de:21:2e:3f:fd:38:47:af:65: ee:ca:eb:4b:4d:73:87:b1:1c:e9:3b:51:77:56:c4: 13:73:6c:be:7c:23:44:39:3f:e6:d1:7e:d6:96:d2: a5:da:74:90:89:3a:17:07:20:2e:4f:5e:ef:5e:fd: 6a:a1:df:0e:de:0a:d8:34:c6:a1:b4:84:71:91:a7: 7c:d8:4c:33:ca:64:e9:7f:52:d4:4a:bc:7b:97:c6: b3:87:58:5d:aa:8f:0f:f9:10:86:f6:66:92:49:00: ef:22:f1:82:bd:99:03:23:d3:fb:91:34:85:fa:0a: 12:e1:a3:8b:de:18:95:7b:25:7e:cc:f8:09:f7:3e: 41:e6:92:4b:7a:a9:f3:c6:3d:15:a9:87:c3:44:a5: e1:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 64:4F:9A:E8:27:62:7B:03:57:D7:97:2F:E0:8D:56:9A:0C:B9:7C:31 X509v3 Authority Key Identifier: keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1106871076220043283/0/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1106871076220043283/0/644F9AE827627B0357D7972FE08D569A0CB97C31.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 119.38.192.0/20 IPv6: 2400:ae00::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 38367 Signature Algorithm: sha256WithRSAEncryption 81:ae:35:1e:11:32:5d:e2:88:fb:b4:a5:e6:4a:a4:b3:e6:87: 14:cd:dd:9c:83:1e:69:f2:51:cd:5c:3b:e1:86:45:c8:d7:18: 26:9b:11:5b:be:e3:4d:3d:1f:ab:b2:31:04:eb:0b:42:5e:70: 7d:fb:4a:dc:47:d3:45:93:d5:8b:04:39:59:2a:fa:fa:2b:20: 3a:81:3a:2c:f2:5c:fa:2f:c3:a9:72:e5:cb:76:aa:1a:91:c1: ca:01:90:cc:8f:50:35:ad:d6:e0:52:7d:62:2c:56:b5:ec:92: 20:25:75:35:d1:5d:5e:40:eb:1f:0a:db:5c:e1:6d:0e:72:d0: 81:1f:3d:42:42:e6:ef:28:08:3f:14:00:ff:7c:8f:6d:bb:b8: fb:77:84:13:19:56:63:33:10:9d:0b:7d:87:2b:bb:c1:62:c9: 01:37:d9:9b:65:8f:30:97:c5:ab:91:cb:a7:10:d1:ec:d0:f9: 1e:69:2a:2a:e6:a5:0a:67:34:61:f7:3f:e7:a3:40:45:1f:63: d1:ca:6b:c1:8e:22:f8:f0:f5:6d:f7:3b:61:66:83:ac:53:13: 2c:73:4b:1f:a8:c0:d4:2a:e4:2d:ce:1c:45:65:15:e5:26:b7: 74:09:55:4e:45:ad:75:bd:c1:25:05:53:70:3b:1c:6c:e8:17: 58:b7:2c:cc -----BEGIN CERTIFICATE----- MIIF0jCCBLqgAwIBAgIUNKMumRwlcmm67TH+PfJdycRRR+QwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDUxMzA5MDUzMVoX DTI3MDUxMjA5MTAzMVowMzExMC8GA1UEAxMoNjQ0RjlBRTgyNzYyN0IwMzU3RDc5 NzJGRTA4RDU2OUEwQ0I5N0MzMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANGK9En4W1V1roB5ioEisO5ac+sQucEbW/ukZyXqvMOb7HBGEvh6uTgrRETw LaxHIVF0zlimwVh1ZcFcE23ehwucZ6CTFN19y0+EElCguoA9OWeTdnt5iBiOz16Y A/chV6aQqSynXYDmY643qTPg3iEuP/04R69l7srrS01zh7Ec6TtRd1bEE3Nsvnwj RDk/5tF+1pbSpdp0kIk6FwcgLk9e7179aqHfDt4K2DTGobSEcZGnfNhMM8pk6X9S 1Eq8e5fGs4dYXaqPD/kQhvZmkkkA7yLxgr2ZAyPT+5E0hfoKEuGji94YlXslfsz4 Cfc+QeaSS3qp88Y9FamHw0Sl4c0CAwEAAaOCAsUwggLBMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFGRPmugnYnsDV9eXL+CNVpoMuXwxMB8GA1UdIwQYMBaAFKVu hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTEwNjg3MTA3NjIyMDA0MzI4My8wLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMTA2ODcxMDc2MjIwMDQzMjgz LzAvNjQ0RjlBRTgyNzYyN0IwMzU3RDc5NzJGRTA4RDU2OUEwQ0I5N0MzMS5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUH AQcBAf8EHzAdMAwEAgABMAYDBAR3JsAwDQQCAAIwBwMFACQArgAwGgYIKwYBBQUH AQgBAf8ECzAJoAcwBQIDAJXfMA0GCSqGSIb3DQEBCwUAA4IBAQCBrjUeETJd4oj7 tKXmSqSz5ocUzd2cgx5p8lHNXDvhhkXI1xgmmxFbvuNNPR+rsjEE6wtCXnB9+0rc R9NFk9WLBDlZKvr6KyA6gTos8lz6L8OpcuXLdqoakcHKAZDMj1A1rdbgUn1iLFa1 7JIgJXU10V1eQOsfCttc4W0OctCBHz1CQubvKAg/FAD/fI9tu7j7d4QTGVZjMxCd C32HK7vBYskBN9mbZY8wl8WrkcunENHs0PkeaSoq5qUKZzRh9z/no0BFH2PRymvB jiL48PVt9zthZoOsUxMsc0sfqMDUKuQtzhxFZRXlJrd0CVVORa11vcElBVNwOxxs 6BdYtyzM -----END CERTIFICATE-----Generated at Wed May 13 20:17:09 2026 by rpki-client