$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8724034EA9C06D1060ECF7022D7573CB149BE03B.cer File: 8724034EA9C06D1060ECF7022D7573CB149BE03B.cer (raw, json) Hash identifier: W+kHOTwW2mq4XcVd+ILbHGyrY84oq5iDTncM0Lc47HI= Subject key identifier: 87:24:03:4E:A9:C0:6D:10:60:EC:F7:02:2D:75:73:CB:14:9B:E0:3B Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Certificate serial: 4D88274965E7E01C823D9FE2BC639DBC18B4783E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1105363837357391885/0/8724034EA9C06D1060ECF7022D7573CB149BE03B.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1105363837357391885/0/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Sat 09 May 2026 05:16:17 +0000 Certificate not after: Sat 08 May 2027 05:21:17 +0000 Subordinate resources: AS: 139098 IP: 103.158.0.0/23 IP: 106.3.176.0/20 IP: 118.26.48.0/21 IP: 203.92.160.0/19 IP: 210.2.24.0/21 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 11:49:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:88:27:49:65:e7:e0:1c:82:3d:9f:e2:bc:63:9d:bc:18:b4:78:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Validity Not Before: May 9 05:16:17 2026 GMT Not After : May 8 05:21:17 2027 GMT Subject: CN=8724034EA9C06D1060ECF7022D7573CB149BE03B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:03:35:20:79:7d:b8:87:d6:37:b8:72:5e:87: 70:bb:de:81:4f:3d:e8:f7:89:03:e2:48:9d:74:80: 3e:79:6e:fc:09:a9:5b:07:01:41:62:c2:72:a5:6c: 34:8f:93:24:9e:58:03:7b:ad:ed:61:29:d8:11:f9: 0d:02:08:4c:59:32:cc:2c:5d:47:41:89:ea:5e:8a: bb:25:56:70:9d:ee:83:79:bb:b9:3f:e2:92:09:61: d8:b7:f8:db:c5:09:fc:b4:f0:d4:ab:d0:e0:14:e3: c6:71:69:03:f8:c2:bb:d6:63:4b:a4:32:fd:b8:80: b5:96:ae:80:d8:83:02:b0:15:91:f4:cd:97:d9:83: 8b:6f:18:80:ac:36:de:5a:fe:b3:bb:cc:3f:fb:92: 3d:e2:62:f1:d2:2b:6f:1f:79:30:25:9b:14:59:3d: b2:47:08:1b:77:3e:11:6f:2c:36:49:d5:08:5b:ca: 3e:05:e7:04:c9:d5:21:ae:e2:36:59:aa:f7:01:40: ce:16:55:0d:45:bf:bf:4c:8c:f7:98:84:ed:55:9f: 5a:94:6a:6f:05:48:b4:4b:d3:87:69:f2:d9:c8:7a: 67:4a:0a:9f:48:5c:5f:f6:b9:55:94:51:1e:87:bd: 33:12:3d:41:14:20:e2:52:81:72:7c:e9:52:58:69: 82:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 87:24:03:4E:A9:C0:6D:10:60:EC:F7:02:2D:75:73:CB:14:9B:E0:3B X509v3 Authority Key Identifier: keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1105363837357391885/0/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1105363837357391885/0/8724034EA9C06D1060ECF7022D7573CB149BE03B.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.158.0.0/23 106.3.176.0/20 118.26.48.0/21 203.92.160.0/19 210.2.24.0/21 sbgp-autonomousSysNum: critical Autonomous System Numbers: 139098 Signature Algorithm: sha256WithRSAEncryption 93:c7:96:a5:38:ca:e3:23:44:b2:03:50:fe:fc:94:67:70:af: 84:e6:57:01:29:a3:8d:9d:38:f0:b3:52:e0:db:1c:a0:03:60: 6d:2e:e0:99:e8:48:ba:42:38:d5:9c:b9:08:52:37:95:4a:df: 2c:52:a0:eb:2f:15:fc:a6:3c:df:02:cf:f9:b9:fa:b3:99:55: 6d:7a:e1:25:8d:db:3f:f7:06:8f:13:27:34:cf:c8:33:78:cf: a8:2c:1b:e0:cf:90:e6:67:f7:7c:46:94:0e:7f:1f:d5:16:23: 86:d9:44:73:b9:c7:9e:37:f7:6a:7c:55:53:2a:d3:bf:67:11: 14:b6:3a:f4:b5:e3:5f:17:05:04:00:0d:cf:23:b3:27:7a:e4: 55:28:3a:06:4e:16:50:09:ec:68:a9:1b:2f:c0:c8:df:ba:db: 90:fe:a1:e6:e9:c7:bb:97:0a:0e:ff:6a:5f:a7:f9:c1:1b:ce: 1a:fc:cb:e1:d8:2f:53:2b:ba:48:91:52:c6:02:4e:fc:aa:55: 5d:d5:6e:59:a7:39:61:9f:c8:7d:ac:de:c9:70:6b:12:a3:6b: 5f:dd:f2:6c:51:ab:40:2a:dc:c9:ba:69:fe:c9:13:97:12:b2: 56:66:8c:7f:d1:5f:d9:76:06:7b:91:8e:16:fb:e3:98:cc:e9: 95:85:d3:0d -----BEGIN CERTIFICATE----- MIIF2zCCBMOgAwIBAgIUTYgnSWXn4ByCPZ/ivGOdvBi0eD4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDUwOTA1MTYxN1oX DTI3MDUwODA1MjExN1owMzExMC8GA1UEAxMoODcyNDAzNEVBOUMwNkQxMDYwRUNG NzAyMkQ3NTczQ0IxNDlCRTAzQjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMgDNSB5fbiH1je4cl6HcLvegU896PeJA+JInXSAPnlu/AmpWwcBQWLCcqVs NI+TJJ5YA3ut7WEp2BH5DQIITFkyzCxdR0GJ6l6KuyVWcJ3ug3m7uT/ikglh2Lf4 28UJ/LTw1KvQ4BTjxnFpA/jCu9ZjS6Qy/biAtZaugNiDArAVkfTNl9mDi28YgKw2 3lr+s7vMP/uSPeJi8dIrbx95MCWbFFk9skcIG3c+EW8sNknVCFvKPgXnBMnVIa7i Nlmq9wFAzhZVDUW/v0yM95iE7VWfWpRqbwVItEvTh2ny2ch6Z0oKn0hcX/a5VZRR Hoe9MxI9QRQg4lKBcnzpUlhpgmUCAwEAAaOCAs4wggLKMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFIckA06pwG0QYOz3Ai11c8sUm+A7MB8GA1UdIwQYMBaAFKVu hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTEwNTM2MzgzNzM1NzM5MTg4NS8wLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMTA1MzYzODM3MzU3MzkxODg1 LzAvODcyNDAzNEVBOUMwNkQxMDYwRUNGNzAyMkQ3NTczQ0IxNDlCRTAzQi5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwNwYIKwYBBQUH AQcBAf8EKDAmMCQEAgABMB4DBAFnngADBARqA7ADBAN2GjADBAXLXKADBAPSAhgw GgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDAh9aMA0GCSqGSIb3DQEBCwUAA4IBAQCT x5alOMrjI0SyA1D+/JRncK+E5lcBKaONnTjws1Lg2xygA2BtLuCZ6Ei6QjjVnLkI UjeVSt8sUqDrLxX8pjzfAs/5ufqzmVVteuEljds/9waPEyc0z8gzeM+oLBvgz5Dm Z/d8RpQOfx/VFiOG2URzuceeN/dqfFVTKtO/ZxEUtjr0teNfFwUEAA3PI7MneuRV KDoGThZQCexoqRsvwMjfutuQ/qHm6ce7lwoO/2pfp/nBG84a/Mvh2C9TK7pIkVLG Ak78qlVd1W5Zpzlhn8h9rN7JcGsSo2tf3fJsUatAKtzJumn+yROXErJWZox/0V/Z dgZ7kY4W++OYzOmVhdMN -----END CERTIFICATE-----Generated at Wed May 13 15:24:29 2026 by rpki-client