$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8B215666577E10BF852C3AC9A7EB59536DFF468B.cer File: 8B215666577E10BF852C3AC9A7EB59536DFF468B.cer (raw, json) Hash identifier: Zm1o9A5ywaxuRXIwSddFVdVB0QbRXdXuEW4hg5K/Owk= Subject key identifier: 8B:21:56:66:57:7E:10:BF:85:2C:3A:C9:A7:EB:59:53:6D:FF:46:8B Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Certificate serial: 59A989A1204C2DDFDB3F707CCD2BFB6420AAAED6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1099583963774582787/0/8B215666577E10BF852C3AC9A7EB59536DFF468B.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1099583963774582787/0/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Thu 23 Apr 2026 06:29:08 +0000 Certificate not after: Thu 22 Apr 2027 06:34:08 +0000 Subordinate resources: IP: 180.235.64.0/21 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 11:49:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:a9:89:a1:20:4c:2d:df:db:3f:70:7c:cd:2b:fb:64:20:aa:ae:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Validity Not Before: Apr 23 06:29:08 2026 GMT Not After : Apr 22 06:34:08 2027 GMT Subject: CN=8B215666577E10BF852C3AC9A7EB59536DFF468B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:39:6a:8d:b4:8f:d9:7b:78:12:07:99:4e:1a: d2:bb:1b:ce:49:1e:1d:95:0b:07:4b:e0:98:e2:63: 35:bf:54:95:ee:4d:92:73:47:ec:f9:1f:f5:eb:53: cc:bc:4d:21:a6:81:6f:85:d2:90:90:ed:5d:9e:ba: 1b:3f:de:d5:e8:53:37:7f:78:27:61:ff:b6:91:cd: bd:19:e6:d8:39:f1:4f:ca:2a:46:0d:8f:2a:7b:9c: 08:ea:12:cd:6c:24:14:12:cb:67:95:1f:34:42:2f: 8e:bd:d9:dd:cc:66:f7:16:b5:cb:0b:8d:86:fa:e1: 66:1c:e7:b6:2e:05:bb:d3:f9:83:48:05:bc:08:7e: f0:f4:26:90:36:4d:89:54:bc:c6:db:0d:fe:2a:b5: 96:34:69:a8:0f:3c:cc:53:0a:fc:cc:b1:53:fc:d4: 63:eb:c6:f0:89:f5:a1:a9:0d:c3:e3:ca:08:94:8c: a9:8e:56:cb:5c:75:77:2d:65:ff:63:b1:16:d4:89: 65:ba:fd:bf:43:14:1f:9c:4f:92:64:fb:dd:b5:94: 6f:28:2b:c7:07:01:a2:f0:cb:57:d0:2c:ff:56:ec: 3c:72:ad:88:21:4d:7a:51:c6:5a:e5:7d:a8:86:b9: dd:84:32:3e:5c:02:7c:12:e6:37:8e:de:62:dd:9e: 98:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 8B:21:56:66:57:7E:10:BF:85:2C:3A:C9:A7:EB:59:53:6D:FF:46:8B X509v3 Authority Key Identifier: keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1099583963774582787/0/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1099583963774582787/0/8B215666577E10BF852C3AC9A7EB59536DFF468B.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 180.235.64.0/21 Signature Algorithm: sha256WithRSAEncryption 35:b0:ea:91:5b:1e:37:9f:30:10:33:08:f8:c6:c4:0e:5d:f0: 56:5b:03:6f:93:86:50:cf:a0:ff:1f:12:44:e9:54:bd:e6:93: b6:9f:64:45:bf:6c:98:86:e9:48:f9:4f:6e:80:62:a0:9f:37: d5:f8:1a:7c:59:ee:f9:ac:9d:53:d8:97:5a:87:16:87:62:67: 30:0a:8b:1f:97:7c:31:97:83:bf:17:5a:69:a2:16:1d:f4:d9: 09:7a:8f:0a:86:0b:76:3c:cb:d3:b9:ab:42:40:44:fe:3e:49: 1c:21:ca:dd:05:dd:05:d8:95:3a:0c:04:8d:51:65:3e:dc:dd: 06:bf:89:69:e6:a8:7c:e9:06:1d:2f:c8:0d:2a:7e:43:82:f4: 1b:4c:ee:7e:36:76:f1:ee:c4:39:3b:d5:7a:09:c1:f5:37:32: e1:2f:57:83:4a:8c:b5:23:57:d0:6f:3a:dd:2f:8e:e8:92:76: 4c:e6:e2:3c:dd:9e:05:a5:52:b2:17:12:d1:9e:2e:b0:66:be: 96:af:de:9b:da:db:a4:77:c3:e1:3b:2e:40:26:62:2a:43:e1: e1:39:56:73:db:0d:a1:75:12:92:19:ba:68:04:21:ed:eb:16: 26:95:47:6d:a1:fd:84:0b:12:0e:13:60:b5:b6:02:18:9a:21: 39:90:3a:61 -----BEGIN CERTIFICATE----- MIIFpzCCBI+gAwIBAgIUWamJoSBMLd/bP3B8zSv7ZCCqrtYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDQyMzA2MjkwOFoX DTI3MDQyMjA2MzQwOFowMzExMC8GA1UEAxMoOEIyMTU2NjY1NzdFMTBCRjg1MkMz QUM5QTdFQjU5NTM2REZGNDY4QjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALk5ao20j9l7eBIHmU4a0rsbzkkeHZULB0vgmOJjNb9Ule5NknNH7Pkf9etT zLxNIaaBb4XSkJDtXZ66Gz/e1ehTN394J2H/tpHNvRnm2DnxT8oqRg2PKnucCOoS zWwkFBLLZ5UfNEIvjr3Z3cxm9xa1ywuNhvrhZhznti4Fu9P5g0gFvAh+8PQmkDZN iVS8xtsN/iq1ljRpqA88zFMK/MyxU/zUY+vG8In1oakNw+PKCJSMqY5Wy1x1dy1l /2OxFtSJZbr9v0MUH5xPkmT73bWUbygrxwcBovDLV9As/1bsPHKtiCFNelHGWuV9 qIa53YQyPlwCfBLmN47eYt2emIcCAwEAAaOCApowggKWMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFIshVmZXfhC/hSw6yafrWVNt/0aLMB8GA1UdIwQYMBaAFKVu hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTA5OTU4Mzk2Mzc3NDU4Mjc4Ny8wLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDk5NTgzOTYzNzc0NTgyNzg3 LzAvOEIyMTU2NjY1NzdFMTBCRjg1MkMzQUM5QTdFQjU5NTM2REZGNDY4Qi5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAO060AwDQYJKoZIhvcNAQELBQADggEBADWw6pFb HjefMBAzCPjGxA5d8FZbA2+ThlDPoP8fEkTpVL3mk7afZEW/bJiG6Uj5T26AYqCf N9X4GnxZ7vmsnVPYl1qHFodiZzAKix+XfDGXg78XWmmiFh302Ql6jwqGC3Y8y9O5 q0JARP4+SRwhyt0F3QXYlToMBI1RZT7c3Qa/iWnmqHzpBh0vyA0qfkOC9BtM7n42 dvHuxDk71XoJwfU3MuEvV4NKjLUjV9BvOt0vjuiSdkzm4jzdngWlUrIXEtGeLrBm vpav3pva26R3w+E7LkAmYipD4eE5VnPbDaF1EpIZumgEIe3rFiaVR22h/YQLEg4T YLW2AhiaITmQOmE= -----END CERTIFICATE-----Generated at Wed May 13 15:24:44 2026 by rpki-client