$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8F4847B639E40E191DBFCE7F69985F8744142AF6.cer File: 8F4847B639E40E191DBFCE7F69985F8744142AF6.cer (raw, json) Hash identifier: 44sfSLf2sbnHwhCGn5Et8vCS/zO1AAgW35QPWMTBfPw= Subject key identifier: 8F:48:47:B6:39:E4:0E:19:1D:BF:CE:7F:69:98:5F:87:44:14:2A:F6 Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Certificate serial: 31CA050FD9C8C08FA19C64F3F05AE70959FC0F95 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1102067388175613959/1/8F4847B639E40E191DBFCE7F69985F8744142AF6.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1102067388175613959/1/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Thu 30 Apr 2026 03:14:08 +0000 Certificate not after: Thu 29 Apr 2027 03:19:08 +0000 Subordinate resources: AS: 151236 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 11:49:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:ca:05:0f:d9:c8:c0:8f:a1:9c:64:f3:f0:5a:e7:09:59:fc:0f:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Validity Not Before: Apr 30 03:14:08 2026 GMT Not After : Apr 29 03:19:08 2027 GMT Subject: CN=8F4847B639E40E191DBFCE7F69985F8744142AF6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:dc:76:02:d7:62:51:9f:0c:a7:6d:4e:66:bf: ff:02:8c:24:46:43:2e:cb:67:4a:1c:21:58:45:87: 16:ce:50:0e:db:af:3d:dd:59:57:3e:a5:38:b2:50: d1:e9:63:17:4d:1b:4f:e6:53:10:8a:8d:28:66:49: 84:27:49:67:00:90:60:17:3c:f6:c9:b1:a3:4a:35: 06:cd:8d:a3:f6:a3:81:80:1d:18:42:bd:26:62:cc: bd:d2:cc:b5:7b:9b:07:27:49:5c:28:2d:e0:6f:0b: e3:ab:6f:ca:66:9e:58:33:3a:5f:90:6a:c2:19:f3: 2d:d9:f2:0c:fd:64:96:3d:3c:d4:3e:e0:ce:51:cc: ea:c4:a0:49:a8:f6:b3:cc:62:37:1e:7e:18:06:c7: 61:75:65:ca:bc:2e:be:19:fd:84:6a:3c:ce:6c:db: 20:e2:be:99:40:96:ed:24:6d:42:0b:0b:40:9c:eb: 05:0b:df:9f:65:2f:e0:d8:c2:e5:f8:eb:d9:24:12: 99:85:c6:b6:d0:f0:67:b1:63:4e:10:6f:19:b6:95: 01:b7:8f:0b:f6:70:44:6c:51:4e:a2:aa:7d:8f:30: 07:9e:7b:ee:5d:4d:47:aa:a5:e7:f2:be:71:e3:c2: 97:5f:65:ef:4d:49:1c:ca:7c:74:ac:27:fa:10:0d: 0d:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 8F:48:47:B6:39:E4:0E:19:1D:BF:CE:7F:69:98:5F:87:44:14:2A:F6 X509v3 Authority Key Identifier: keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1102067388175613959/1/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1102067388175613959/1/8F4847B639E40E191DBFCE7F69985F8744142AF6.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 151236 Signature Algorithm: sha256WithRSAEncryption 5d:ad:1c:b9:c6:43:ab:e7:fe:eb:1f:73:3c:16:74:ad:9f:93: f5:ed:6f:8c:ed:a6:b9:51:7e:f4:e4:c3:ae:23:33:4f:2c:d8: dc:14:39:99:3f:0b:f4:17:9c:ed:37:ec:45:d5:d4:2d:f1:24: d9:02:cb:fe:27:65:28:05:43:65:b5:0a:58:24:cf:73:29:e0: 67:d0:7b:0a:29:45:25:a5:93:30:43:c6:ac:c8:af:2b:41:7b: a2:2f:3b:c0:b0:69:ed:e1:09:21:26:77:7e:0d:4d:53:83:0c: f2:8f:f4:f8:03:29:ad:09:88:f5:13:fb:c8:24:33:4e:2b:4c: 88:e4:e3:e6:04:d0:02:15:97:f2:11:31:e3:f8:20:1e:fe:a1: 3e:30:d7:c6:3a:7c:2e:6b:5c:c8:68:43:7b:4d:43:9e:8d:da: ac:7f:21:1b:de:d3:e0:f3:48:1a:dd:bb:8a:fb:fd:0c:78:1c: 7a:ff:53:51:b5:bb:cd:9a:15:d2:ba:4f:2d:50:43:b1:4c:7a: 88:1d:b9:63:f5:27:93:33:c7:6f:58:f5:52:c5:3d:a5:ce:a6: e4:cc:0c:f2:aa:06:17:f1:7a:da:15:72:bf:49:c4:b0:0e:d3: 4a:77:51:a4:98:c0:f5:9c:c6:78:ab:e4:5f:c7:77:20:af:c3: e1:34:44:96 -----BEGIN CERTIFICATE----- MIIFojCCBIqgAwIBAgIUMcoFD9nIwI+hnGTz8FrnCVn8D5UwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDQzMDAzMTQwOFoX DTI3MDQyOTAzMTkwOFowMzExMC8GA1UEAxMoOEY0ODQ3QjYzOUU0MEUxOTFEQkZD RTdGNjk5ODVGODc0NDE0MkFGNjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAK/cdgLXYlGfDKdtTma//wKMJEZDLstnShwhWEWHFs5QDtuvPd1ZVz6lOLJQ 0eljF00bT+ZTEIqNKGZJhCdJZwCQYBc89smxo0o1Bs2No/ajgYAdGEK9JmLMvdLM tXubBydJXCgt4G8L46tvymaeWDM6X5BqwhnzLdnyDP1klj081D7gzlHM6sSgSaj2 s8xiNx5+GAbHYXVlyrwuvhn9hGo8zmzbIOK+mUCW7SRtQgsLQJzrBQvfn2Uv4NjC 5fjr2SQSmYXGttDwZ7FjThBvGbaVAbePC/ZwRGxRTqKqfY8wB5577l1NR6ql5/K+ cePCl19l701JHMp8dKwn+hANDXcCAwEAAaOCApUwggKRMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFI9IR7Y55A4ZHb/Of2mYX4dEFCr2MB8GA1UdIwQYMBaAFKVu hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTEwMjA2NzM4ODE3NTYxMzk1OS8xLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMTAyMDY3Mzg4MTc1NjEzOTU5 LzEvOEY0ODQ3QjYzOUU0MEUxOTFEQkZDRTdGNjk5ODVGODc0NDE0MkFGNi5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwGgYIKwYBBQUH AQgBAf8ECzAJoAcwBQIDAk7EMA0GCSqGSIb3DQEBCwUAA4IBAQBdrRy5xkOr5/7r H3M8FnStn5P17W+M7aa5UX705MOuIzNPLNjcFDmZPwv0F5ztN+xF1dQt8STZAsv+ J2UoBUNltQpYJM9zKeBn0HsKKUUlpZMwQ8asyK8rQXuiLzvAsGnt4QkhJnd+DU1T gwzyj/T4AymtCYj1E/vIJDNOK0yI5OPmBNACFZfyETHj+CAe/qE+MNfGOnwua1zI aEN7TUOejdqsfyEb3tPg80ga3buK+/0MeBx6/1NRtbvNmhXSuk8tUEOxTHqIHblj 9SeTM8dvWPVSxT2lzqbkzAzyqgYX8XraFXK/ScSwDtNKd1GkmMD1nMZ4q+Rfx3cg r8PhNESW -----END CERTIFICATE-----Generated at Wed May 13 20:17:14 2026 by rpki-client