$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/917DF1BAD8C57974426ACDC694D37FB5F4B2CDAD.cer File: 917DF1BAD8C57974426ACDC694D37FB5F4B2CDAD.cer (raw, json) Hash identifier: JOA0QdrPIVMiNYGnDcGp5tZ0rUOWz+eWdTpr+axNq1s= Subject key identifier: 91:7D:F1:BA:D8:C5:79:74:42:6A:CD:C6:94:D3:7F:B5:F4:B2:CD:AD Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Certificate serial: 7370CBB7EEB8C34B968F0622D21BB9C21B5369F9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1105304750166966283/0/917DF1BAD8C57974426ACDC694D37FB5F4B2CDAD.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1105304750166966283/0/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Sat 09 May 2026 01:24:37 +0000 Certificate not after: Sat 08 May 2027 01:29:37 +0000 Subordinate resources: IP: 103.189.92.0/23 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 11:49:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:70:cb:b7:ee:b8:c3:4b:96:8f:06:22:d2:1b:b9:c2:1b:53:69:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Validity Not Before: May 9 01:24:37 2026 GMT Not After : May 8 01:29:37 2027 GMT Subject: CN=917DF1BAD8C57974426ACDC694D37FB5F4B2CDAD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:03:33:06:40:39:d1:a4:78:b1:3a:4b:97:74: 52:a3:81:90:7b:5b:10:75:9b:0e:fb:57:cc:8b:aa: bc:f0:6d:38:a9:82:81:ff:6a:1d:50:b8:05:c4:82: 8e:b9:1d:88:02:7c:89:2e:7b:d3:dc:31:0c:f1:e9: 03:70:5b:1a:03:5d:6c:de:8b:53:a4:bc:7c:58:2a: 57:ad:3c:30:c6:9f:29:43:09:91:95:2a:61:52:e9: 82:83:be:82:06:c0:dd:f3:e6:66:b7:5b:f8:1e:e6: 3c:1b:5a:1f:0c:3e:0e:47:dc:6a:dd:a6:c2:2f:32: 85:33:2a:da:47:ed:1d:f5:35:4e:46:79:0a:66:30: 84:44:0a:5c:8f:9a:0c:11:ec:5d:a4:c5:ef:cb:92: 76:f4:42:ff:c8:ae:ef:aa:f8:23:5c:b6:1d:70:c9: b6:bb:2a:75:0d:28:77:11:7c:b0:b5:42:46:0e:00: 52:86:8b:d9:7f:c4:b0:6d:c8:5a:06:d0:0b:28:55: 8d:c7:18:5f:d4:7a:cf:05:88:f2:94:a7:fa:41:2d: 31:c5:45:c1:50:67:61:86:0f:13:d1:47:4f:96:b9: 3a:b9:ad:c9:ef:d6:db:2f:bc:68:41:6d:68:2a:ed: 64:ab:a9:48:db:29:b6:32:c5:cc:73:0d:32:ef:d8: 6b:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 91:7D:F1:BA:D8:C5:79:74:42:6A:CD:C6:94:D3:7F:B5:F4:B2:CD:AD X509v3 Authority Key Identifier: keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1105304750166966283/0/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1105304750166966283/0/917DF1BAD8C57974426ACDC694D37FB5F4B2CDAD.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.189.92.0/23 Signature Algorithm: sha256WithRSAEncryption 19:1c:60:e5:23:cf:41:46:4f:a8:4f:9c:2e:a4:2e:82:3c:39: 7e:d3:d5:03:8e:5b:39:a8:cd:6f:85:b7:bc:8c:1b:ff:c1:3e: 8d:df:31:29:75:b5:4f:f8:05:30:f8:c6:a3:02:97:00:19:eb: 73:32:bc:a3:6f:0d:73:4d:69:21:65:f7:8b:4b:2f:81:af:9f: fb:a1:3a:be:9c:66:22:d2:97:96:b9:f3:6b:d2:28:6e:db:38: 4b:0d:77:44:68:ed:89:7d:ee:77:0e:ba:10:d6:a2:d0:50:f0: c3:1f:37:c7:49:df:0e:3b:42:91:b3:d9:6d:35:98:34:30:27: b9:11:e4:90:ce:2e:cb:2b:c7:ef:ca:cf:a4:0d:8b:d7:cb:28: fe:e4:32:1c:da:8f:9c:11:ab:42:80:86:50:7b:5b:62:e8:43: 40:79:c6:21:5c:c7:8a:62:d5:f7:62:0b:d9:6b:2b:b3:fe:b8: d1:4d:80:30:b7:96:a3:98:1d:0d:a3:b7:f1:a1:28:cc:c5:92: 00:3b:21:f8:ca:2e:2e:e9:2e:ee:6b:10:93:c6:e6:fb:6b:e8: d5:90:c6:2e:2a:64:80:ac:fc:26:7b:b4:c9:eb:45:c8:0f:72: db:3c:7d:2c:19:da:55:a9:6f:2f:0f:f4:4f:d9:75:ad:6e:f6: cb:3c:eb:ba -----BEGIN CERTIFICATE----- MIIFpzCCBI+gAwIBAgIUc3DLt+64w0uWjwYi0hu5whtTafkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDUwOTAxMjQzN1oX DTI3MDUwODAxMjkzN1owMzExMC8GA1UEAxMoOTE3REYxQkFEOEM1Nzk3NDQyNkFD REM2OTREMzdGQjVGNEIyQ0RBRDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOcDMwZAOdGkeLE6S5d0UqOBkHtbEHWbDvtXzIuqvPBtOKmCgf9qHVC4BcSC jrkdiAJ8iS5709wxDPHpA3BbGgNdbN6LU6S8fFgqV608MMafKUMJkZUqYVLpgoO+ ggbA3fPmZrdb+B7mPBtaHww+Dkfcat2mwi8yhTMq2kftHfU1TkZ5CmYwhEQKXI+a DBHsXaTF78uSdvRC/8iu76r4I1y2HXDJtrsqdQ0odxF8sLVCRg4AUoaL2X/EsG3I WgbQCyhVjccYX9R6zwWI8pSn+kEtMcVFwVBnYYYPE9FHT5a5Ormtye/W2y+8aEFt aCrtZKupSNsptjLFzHMNMu/YayMCAwEAAaOCApowggKWMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFJF98brYxXl0QmrNxpTTf7X0ss2tMB8GA1UdIwQYMBaAFKVu hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTEwNTMwNDc1MDE2Njk2NjI4My8wLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMTA1MzA0NzUwMTY2OTY2Mjgz LzAvOTE3REYxQkFEOEM1Nzk3NDQyNkFDREM2OTREMzdGQjVGNEIyQ0RBRC5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAFnvVwwDQYJKoZIhvcNAQELBQADggEBABkcYOUj z0FGT6hPnC6kLoI8OX7T1QOOWzmozW+Ft7yMG//BPo3fMSl1tU/4BTD4xqMClwAZ 63MyvKNvDXNNaSFl94tLL4Gvn/uhOr6cZiLSl5a582vSKG7bOEsNd0Ro7Yl97ncO uhDWotBQ8MMfN8dJ3w47QpGz2W01mDQwJ7kR5JDOLssrx+/Kz6QNi9fLKP7kMhza j5wRq0KAhlB7W2LoQ0B5xiFcx4pi1fdiC9lrK7P+uNFNgDC3lqOYHQ2jt/GhKMzF kgA7IfjKLi7pLu5rEJPG5vtr6NWQxi4qZICs/CZ7tMnrRcgPcts8fSwZ2lWpby8P 9E/Zda1u9ss867o= -----END CERTIFICATE-----Generated at Wed May 13 14:17:58 2026 by rpki-client