$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/921E7CCEFADC9A05BFBE8A8B9EED4C95D4BA75EB.cer File: 921E7CCEFADC9A05BFBE8A8B9EED4C95D4BA75EB.cer (raw, json) Hash identifier: 9JdxVxiMN/CG0MAdHt+jsxnJjnjO07SZfMgFUiH4kGs= Subject key identifier: 92:1E:7C:CE:FA:DC:9A:05:BF:BE:8A:8B:9E:ED:4C:95:D4:BA:75:EB Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Certificate serial: 23BFD6C15C74E6A6E278525EB4EB229FA1D03171 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1104968095178424325/0/921E7CCEFADC9A05BFBE8A8B9EED4C95D4BA75EB.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1104968095178424325/0/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Fri 08 May 2026 03:03:45 +0000 Certificate not after: Fri 07 May 2027 03:08:45 +0000 Subordinate resources: AS: 131513 IP: 101.96.128.0/20 IP: 103.103.12.0/22 IP: 183.81.180.0/22 IP: 202.189.0.0/22 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 11:49:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:bf:d6:c1:5c:74:e6:a6:e2:78:52:5e:b4:eb:22:9f:a1:d0:31:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Validity Not Before: May 8 03:03:45 2026 GMT Not After : May 7 03:08:45 2027 GMT Subject: CN=921E7CCEFADC9A05BFBE8A8B9EED4C95D4BA75EB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:de:89:b1:fa:30:2b:68:47:b3:90:2c:69:fd: 49:d9:a7:97:5c:bc:7a:4e:70:b7:67:b3:2e:6b:d0: cf:62:4d:67:ef:b4:7d:70:31:d0:5a:62:60:c8:d0: 0a:c7:7b:99:33:b3:6e:cb:7c:8f:8f:69:4c:ac:1e: 01:8b:5a:6b:cd:be:92:95:f0:1c:4b:b0:37:ba:b3: 05:86:65:2d:ce:a6:a4:cd:c6:bb:31:0f:e9:b0:dc: c9:a6:a0:01:2d:f1:e7:41:24:8c:89:40:eb:94:f7: 9b:b0:12:29:1b:bc:99:94:c5:09:eb:8c:01:8b:76: 62:71:81:f9:48:4d:c6:d4:a9:9f:b4:9f:98:62:1e: a7:e9:bf:40:83:bf:d1:ec:08:36:17:63:c3:d8:ff: 2a:7e:64:ce:fb:ed:f6:76:c4:aa:58:d2:e3:8c:cb: 82:53:6e:0c:62:a6:02:a2:90:46:4b:83:f8:d5:2f: f5:d8:18:c2:f9:59:5c:76:31:3e:1d:b6:dd:fe:1f: e2:8c:ef:03:2f:bc:52:24:5f:5c:36:ea:9c:39:6a: 2a:75:e6:4a:68:45:32:f9:8b:f8:14:b6:90:ed:0a: 4c:ed:b4:42:18:2e:b3:40:af:3d:a5:13:f9:92:76: bf:07:c6:ba:6a:9b:a4:60:41:cd:52:49:60:a7:13: 92:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 92:1E:7C:CE:FA:DC:9A:05:BF:BE:8A:8B:9E:ED:4C:95:D4:BA:75:EB X509v3 Authority Key Identifier: keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1104968095178424325/0/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1104968095178424325/0/921E7CCEFADC9A05BFBE8A8B9EED4C95D4BA75EB.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 101.96.128.0/20 103.103.12.0/22 183.81.180.0/22 202.189.0.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 131513 Signature Algorithm: sha256WithRSAEncryption 2a:8f:aa:3c:73:51:ac:04:ac:72:cc:0f:2e:2a:84:49:61:49: 10:48:85:6c:a7:7e:45:56:a4:84:8f:57:04:e4:4e:60:9e:fd: 56:5d:3c:d5:c3:05:61:40:5d:a5:69:00:91:99:b5:10:13:f7: 6c:d2:96:e3:64:e3:33:26:df:1c:0b:1c:29:96:ca:52:6e:9b: 99:f9:26:e5:63:27:ab:af:b5:95:2c:c2:64:a5:7c:16:28:42: 14:52:29:ba:5a:8b:85:76:a5:8b:5a:de:3b:30:73:57:ab:2b: 47:d4:60:2f:f0:da:7b:e5:5a:6e:4b:df:96:f4:14:1f:28:ca: 27:29:65:d3:bf:36:5f:0b:28:c7:7a:bd:1e:1c:cb:f3:f9:f8: b7:05:88:08:b7:a8:48:57:a6:8d:98:68:5b:8d:db:59:f5:7d: 25:7a:ca:d4:b1:82:54:6d:28:6d:4d:31:ad:92:a1:c8:ed:de: fd:32:ef:46:ed:9e:29:29:e7:d8:cc:5f:a8:f7:42:70:df:15: 47:61:ef:e7:84:55:a2:6c:82:13:37:71:39:1c:40:58:6b:e8: 7e:a8:ff:fa:e9:84:2f:6f:5f:b6:d1:6f:2a:23:e4:a2:50:9b: 38:0f:5a:d2:43:48:18:3b:e4:aa:21:e2:c4:df:95:9d:bf:4c: a9:b3:9a:53 -----BEGIN CERTIFICATE----- MIIF1TCCBL2gAwIBAgIUI7/WwVx05qbieFJetOsin6HQMXEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDUwODAzMDM0NVoX DTI3MDUwNzAzMDg0NVowMzExMC8GA1UEAxMoOTIxRTdDQ0VGQURDOUEwNUJGQkU4 QThCOUVFRDRDOTVENEJBNzVFQjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALLeibH6MCtoR7OQLGn9Sdmnl1y8ek5wt2ezLmvQz2JNZ++0fXAx0FpiYMjQ Csd7mTOzbst8j49pTKweAYtaa82+kpXwHEuwN7qzBYZlLc6mpM3GuzEP6bDcyaag AS3x50EkjIlA65T3m7ASKRu8mZTFCeuMAYt2YnGB+UhNxtSpn7SfmGIep+m/QIO/ 0ewINhdjw9j/Kn5kzvvt9nbEqljS44zLglNuDGKmAqKQRkuD+NUv9dgYwvlZXHYx Ph223f4f4ozvAy+8UiRfXDbqnDlqKnXmSmhFMvmL+BS2kO0KTO20Qhgus0CvPaUT +ZJ2vwfGumqbpGBBzVJJYKcTkocCAwEAAaOCAsgwggLEMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFJIefM763JoFv76Ki57tTJXUunXrMB8GA1UdIwQYMBaAFKVu hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTEwNDk2ODA5NTE3ODQyNDMyNS8wLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMTA0OTY4MDk1MTc4NDI0MzI1 LzAvOTIxRTdDQ0VGQURDOUEwNUJGQkU4QThCOUVFRDRDOTVENEJBNzVFQi5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwMQYIKwYBBQUH AQcBAf8EIjAgMB4EAgABMBgDBARlYIADBAJnZwwDBAK3UbQDBALKvQAwGgYIKwYB BQUHAQgBAf8ECzAJoAcwBQIDAgG5MA0GCSqGSIb3DQEBCwUAA4IBAQAqj6o8c1Gs BKxyzA8uKoRJYUkQSIVsp35FVqSEj1cE5E5gnv1WXTzVwwVhQF2laQCRmbUQE/ds 0pbjZOMzJt8cCxwplspSbpuZ+SblYyerr7WVLMJkpXwWKEIUUim6WouFdqWLWt47 MHNXqytH1GAv8Np75VpuS9+W9BQfKMonKWXTvzZfCyjHer0eHMvz+fi3BYgIt6hI V6aNmGhbjdtZ9X0lesrUsYJUbShtTTGtkqHI7d79Mu9G7Z4pKefYzF+o90Jw3xVH Ye/nhFWibIITN3E5HEBYa+h+qP/66YQvb1+20W8qI+SiUJs4D1rSQ0gYO+SqIeLE 35Wdv0yps5pT -----END CERTIFICATE-----Generated at Wed May 13 20:17:17 2026 by rpki-client