$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9BA4442F6B0705465AE54FB5CA81B38CADA578F5.cer File: 9BA4442F6B0705465AE54FB5CA81B38CADA578F5.cer (raw, json) Hash identifier: j7f/z8l4NyOvbYYn8cFXW2M8s3vkYPTefSu66QoCc5o= Subject key identifier: 9B:A4:44:2F:6B:07:05:46:5A:E5:4F:B5:CA:81:B3:8C:AD:A5:78:F5 Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Certificate serial: 76FD92894BD74D751E98AA772A67E7317BBD1819 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1104639429030445063/0/9BA4442F6B0705465AE54FB5CA81B38CADA578F5.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1104639429030445063/0/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Thu 07 May 2026 05:17:44 +0000 Certificate not after: Thu 06 May 2027 05:22:44 +0000 Subordinate resources: AS: 139099 IP: 103.157.174.0/23 IP: 120.131.16.0 -- 120.131.63.255 IP: 2409:6000::/20 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 11:49:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:fd:92:89:4b:d7:4d:75:1e:98:aa:77:2a:67:e7:31:7b:bd:18:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Validity Not Before: May 7 05:17:44 2026 GMT Not After : May 6 05:22:44 2027 GMT Subject: CN=9BA4442F6B0705465AE54FB5CA81B38CADA578F5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:31:4c:dd:99:ce:28:3d:0b:18:39:1e:f7:d3: 79:bf:f8:d4:c2:7f:37:f2:f9:f7:4e:b7:9a:c1:9d: b9:df:fb:20:b7:2d:fe:f0:1e:96:65:f0:d2:d5:ac: 6f:47:56:19:eb:2c:64:c0:00:7c:fd:ef:c6:03:f2: 34:a6:8b:18:61:d4:a3:ef:fb:b2:17:37:d0:5a:c9: f6:ef:66:35:5e:0b:73:72:a2:66:a9:cf:c5:97:5a: 34:4f:5a:a3:65:a0:81:e1:6c:c2:54:08:76:75:a1: b7:55:74:fd:e0:b4:ee:0c:b8:cb:42:c9:01:e2:aa: 69:7c:ca:9e:69:26:4c:10:0a:61:7b:3a:16:09:b0: d4:a9:43:e8:6f:ad:63:38:2e:40:ba:53:4d:70:d3: b0:67:53:ff:0f:8d:a0:d6:b6:07:39:ad:5f:3a:e3: a3:7a:fb:89:67:20:45:5f:9d:42:ed:0a:4b:d6:1f: 5e:29:9b:a2:4a:7a:e7:d0:89:70:c4:34:35:89:3a: fc:18:02:ce:a0:c1:bf:f4:12:48:c9:e9:e9:99:04: 78:ea:64:83:3e:ea:98:1e:f5:b0:f6:f1:65:2d:92: 28:02:96:44:6f:3e:0d:54:a6:b4:57:0d:67:eb:43: 89:b5:c7:f0:bc:76:8e:14:d6:e9:3f:7c:b4:c1:2e: 85:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 9B:A4:44:2F:6B:07:05:46:5A:E5:4F:B5:CA:81:B3:8C:AD:A5:78:F5 X509v3 Authority Key Identifier: keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1104639429030445063/0/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1104639429030445063/0/9BA4442F6B0705465AE54FB5CA81B38CADA578F5.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.157.174.0/23 120.131.16.0-120.131.63.255 IPv6: 2409:6000::/20 sbgp-autonomousSysNum: critical Autonomous System Numbers: 139099 Signature Algorithm: sha256WithRSAEncryption 18:ba:d9:98:d8:90:b3:23:cc:a6:60:99:2b:49:06:96:30:66: d5:63:de:14:6d:a7:fa:0b:ec:d8:9a:dc:c0:c2:1c:c5:f8:ea: 6e:fb:4e:95:27:8a:75:71:49:d0:b2:65:f2:bb:66:45:29:c3: 32:77:1c:65:23:54:8f:49:ec:37:e7:ee:63:2d:61:2c:4d:a7: 03:99:17:16:c6:bc:27:01:29:3f:48:c0:87:a2:56:7e:f0:76: b8:54:bf:22:3d:d2:83:da:4d:65:8a:86:22:df:2c:72:20:0a: 61:a2:13:3f:35:cf:2f:d8:70:8d:c4:c1:b1:3a:85:e8:2a:89: a8:3e:b4:10:26:d7:ec:14:ad:c6:b2:6b:fa:33:c9:de:33:31: b3:b6:64:9e:aa:f1:0b:e0:ea:9b:55:29:6c:10:12:49:98:0a: ee:80:af:6d:5f:52:a6:b2:09:5f:56:9b:f4:6c:53:77:ec:2c: 94:24:57:cc:cc:7f:c0:f2:68:a7:81:9a:93:d1:d8:f7:48:cc: fa:99:4d:4c:7b:e8:e8:b6:c8:09:f0:56:65:27:39:1f:20:23: 56:77:6b:56:a1:fa:dd:f0:d8:1f:b3:77:bc:45:95:d9:c5:93: 57:35:f3:52:f6:66:9f:b5:2f:da:50:ea:66:b1:6a:ce:5a:5b: a3:d8:b5:dc -----BEGIN CERTIFICATE----- MIIF3zCCBMegAwIBAgIUdv2SiUvXTXUemKp3KmfnMXu9GBkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDUwNzA1MTc0NFoX DTI3MDUwNjA1MjI0NFowMzExMC8GA1UEAxMoOUJBNDQ0MkY2QjA3MDU0NjVBRTU0 RkI1Q0E4MUIzOENBREE1NzhGNTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMkxTN2Zzig9Cxg5HvfTeb/41MJ/N/L59063msGdud/7ILct/vAelmXw0tWs b0dWGessZMAAfP3vxgPyNKaLGGHUo+/7shc30FrJ9u9mNV4Lc3KiZqnPxZdaNE9a o2WggeFswlQIdnWht1V0/eC07gy4y0LJAeKqaXzKnmkmTBAKYXs6Fgmw1KlD6G+t YzguQLpTTXDTsGdT/w+NoNa2BzmtXzrjo3r7iWcgRV+dQu0KS9YfXimbokp659CJ cMQ0NYk6/BgCzqDBv/QSSMnp6ZkEeOpkgz7qmB71sPbxZS2SKAKWRG8+DVSmtFcN Z+tDibXH8Lx2jhTW6T98tMEuhcECAwEAAaOCAtIwggLOMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFJukRC9rBwVGWuVPtcqBs4ytpXj1MB8GA1UdIwQYMBaAFKVu hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTEwNDYzOTQyOTAzMDQ0NTA2My8wLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMTA0NjM5NDI5MDMwNDQ1MDYz LzAvOUJBNDQ0MkY2QjA3MDU0NjVBRTU0RkI1Q0E4MUIzOENBREE1NzhGNS5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwOwYIKwYBBQUH AQcBAf8ELDAqMBoEAgABMBQDBAFnna4wDAMEBHiDEAMEBniDADAMBAIAAjAGAwQE JAlgMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwIfWzANBgkqhkiG9w0BAQsFAAOC AQEAGLrZmNiQsyPMpmCZK0kGljBm1WPeFG2n+gvs2JrcwMIcxfjqbvtOlSeKdXFJ 0LJl8rtmRSnDMnccZSNUj0nsN+fuYy1hLE2nA5kXFsa8JwEpP0jAh6JWfvB2uFS/ Ij3Sg9pNZYqGIt8sciAKYaITPzXPL9hwjcTBsTqF6CqJqD60ECbX7BStxrJr+jPJ 3jMxs7ZknqrxC+Dqm1UpbBASSZgK7oCvbV9SprIJX1ab9GxTd+wslCRXzMx/wPJo p4Gak9HY90jM+plNTHvo6LbICfBWZSc5HyAjVndrVqH63fDYH7N3vEWV2cWTVzXz UvZmn7Uv2lDqZrFqzlpbo9i13A== -----END CERTIFICATE-----Generated at Wed May 13 20:17:15 2026 by rpki-client