$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A9680474F2987C920E3A28ABCDE5D9484E2C8277.cer File: A9680474F2987C920E3A28ABCDE5D9484E2C8277.cer (raw, json) Hash identifier: 4yc4c/8UZi2u8+pHomMa8nD2yrQ6OvN7PLI24s5iLBM= Subject key identifier: A9:68:04:74:F2:98:7C:92:0E:3A:28:AB:CD:E5:D9:48:4E:2C:82:77 Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Certificate serial: 2DFD03D3D8BE9EB77743F855349AFD78FDCA3121 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1098453297636900867/0/A9680474F2987C920E3A28ABCDE5D9484E2C8277.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1098453297636900867/0/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Mon 20 Apr 2026 03:40:54 +0000 Certificate not after: Mon 19 Apr 2027 03:45:54 +0000 Subordinate resources: AS: 139182 AS: 139184 -- 139186 IP: 163.128.254.0/23 IP: 2402:5920::/32 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 11:49:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:fd:03:d3:d8:be:9e:b7:77:43:f8:55:34:9a:fd:78:fd:ca:31:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Validity Not Before: Apr 20 03:40:54 2026 GMT Not After : Apr 19 03:45:54 2027 GMT Subject: CN=A9680474F2987C920E3A28ABCDE5D9484E2C8277 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:6c:b4:ba:a7:5f:b5:a3:ad:fa:bb:9e:0a:3a: 12:aa:10:91:cc:c5:3b:20:34:68:32:a5:b4:7f:29: 90:c2:ff:8f:6c:fd:36:c9:b0:5e:76:ea:d9:49:e3: 8b:18:f6:5b:5a:75:27:20:ab:8f:16:8c:4d:19:a9: 3e:b4:fe:83:80:4a:bc:fa:99:a2:e5:be:6b:8c:c4: 64:bd:01:c4:6c:b1:ce:43:fd:85:c1:54:cf:c6:a8: 03:4e:79:c4:57:17:22:a9:e1:8e:61:53:5c:3c:6e: c0:9e:08:33:5a:d3:c7:5d:62:71:5d:a3:c0:35:db: 68:d7:b9:4f:c9:18:55:cb:c4:1a:c5:03:91:76:85: 32:23:02:98:29:5e:9c:88:a6:fb:e1:96:d2:ce:99: 09:4d:54:17:6d:74:6d:e7:91:36:ba:77:70:86:43: 1f:fc:87:a4:dc:dc:b7:91:a4:b8:f6:d1:b9:15:82: c3:5c:6c:ed:9b:a0:c6:0c:7a:ed:19:93:35:4c:23: 33:a2:6b:b2:a2:79:8d:b0:75:9d:1c:62:a5:5a:2e: a2:af:d3:44:6e:1a:db:2c:5f:86:ca:32:d7:67:6e: 12:eb:f3:20:8e:23:f6:73:ab:e5:b0:fa:d9:46:d6: 8d:e8:53:fb:f6:9d:1e:9b:5e:4a:04:02:27:4b:43: dd:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: A9:68:04:74:F2:98:7C:92:0E:3A:28:AB:CD:E5:D9:48:4E:2C:82:77 X509v3 Authority Key Identifier: keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1098453297636900867/0/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1098453297636900867/0/A9680474F2987C920E3A28ABCDE5D9484E2C8277.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 163.128.254.0/23 IPv6: 2402:5920::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 139182 139184-139186 Signature Algorithm: sha256WithRSAEncryption 05:e8:f8:6d:f9:cc:71:82:e6:dc:ac:25:80:18:c2:35:ad:2a: 0f:94:54:f4:62:c8:dc:5b:cb:28:4f:74:b5:19:7d:3b:67:82: 69:97:1e:3e:78:16:87:8c:b5:5d:c8:66:76:0a:36:82:d9:32: f5:de:2e:fc:84:6f:fa:d7:1e:99:bd:18:c4:77:c6:c2:b0:89: b2:a7:09:70:5e:42:e7:ab:21:ad:6a:bf:21:29:3b:9f:10:3d: f0:c2:39:52:c6:61:d0:e4:e2:f2:26:00:eb:e3:c6:3b:ac:16: de:25:39:fd:15:a9:8a:e7:e4:0b:e0:ed:a5:85:3e:91:ab:ec: 10:1c:ae:30:be:d5:da:2b:c5:27:bf:fe:ec:d1:b6:17:e2:f7: 55:a0:40:e1:ec:5d:1b:55:d3:23:63:d5:c7:33:32:1e:42:6c: ba:ae:99:82:a8:6e:a9:d1:d8:e0:a5:cf:e6:28:38:4d:07:d5: 2e:6e:03:db:42:a4:30:06:6e:ab:a4:c9:fe:57:06:65:7c:58: ea:4c:29:db:b5:b8:27:54:31:76:89:56:18:2c:23:a4:de:5c: 19:50:ce:e5:94:d7:2a:97:4a:5a:23:37:58:20:13:e9:98:bf: 84:b9:32:1b:80:07:8f:00:a5:bc:ed:23:92:f8:a9:42:46:58: 0e:78:a5:7a -----BEGIN CERTIFICATE----- MIIF3jCCBMagAwIBAgIULf0D09i+nrd3Q/hVNJr9eP3KMSEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDQyMDAzNDA1NFoX DTI3MDQxOTAzNDU1NFowMzExMC8GA1UEAxMoQTk2ODA0NzRGMjk4N0M5MjBFM0Ey OEFCQ0RFNUQ5NDg0RTJDODI3NzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAO9stLqnX7Wjrfq7ngo6EqoQkczFOyA0aDKltH8pkML/j2z9NsmwXnbq2Unj ixj2W1p1JyCrjxaMTRmpPrT+g4BKvPqZouW+a4zEZL0BxGyxzkP9hcFUz8aoA055 xFcXIqnhjmFTXDxuwJ4IM1rTx11icV2jwDXbaNe5T8kYVcvEGsUDkXaFMiMCmCle nIim++GW0s6ZCU1UF210beeRNrp3cIZDH/yHpNzct5GkuPbRuRWCw1xs7Zugxgx6 7RmTNUwjM6JrsqJ5jbB1nRxipVouoq/TRG4a2yxfhsoy12duEuvzII4j9nOr5bD6 2UbWjehT+/adHpteSgQCJ0tD3QkCAwEAAaOCAtEwggLNMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFKloBHTymHySDjooq83l2UhOLIJ3MB8GA1UdIwQYMBaAFKVu hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTA5ODQ1MzI5NzYzNjkwMDg2Ny8wLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDk4NDUzMjk3NjM2OTAwODY3 LzAvQTk2ODA0NzRGMjk4N0M5MjBFM0EyOEFCQ0RFNUQ5NDg0RTJDODI3Ny5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUH AQcBAf8EHzAdMAwEAgABMAYDBAGjgP4wDQQCAAIwBwMFACQCWSAwJgYIKwYBBQUH AQgBAf8EFzAVoBMwEQIDAh+uMAoCAwIfsAIDAh+yMA0GCSqGSIb3DQEBCwUAA4IB AQAF6Pht+cxxgubcrCWAGMI1rSoPlFT0YsjcW8soT3S1GX07Z4Jplx4+eBaHjLVd yGZ2CjaC2TL13i78hG/61x6ZvRjEd8bCsImypwlwXkLnqyGtar8hKTufED3wwjlS xmHQ5OLyJgDr48Y7rBbeJTn9FamK5+QL4O2lhT6Rq+wQHK4wvtXaK8Unv/7s0bYX 4vdVoEDh7F0bVdMjY9XHMzIeQmy6rpmCqG6p0djgpc/mKDhNB9UubgPbQqQwBm6r pMn+VwZlfFjqTCnbtbgnVDF2iVYYLCOk3lwZUM7llNcql0paIzdYIBPpmL+EuTIb gAePAKW87SOS+KlCRlgOeKV6 -----END CERTIFICATE-----Generated at Wed May 13 20:17:09 2026 by rpki-client