$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A9EF6BDE84A8B115C80721B280C9470B3BC0D886.cer File: A9EF6BDE84A8B115C80721B280C9470B3BC0D886.cer (raw, json) Hash identifier: AyiTNrewictceNGfqKKxFDUE+2xUHdgKflijy/eFeCc= Subject key identifier: A9:EF:6B:DE:84:A8:B1:15:C8:07:21:B2:80:C9:47:0B:3B:C0:D8:86 Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Certificate serial: 4E4CBA184C2D75C7CD777646CAA3309EFE984234 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1105044324229316617/0/A9EF6BDE84A8B115C80721B280C9470B3BC0D886.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1105044324229316617/0/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Fri 08 May 2026 08:06:39 +0000 Certificate not after: Fri 07 May 2027 08:11:39 +0000 Subordinate resources: AS: 59019 AS: 146791 IP: 103.26.64.0/22 IP: 110.43.0.0/16 IP: 120.92.0.0 -- 120.92.239.255 IP: 120.131.0.0/20 IP: 2401:1d40::/32 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 11:49:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:4c:ba:18:4c:2d:75:c7:cd:77:76:46:ca:a3:30:9e:fe:98:42:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Validity Not Before: May 8 08:06:39 2026 GMT Not After : May 7 08:11:39 2027 GMT Subject: CN=A9EF6BDE84A8B115C80721B280C9470B3BC0D886 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:03:3d:33:a1:36:9c:2c:b1:38:49:95:d5:73: 4d:51:7d:ba:95:97:01:62:a4:81:33:ac:a0:98:5c: 37:b8:a6:96:3c:d1:69:52:a8:b5:23:12:e7:46:12: d9:fc:c2:89:f6:21:5e:bf:41:a0:e5:ca:ec:7b:fc: ca:fd:66:b1:61:50:a7:ec:a2:ea:eb:a9:15:bf:30: fa:93:b2:a7:3d:7a:08:c0:e4:be:46:2e:66:68:75: 19:e6:8d:ba:ef:c8:bb:83:ef:1f:d7:a6:35:27:57: 29:d8:27:4b:0a:c5:ed:cb:be:29:60:d0:1c:45:63: 39:4c:cd:d5:19:fd:50:7f:b7:3d:43:b5:9d:5e:94: 61:7e:c2:41:92:ee:4e:99:9a:d0:7b:51:a0:ce:2b: 08:43:8c:26:db:c8:0b:28:8f:b0:45:b4:5e:5e:c4: a1:19:fa:d7:59:8f:f7:49:c2:02:1c:c2:7e:36:b0: 05:9d:27:b3:01:96:99:84:ee:e3:e8:5a:c6:da:f0: a0:e6:ce:39:3c:7e:d1:8e:21:e5:5e:d3:4f:9b:cb: 35:21:c3:32:58:84:5c:32:fc:9d:a1:a7:9f:5b:77: 79:2e:08:f9:90:b3:0c:84:ca:e8:e4:69:93:76:f0: 06:9f:aa:68:4f:fa:6b:c0:d1:5d:3c:83:37:4e:55: 92:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: A9:EF:6B:DE:84:A8:B1:15:C8:07:21:B2:80:C9:47:0B:3B:C0:D8:86 X509v3 Authority Key Identifier: keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1105044324229316617/0/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1105044324229316617/0/A9EF6BDE84A8B115C80721B280C9470B3BC0D886.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.26.64.0/22 110.43.0.0/16 120.92.0.0-120.92.239.255 120.131.0.0/20 IPv6: 2401:1d40::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 59019 146791 Signature Algorithm: sha256WithRSAEncryption 40:e3:b0:88:74:71:97:26:0e:12:61:76:22:01:87:6d:32:2d: c1:c4:e7:7f:90:53:34:48:e4:66:9e:1f:4c:21:25:1f:62:f5: b4:3f:87:39:ee:1d:13:12:a1:80:f6:77:d6:02:86:93:84:eb: 67:e6:1c:77:9d:1d:de:89:b0:2e:9c:49:e8:19:84:77:93:1d: eb:1e:a1:35:a3:90:1b:ab:65:c9:a9:7f:3a:fb:74:55:34:89: 4e:f7:78:c6:7a:b3:71:30:ca:de:7a:6f:d0:10:98:f6:d7:ed: 17:92:a8:cb:56:59:50:70:06:44:80:7d:ca:d6:5e:57:b4:de: f6:f6:bc:eb:aa:78:3c:ce:8e:02:79:1b:15:53:fb:31:6e:68: 10:c5:1c:cd:95:16:81:5d:41:92:ad:9a:1e:08:00:7d:38:1d: 76:e0:48:f2:03:de:f7:c7:68:f0:e5:1b:9b:d7:8c:4f:d5:9d: 52:e6:33:10:33:61:1e:6f:18:4e:f2:6f:a0:30:85:b2:1c:72: de:0e:25:18:ae:22:5f:d2:14:b7:50:26:7c:b2:67:af:1f:bf: 1a:5c:c9:6b:30:a6:5a:f9:3c:be:43:ad:4f:ea:e1:9b:4c:d5: ad:d5:49:25:3f:64:f0:71:e6:71:f5:a2:0a:6c:60:f9:8d:b2: ed:5b:dd:f0 -----BEGIN CERTIFICATE----- MIIF7zCCBNegAwIBAgIUTky6GEwtdcfNd3ZGyqMwnv6YQjQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDUwODA4MDYzOVoX DTI3MDUwNzA4MTEzOVowMzExMC8GA1UEAxMoQTlFRjZCREU4NEE4QjExNUM4MDcy MUIyODBDOTQ3MEIzQkMwRDg4NjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMEDPTOhNpwssThJldVzTVF9upWXAWKkgTOsoJhcN7imljzRaVKotSMS50YS 2fzCifYhXr9BoOXK7Hv8yv1msWFQp+yi6uupFb8w+pOypz16CMDkvkYuZmh1GeaN uu/Iu4PvH9emNSdXKdgnSwrF7cu+KWDQHEVjOUzN1Rn9UH+3PUO1nV6UYX7CQZLu Tpma0HtRoM4rCEOMJtvICyiPsEW0Xl7EoRn611mP90nCAhzCfjawBZ0nswGWmYTu 4+haxtrwoObOOTx+0Y4h5V7TT5vLNSHDMliEXDL8naGnn1t3eS4I+ZCzDITK6ORp k3bwBp+qaE/6a8DRXTyDN05VkusCAwEAAaOCAuIwggLeMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFKnva96EqLEVyAchsoDJRws7wNiGMB8GA1UdIwQYMBaAFKVu hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTEwNTA0NDMyNDIyOTMxNjYxNy8wLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMTA1MDQ0MzI0MjI5MzE2NjE3 LzAvQTlFRjZCREU4NEE4QjExNUM4MDcyMUIyODBDOTQ3MEIzQkMwRDg4Ni5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwRgYIKwYBBQUH AQcBAf8ENzA1MCQEAgABMB4DBAJnGkADAwBuKzALAwMCeFwDBAR4XOADBAR4gwAw DQQCAAIwBwMFACQBHUAwHwYIKwYBBQUHAQgBAf8EEDAOoAwwCgIDAOaLAgMCPWcw DQYJKoZIhvcNAQELBQADggEBAEDjsIh0cZcmDhJhdiIBh20yLcHE53+QUzRI5Gae H0whJR9i9bQ/hznuHRMSoYD2d9YChpOE62fmHHedHd6JsC6cSegZhHeTHeseoTWj kBurZcmpfzr7dFU0iU73eMZ6s3Ewyt56b9AQmPbX7ReSqMtWWVBwBkSAfcrWXle0 3vb2vOuqeDzOjgJ5GxVT+zFuaBDFHM2VFoFdQZKtmh4IAH04HXbgSPID3vfHaPDl G5vXjE/VnVLmMxAzYR5vGE7yb6AwhbIcct4OJRiuIl/SFLdQJnyyZ68fvxpcyWsw plr5PL5DrU/q4ZtM1a3VSSU/ZPBx5nH1ogpsYPmNsu1b3fA= -----END CERTIFICATE-----Generated at Wed May 13 18:40:04 2026 by rpki-client