$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C82C40F45E62C70EAF5B663FC69919FEE497C232.cer File: C82C40F45E62C70EAF5B663FC69919FEE497C232.cer (raw, json) Hash identifier: cYI7pjmOHBSbESq4RchqmY2p2/waA2RNxK75Uc4Pjb8= Subject key identifier: C8:2C:40:F4:5E:62:C7:0E:AF:5B:66:3F:C6:99:19:FE:E4:97:C2:32 Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Certificate serial: 06D0FB39F4916E955BE20EEA61A9D8C3F81A5F41 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1106476310596681747/0/C82C40F45E62C70EAF5B663FC69919FEE497C232.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1106476310596681747/0/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Tue 12 May 2026 06:56:51 +0000 Certificate not after: Tue 11 May 2027 07:01:51 +0000 Subordinate resources: IP: 103.199.196.0/22 IP: 202.168.80.0/22 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 11:49:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:d0:fb:39:f4:91:6e:95:5b:e2:0e:ea:61:a9:d8:c3:f8:1a:5f:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Validity Not Before: May 12 06:56:51 2026 GMT Not After : May 11 07:01:51 2027 GMT Subject: CN=C82C40F45E62C70EAF5B663FC69919FEE497C232 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:c7:7f:c2:53:e6:9b:d5:1d:68:3b:8c:2b:fa: 53:cc:3b:77:b9:bb:73:5a:64:ad:4b:9a:c2:fc:8c: 10:88:de:82:6e:c8:04:1d:c2:92:4a:9e:d6:1c:ad: e7:cd:a2:3b:44:c4:0b:07:bc:90:7c:86:5d:b2:d2: bb:63:2f:47:2c:de:99:bd:c2:b3:6f:3c:ad:b9:d5: 0d:8b:51:23:13:25:a1:d6:6b:66:9e:9e:27:07:14: 27:48:c6:1e:b1:3c:80:af:6f:6f:34:93:78:42:de: 2a:17:76:3a:42:08:3d:a5:69:f6:5e:95:fa:63:26: f4:ae:91:dd:12:0c:72:51:e6:43:42:25:60:32:c7: e8:78:42:cb:3d:f6:3a:9a:2e:20:6c:42:d1:8e:dd: 8b:8b:48:b0:75:cf:71:2a:6e:3a:0a:cd:b7:ce:f3: e7:fc:2e:10:4c:2c:02:5b:29:ba:24:b4:fa:19:eb: e2:a1:c6:7e:60:f3:ae:27:3f:f6:7a:e8:0a:09:20: 23:c2:25:54:78:61:43:68:a4:61:a9:e5:50:83:16: dc:fd:7a:90:cb:06:c6:ae:5a:33:b6:c0:e7:1a:59: fe:9e:c8:6f:0f:5e:13:90:4d:4a:a3:e4:a5:99:4d: 2d:0f:ce:96:c6:23:db:c9:81:42:04:1d:67:fa:39: df:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: C8:2C:40:F4:5E:62:C7:0E:AF:5B:66:3F:C6:99:19:FE:E4:97:C2:32 X509v3 Authority Key Identifier: keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1106476310596681747/0/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1106476310596681747/0/C82C40F45E62C70EAF5B663FC69919FEE497C232.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.199.196.0/22 202.168.80.0/22 Signature Algorithm: sha256WithRSAEncryption 4f:e3:da:2c:c6:2a:ce:84:58:65:9e:22:c7:94:cd:56:82:ee: 85:82:06:b6:f5:1b:7c:7c:ad:f9:65:16:eb:e8:76:28:2c:13: ae:94:53:ea:40:e3:df:a3:a0:39:e3:39:38:6e:a6:44:7c:13: 2a:a5:27:80:93:bc:8f:8e:c9:3e:a6:a3:3b:3b:fd:79:41:7f: 31:9f:d6:c0:d6:6a:49:ec:57:a8:82:6f:de:77:69:b0:e5:21: 29:1d:8b:94:14:cd:98:9c:83:15:ab:98:de:d7:a2:36:a5:a3: e1:aa:33:1b:79:d0:9b:fe:ac:73:fd:8c:2d:95:6e:6b:68:ea: fe:75:38:0a:a7:ee:1e:4b:c4:fc:f7:0c:dd:e0:bb:2d:6f:84: e9:10:32:10:53:53:6d:08:dd:93:2e:91:f5:74:f1:a0:e1:f2: e3:3a:5e:87:49:9a:35:a0:fa:f4:58:68:4a:64:5a:74:34:27: 21:04:83:57:f2:aa:ce:b3:4b:e4:14:b9:f2:37:8c:83:33:8b: c9:91:44:3e:22:b8:70:2d:91:cf:ab:20:c1:06:50:90:72:04: c1:94:71:72:0d:46:7d:4f:34:d2:ce:9d:e3:23:cf:2e:13:f7: 1d:2c:11:d9:83:2f:0b:49:a7:1e:cc:ae:98:85:64:92:aa:a7: 63:d0:90:37 -----BEGIN CERTIFICATE----- MIIFrTCCBJWgAwIBAgIUBtD7OfSRbpVb4g7qYanYw/gaX0EwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDUxMjA2NTY1MVoX DTI3MDUxMTA3MDE1MVowMzExMC8GA1UEAxMoQzgyQzQwRjQ1RTYyQzcwRUFGNUI2 NjNGQzY5OTE5RkVFNDk3QzIzMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJXHf8JT5pvVHWg7jCv6U8w7d7m7c1pkrUuawvyMEIjegm7IBB3Ckkqe1hyt 582iO0TECwe8kHyGXbLSu2MvRyzemb3Cs288rbnVDYtRIxMlodZrZp6eJwcUJ0jG HrE8gK9vbzSTeELeKhd2OkIIPaVp9l6V+mMm9K6R3RIMclHmQ0IlYDLH6HhCyz32 OpouIGxC0Y7di4tIsHXPcSpuOgrNt87z5/wuEEwsAlspuiS0+hnr4qHGfmDzric/ 9nroCgkgI8IlVHhhQ2ikYanlUIMW3P16kMsGxq5aM7bA5xpZ/p7Ibw9eE5BNSqPk pZlNLQ/OlsYj28mBQgQdZ/o532ECAwEAAaOCAqAwggKcMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFMgsQPReYscOr1tmP8aZGf7kl8IyMB8GA1UdIwQYMBaAFKVu hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTEwNjQ3NjMxMDU5NjY4MTc0Ny8wLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMTA2NDc2MzEwNTk2NjgxNzQ3 LzAvQzgyQzQwRjQ1RTYyQzcwRUFGNUI2NjNGQzY5OTE5RkVFNDk3QzIzMi5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwJQYIKwYBBQUH AQcBAf8EFjAUMBIEAgABMAwDBAJnx8QDBALKqFAwDQYJKoZIhvcNAQELBQADggEB AE/j2izGKs6EWGWeIseUzVaC7oWCBrb1G3x8rfllFuvodigsE66UU+pA49+joDnj OThupkR8EyqlJ4CTvI+OyT6mozs7/XlBfzGf1sDWaknsV6iCb953abDlISkdi5QU zZicgxWrmN7Xojalo+GqMxt50Jv+rHP9jC2Vbmto6v51OAqn7h5LxPz3DN3guy1v hOkQMhBTU20I3ZMukfV08aDh8uM6XodJmjWg+vRYaEpkWnQ0JyEEg1fyqs6zS+QU ufI3jIMzi8mRRD4iuHAtkc+rIMEGUJByBMGUcXINRn1PNNLOneMjzy4T9x0sEdmD LwtJpx7MrpiFZJKqp2PQkDc= -----END CERTIFICATE-----Generated at Wed May 13 20:17:17 2026 by rpki-client