$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D8E9745B505CCD7D22105CB89D5574E599B45E13.cer File: D8E9745B505CCD7D22105CB89D5574E599B45E13.cer (raw, json) Hash identifier: uwwO1NNtuwtXTb+zs0i0b1MDusXtJuXEFWn+S4l/zFE= Subject key identifier: D8:E9:74:5B:50:5C:CD:7D:22:10:5C:B8:9D:55:74:E5:99:B4:5E:13 Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Certificate serial: 5D816A7647C6C18DD7355A6505EF51DAD5BB5FC8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1101059168732708865/0/D8E9745B505CCD7D22105CB89D5574E599B45E13.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1101059168732708865/0/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Mon 27 Apr 2026 08:11:04 +0000 Certificate not after: Mon 26 Apr 2027 08:16:04 +0000 Subordinate resources: AS: 63550 IP: 59.153.92.0/22 IP: 103.198.124.0/22 IP: 2403:1980::/32 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 11:49:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:81:6a:76:47:c6:c1:8d:d7:35:5a:65:05:ef:51:da:d5:bb:5f:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Validity Not Before: Apr 27 08:11:04 2026 GMT Not After : Apr 26 08:16:04 2027 GMT Subject: CN=D8E9745B505CCD7D22105CB89D5574E599B45E13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:21:46:f2:5b:85:7b:cc:bc:b8:86:92:ea:5b: 55:6a:fe:cc:0b:00:df:7a:89:8a:97:b0:52:81:d2: c1:da:a9:2d:5c:a4:b1:21:29:b3:44:f9:c0:c8:30: 76:43:74:ac:c1:aa:a1:8f:de:70:57:88:c5:92:71: 07:96:f8:c0:c1:d6:06:24:61:6f:11:00:fb:b7:e0: 8d:9a:ec:59:e7:2f:f5:8b:d3:b3:1f:91:7b:94:24: 01:bb:35:22:e9:03:46:3e:f6:fb:d2:74:05:ba:b0: 33:ba:9d:39:89:5e:0e:a8:24:79:08:84:77:e7:13: 9d:45:10:f0:7c:10:73:d6:af:96:d2:81:ac:cd:24: 43:08:50:dd:e4:f2:92:86:80:9c:5d:65:15:00:3f: d5:3e:1d:0f:5d:80:02:ad:a9:81:24:d1:2f:3a:8a: 39:6f:80:32:a8:2b:e0:b5:3a:2c:30:23:fe:33:2b: 3a:c4:c4:70:a9:90:c6:14:ac:18:ee:c4:9d:61:a3: 46:4e:69:3d:43:53:5e:bf:57:d4:6f:ae:13:8d:7d: 8d:63:b3:8b:3c:fc:7d:a2:11:49:f9:80:11:c9:f7: d2:bd:d7:79:c8:7e:b2:d8:b3:6e:32:7e:ab:c0:91: 45:b7:95:8c:53:c8:f3:29:ba:d6:f6:1f:ae:09:4c: 43:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: D8:E9:74:5B:50:5C:CD:7D:22:10:5C:B8:9D:55:74:E5:99:B4:5E:13 X509v3 Authority Key Identifier: keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1101059168732708865/0/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1101059168732708865/0/D8E9745B505CCD7D22105CB89D5574E599B45E13.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 59.153.92.0/22 103.198.124.0/22 IPv6: 2403:1980::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 63550 Signature Algorithm: sha256WithRSAEncryption 3e:4f:a5:bf:c4:f8:21:7a:34:10:c2:77:47:74:26:74:58:30: a0:1b:fd:d1:0c:ba:0c:ce:e0:40:e4:56:68:aa:3a:f4:2c:5e: 07:d6:b9:67:4b:d0:90:cb:3d:9d:f4:24:d2:8b:89:a2:7d:c6: 4b:6c:50:81:64:ff:82:59:c5:52:8e:5f:cf:a7:d9:f8:8e:00: d5:bd:e5:0b:ff:ab:ef:8a:a7:a4:ab:cc:c3:68:16:e7:c3:2c: 0c:cf:05:93:14:1d:2f:74:2a:3a:9b:20:de:0a:2e:f5:01:ed: 21:2c:44:9c:de:08:77:25:01:5a:a0:41:48:b4:ee:62:92:45: 1e:b1:0e:04:41:b2:0d:df:41:fb:72:29:96:08:32:b9:71:18: 78:c0:f1:44:97:b7:7d:7d:51:8e:2b:81:77:6b:aa:f0:2c:49: d4:10:44:a4:1e:74:ea:c5:11:f3:7a:0e:3d:29:88:b4:45:13: ff:55:5e:55:77:f9:d8:02:5a:11:62:87:8c:eb:26:9d:24:be: 93:83:f9:42:55:45:ad:bf:1b:4f:6d:36:96:f7:d2:5a:ae:a2: b7:b0:7d:af:23:ea:0a:2a:ac:f6:5f:13:31:dc:01:a7:b5:3f: fd:61:97:0d:d7:5a:42:61:f9:f7:c1:97:08:13:62:63:ea:48: b8:e6:36:da -----BEGIN CERTIFICATE----- MIIF2DCCBMCgAwIBAgIUXYFqdkfGwY3XNVplBe9R2tW7X8gwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDQyNzA4MTEwNFoX DTI3MDQyNjA4MTYwNFowMzExMC8GA1UEAxMoRDhFOTc0NUI1MDVDQ0Q3RDIyMTA1 Q0I4OUQ1NTc0RTU5OUI0NUUxMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAL0hRvJbhXvMvLiGkupbVWr+zAsA33qJipewUoHSwdqpLVyksSEps0T5wMgw dkN0rMGqoY/ecFeIxZJxB5b4wMHWBiRhbxEA+7fgjZrsWecv9YvTsx+Re5QkAbs1 IukDRj72+9J0BbqwM7qdOYleDqgkeQiEd+cTnUUQ8HwQc9avltKBrM0kQwhQ3eTy koaAnF1lFQA/1T4dD12AAq2pgSTRLzqKOW+AMqgr4LU6LDAj/jMrOsTEcKmQxhSs GO7EnWGjRk5pPUNTXr9X1G+uE419jWOzizz8faIRSfmAEcn30r3Xech+stizbjJ+ q8CRRbeVjFPI8ym61vYfrglMQw0CAwEAAaOCAsswggLHMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFNjpdFtQXM19IhBcuJ1VdOWZtF4TMB8GA1UdIwQYMBaAFKVu hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTEwMTA1OTE2ODczMjcwODg2NS8wLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMTAxMDU5MTY4NzMyNzA4ODY1 LzAvRDhFOTc0NUI1MDVDQ0Q3RDIyMTA1Q0I4OUQ1NTc0RTU5OUI0NUUxMy5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwNAYIKwYBBQUH AQcBAf8EJTAjMBIEAgABMAwDBAI7mVwDBAJnxnwwDQQCAAIwBwMFACQDGYAwGgYI KwYBBQUHAQgBAf8ECzAJoAcwBQIDAPg+MA0GCSqGSIb3DQEBCwUAA4IBAQA+T6W/ xPghejQQwndHdCZ0WDCgG/3RDLoMzuBA5FZoqjr0LF4H1rlnS9CQyz2d9CTSi4mi fcZLbFCBZP+CWcVSjl/Pp9n4jgDVveUL/6vviqekq8zDaBbnwywMzwWTFB0vdCo6 myDeCi71Ae0hLESc3gh3JQFaoEFItO5ikkUesQ4EQbIN30H7cimWCDK5cRh4wPFE l7d9fVGOK4F3a6rwLEnUEESkHnTqxRHzeg49KYi0RRP/VV5Vd/nYAloRYoeM6yad JL6Tg/lCVUWtvxtPbTaW99JarqK3sH2vI+oKKqz2XxMx3AGntT/9YZcN11pCYfn3 wZcIE2Jj6ki45jba -----END CERTIFICATE-----Generated at Wed May 13 16:19:49 2026 by rpki-client