$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EB80672AD42A2796AFDB6C99F7FFB629E6A0A4EE.cer File: EB80672AD42A2796AFDB6C99F7FFB629E6A0A4EE.cer (raw, json) Hash identifier: v3okZnYXhUS/9Aszgh1OztPhTaBNAzbzCGrIfaIDTLw= Subject key identifier: EB:80:67:2A:D4:2A:27:96:AF:DB:6C:99:F7:FF:B6:29:E6:A0:A4:EE Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Certificate serial: 6061C74D4AABD539B26C53EB45EB45D77853F852 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1098526607670247425/0/EB80672AD42A2796AFDB6C99F7FFB629E6A0A4EE.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1098526607670247425/0/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Mon 20 Apr 2026 08:27:34 +0000 Certificate not after: Mon 19 Apr 2027 08:32:34 +0000 Subordinate resources: IP: 103.9.252.0/22 IP: 103.205.4.0/22 IP: 103.213.96.0/22 IP: 103.213.132.0/22 IP: 160.202.212.0/22 IP: 192.140.208.0/21 IP: 203.76.240.0/22 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 11:49:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:61:c7:4d:4a:ab:d5:39:b2:6c:53:eb:45:eb:45:d7:78:53:f8:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Validity Not Before: Apr 20 08:27:34 2026 GMT Not After : Apr 19 08:32:34 2027 GMT Subject: CN=EB80672AD42A2796AFDB6C99F7FFB629E6A0A4EE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:c2:9a:51:68:bc:94:d7:c7:0c:67:3f:2e:2d: 85:66:54:2a:f7:84:35:07:01:71:86:53:a3:f0:4d: 5b:1f:0b:b3:9d:2d:d3:90:c9:3b:59:62:88:55:36: 7b:fc:e7:ae:ee:a5:12:eb:62:f8:41:e9:91:38:4e: 3c:63:c5:ab:7e:8f:34:be:fe:cd:4b:4c:ee:0c:8e: 6b:ba:3a:ec:b1:4d:67:f7:af:de:bb:50:f3:26:cc: 26:67:8e:a9:af:87:a4:41:ca:1b:95:86:4e:71:f9: 37:6a:24:ce:24:25:5e:e3:cb:e2:18:fa:85:98:cd: 7c:f1:6a:14:35:f2:db:d1:0b:98:09:89:50:be:d9: c7:70:53:d8:be:72:71:8b:d9:bc:ee:ba:ce:d4:33: a1:05:29:1e:9e:2e:59:dc:1b:1b:5c:9f:c3:de:a5: 90:4a:88:47:3e:f3:40:b3:01:1b:73:e5:ea:eb:41: 80:5a:61:45:37:6b:42:b6:c9:9c:f7:6a:48:eb:fa: 81:49:0e:52:de:a9:a9:75:99:a6:fa:e1:51:c9:d3: 2c:f9:f2:88:16:7e:e5:a5:38:7f:6e:4a:49:46:e0: 11:26:a9:2a:55:b0:69:f4:49:22:17:41:d9:4d:c5: d1:05:25:62:a1:4a:53:98:7a:3f:8f:e0:c0:7a:b0: 7a:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: EB:80:67:2A:D4:2A:27:96:AF:DB:6C:99:F7:FF:B6:29:E6:A0:A4:EE X509v3 Authority Key Identifier: keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1098526607670247425/0/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1098526607670247425/0/EB80672AD42A2796AFDB6C99F7FFB629E6A0A4EE.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.9.252.0/22 103.205.4.0/22 103.213.96.0/22 103.213.132.0/22 160.202.212.0/22 192.140.208.0/21 203.76.240.0/22 Signature Algorithm: sha256WithRSAEncryption 4a:d8:4f:ec:6f:a4:d4:b9:ef:3e:39:77:39:e9:62:91:36:f6: bf:23:af:c4:f7:2a:d1:74:c1:62:73:93:bd:04:a8:08:4d:b2: f2:2b:a4:f8:4a:ad:e0:d9:6b:f2:d0:bc:2e:cf:0f:26:71:a3: 9b:8e:eb:ff:fc:96:da:7c:b3:9f:fb:66:fe:21:75:21:01:f2: 5d:9e:6b:f1:2b:c6:29:fb:32:c8:6a:95:4f:08:7d:59:ce:19: 93:94:39:ba:31:28:c1:3a:e4:71:e6:7b:71:62:0e:5a:be:a4: 48:a2:dd:14:43:e1:d4:d7:05:90:bf:3b:b4:ea:b4:2a:3d:6a: ee:23:4e:96:f5:f3:fa:3a:ef:3c:5d:d1:04:24:b5:0e:86:5b: 5d:d0:c4:1b:66:dc:98:97:b6:80:4e:b1:57:c2:f2:d7:aa:14: 10:7d:cb:f5:2b:83:53:8f:37:67:c3:dd:a8:ce:71:6e:ad:e5: ca:17:a1:ca:66:be:98:b9:ef:e1:23:c3:0b:86:59:c0:89:58: 57:24:86:69:01:3c:2a:73:3b:e9:7a:b0:b2:ed:4e:78:1e:ef: e4:32:86:61:66:ac:85:59:65:48:16:98:7d:fe:17:4c:84:3f: 72:7d:16:1f:cd:1e:ad:a2:43:3a:27:0d:f6:b3:b8:29:4e:e7: e0:a1:44:bf -----BEGIN CERTIFICATE----- MIIFyzCCBLOgAwIBAgIUYGHHTUqr1TmybFPrRetF13hT+FIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDQyMDA4MjczNFoX DTI3MDQxOTA4MzIzNFowMzExMC8GA1UEAxMoRUI4MDY3MkFENDJBMjc5NkFGREI2 Qzk5RjdGRkI2MjlFNkEwQTRFRTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAM3CmlFovJTXxwxnPy4thWZUKveENQcBcYZTo/BNWx8Ls50t05DJO1liiFU2 e/znru6lEuti+EHpkThOPGPFq36PNL7+zUtM7gyOa7o67LFNZ/ev3rtQ8ybMJmeO qa+HpEHKG5WGTnH5N2okziQlXuPL4hj6hZjNfPFqFDXy29ELmAmJUL7Zx3BT2L5y cYvZvO66ztQzoQUpHp4uWdwbG1yfw96lkEqIRz7zQLMBG3Pl6utBgFphRTdrQrbJ nPdqSOv6gUkOUt6pqXWZpvrhUcnTLPnyiBZ+5aU4f25KSUbgESapKlWwafRJIhdB 2U3F0QUlYqFKU5h6P4/gwHqwehkCAwEAAaOCAr4wggK6MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFOuAZyrUKieWr9tsmff/tinmoKTuMB8GA1UdIwQYMBaAFKVu hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTA5ODUyNjYwNzY3MDI0NzQyNS8wLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDk4NTI2NjA3NjcwMjQ3NDI1 LzAvRUI4MDY3MkFENDJBMjc5NkFGREI2Qzk5RjdGRkI2MjlFNkEwQTRFRS5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwQwYIKwYBBQUH AQcBAf8ENDAyMDAEAgABMCoDBAJnCfwDBAJnzQQDBAJn1WADBAJn1YQDBAKgytQD BAPAjNADBALLTPAwDQYJKoZIhvcNAQELBQADggEBAErYT+xvpNS57z45dznpYpE2 9r8jr8T3KtF0wWJzk70EqAhNsvIrpPhKreDZa/LQvC7PDyZxo5uO6//8ltp8s5/7 Zv4hdSEB8l2ea/Erxin7MshqlU8IfVnOGZOUOboxKME65HHme3FiDlq+pEii3RRD 4dTXBZC/O7TqtCo9au4jTpb18/o67zxd0QQktQ6GW13QxBtm3JiXtoBOsVfC8teq FBB9y/Urg1OPN2fD3ajOcW6t5coXocpmvpi57+EjwwuGWcCJWFckhmkBPCpzO+l6 sLLtTnge7+QyhmFmrIVZZUgWmH3+F0yEP3J9Fh/NHq2iQzonDfazuClO5+ChRL8= -----END CERTIFICATE-----Generated at Wed May 13 20:17:18 2026 by rpki-client