$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/098D421CB46F292F13CE71DF3D685D5E82893289.cer File: 098D421CB46F292F13CE71DF3D685D5E82893289.cer (raw, json) Hash identifier: yK5A3pWmqS8jd2kkRQbAkjQU8nw3c422bThdGljzoyM= Subject key identifier: 09:8D:42:1C:B4:6F:29:2F:13:CE:71:DF:3D:68:5D:5E:82:89:32:89 Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Certificate serial: 5C69770DAEDABAEF30C8A4AD1DF0242E79FCB2BC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1065582741577662466/0/098D421CB46F292F13CE71DF3D685D5E82893289.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1065582741577662466/0/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Fri 29 May 2026 01:00:38 +0000 Certificate not after: Fri 28 May 2027 01:05:38 +0000 Subordinate resources: AS: 63566 IP: 27.112.0.0/18 IP: 103.252.204.0 -- 103.252.211.255 IP: 103.252.232.0/22 IP: 103.252.248.0/22 IP: 118.194.0.0/17 IP: 122.11.0.0/17 IP: 2402:1f80::/32 IP: 2403:4c80::/32 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 15:28:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:69:77:0d:ae:da:ba:ef:30:c8:a4:ad:1d:f0:24:2e:79:fc:b2:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Validity Not Before: May 29 01:00:38 2026 GMT Not After : May 28 01:05:38 2027 GMT Subject: CN=098D421CB46F292F13CE71DF3D685D5E82893289 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:fe:e2:23:ff:e3:06:87:06:25:13:5f:36:d8: 64:55:a0:60:c3:d5:92:44:c2:de:78:15:6e:e1:80: a8:24:99:aa:f4:58:d6:5e:5d:b1:fa:b5:ff:a0:8a: 5e:21:91:ae:2f:33:52:ea:89:82:58:6a:70:62:fb: cb:bd:86:05:4c:b0:ed:e3:a7:be:9f:c5:56:15:95: c9:14:53:c6:b7:48:d9:cf:36:7a:43:88:e4:87:b2: 60:ab:9a:bf:1e:f9:b3:84:c7:58:e7:59:6a:a6:13: a1:3c:f6:8d:5b:73:63:06:81:9d:cd:d0:ce:ad:d1: c2:31:e2:8b:fb:ea:c1:b6:a5:ad:e6:4a:c2:e0:d8: 9a:38:de:86:2d:94:cb:13:63:18:fb:36:7f:0f:69: 1d:d2:55:79:a8:5e:63:25:2f:7a:e1:f0:91:38:6a: 61:c2:2f:41:96:b7:96:b5:d8:29:ca:26:0b:33:37: d9:6c:82:a4:1e:98:00:8f:6d:61:e1:e1:3d:95:98: fe:d5:22:4e:c3:6a:4a:aa:ac:c0:5c:4d:f4:c5:a0: d4:63:41:25:e2:39:20:96:98:df:82:3a:f0:7b:1f: db:49:78:ad:dc:c7:29:be:30:f8:63:89:94:a3:91: 76:24:e0:fc:6a:b0:7a:35:3e:08:52:2e:72:56:40: 27:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 09:8D:42:1C:B4:6F:29:2F:13:CE:71:DF:3D:68:5D:5E:82:89:32:89 X509v3 Authority Key Identifier: keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577662466/0/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577662466/0/098D421CB46F292F13CE71DF3D685D5E82893289.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 27.112.0.0/18 103.252.204.0-103.252.211.255 103.252.232.0/22 103.252.248.0/22 118.194.0.0/17 122.11.0.0/17 IPv6: 2402:1f80::/32 2403:4c80::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 63566 Signature Algorithm: sha256WithRSAEncryption 0d:c7:0d:52:72:9c:30:21:ab:5c:3f:c6:82:99:38:17:85:ad: 27:8d:52:f9:e2:1e:96:74:08:72:79:2a:b1:6d:64:dd:38:86: 35:17:6e:74:df:2d:7f:ba:47:1f:c4:53:bf:9f:de:47:a9:a8: 0f:45:d6:ed:e5:d5:a0:4a:82:f1:d5:36:ee:e4:53:d8:38:20: eb:f4:c9:06:2d:ed:66:6c:b7:e6:eb:b1:84:f1:ea:3a:5e:b6: da:3e:85:fa:a0:61:9f:6a:76:28:e0:7f:46:3d:cc:3d:b6:88: b9:61:37:e0:cd:a9:9b:42:32:bf:f4:cc:16:39:a7:65:8d:f5: 2a:76:0d:f6:51:5e:81:e9:ba:cb:62:08:fc:bb:e9:e2:34:26: e8:b5:b4:a3:75:e2:83:98:7d:b4:03:88:b1:96:89:c9:7a:87: e9:02:00:74:35:d5:ea:ce:d9:0b:cb:9b:bb:56:9c:0e:b3:01: 8e:36:1f:f6:f6:78:a2:a9:54:f3:eb:12:1a:67:f6:83:1d:fb: ca:5e:9d:a9:fd:2a:15:70:83:74:5e:a4:85:e6:7e:74:7a:fb: 62:0d:35:15:ce:df:a9:d7:e7:b4:41:f8:99:58:75:c2:26:45: 89:bb:ad:9a:01:4b:2b:34:ef:e2:0f:8b:57:e3:64:3d:b5:1d: 8b:33:c8:ea -----BEGIN CERTIFICATE----- MIIF/zCCBOegAwIBAgIUXGl3Da7auu8wyKStHfAkLnn8srwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDUyOTAxMDAzOFoX DTI3MDUyODAxMDUzOFowMzExMC8GA1UEAxMoMDk4RDQyMUNCNDZGMjkyRjEzQ0U3 MURGM0Q2ODVENUU4Mjg5MzI4OTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANX+4iP/4waHBiUTXzbYZFWgYMPVkkTC3ngVbuGAqCSZqvRY1l5dsfq1/6CK XiGRri8zUuqJglhqcGL7y72GBUyw7eOnvp/FVhWVyRRTxrdI2c82ekOI5IeyYKua vx75s4THWOdZaqYToTz2jVtzYwaBnc3Qzq3RwjHii/vqwbalreZKwuDYmjjehi2U yxNjGPs2fw9pHdJVeaheYyUveuHwkThqYcIvQZa3lrXYKcomCzM32WyCpB6YAI9t YeHhPZWY/tUiTsNqSqqswFxN9MWg1GNBJeI5IJaY34I68Hsf20l4rdzHKb4w+GOJ lKORdiTg/GqwejU+CFIuclZAJzMCAwEAAaOCAvIwggLuMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFAmNQhy0bykvE85x3z1oXV6CiTKJMB8GA1UdIwQYMBaAFKVu hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTA2NTU4Mjc0MTU3NzY2MjQ2Ni8wLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDY1NTgyNzQxNTc3NjYyNDY2 LzAvMDk4RDQyMUNCNDZGMjkyRjEzQ0U3MURGM0Q2ODVENUU4Mjg5MzI4OS5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwWwYIKwYBBQUH AQcBAf8ETDBKMDIEAgABMCwDBAYbcAAwDAMEAmf8zAMEAmf80AMEAmf86AMEAmf8 +AMEB3bCAAMEB3oLADAUBAIAAjAOAwUAJAIfgAMFACQDTIAwGgYIKwYBBQUHAQgB Af8ECzAJoAcwBQIDAPhOMA0GCSqGSIb3DQEBCwUAA4IBAQANxw1ScpwwIatcP8aC mTgXha0njVL54h6WdAhyeSqxbWTdOIY1F2503y1/ukcfxFO/n95HqagPRdbt5dWg SoLx1Tbu5FPYOCDr9MkGLe1mbLfm67GE8eo6XrbaPoX6oGGfanYo4H9GPcw9toi5 YTfgzambQjK/9MwWOadljfUqdg32UV6B6brLYgj8u+niNCbotbSjdeKDmH20A4ix lonJeofpAgB0NdXqztkLy5u7VpwOswGONh/29niiqVTz6xIaZ/aDHfvKXp2p/SoV cIN0XqSF5n50evtiDTUVzt+p1+e0QfiZWHXCJkWJu62aAUsrNO/iD4tX42Q9tR2L M8jq -----END CERTIFICATE-----Generated at Fri May 29 21:13:52 2026 by rpki-client