$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0C0A07A9E8B8CDABF42E9CC453143F5C56E9FF6E.cer File: 0C0A07A9E8B8CDABF42E9CC453143F5C56E9FF6E.cer (raw, json) Hash identifier: KTmX0VqSeHMnKLNdU/OwYaRLvnC/KSo805WZuO8Suak= Subject key identifier: 0C:0A:07:A9:E8:B8:CD:AB:F4:2E:9C:C4:53:14:3F:5C:56:E9:FF:6E Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Certificate serial: 33A8CB9C36ADFE9A6D93A66DA109267B45B96C69 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1094468310696722435/1/0C0A07A9E8B8CDABF42E9CC453143F5C56E9FF6E.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1094468310696722435/1/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Thu 09 Apr 2026 03:41:23 +0000 Certificate not after: Thu 08 Apr 2027 03:46:23 +0000 Subordinate resources: IP: 103.64.160.0 -- 103.64.207.255 IP: 103.64.224.0/20 IP: 103.213.146.0 -- 103.213.159.255 IP: 103.223.144.0 -- 103.223.175.255 IP: 103.223.192.0/18 IP: 119.80.192.0 -- 119.80.203.255 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 12:10:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:a8:cb:9c:36:ad:fe:9a:6d:93:a6:6d:a1:09:26:7b:45:b9:6c:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Validity Not Before: Apr 9 03:41:23 2026 GMT Not After : Apr 8 03:46:23 2027 GMT Subject: CN=0C0A07A9E8B8CDABF42E9CC453143F5C56E9FF6E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:c8:00:20:bf:d0:56:9e:b5:fc:fe:7a:67:eb: 9a:1f:38:d1:53:e6:a8:09:fa:35:2b:80:a2:b0:ec: 91:53:35:9d:b6:47:4a:17:33:70:eb:a6:53:cc:f3: e4:fa:b0:8c:99:f6:e1:1b:61:57:2d:39:52:c8:46: 9e:b5:d0:03:d7:4f:da:6a:28:ae:b0:ff:72:23:7e: ac:cb:df:5b:61:13:38:b5:c8:ad:01:2e:8b:cf:7b: e6:e3:68:7e:ba:33:d7:4d:f2:79:1d:12:ac:7a:fb: b1:b5:80:30:92:f7:50:61:2b:43:16:ba:a2:b8:d8: 23:ce:06:df:e4:92:41:39:38:5f:5e:77:73:7a:2e: 60:82:4f:a7:68:7a:d4:13:09:cb:e9:3c:d0:46:70: 27:9a:7b:d2:bd:d0:65:22:27:54:ce:81:08:26:ee: 68:71:1f:78:2b:99:33:b6:6d:2f:a7:0f:dd:31:b4: b1:da:28:e6:77:95:a5:16:1b:b1:60:62:90:a3:4a: 60:3f:e1:52:8d:82:a2:d3:42:ec:87:18:2d:a4:cf: 17:7b:b0:92:8e:30:30:f6:cf:5a:65:a3:80:1d:79: 1f:44:5c:52:c9:64:33:f5:b1:58:d6:4a:e9:40:cc: 3d:45:db:fb:76:ec:f7:da:2c:19:7f:fa:63:2d:04: 60:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 0C:0A:07:A9:E8:B8:CD:AB:F4:2E:9C:C4:53:14:3F:5C:56:E9:FF:6E X509v3 Authority Key Identifier: keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1094468310696722435/1/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1094468310696722435/1/0C0A07A9E8B8CDABF42E9CC453143F5C56E9FF6E.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.64.160.0-103.64.207.255 103.64.224.0/20 103.213.146.0-103.213.159.255 103.223.144.0-103.223.175.255 103.223.192.0/18 119.80.192.0-119.80.203.255 Signature Algorithm: sha256WithRSAEncryption 76:19:12:a4:02:05:c8:78:95:65:4d:74:87:7a:52:89:62:ac: 0d:b5:29:88:31:33:c9:a9:2f:09:5d:a6:4d:07:73:90:c2:85: 94:b3:63:a3:19:e7:7d:c5:9e:c5:27:9e:71:ed:87:17:b2:bb: 91:fa:2c:81:9c:a8:33:c5:c3:71:b3:99:65:73:23:96:89:34: 16:a7:10:b2:a9:9d:3a:b5:dd:85:53:75:51:bb:93:67:94:76: fe:42:df:71:b0:62:18:8a:14:40:a1:e4:b9:cf:f9:c0:6e:21: f4:37:5c:76:30:ea:5c:1a:9a:9d:ea:77:19:3c:20:da:d3:2e: e5:28:21:c0:6c:fa:03:14:45:54:5e:ad:a3:e6:f5:49:97:61: dd:7b:c9:c6:d6:8c:25:e8:7f:45:78:12:6e:17:b4:52:37:00: ee:72:86:e7:ff:2a:a0:c9:93:56:ef:c6:9c:47:b7:04:7b:49: b1:8e:bb:a8:7f:0b:90:60:4a:84:c0:26:59:a7:16:ec:2f:f4: 6a:83:ca:90:f8:13:44:c5:11:a2:21:1a:70:0d:57:12:37:8c: e2:f1:94:aa:da:b0:38:ce:7f:41:8d:0d:37:ac:05:50:ca:1c: e6:92:7f:4a:1a:75:17:29:33:d4:fd:6a:04:86:a2:5e:2b:97: 06:89:27:c0 -----BEGIN CERTIFICATE----- MIIF5TCCBM2gAwIBAgIUM6jLnDat/pptk6ZtoQkme0W5bGkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDQwOTAzNDEyM1oX DTI3MDQwODAzNDYyM1owMzExMC8GA1UEAxMoMEMwQTA3QTlFOEI4Q0RBQkY0MkU5 Q0M0NTMxNDNGNUM1NkU5RkY2RTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOjIACC/0Faetfz+emfrmh840VPmqAn6NSuAorDskVM1nbZHShczcOumU8zz 5PqwjJn24RthVy05UshGnrXQA9dP2moorrD/ciN+rMvfW2ETOLXIrQEui8975uNo froz103yeR0SrHr7sbWAMJL3UGErQxa6orjYI84G3+SSQTk4X153c3ouYIJPp2h6 1BMJy+k80EZwJ5p70r3QZSInVM6BCCbuaHEfeCuZM7ZtL6cP3TG0sdoo5neVpRYb sWBikKNKYD/hUo2CotNC7IcYLaTPF3uwko4wMPbPWmWjgB15H0RcUslkM/WxWNZK 6UDMPUXb+3bs99osGX/6Yy0EYKMCAwEAAaOCAtgwggLUMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFAwKB6nouM2r9C6cxFMUP1xW6f9uMB8GA1UdIwQYMBaAFKVu hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTA5NDQ2ODMxMDY5NjcyMjQzNS8xLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDk0NDY4MzEwNjk2NzIyNDM1 LzEvMEMwQTA3QTlFOEI4Q0RBQkY0MkU5Q0M0NTMxNDNGNUM1NkU5RkY2RS5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwXQYIKwYBBQUH AQcBAf8ETjBMMEoEAgABMEQwDAMEBWdAoAMEBGdAwAMEBGdA4DAMAwQBZ9WSAwQF Z9WAMAwDBARn35ADBARn36ADBAZn38AwDAMEBndQwAMEAndQyDANBgkqhkiG9w0B AQsFAAOCAQEAdhkSpAIFyHiVZU10h3pSiWKsDbUpiDEzyakvCV2mTQdzkMKFlLNj oxnnfcWexSeece2HF7K7kfosgZyoM8XDcbOZZXMjlok0FqcQsqmdOrXdhVN1UbuT Z5R2/kLfcbBiGIoUQKHkuc/5wG4h9DdcdjDqXBqanep3GTwg2tMu5SghwGz6AxRF VF6to+b1SZdh3XvJxtaMJeh/RXgSbhe0UjcA7nKG5/8qoMmTVu/GnEe3BHtJsY67 qH8LkGBKhMAmWacW7C/0aoPKkPgTRMURoiEacA1XEjeM4vGUqtqwOM5/QY0NN6wF UMoc5pJ/Shp1Fykz1P1qBIaiXiuXBoknwA== -----END CERTIFICATE-----Generated at Mon Apr 13 09:29:05 2026 by rpki-client