$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1866933B3427D9BEFE57E3F20A7049BD1D54E7D8.cer File: 1866933B3427D9BEFE57E3F20A7049BD1D54E7D8.cer (raw, json) Hash identifier: pSs1fuXFGsNPu7YsMqaRjakkpVvzPQW0FAL+DXSV/e0= Subject key identifier: 18:66:93:3B:34:27:D9:BE:FE:57:E3:F2:0A:70:49:BD:1D:54:E7:D8 Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Certificate serial: 0F73AEB7FF2F6836CFF8266EED0CB2812F1A329C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1119152684591480863/0/1866933B3427D9BEFE57E3F20A7049BD1D54E7D8.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1119152684591480863/0/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Tue 16 Jun 2026 06:28:15 +0000 Certificate not after: Tue 15 Jun 2027 06:33:15 +0000 Subordinate resources: AS: 3460 IP: 202.38.128.0/23 IP: 202.122.32.0/21 IP: 2401:de00::/32 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 Jul 2026 20:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:73:ae:b7:ff:2f:68:36:cf:f8:26:6e:ed:0c:b2:81:2f:1a:32:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Validity Not Before: Jun 16 06:28:15 2026 GMT Not After : Jun 15 06:33:15 2027 GMT Subject: CN=1866933B3427D9BEFE57E3F20A7049BD1D54E7D8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:73:ba:a4:12:a0:24:0a:42:75:63:a4:df:aa: 3c:41:f4:84:80:3a:cb:5b:2a:60:91:e1:3c:3c:96: 59:ff:f2:ad:1d:e3:5f:24:11:7f:e6:bd:f0:34:2f: 18:97:bf:75:1f:09:69:88:b4:c0:78:65:19:48:78: 04:b6:da:b3:5f:fe:e2:35:57:4e:76:70:c0:2c:aa: 8d:b6:22:4f:b1:f6:83:26:1e:88:2c:08:9c:7b:fb: aa:15:80:4c:2e:0e:94:c2:1d:eb:45:76:cf:c2:68: 8e:b4:0f:aa:dd:a7:7e:31:1b:5d:73:e0:b2:ce:2b: 20:c6:72:d0:be:b7:a6:83:12:24:0d:fa:9c:23:20: e8:5c:53:eb:f2:33:3b:2f:70:d9:b5:49:14:ee:ba: 9a:59:6e:1d:56:60:58:17:be:33:74:ec:53:3a:a8: 99:4a:44:25:a5:4f:40:9e:90:73:bf:74:bf:03:e2: ce:0e:b3:93:6d:39:b7:6f:5a:56:e9:7d:7c:5c:51: 98:88:53:ea:ee:37:47:9b:e8:c4:f2:d7:1e:c2:a7: 45:8d:ba:d4:38:0d:18:68:5c:62:49:c2:12:d0:a1: 93:16:65:c8:7a:87:30:e5:2b:46:c8:e5:83:e7:f5: 59:ba:59:4e:b5:dd:a7:27:26:95:c8:43:12:cb:c5: a2:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 18:66:93:3B:34:27:D9:BE:FE:57:E3:F2:0A:70:49:BD:1D:54:E7:D8 X509v3 Authority Key Identifier: keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1119152684591480863/0/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1119152684591480863/0/1866933B3427D9BEFE57E3F20A7049BD1D54E7D8.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.38.128.0/23 202.122.32.0/21 IPv6: 2401:de00::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 3460 Signature Algorithm: sha256WithRSAEncryption 7f:fa:30:56:52:8b:77:d5:2e:14:25:bb:e0:a6:95:af:e8:b7: 52:92:f8:43:ff:29:0d:65:57:4f:36:9d:e1:5b:5b:06:91:9a: 67:a6:03:f2:ef:28:b1:c7:cf:94:2b:e1:72:33:4a:f8:07:d9: 8a:04:92:ef:8f:2a:be:87:98:67:d9:8f:ab:57:f1:ae:5b:1c: e7:5b:66:57:f9:2c:d3:dd:b5:51:fe:d2:d8:b9:33:93:89:17: e4:20:91:1c:fe:83:8d:1b:85:8a:4f:96:79:70:8e:2f:e2:54: 9d:0c:fa:ba:1e:a0:fd:51:cc:64:0e:01:16:7b:13:99:51:55: 5c:c5:42:26:c2:d6:53:37:26:3b:ef:ce:86:b2:de:5b:ca:aa: a5:44:83:86:cd:56:32:b9:9a:74:47:d2:80:85:28:68:8b:d9: b7:fc:98:7f:00:c9:f2:f4:67:b3:6a:0d:66:36:c3:a3:4b:e9: b6:81:9c:5d:41:ba:43:86:c9:97:a5:32:4c:62:0e:3b:4d:b7: 71:80:98:ed:78:59:fe:37:bc:a1:bf:63:f6:16:62:8c:a8:a8: 4e:61:06:e3:9b:ac:cf:44:17:e6:b2:97:b5:90:e4:58:96:f3: e6:1d:c3:d8:f9:0b:f4:c2:1f:4a:73:cf:25:f7:3b:bc:44:95: 5e:a6:e8:d9 -----BEGIN CERTIFICATE----- MIIF1zCCBL+gAwIBAgIUD3Out/8vaDbP+CZu7QyygS8aMpwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDYxNjA2MjgxNVoX DTI3MDYxNTA2MzMxNVowMzExMC8GA1UEAxMoMTg2NjkzM0IzNDI3RDlCRUZFNTdF M0YyMEE3MDQ5QkQxRDU0RTdEODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMxzuqQSoCQKQnVjpN+qPEH0hIA6y1sqYJHhPDyWWf/yrR3jXyQRf+a98DQv GJe/dR8JaYi0wHhlGUh4BLbas1/+4jVXTnZwwCyqjbYiT7H2gyYeiCwInHv7qhWA TC4OlMId60V2z8JojrQPqt2nfjEbXXPgss4rIMZy0L63poMSJA36nCMg6FxT6/Iz Oy9w2bVJFO66mlluHVZgWBe+M3TsUzqomUpEJaVPQJ6Qc790vwPizg6zk205t29a Vul9fFxRmIhT6u43R5voxPLXHsKnRY261DgNGGhcYknCEtChkxZlyHqHMOUrRsjl g+f1WbpZTrXdpycmlchDEsvFoqMCAwEAAaOCAsowggLGMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFBhmkzs0J9m+/lfj8gpwSb0dVOfYMB8GA1UdIwQYMBaAFKVu hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTExOTE1MjY4NDU5MTQ4MDg2My8wLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMTE5MTUyNjg0NTkxNDgwODYz LzAvMTg2NjkzM0IzNDI3RDlCRUZFNTdFM0YyMEE3MDQ5QkQxRDU0RTdEOC5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwNAYIKwYBBQUH AQcBAf8EJTAjMBIEAgABMAwDBAHKJoADBAPKeiAwDQQCAAIwBwMFACQB3gAwGQYI KwYBBQUHAQgBAf8ECjAIoAYwBAICDYQwDQYJKoZIhvcNAQELBQADggEBAH/6MFZS i3fVLhQlu+Cmla/ot1KS+EP/KQ1lV082neFbWwaRmmemA/LvKLHHz5Qr4XIzSvgH 2YoEku+PKr6HmGfZj6tX8a5bHOdbZlf5LNPdtVH+0ti5M5OJF+QgkRz+g40bhYpP lnlwji/iVJ0M+roeoP1RzGQOARZ7E5lRVVzFQibC1lM3Jjvvzoay3lvKqqVEg4bN VjK5mnRH0oCFKGiL2bf8mH8AyfL0Z7NqDWY2w6NL6baBnF1BukOGyZelMkxiDjtN t3GAmO14Wf43vKG/Y/YWYoyoqE5hBuObrM9EF+ayl7WQ5FiW8+Ydw9j5C/TCH0pz zyX3O7xElV6m6Nk= -----END CERTIFICATE-----Generated at Tue Jul 14 19:09:10 2026 by rpki-client