$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/209BC812EEDDC6074713463D5583CB221EADC76F.cer File: 209BC812EEDDC6074713463D5583CB221EADC76F.cer (raw, json) Hash identifier: lh86aPRktq4TMg0sgxgLrqhXJ4vSIGBllCdgM6dY1XM= Subject key identifier: 20:9B:C8:12:EE:DD:C6:07:47:13:46:3D:55:83:CB:22:1E:AD:C7:6F Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Certificate serial: 25845DCB4F0915A30606C6817979F94F8C22FB2E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1123281325843808295/0/209BC812EEDDC6074713463D5583CB221EADC76F.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1123281325843808295/0/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Sat 27 Jun 2026 15:54:00 +0000 Certificate not after: Sat 26 Jun 2027 15:59:00 +0000 Subordinate resources: AS: 131519 IP: 103.94.200.0/22 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 Jul 2026 20:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:84:5d:cb:4f:09:15:a3:06:06:c6:81:79:79:f9:4f:8c:22:fb:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Validity Not Before: Jun 27 15:54:00 2026 GMT Not After : Jun 26 15:59:00 2027 GMT Subject: CN=209BC812EEDDC6074713463D5583CB221EADC76F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:e0:ce:b1:9e:c9:5b:d4:0e:a8:ef:59:7b:60: 4c:2d:da:a9:e1:03:d6:8f:12:10:31:d5:8d:70:e2: 49:79:d0:2e:7f:f1:59:fb:c7:eb:df:c4:93:8c:4d: e6:ab:bb:a3:a6:7d:e8:ee:f8:22:8f:bb:b0:0b:61: 95:ed:4e:26:e3:16:8e:71:e1:a5:96:fe:9d:8c:14: f7:87:ae:4c:70:ee:86:fd:32:7b:f7:fd:74:10:2a: 6c:71:00:68:c2:c5:7c:a7:06:c7:8a:20:5e:a1:db: 63:47:23:b7:45:21:c6:3e:3e:d4:56:c4:52:43:1e: 2c:51:f5:0e:20:01:c7:95:c3:84:06:4b:cc:92:f5: 5e:ea:ee:d9:19:62:67:ba:3d:10:30:14:d8:1a:23: 15:f3:9d:c1:24:f2:7a:f0:47:3c:ae:96:19:98:bc: d6:54:c0:d5:79:ea:0e:dd:48:ed:49:fb:8a:21:e8: 87:23:d6:6b:73:07:49:bf:63:d6:21:29:5e:4e:f9: e3:6a:0b:36:c9:72:3e:3a:26:cb:2a:d0:10:db:cb: 21:d6:dd:3d:62:fe:8b:0a:d5:b6:44:e2:37:92:a0: 42:1c:89:33:22:00:e3:af:0c:32:88:71:fe:d3:f2: 5f:07:21:b8:17:28:d0:71:0a:2e:ef:1a:d2:74:82: 06:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 20:9B:C8:12:EE:DD:C6:07:47:13:46:3D:55:83:CB:22:1E:AD:C7:6F X509v3 Authority Key Identifier: keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1123281325843808295/0/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1123281325843808295/0/209BC812EEDDC6074713463D5583CB221EADC76F.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.94.200.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 131519 Signature Algorithm: sha256WithRSAEncryption 0d:84:9d:96:11:e1:b6:57:7e:0a:dd:9b:76:fc:5a:38:61:33: f5:b0:03:70:4e:f0:13:11:04:36:03:1c:c0:b7:47:18:0d:75: 2f:5d:51:78:46:8a:54:e1:4c:9a:a2:78:50:56:d9:93:de:f2: d9:f4:29:48:c6:45:f6:fe:16:99:44:26:c7:f4:ec:88:05:63: 41:a1:d9:8b:63:1f:00:79:d5:20:c5:60:4e:48:7f:a1:4f:60: 9a:21:e4:0a:6c:78:e0:6a:59:2b:df:02:62:8f:39:d6:be:39: 2c:a9:81:e9:2e:89:90:0d:49:bb:a7:fa:ea:21:ba:6c:74:20: bf:4f:a6:4d:b7:7c:73:a7:68:d3:d5:ae:b1:41:8e:c7:4c:6b: 71:9d:4f:5a:de:af:de:58:4f:bd:04:74:7c:6d:10:a7:4e:50: 01:00:f4:43:5d:72:9a:df:80:29:d6:58:df:c7:2b:b6:92:e6: 57:e8:37:51:17:68:28:9f:57:2a:1a:39:ca:74:07:ca:92:ef: 18:59:c1:8b:33:59:ac:f3:21:c7:74:ae:0c:31:ea:6e:44:68: c3:57:bb:4b:25:ff:23:db:64:09:c4:53:dd:04:42:3e:64:4c: 06:c7:69:71:b9:f5:64:5b:18:97:f9:e4:8a:de:89:f5:a9:aa: 6a:b3:35:98 -----BEGIN CERTIFICATE----- MIIFwzCCBKugAwIBAgIUJYRdy08JFaMGBsaBeXn5T4wi+y4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDYyNzE1NTQwMFoX DTI3MDYyNjE1NTkwMFowMzExMC8GA1UEAxMoMjA5QkM4MTJFRUREQzYwNzQ3MTM0 NjNENTU4M0NCMjIxRUFEQzc2RjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMXgzrGeyVvUDqjvWXtgTC3aqeED1o8SEDHVjXDiSXnQLn/xWfvH69/Ek4xN 5qu7o6Z96O74Io+7sAthle1OJuMWjnHhpZb+nYwU94euTHDuhv0ye/f9dBAqbHEA aMLFfKcGx4ogXqHbY0cjt0Uhxj4+1FbEUkMeLFH1DiABx5XDhAZLzJL1Xuru2Rli Z7o9EDAU2BojFfOdwSTyevBHPK6WGZi81lTA1XnqDt1I7Un7iiHohyPWa3MHSb9j 1iEpXk7542oLNslyPjomyyrQENvLIdbdPWL+iwrVtkTiN5KgQhyJMyIA468MMohx /tPyXwchuBco0HEKLu8a0nSCBlECAwEAAaOCArYwggKyMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFCCbyBLu3cYHRxNGPVWDyyIercdvMB8GA1UdIwQYMBaAFKVu hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTEyMzI4MTMyNTg0MzgwODI5NS8wLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMTIzMjgxMzI1ODQzODA4Mjk1 LzAvMjA5QkM4MTJFRUREQzYwNzQ3MTM0NjNENTU4M0NCMjIxRUFEQzc2Ri5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAJnXsgwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQID AgG/MA0GCSqGSIb3DQEBCwUAA4IBAQANhJ2WEeG2V34K3Zt2/Fo4YTP1sANwTvAT EQQ2AxzAt0cYDXUvXVF4RopU4UyaonhQVtmT3vLZ9ClIxkX2/haZRCbH9OyIBWNB odmLYx8AedUgxWBOSH+hT2CaIeQKbHjgalkr3wJijznWvjksqYHpLomQDUm7p/rq IbpsdCC/T6ZNt3xzp2jT1a6xQY7HTGtxnU9a3q/eWE+9BHR8bRCnTlABAPRDXXKa 34Ap1ljfxyu2kuZX6DdRF2gon1cqGjnKdAfKku8YWcGLM1ms8yHHdK4MMepuRGjD V7tLJf8j22QJxFPdBEI+ZEwGx2lxufVkWxiX+eSK3on1qapqszWY -----END CERTIFICATE-----Generated at Tue Jul 14 19:08:52 2026 by rpki-client