$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/39872673DCCDC86720A2E1C24F3DCF26B4DAB8F5.cer File: 39872673DCCDC86720A2E1C24F3DCF26B4DAB8F5.cer (raw, json) Hash identifier: CaSP/Gs2AS0tmrXxwe7HJV7LkZX0nRbFA9ay0Or+2Nw= Subject key identifier: 39:87:26:73:DC:CD:C8:67:20:A2:E1:C2:4F:3D:CF:26:B4:DA:B8:F5 Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Certificate serial: 5C44687B2DED4F26A55862E7C7EF87F1E536C831 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1065588335524708353/0/39872673DCCDC86720A2E1C24F3DCF26B4DAB8F5.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1065588335524708353/0/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Mon 25 May 2026 01:32:23 +0000 Certificate not after: Mon 24 May 2027 01:37:23 +0000 Subordinate resources: AS: 131511 IP: 103.98.224.0/22 IP: 103.241.220.0/22 IP: 157.119.252.0/22 IP: 202.6.202.0/23 IP: 2402:2620::/32 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 15:28:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:44:68:7b:2d:ed:4f:26:a5:58:62:e7:c7:ef:87:f1:e5:36:c8:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Validity Not Before: May 25 01:32:23 2026 GMT Not After : May 24 01:37:23 2027 GMT Subject: CN=39872673DCCDC86720A2E1C24F3DCF26B4DAB8F5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:61:94:94:6b:67:25:53:80:1e:a1:e9:60:84: 6e:b4:5c:45:46:7a:e7:61:0b:a0:aa:63:3d:f7:5d: 9a:a3:e0:3a:88:d8:6c:b7:64:d0:ec:36:97:90:6c: ac:e5:d6:0b:f1:24:f7:cb:ed:2a:96:a6:1e:6e:53: ec:60:0f:c8:95:7c:da:84:37:f5:b3:2a:7a:af:a3: ab:81:20:e8:d9:6a:e5:db:31:98:38:38:a9:b4:3f: f3:88:11:98:72:1b:23:e7:b1:fd:d0:7d:a4:c7:fd: 71:c4:c9:35:30:d2:73:f6:13:75:4b:58:9f:d2:42: 38:45:e7:7b:2d:db:c1:f0:e5:d3:91:1e:3e:ff:0a: f2:2a:cc:3b:dd:de:56:a0:0c:82:72:fe:55:6b:56: e9:a8:3f:ad:d0:38:59:e1:5b:e0:22:0f:13:e8:54: 33:8c:73:9c:f3:d6:e5:5f:01:9a:0d:d3:be:72:39: 6b:f7:2c:8d:92:0e:15:ce:97:75:2f:70:f7:05:a6: ca:b2:f4:99:69:bf:56:39:fd:21:19:ec:9e:8d:63: 90:43:a2:ff:bd:0e:ae:39:41:92:8e:6a:e9:da:05: 4f:2a:80:45:74:aa:1a:db:67:6f:ce:15:a7:86:8a: 5b:ba:94:05:5a:b8:9b:0f:00:6e:94:ed:03:5f:6b: 3e:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 39:87:26:73:DC:CD:C8:67:20:A2:E1:C2:4F:3D:CF:26:B4:DA:B8:F5 X509v3 Authority Key Identifier: keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335524708353/0/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335524708353/0/39872673DCCDC86720A2E1C24F3DCF26B4DAB8F5.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.98.224.0/22 103.241.220.0/22 157.119.252.0/22 202.6.202.0/23 IPv6: 2402:2620::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 131511 Signature Algorithm: sha256WithRSAEncryption 3b:d4:2c:d7:80:20:82:b7:0a:cf:9e:16:1e:af:12:31:fb:66: 75:8a:ec:7a:94:4f:e1:56:6e:5e:f3:4e:f9:f9:35:5f:d8:a9: 19:c1:8f:03:cd:a3:84:a3:f6:f2:93:42:39:eb:61:d6:82:f3: 7f:c6:37:98:a8:66:26:ac:d0:02:0c:36:56:cf:00:52:08:64: 2d:41:e5:72:b0:1d:40:57:47:e6:18:c8:e5:0e:a5:7f:83:3b: df:22:a6:f8:d9:50:4b:cd:49:60:f4:5a:12:da:97:71:b9:bf: 96:28:14:d4:01:51:e7:d5:c9:a1:02:22:a7:26:04:17:06:5a: 14:aa:30:00:be:54:ac:35:bc:7f:a3:cd:d1:03:a2:f9:e3:67: da:ae:34:36:46:0e:74:ca:eb:ef:18:96:3b:46:e6:50:f3:bc: 73:af:46:e7:c0:3f:26:82:01:1e:7d:1b:b3:ec:a5:12:fe:3b: 42:69:b8:bf:48:03:4e:74:ef:6c:c1:9d:e2:4d:01:40:15:d9: 91:57:24:f7:2b:48:61:f5:9f:41:b7:5a:a4:84:2c:e9:88:9b: ab:5a:56:c1:fd:bb:eb:00:b9:55:e1:b8:6f:03:f7:7f:66:ef: e1:f7:6d:eb:ed:67:5f:36:94:ec:78:69:e7:5d:69:9c:26:50: 71:23:43:a0 -----BEGIN CERTIFICATE----- MIIF5DCCBMygAwIBAgIUXERoey3tTyalWGLnx++H8eU2yDEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDUyNTAxMzIyM1oX DTI3MDUyNDAxMzcyM1owMzExMC8GA1UEAxMoMzk4NzI2NzNEQ0NEQzg2NzIwQTJF MUMyNEYzRENGMjZCNERBQjhGNTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMphlJRrZyVTgB6h6WCEbrRcRUZ652ELoKpjPfddmqPgOojYbLdk0Ow2l5Bs rOXWC/Ek98vtKpamHm5T7GAPyJV82oQ39bMqeq+jq4Eg6Nlq5dsxmDg4qbQ/84gR mHIbI+ex/dB9pMf9ccTJNTDSc/YTdUtYn9JCOEXney3bwfDl05EePv8K8irMO93e VqAMgnL+VWtW6ag/rdA4WeFb4CIPE+hUM4xznPPW5V8Bmg3TvnI5a/csjZIOFc6X dS9w9wWmyrL0mWm/Vjn9IRnsno1jkEOi/70OrjlBko5q6doFTyqARXSqGttnb84V p4aKW7qUBVq4mw8AbpTtA19rPmECAwEAAaOCAtcwggLTMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFDmHJnPczchnIKLhwk89zya02rj1MB8GA1UdIwQYMBaAFKVu hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTA2NTU4ODMzNTUyNDcwODM1My8wLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDY1NTg4MzM1NTI0NzA4MzUz LzAvMzk4NzI2NzNEQ0NEQzg2NzIwQTJFMUMyNEYzRENGMjZCNERBQjhGNS5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwQAYIKwYBBQUH AQcBAf8EMTAvMB4EAgABMBgDBAJnYuADBAJn8dwDBAKdd/wDBAHKBsowDQQCAAIw BwMFACQCJiAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDAgG3MA0GCSqGSIb3DQEB CwUAA4IBAQA71CzXgCCCtwrPnhYerxIx+2Z1iux6lE/hVm5e8075+TVf2KkZwY8D zaOEo/byk0I562HWgvN/xjeYqGYmrNACDDZWzwBSCGQtQeVysB1AV0fmGMjlDqV/ gzvfIqb42VBLzUlg9FoS2pdxub+WKBTUAVHn1cmhAiKnJgQXBloUqjAAvlSsNbx/ o83RA6L542farjQ2Rg50yuvvGJY7RuZQ87xzr0bnwD8mggEefRuz7KUS/jtCabi/ SANOdO9swZ3iTQFAFdmRVyT3K0hh9Z9Bt1qkhCzpiJurWlbB/bvrALlV4bhvA/d/ Zu/h923r7WdfNpTseGnnXWmcJlBxI0Og -----END CERTIFICATE-----Generated at Fri May 29 21:12:33 2026 by rpki-client