$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/429CF9671E0E2EFE8713E9A9C3EEB6443DC91251.cer File: 429CF9671E0E2EFE8713E9A9C3EEB6443DC91251.cer (raw, json) Hash identifier: fO7ZvgyVT4XO+WdmW9iOyZK+Jn3+wi7zKww8AktS1GA= Subject key identifier: 42:9C:F9:67:1E:0E:2E:FE:87:13:E9:A9:C3:EE:B6:44:3D:C9:12:51 Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Certificate serial: 68CA7710020047EA232AE1A685A2A260B06A3405 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1118769455250276379/0/429CF9671E0E2EFE8713E9A9C3EEB6443DC91251.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1118769455250276379/0/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Mon 15 Jun 2026 05:05:25 +0000 Certificate not after: Mon 14 Jun 2027 05:10:25 +0000 Subordinate resources: AS: 63555 IP: 223.0.0.0/15 IP: 2400:9580::/32 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 Jul 2026 20:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:ca:77:10:02:00:47:ea:23:2a:e1:a6:85:a2:a2:60:b0:6a:34:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Validity Not Before: Jun 15 05:05:25 2026 GMT Not After : Jun 14 05:10:25 2027 GMT Subject: CN=429CF9671E0E2EFE8713E9A9C3EEB6443DC91251 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:a8:28:48:bb:13:75:3e:c7:f2:c3:2e:49:93: 90:fc:97:cb:f9:f2:bb:c6:34:20:5e:d8:54:d9:7d: 50:6c:45:db:b2:f3:b9:8b:b5:dd:16:ab:21:0c:9d: a8:be:5c:b8:de:e0:e2:74:57:8b:d9:36:a1:cd:ec: 94:eb:20:3d:91:24:1d:04:80:f4:a7:72:65:fd:74: 8e:de:5a:34:2a:5a:2d:e0:28:b0:1e:5e:5b:62:00: 2d:9e:3f:a7:bd:b7:fc:10:0f:46:ca:e8:63:61:22: 48:32:a8:94:15:0d:5b:ce:6e:8d:0c:0d:5c:6a:94: 04:8a:25:97:e6:bd:28:ea:6a:85:6f:47:8d:c9:35: 36:7e:18:45:62:fd:ba:38:1e:28:7e:65:80:7b:ee: 63:d1:2d:f7:63:d6:56:4d:a0:cf:a3:41:b3:fa:bf: 28:ab:07:84:29:2f:5e:11:eb:8e:33:de:67:f8:4f: 21:c5:66:5c:18:9b:a0:f6:a2:4d:39:11:a3:e9:45: 99:f8:a0:08:b7:5c:70:20:80:60:d3:88:39:bf:4c: 6f:c3:18:b7:57:eb:0f:d5:43:20:84:a0:ab:cb:71: d9:18:31:f2:de:f7:40:13:d1:e0:26:57:09:bf:b3: 6f:8e:78:84:4c:3d:b3:7d:aa:86:14:f7:8f:da:18: 33:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 42:9C:F9:67:1E:0E:2E:FE:87:13:E9:A9:C3:EE:B6:44:3D:C9:12:51 X509v3 Authority Key Identifier: keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1118769455250276379/0/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1118769455250276379/0/429CF9671E0E2EFE8713E9A9C3EEB6443DC91251.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 223.0.0.0/15 IPv6: 2400:9580::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 63555 Signature Algorithm: sha256WithRSAEncryption 03:dc:b2:c5:0b:55:77:e6:2f:40:f3:a0:31:d8:fd:99:63:71: 70:b6:40:46:13:41:12:35:ff:13:23:df:04:09:15:78:51:5d: 9e:64:b1:a6:43:fc:6c:90:d6:38:29:c9:24:b6:ae:c3:d5:08: d2:ad:57:27:50:7c:35:8e:e6:1f:ad:01:28:5d:06:0f:64:df: 31:ed:e3:00:4f:c7:80:f5:90:1e:c6:0d:01:54:f2:1a:1c:36: 69:d6:c1:92:e1:73:5b:34:2f:b9:ea:61:a4:16:5a:7c:99:92: c6:3f:b6:23:a6:9c:9d:c0:49:59:19:c7:73:07:e9:ee:20:60: 50:de:a7:a3:db:06:36:ee:98:3e:aa:c0:24:f5:2f:48:ec:e2: 8d:08:eb:18:41:5a:d3:1a:30:65:8d:92:13:5f:10:d3:bc:fb: ec:1e:0f:35:4e:8a:df:89:89:64:aa:88:ea:54:a3:6f:70:aa: 2d:32:6d:18:9b:ab:d4:71:8b:21:71:db:a0:65:cd:a9:38:76: e0:ad:1c:c7:98:93:2d:b6:c6:08:76:5c:c8:15:8c:0e:b8:64: 9b:fb:eb:aa:a0:d2:67:5b:0a:d9:0f:81:25:75:28:de:f6:9c: 42:3a:f4:1a:a5:38:1c:70:46:2b:8b:0e:7f:4e:b0:0a:27:c5: 23:3e:27:44 -----BEGIN CERTIFICATE----- MIIF0TCCBLmgAwIBAgIUaMp3EAIAR+ojKuGmhaKiYLBqNAUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDYxNTA1MDUyNVoX DTI3MDYxNDA1MTAyNVowMzExMC8GA1UEAxMoNDI5Q0Y5NjcxRTBFMkVGRTg3MTNF OUE5QzNFRUI2NDQzREM5MTI1MTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOyoKEi7E3U+x/LDLkmTkPyXy/nyu8Y0IF7YVNl9UGxF27LzuYu13RarIQyd qL5cuN7g4nRXi9k2oc3slOsgPZEkHQSA9KdyZf10jt5aNCpaLeAosB5eW2IALZ4/ p723/BAPRsroY2EiSDKolBUNW85ujQwNXGqUBIoll+a9KOpqhW9Hjck1Nn4YRWL9 ujgeKH5lgHvuY9Et92PWVk2gz6NBs/q/KKsHhCkvXhHrjjPeZ/hPIcVmXBiboPai TTkRo+lFmfigCLdccCCAYNOIOb9Mb8MYt1frD9VDIISgq8tx2Rgx8t73QBPR4CZX Cb+zb454hEw9s32qhhT3j9oYM/sCAwEAAaOCAsQwggLAMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFEKc+WceDi7+hxPpqcPutkQ9yRJRMB8GA1UdIwQYMBaAFKVu hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTExODc2OTQ1NTI1MDI3NjM3OS8wLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMTE4NzY5NDU1MjUwMjc2Mzc5 LzAvNDI5Q0Y5NjcxRTBFMkVGRTg3MTNFOUE5QzNFRUI2NDQzREM5MTI1MS5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwLQYIKwYBBQUH AQcBAf8EHjAcMAsEAgABMAUDAwHfADANBAIAAjAHAwUAJACVgDAaBggrBgEFBQcB CAEB/wQLMAmgBzAFAgMA+EMwDQYJKoZIhvcNAQELBQADggEBAAPcssULVXfmL0Dz oDHY/ZljcXC2QEYTQRI1/xMj3wQJFXhRXZ5ksaZD/GyQ1jgpySS2rsPVCNKtVydQ fDWO5h+tAShdBg9k3zHt4wBPx4D1kB7GDQFU8hocNmnWwZLhc1s0L7nqYaQWWnyZ ksY/tiOmnJ3ASVkZx3MH6e4gYFDep6PbBjbumD6qwCT1L0js4o0I6xhBWtMaMGWN khNfENO8++weDzVOit+JiWSqiOpUo29wqi0ybRibq9RxiyFx26Blzak4duCtHMeY ky22xgh2XMgVjA64ZJv766qg0mdbCtkPgSV1KN72nEI69BqlOBxwRiuLDn9OsAon xSM+J0Q= -----END CERTIFICATE-----Generated at Tue Jul 14 19:08:48 2026 by rpki-client