$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5866E9356E16DA2DFE2BDE5D025E92E8D872B274.cer File: 5866E9356E16DA2DFE2BDE5D025E92E8D872B274.cer (raw, json) Hash identifier: kw0NV2hl7kjuVQS9psVi9D8h4VmKuNTaIz6bmJGEItg= Subject key identifier: 58:66:E9:35:6E:16:DA:2D:FE:2B:DE:5D:02:5E:92:E8:D8:72:B2:74 Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Certificate serial: 73793B918261DB60388036FD445B9EFDE848B065 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1142634423120822315/0/5866E9356E16DA2DFE2BDE5D025E92E8D872B274.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1142634423120822315/0/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Thu 20 Aug 2026 01:36:16 +0000 Certificate not after: Thu 19 Aug 2027 01:41:16 +0000 Subordinate resources: IP: 2402:70a0::/29 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 31 Aug 2026 15:20:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:79:3b:91:82:61:db:60:38:80:36:fd:44:5b:9e:fd:e8:48:b0:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Validity Not Before: Aug 20 01:36:16 2026 GMT Not After : Aug 19 01:41:16 2027 GMT Subject: CN=5866E9356E16DA2DFE2BDE5D025E92E8D872B274 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:a5:dd:ae:9c:62:cd:6e:41:23:8c:03:f6:99: de:3f:59:b2:ef:e4:c1:5f:fa:3d:5f:bb:ba:c9:f4: aa:6d:0e:df:69:bf:37:74:29:f1:5c:fd:3c:9c:a5: 81:20:e8:49:56:07:1e:b5:1d:8b:bf:c7:bd:7f:ec: 0f:00:5f:3f:57:26:e3:4b:96:0f:fa:df:43:93:68: df:39:f6:48:e5:c2:a7:5d:af:5c:85:bb:61:66:d3: ef:7f:b1:24:a0:95:f3:88:a4:be:bf:cb:3a:4c:1b: ff:fe:bd:ce:4d:41:7b:d7:81:63:5f:db:48:72:af: 2a:7e:5f:0a:be:0f:01:d6:15:34:42:e0:64:d8:eb: d3:c2:bd:82:3a:05:82:2c:ca:23:45:fb:a1:63:94: 41:e2:82:80:3a:53:b9:5a:96:13:6a:4f:a6:b2:c0: 15:76:4f:0a:8c:63:9a:83:58:d5:0c:95:bd:1f:0c: 0a:26:59:18:cd:59:cd:e3:b6:6d:65:8a:2a:79:bf: 5a:ca:29:4f:62:fb:8b:32:0e:f7:7e:c9:61:7a:33: 2b:91:ab:9c:cf:53:98:dc:9e:f5:2f:d4:74:79:ec: 89:99:18:17:30:b5:9e:be:71:aa:61:e0:d2:85:ef: 95:1f:2f:b2:da:34:db:06:30:c8:ee:95:fd:3c:07: 53:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 58:66:E9:35:6E:16:DA:2D:FE:2B:DE:5D:02:5E:92:E8:D8:72:B2:74 X509v3 Authority Key Identifier: keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1142634423120822315/0/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1142634423120822315/0/5866E9356E16DA2DFE2BDE5D025E92E8D872B274.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2402:70a0::/29 Signature Algorithm: sha256WithRSAEncryption 9b:aa:55:61:7d:04:ab:c2:a1:02:d0:f8:ae:66:cd:1c:96:72: 62:c3:f7:6b:d8:9a:79:43:22:9d:e0:68:0d:f1:08:1f:75:24: ae:5b:5f:d3:a3:23:60:0c:47:24:91:00:91:57:d3:66:79:b2: 08:a5:9e:35:d6:20:6b:71:0f:f4:15:c4:01:a9:04:61:82:b0: 40:cc:6a:a5:c7:f0:cb:0c:fb:10:b9:9a:65:3e:fe:12:41:53: 3c:02:aa:d5:83:5e:3e:1e:a8:78:a6:6e:f1:41:2f:a1:13:66: ea:21:4a:b6:92:02:ca:41:e0:d2:63:c3:a9:12:69:c9:5b:d2: ce:15:fc:0f:1a:34:ee:f7:2b:74:86:ff:ca:bf:a3:34:75:ba: e8:70:15:85:4d:a8:c8:09:db:a8:67:a5:af:de:65:2e:87:62: d4:af:31:bb:db:3e:9e:77:4c:d9:81:0b:68:cb:51:86:c2:80: a5:4c:e3:c9:6c:0a:44:bd:83:b1:e8:ed:51:18:09:7d:44:b1: 4e:57:c7:4c:ad:ee:50:43:87:cc:12:28:a6:98:52:b4:e9:5e: d0:ae:9c:5c:88:0a:cf:c5:8b:0e:ba:0c:13:02:96:1c:c2:ca: 6b:3a:5d:56:c5:77:2a:f9:fa:38:63:cb:a3:46:d8:06:fa:5c: 0e:90:bf:60 -----BEGIN CERTIFICATE----- MIIFqDCCBJCgAwIBAgIUc3k7kYJh22A4gDb9RFue/ehIsGUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDgyMDAxMzYxNloX DTI3MDgxOTAxNDExNlowMzExMC8GA1UEAxMoNTg2NkU5MzU2RTE2REEyREZFMkJE RTVEMDI1RTkyRThEODcyQjI3NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJml3a6cYs1uQSOMA/aZ3j9Zsu/kwV/6PV+7usn0qm0O32m/N3Qp8Vz9PJyl gSDoSVYHHrUdi7/HvX/sDwBfP1cm40uWD/rfQ5No3zn2SOXCp12vXIW7YWbT73+x JKCV84ikvr/LOkwb//69zk1Be9eBY1/bSHKvKn5fCr4PAdYVNELgZNjr08K9gjoF gizKI0X7oWOUQeKCgDpTuVqWE2pPprLAFXZPCoxjmoNY1QyVvR8MCiZZGM1ZzeO2 bWWKKnm/WsopT2L7izIO937JYXozK5GrnM9TmNye9S/UdHnsiZkYFzC1nr5xqmHg 0oXvlR8vsto02wYwyO6V/TwHU1MCAwEAAaOCApswggKXMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFFhm6TVuFtot/iveXQJekujYcrJ0MB8GA1UdIwQYMBaAFKVu hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTE0MjYzNDQyMzEyMDgyMjMxNS8wLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMTQyNjM0NDIzMTIwODIyMzE1 LzAvNTg2NkU5MzU2RTE2REEyREZFMkJERTVEMDI1RTkyRThEODcyQjI3NC5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUH AQcBAf8EETAPMA0EAgACMAcDBQMkAnCgMA0GCSqGSIb3DQEBCwUAA4IBAQCbqlVh fQSrwqEC0PiuZs0clnJiw/dr2Jp5QyKd4GgN8QgfdSSuW1/ToyNgDEckkQCRV9Nm ebIIpZ411iBrcQ/0FcQBqQRhgrBAzGqlx/DLDPsQuZplPv4SQVM8AqrVg14+Hqh4 pm7xQS+hE2bqIUq2kgLKQeDSY8OpEmnJW9LOFfwPGjTu9yt0hv/Kv6M0dbrocBWF TajICduoZ6Wv3mUuh2LUrzG72z6ed0zZgQtoy1GGwoClTOPJbApEvYOx6O1RGAl9 RLFOV8dMre5QQ4fMEiimmFK06V7QrpxciArPxYsOugwTApYcwsprOl1WxXcq+fo4 Y8ujRtgG+lwOkL9g -----END CERTIFICATE-----Generated at Sat Aug 29 06:16:28 2026 by rpki-client