$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/644DEF11BE48198BC5CBDC05F25E712AB41AE3B6.cer File: 644DEF11BE48198BC5CBDC05F25E712AB41AE3B6.cer (raw, json) Hash identifier: 87wuSyM7T+OBauYLver1OckYeLa6J5vNMldNgKcVr5Q= Subject key identifier: 64:4D:EF:11:BE:48:19:8B:C5:CB:DC:05:F2:5E:71:2A:B4:1A:E3:B6 Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Certificate serial: 135D20199D4E52702E1679D8E844CC022546C307 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1113606036054343699/0/644DEF11BE48198BC5CBDC05F25E712AB41AE3B6.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1113606036054343699/0/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Sun 31 May 2026 23:07:50 +0000 Certificate not after: Sun 30 May 2027 23:12:50 +0000 Subordinate resources: AS: 24422 IP: 119.88.0.0/15 IP: 119.90.128.0/17 IP: 122.0.64.0/18 IP: 202.8.128.0/19 IP: 202.180.128.0/19 IP: 2401:3a00::/32 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Jun 2026 04:35:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:5d:20:19:9d:4e:52:70:2e:16:79:d8:e8:44:cc:02:25:46:c3:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Validity Not Before: May 31 23:07:50 2026 GMT Not After : May 30 23:12:50 2027 GMT Subject: CN=644DEF11BE48198BC5CBDC05F25E712AB41AE3B6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:d7:c3:9a:15:15:09:29:0f:bb:8c:ad:2e:d4: 98:62:3d:46:3c:54:90:5f:dc:17:41:a5:69:a9:f6: e8:6d:20:a3:b5:69:d6:d2:87:43:74:4f:7c:18:e5: 35:7c:03:b9:60:d2:76:54:31:a8:f5:2f:19:28:89: 26:e6:c3:53:f2:fb:ad:11:e5:96:40:de:97:fb:b7: 40:fc:9b:e8:af:73:4b:23:d1:21:88:f6:f3:7f:f7: 79:a4:dd:93:8c:21:f7:1e:da:07:11:61:a4:b3:50: aa:2c:3b:c4:e5:38:c1:14:23:0e:ca:0a:8c:7a:0e: c9:da:21:1e:be:3f:16:84:5b:8e:07:c2:2b:2b:3c: b3:da:8b:49:89:ff:73:ed:48:ec:16:33:89:43:7a: 49:48:87:8d:e9:c2:21:ba:6f:0d:28:ea:3b:27:0e: df:80:90:92:fc:32:80:f9:a1:f0:ae:61:4c:35:1d: fe:f3:0a:3c:0f:0e:cc:2d:da:c3:c5:47:e0:b0:de: 86:2d:18:40:d2:d2:51:be:59:ba:7b:38:7f:b8:0f: 2f:86:1c:35:f6:78:9b:8d:5f:ff:50:1a:d0:0a:b3: 4a:9d:37:18:a0:2d:6d:6c:39:53:fc:ef:7a:67:80: c7:9e:0b:47:13:a1:fb:c6:3c:6d:3a:f9:90:70:ae: f5:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 64:4D:EF:11:BE:48:19:8B:C5:CB:DC:05:F2:5E:71:2A:B4:1A:E3:B6 X509v3 Authority Key Identifier: keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1113606036054343699/0/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1113606036054343699/0/644DEF11BE48198BC5CBDC05F25E712AB41AE3B6.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 119.88.0.0/15 119.90.128.0/17 122.0.64.0/18 202.8.128.0/19 202.180.128.0/19 IPv6: 2401:3a00::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 24422 Signature Algorithm: sha256WithRSAEncryption 43:98:66:b5:77:e3:b8:8e:7a:00:82:62:71:3a:35:da:1c:12: 0d:ed:67:e9:98:ff:f1:e7:ce:bd:64:5e:64:2b:56:93:2d:90: c3:21:9e:b1:a5:05:f0:01:39:01:c5:49:ae:57:ee:fd:9b:4d: c5:41:c5:d0:4b:55:f2:cc:d3:2a:d9:95:ba:03:d3:78:fd:68: 03:d5:ca:ca:51:9d:3c:ac:ee:c7:42:ea:e9:89:8a:7a:22:75: d6:6c:f3:53:c6:37:93:ab:c3:35:81:bc:1a:4e:60:8d:e4:24: 5b:21:0d:88:97:95:fb:af:f8:c8:81:d2:ed:d9:eb:0a:28:d9: c1:e2:1f:a3:5b:31:a3:78:b7:8c:72:af:f3:99:db:44:7f:32: a8:b7:e4:69:72:0e:78:75:35:69:3b:1a:74:db:52:83:a0:a7: 67:90:37:e4:cf:29:c1:57:ad:f1:c0:85:8d:8e:a3:0d:a4:b8: f9:cb:c1:c8:a2:1a:f1:aa:30:d7:cd:55:7d:6f:7d:6b:ab:be: af:4f:83:3a:fe:5c:03:f4:9c:35:c7:c8:f7:88:48:65:b6:4f: a8:e3:47:f3:85:de:4d:b5:78:03:e9:0f:ca:2b:ce:d7:04:bd: e5:ef:e2:1a:83:25:be:8b:5a:51:40:67:3e:8c:cd:9f:12:86: 0d:f0:af:d5 -----BEGIN CERTIFICATE----- MIIF6DCCBNCgAwIBAgIUE10gGZ1OUnAuFnnY6ETMAiVGwwcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDUzMTIzMDc1MFoX DTI3MDUzMDIzMTI1MFowMzExMC8GA1UEAxMoNjQ0REVGMTFCRTQ4MTk4QkM1Q0JE QzA1RjI1RTcxMkFCNDFBRTNCNjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMHXw5oVFQkpD7uMrS7UmGI9RjxUkF/cF0Glaan26G0go7Vp1tKHQ3RPfBjl NXwDuWDSdlQxqPUvGSiJJubDU/L7rRHllkDel/u3QPyb6K9zSyPRIYj283/3eaTd k4wh9x7aBxFhpLNQqiw7xOU4wRQjDsoKjHoOydohHr4/FoRbjgfCKys8s9qLSYn/ c+1I7BYziUN6SUiHjenCIbpvDSjqOycO34CQkvwygPmh8K5hTDUd/vMKPA8OzC3a w8VH4LDehi0YQNLSUb5Zuns4f7gPL4YcNfZ4m41f/1Aa0AqzSp03GKAtbWw5U/zv emeAx54LRxOh+8Y8bTr5kHCu9eUCAwEAAaOCAtswggLXMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFGRN7xG+SBmLxcvcBfJecSq0GuO2MB8GA1UdIwQYMBaAFKVu hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTExMzYwNjAzNjA1NDM0MzY5OS8wLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMTEzNjA2MDM2MDU0MzQzNjk5 LzAvNjQ0REVGMTFCRTQ4MTk4QkM1Q0JEQzA1RjI1RTcxMkFCNDFBRTNCNi5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwRQYIKwYBBQUH AQcBAf8ENjA0MCMEAgABMB0DAwF3WAMEB3dagAMEBnoAQAMEBcoIgAMEBcq0gDAN BAIAAjAHAwUAJAE6ADAZBggrBgEFBQcBCAEB/wQKMAigBjAEAgJfZjANBgkqhkiG 9w0BAQsFAAOCAQEAQ5hmtXfjuI56AIJicTo12hwSDe1n6Zj/8efOvWReZCtWky2Q wyGesaUF8AE5AcVJrlfu/ZtNxUHF0EtV8szTKtmVugPTeP1oA9XKylGdPKzux0Lq 6YmKeiJ11mzzU8Y3k6vDNYG8Gk5gjeQkWyENiJeV+6/4yIHS7dnrCijZweIfo1sx o3i3jHKv85nbRH8yqLfkaXIOeHU1aTsadNtSg6CnZ5A35M8pwVet8cCFjY6jDaS4 +cvByKIa8aow181VfW99a6u+r0+DOv5cA/ScNcfI94hIZbZPqONH84XeTbV4A+kP yivO1wS95e/iGoMlvotaUUBnPozNnxKGDfCv1Q== -----END CERTIFICATE-----Generated at Fri Jun 12 07:48:52 2026 by rpki-client