$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/65339B7A6B7988AA6EF40EF864D58BFE051E018B.cer File: 65339B7A6B7988AA6EF40EF864D58BFE051E018B.cer (raw, json) Hash identifier: 6eN2492DBB4skVVTU26BH0fzYd6o76X/S6SoaAk+2X0= Subject key identifier: 65:33:9B:7A:6B:79:88:AA:6E:F4:0E:F8:64:D5:8B:FE:05:1E:01:8B Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Certificate serial: 01B5F5918E9B3B1C0BF1546E6F0003CA4C544F91 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1098791527330611202/0/65339B7A6B7988AA6EF40EF864D58BFE051E018B.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1098791527330611202/0/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Tue 21 Apr 2026 02:00:16 +0000 Certificate not after: Tue 20 Apr 2027 02:05:16 +0000 Subordinate resources: IP: 103.25.64.0/22 IP: 2403:5980::/32 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Apr 2026 11:12:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:b5:f5:91:8e:9b:3b:1c:0b:f1:54:6e:6f:00:03:ca:4c:54:4f:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Validity Not Before: Apr 21 02:00:16 2026 GMT Not After : Apr 20 02:05:16 2027 GMT Subject: CN=65339B7A6B7988AA6EF40EF864D58BFE051E018B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:6f:c8:c1:c7:8d:af:59:5b:42:79:f2:92:8c: 37:9f:3e:d2:76:66:9f:49:20:7d:96:30:fa:27:0d: 30:3f:6d:f0:56:b7:7a:07:0d:d4:e5:ab:5c:50:75: 82:7f:25:a4:39:d9:26:82:04:98:67:8c:e5:7a:3d: 48:4b:30:5a:f4:84:79:11:cc:5d:a6:86:6d:c3:11: a9:ea:f4:71:2e:35:38:59:97:03:c4:e0:26:ad:7d: 7f:8e:d3:e6:46:cc:12:79:2b:e6:41:1f:b0:35:86: b9:c7:a6:7f:e9:4c:0c:40:bc:b8:f6:ac:16:bc:37: 75:52:c8:cd:64:5c:a9:56:80:12:09:35:85:67:11: 5d:ab:bc:12:96:4b:7c:dd:2c:95:a6:f7:45:d8:3a: ef:82:70:ca:ff:23:28:53:e1:09:3e:9d:38:69:43: 8c:66:0b:d4:b0:be:cf:fb:91:d8:ed:b2:5e:3f:d3: df:a8:c2:1b:a1:8b:b8:a7:e4:da:05:ed:06:b7:eb: 6a:7f:82:6a:e4:1e:c8:19:f7:42:d2:43:c0:c0:c1: 10:54:0a:55:2c:8b:b5:61:30:9e:c1:ff:44:8e:eb: 0e:3e:59:e4:17:f2:8b:45:0c:63:c1:ef:1b:86:bd: d6:91:10:d7:14:a1:70:81:f5:20:e2:73:3d:b2:ef: 84:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 65:33:9B:7A:6B:79:88:AA:6E:F4:0E:F8:64:D5:8B:FE:05:1E:01:8B X509v3 Authority Key Identifier: keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1098791527330611202/0/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1098791527330611202/0/65339B7A6B7988AA6EF40EF864D58BFE051E018B.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.25.64.0/22 IPv6: 2403:5980::/32 Signature Algorithm: sha256WithRSAEncryption 9a:9d:76:77:ba:1a:bb:67:06:6a:f9:ea:bc:15:23:df:3d:ef: ca:ea:9c:80:be:6b:e9:b4:17:0c:35:f3:9c:31:6d:b2:e6:32: 7d:c9:8e:8c:8f:a1:c7:47:02:36:57:09:01:2c:e1:e7:c3:fa: 1b:9b:a8:70:20:9d:1b:c2:76:d8:25:bc:46:cb:92:c5:ad:1d: ad:c2:86:b5:21:5e:a8:e0:19:ac:09:4a:58:a4:7d:b4:42:44: bf:f7:c4:c0:73:3b:ad:b4:cb:69:66:78:2f:a3:3e:bb:4b:f2: 31:fc:95:48:8e:6e:c8:09:8a:b2:fb:02:d6:f8:be:7c:92:6c: 9b:2b:f6:d5:1a:87:d5:a5:37:ed:51:72:07:67:4a:81:0d:60: b9:75:c3:19:92:ac:c1:d4:61:55:3a:ec:62:a4:db:a2:93:16: 3a:13:b3:f0:d2:4f:da:ea:13:80:24:9b:76:2e:df:24:d0:70: 6b:e0:41:1b:75:d8:9b:82:14:75:a5:f3:13:da:c9:f1:68:50: 3b:b0:34:0a:1b:d2:50:9c:77:e8:da:01:54:51:ff:b5:2b:18: de:10:51:89:bf:9d:cc:15:72:32:6c:69:99:84:c2:46:52:a3: f8:89:72:59:bd:a6:9b:d7:1f:e4:e8:c3:7b:fd:60:68:f1:9d: be:11:25:b5 -----BEGIN CERTIFICATE----- MIIFtjCCBJ6gAwIBAgIUAbX1kY6bOxwL8VRubwADykxUT5EwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDQyMTAyMDAxNloX DTI3MDQyMDAyMDUxNlowMzExMC8GA1UEAxMoNjUzMzlCN0E2Qjc5ODhBQTZFRjQw RUY4NjRENThCRkUwNTFFMDE4QjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALBvyMHHja9ZW0J58pKMN58+0nZmn0kgfZYw+icNMD9t8Fa3egcN1OWrXFB1 gn8lpDnZJoIEmGeM5Xo9SEswWvSEeRHMXaaGbcMRqer0cS41OFmXA8TgJq19f47T 5kbMEnkr5kEfsDWGucemf+lMDEC8uPasFrw3dVLIzWRcqVaAEgk1hWcRXau8EpZL fN0slab3Rdg674Jwyv8jKFPhCT6dOGlDjGYL1LC+z/uR2O2yXj/T36jCG6GLuKfk 2gXtBrfran+CauQeyBn3QtJDwMDBEFQKVSyLtWEwnsH/RI7rDj5Z5Bfyi0UMY8Hv G4a91pEQ1xShcIH1IOJzPbLvhIUCAwEAAaOCAqkwggKlMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFGUzm3preYiqbvQO+GTVi/4FHgGLMB8GA1UdIwQYMBaAFKVu hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTA5ODc5MTUyNzMzMDYxMTIwMi8wLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDk4NzkxNTI3MzMwNjExMjAy LzAvNjUzMzlCN0E2Qjc5ODhBQTZFRjQwRUY4NjRENThCRkUwNTFFMDE4Qi5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUH AQcBAf8EHzAdMAwEAgABMAYDBAJnGUAwDQQCAAIwBwMFACQDWYAwDQYJKoZIhvcN AQELBQADggEBAJqddne6GrtnBmr56rwVI98978rqnIC+a+m0Fww185wxbbLmMn3J joyPocdHAjZXCQEs4efD+hubqHAgnRvCdtglvEbLksWtHa3ChrUhXqjgGawJSlik fbRCRL/3xMBzO620y2lmeC+jPrtL8jH8lUiObsgJirL7Atb4vnySbJsr9tUah9Wl N+1RcgdnSoENYLl1wxmSrMHUYVU67GKk26KTFjoTs/DST9rqE4Akm3Yu3yTQcGvg QRt12JuCFHWl8xPayfFoUDuwNAob0lCcd+jaAVRR/7UrGN4QUYm/ncwVcjJsaZmE wkZSo/iJclm9ppvXH+Tow3v9YGjxnb4RJbU= -----END CERTIFICATE-----Generated at Mon Apr 27 09:41:56 2026 by rpki-client