$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8C62FBF48757B88A81B2B470B3A9E6B46C38C14E.cer File: 8C62FBF48757B88A81B2B470B3A9E6B46C38C14E.cer (raw, json) Hash identifier: /1jbj67mrIzxkbGe7vsdQpNX6RIEQAc+vFnjlPXvHec= Subject key identifier: 8C:62:FB:F4:87:57:B8:8A:81:B2:B4:70:B3:A9:E6:B4:6C:38:C1:4E Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Certificate serial: 263E74C467F620DA3E4C7BBCB8620D64629EFA5D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1091558670602338307/0/8C62FBF48757B88A81B2B470B3A9E6B46C38C14E.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1091558670602338307/0/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Wed 01 Apr 2026 03:00:27 +0000 Certificate not after: Wed 31 Mar 2027 03:05:27 +0000 Subordinate resources: IP: 103.114.212.0/22 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 12:10:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:3e:74:c4:67:f6:20:da:3e:4c:7b:bc:b8:62:0d:64:62:9e:fa:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Validity Not Before: Apr 1 03:00:27 2026 GMT Not After : Mar 31 03:05:27 2027 GMT Subject: CN=8C62FBF48757B88A81B2B470B3A9E6B46C38C14E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:df:01:72:e4:bb:e2:9d:a1:7b:f1:1d:e5:af: 69:7c:0b:7a:22:0b:62:a2:f8:07:10:34:ca:8a:f6: 54:ec:48:4a:42:03:63:fb:4e:91:b4:44:2a:a2:1c: 3e:00:0d:c9:1c:dc:58:23:8f:b2:2f:1c:e6:39:5c: cf:5a:be:c5:d6:88:4a:08:b2:fd:79:1d:77:42:0a: 3f:45:ff:fb:1d:47:99:a0:a2:53:04:67:58:94:35: a0:62:0b:9c:99:8c:29:d2:02:a3:ac:15:b3:07:b0: cf:ec:3a:7c:f3:1a:c5:26:02:b1:5a:72:e9:95:ec: 8a:f2:1c:e2:7f:39:21:90:26:87:fb:dc:19:a3:1f: 6e:73:8b:a7:67:fe:4f:68:e9:88:a0:b7:23:00:5e: 23:ab:ff:8b:76:20:68:e8:62:c9:4f:10:5d:2e:f2: 3a:77:a0:41:ad:e4:ca:27:f4:ff:21:1f:fc:44:70: 47:60:5f:01:18:1e:97:99:e5:af:80:a0:5d:13:de: aa:da:60:ec:50:12:fe:cf:80:b0:7a:a5:91:bc:46: 00:a9:63:fb:c5:84:fd:2e:c4:69:0e:5b:a2:a0:a3: 30:37:e6:30:c3:54:09:5b:78:d2:3e:6e:7e:b7:16: 0a:40:a7:89:38:47:b6:12:1b:6e:83:73:da:48:36: ec:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 8C:62:FB:F4:87:57:B8:8A:81:B2:B4:70:B3:A9:E6:B4:6C:38:C1:4E X509v3 Authority Key Identifier: keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1091558670602338307/0/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1091558670602338307/0/8C62FBF48757B88A81B2B470B3A9E6B46C38C14E.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.114.212.0/22 Signature Algorithm: sha256WithRSAEncryption 42:75:db:dd:07:3a:72:9f:c0:d1:c4:42:05:3b:05:d9:1c:e3: 84:8b:b2:dc:17:a0:55:f5:db:84:89:dd:67:ef:c6:70:3d:8f: 34:97:99:bd:f2:0b:00:5b:3a:09:d0:d9:8c:18:1e:74:96:7e: fa:1b:89:de:34:94:0b:85:e0:f6:d6:17:30:b1:f6:3d:15:6b: 47:ff:05:b1:3f:4c:f1:14:e9:52:e6:ad:5f:2c:d5:7d:7f:f6: 6f:65:55:da:6c:80:5a:9e:e9:f0:19:25:53:24:15:35:28:36: a8:31:06:af:d3:ed:e9:bf:a9:5b:71:0c:89:42:c6:bf:3c:41: ff:60:62:10:36:22:fc:32:f7:94:f8:12:16:a7:5f:e6:2a:5e: f4:b7:92:a2:01:98:ac:9c:b4:d8:e3:7f:b6:a1:e8:a2:cb:64: 87:52:4c:fc:5f:57:c9:9f:49:34:5c:cc:92:09:f5:07:94:ad: b9:cb:eb:fc:63:eb:44:3c:e5:3e:77:ad:6e:bc:8d:71:d2:22: e8:82:74:60:61:65:8e:82:59:58:5e:36:5c:4a:a8:db:5a:31: 20:c9:ee:a9:0e:98:59:c5:69:b2:e4:98:a5:27:7f:b8:bf:e7: 76:da:3f:e4:16:6f:3b:71:be:19:2e:95:36:83:47:ab:3d:1c: cc:8c:47:12 -----BEGIN CERTIFICATE----- MIIFpzCCBI+gAwIBAgIUJj50xGf2INo+THu8uGINZGKe+l0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDQwMTAzMDAyN1oX DTI3MDMzMTAzMDUyN1owMzExMC8GA1UEAxMoOEM2MkZCRjQ4NzU3Qjg4QTgxQjJC NDcwQjNBOUU2QjQ2QzM4QzE0RTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAK/fAXLku+KdoXvxHeWvaXwLeiILYqL4BxA0yor2VOxISkIDY/tOkbREKqIc PgANyRzcWCOPsi8c5jlcz1q+xdaISgiy/Xkdd0IKP0X/+x1HmaCiUwRnWJQ1oGIL nJmMKdICo6wVswewz+w6fPMaxSYCsVpy6ZXsivIc4n85IZAmh/vcGaMfbnOLp2f+ T2jpiKC3IwBeI6v/i3YgaOhiyU8QXS7yOnegQa3kyif0/yEf/ERwR2BfARgel5nl r4CgXRPeqtpg7FAS/s+AsHqlkbxGAKlj+8WE/S7EaQ5boqCjMDfmMMNUCVt40j5u frcWCkCniThHthIbboNz2kg27K8CAwEAAaOCApowggKWMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFIxi+/SHV7iKgbK0cLOp5rRsOMFOMB8GA1UdIwQYMBaAFKVu hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTA5MTU1ODY3MDYwMjMzODMwNy8wLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDkxNTU4NjcwNjAyMzM4MzA3 LzAvOEM2MkZCRjQ4NzU3Qjg4QTgxQjJCNDcwQjNBOUU2QjQ2QzM4QzE0RS5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAJnctQwDQYJKoZIhvcNAQELBQADggEBAEJ1290H OnKfwNHEQgU7Bdkc44SLstwXoFX124SJ3WfvxnA9jzSXmb3yCwBbOgnQ2YwYHnSW fvobid40lAuF4PbWFzCx9j0Va0f/BbE/TPEU6VLmrV8s1X1/9m9lVdpsgFqe6fAZ JVMkFTUoNqgxBq/T7em/qVtxDIlCxr88Qf9gYhA2Ivwy95T4EhanX+YqXvS3kqIB mKyctNjjf7ah6KLLZIdSTPxfV8mfSTRczJIJ9QeUrbnL6/xj60Q85T53rW68jXHS IuiCdGBhZY6CWVheNlxKqNtaMSDJ7qkOmFnFabLkmKUnf7i/53baP+QWbztxvhku lTaDR6s9HMyMRxI= -----END CERTIFICATE-----Generated at Mon Apr 13 09:29:02 2026 by rpki-client