$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8D5E2A2591F29289669C424496BF44B8A3F7EBD7.cer File: 8D5E2A2591F29289669C424496BF44B8A3F7EBD7.cer (raw, json) Hash identifier: ducALGF8CnCm5eWwQJU0PZ0W15SpeyUg/fgS7UawP4U= Subject key identifier: 8D:5E:2A:25:91:F2:92:89:66:9C:42:44:96:BF:44:B8:A3:F7:EB:D7 Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Certificate serial: 20F6804E774D5FE0DB446339E0898A3577CB66FC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1098489159904919553/0/8D5E2A2591F29289669C424496BF44B8A3F7EBD7.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1098489159904919553/0/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Mon 20 Apr 2026 05:58:46 +0000 Certificate not after: Mon 19 Apr 2027 06:03:46 +0000 Subordinate resources: IP: 103.56.60.0/22 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Apr 2026 11:12:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:f6:80:4e:77:4d:5f:e0:db:44:63:39:e0:89:8a:35:77:cb:66:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Validity Not Before: Apr 20 05:58:46 2026 GMT Not After : Apr 19 06:03:46 2027 GMT Subject: CN=8D5E2A2591F29289669C424496BF44B8A3F7EBD7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:34:8d:e6:12:73:83:27:94:a5:35:c8:62:12: ad:23:02:b7:0b:f1:1b:a3:a8:f6:92:f8:12:ec:26: 50:b4:38:87:a2:5b:13:d4:fe:dc:d7:13:66:eb:cd: 19:4b:b3:a5:e3:c8:1b:ae:7f:ef:22:e0:bb:3e:53: 34:bf:2a:1a:8e:ef:65:10:16:08:8e:44:e6:4e:12: b9:99:71:c1:a7:5c:20:ea:93:cf:1a:5a:2b:4a:1a: 55:e7:ac:4d:86:2b:8a:df:72:77:70:7d:79:e2:da: 31:49:1a:86:af:a5:7c:a4:c5:b1:22:a4:56:ff:3f: 21:65:55:8a:f3:78:83:10:84:6f:84:bc:e9:55:af: 82:e1:47:5b:75:23:43:d3:cc:81:6b:65:f2:b6:4d: f2:84:0e:a1:97:b6:4b:4b:c7:42:0f:87:43:60:0f: a7:1b:b7:22:3e:6a:a5:9c:bb:91:5a:69:34:da:c8: ce:0a:f4:2b:b8:a8:0f:3a:3e:ca:54:c5:0a:ed:84: 2e:77:73:6d:2a:af:d1:32:b4:5b:61:3a:56:e8:73: 96:0b:7e:be:2a:7c:0b:87:46:c7:84:b3:dd:b1:e2: 9d:b6:40:aa:4a:b1:ce:0a:d6:90:5d:cb:92:a5:cc: f5:42:8c:72:5a:5c:16:d7:c5:df:82:50:e8:b0:af: 37:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 8D:5E:2A:25:91:F2:92:89:66:9C:42:44:96:BF:44:B8:A3:F7:EB:D7 X509v3 Authority Key Identifier: keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1098489159904919553/0/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1098489159904919553/0/8D5E2A2591F29289669C424496BF44B8A3F7EBD7.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.56.60.0/22 Signature Algorithm: sha256WithRSAEncryption 6c:1d:09:7f:bf:a0:0b:39:b3:06:29:c6:58:f8:30:a8:f0:0f: 20:11:b9:cd:49:61:c7:d9:0b:81:79:d1:1d:df:aa:43:a2:cf: b1:a0:86:9e:33:40:7d:6a:a4:e8:ca:87:9c:86:1c:45:25:40: e2:c7:a6:ab:59:27:a9:28:5d:c1:81:8d:08:51:42:12:17:e7: 29:28:37:01:59:b8:e0:ab:73:29:fe:90:fb:85:ef:c7:00:5f: 80:b0:fa:b9:5d:f0:20:92:b2:a5:1a:c2:8c:51:89:c4:15:7e: e4:de:08:e4:7f:be:31:12:9e:de:89:7f:1b:75:e8:f2:64:6a: 35:ef:a6:be:61:56:f3:3b:47:30:b4:0d:42:2d:a4:52:cd:c2: b0:86:b4:1a:bd:50:3c:ad:7b:af:7b:0b:de:03:4b:d2:a6:1e: a5:07:06:6a:cf:15:5b:b6:46:6a:7a:c5:cd:52:33:12:1d:01: 97:42:b7:c7:bb:80:5d:25:08:94:7b:0d:2b:89:72:1f:0a:d4: 47:43:d4:c2:b0:86:a1:d2:91:19:3b:1f:85:91:c4:76:59:bc: 30:fb:5a:ca:be:ab:0f:82:ae:4f:69:6d:7c:c3:cb:33:bf:91: 5e:07:20:32:93:b2:99:2f:54:6e:6f:d0:30:a2:33:37:26:f3: b6:6e:64:49 -----BEGIN CERTIFICATE----- MIIFpzCCBI+gAwIBAgIUIPaATndNX+DbRGM54ImKNXfLZvwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDQyMDA1NTg0NloX DTI3MDQxOTA2MDM0NlowMzExMC8GA1UEAxMoOEQ1RTJBMjU5MUYyOTI4OTY2OUM0 MjQ0OTZCRjQ0QjhBM0Y3RUJENzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMc0jeYSc4MnlKU1yGISrSMCtwvxG6Oo9pL4EuwmULQ4h6JbE9T+3NcTZuvN GUuzpePIG65/7yLguz5TNL8qGo7vZRAWCI5E5k4SuZlxwadcIOqTzxpaK0oaVees TYYrit9yd3B9eeLaMUkahq+lfKTFsSKkVv8/IWVVivN4gxCEb4S86VWvguFHW3Uj Q9PMgWtl8rZN8oQOoZe2S0vHQg+HQ2APpxu3Ij5qpZy7kVppNNrIzgr0K7ioDzo+ ylTFCu2ELndzbSqv0TK0W2E6Vuhzlgt+vip8C4dGx4Sz3bHinbZAqkqxzgrWkF3L kqXM9UKMclpcFtfF34JQ6LCvNykCAwEAAaOCApowggKWMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFI1eKiWR8pKJZpxCRJa/RLij9+vXMB8GA1UdIwQYMBaAFKVu hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTA5ODQ4OTE1OTkwNDkxOTU1My8wLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDk4NDg5MTU5OTA0OTE5NTUz LzAvOEQ1RTJBMjU5MUYyOTI4OTY2OUM0MjQ0OTZCRjQ0QjhBM0Y3RUJENy5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAJnODwwDQYJKoZIhvcNAQELBQADggEBAGwdCX+/ oAs5swYpxlj4MKjwDyARuc1JYcfZC4F50R3fqkOiz7Gghp4zQH1qpOjKh5yGHEUl QOLHpqtZJ6koXcGBjQhRQhIX5ykoNwFZuOCrcyn+kPuF78cAX4Cw+rld8CCSsqUa woxRicQVfuTeCOR/vjESnt6Jfxt16PJkajXvpr5hVvM7RzC0DUItpFLNwrCGtBq9 UDyte697C94DS9KmHqUHBmrPFVu2Rmp6xc1SMxIdAZdCt8e7gF0lCJR7DSuJch8K 1EdD1MKwhqHSkRk7H4WRxHZZvDD7Wsq+qw+Crk9pbXzDyzO/kV4HIDKTspkvVG5v 0DCiMzcm87ZuZEk= -----END CERTIFICATE-----Generated at Mon Apr 27 21:54:23 2026 by rpki-client