$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8DC9C03E9DEC6A8F91CB72215C9A4A9B8C681794.cer File: 8DC9C03E9DEC6A8F91CB72215C9A4A9B8C681794.cer (raw, json) Hash identifier: SVlY3KxTArWI11bMFIZLJRzQ5dJhI2ZByoBhiJQPwjA= Subject key identifier: 8D:C9:C0:3E:9D:EC:6A:8F:91:CB:72:21:5C:9A:4A:9B:8C:68:17:94 Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Certificate serial: 3AD2527A3C825FE75111A389013F263F7186781D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1098786411550605315/0/8DC9C03E9DEC6A8F91CB72215C9A4A9B8C681794.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1098786411550605315/0/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Tue 21 Apr 2026 01:39:56 +0000 Certificate not after: Tue 20 Apr 2027 01:44:56 +0000 Subordinate resources: AS: 146758 IP: 103.177.28.0/23 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Apr 2026 07:23:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:d2:52:7a:3c:82:5f:e7:51:11:a3:89:01:3f:26:3f:71:86:78:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Validity Not Before: Apr 21 01:39:56 2026 GMT Not After : Apr 20 01:44:56 2027 GMT Subject: CN=8DC9C03E9DEC6A8F91CB72215C9A4A9B8C681794 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:75:65:7f:fe:43:19:ea:a6:e0:9d:be:4b:15: 24:3b:05:b2:be:a0:02:d6:d8:47:ac:46:86:c2:3f: 06:a0:1b:54:eb:6a:3f:26:5c:c9:a9:91:3e:57:7b: c8:98:2f:ad:ee:69:58:55:4f:33:fd:9d:fd:3d:0e: 34:b9:34:15:75:3f:0a:01:fd:a1:54:d6:df:3c:56: d1:6c:70:3d:3e:03:4f:de:5b:1f:ae:b3:52:4f:06: b0:b2:13:2a:a0:dd:19:93:b0:43:16:be:82:b3:38: fb:ec:66:fe:98:b0:e2:72:0a:79:f8:16:32:82:94: 64:11:3c:1c:1c:51:d4:1a:55:59:15:ab:f4:9c:e1: e7:77:1a:63:f8:5a:3c:33:ea:c6:b9:f1:b5:02:68: c7:88:7f:ac:a0:bd:59:94:28:b1:21:c3:ab:b0:4c: a4:9c:d9:62:31:34:00:bc:67:91:02:15:3b:96:13: 69:a3:cf:2f:39:23:80:a1:28:e6:e7:09:8b:b6:dd: 60:5a:f6:4a:27:0c:f5:0e:d2:45:df:53:76:90:8f: 10:5f:1b:8b:d1:d4:36:2b:50:b6:04:fb:83:77:8f: 8c:c9:25:42:8d:70:b3:24:1f:12:18:6c:9b:82:7a: 27:88:c3:79:e3:7a:18:b3:77:14:4c:89:7a:ff:51: 5a:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 8D:C9:C0:3E:9D:EC:6A:8F:91:CB:72:21:5C:9A:4A:9B:8C:68:17:94 X509v3 Authority Key Identifier: keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1098786411550605315/0/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1098786411550605315/0/8DC9C03E9DEC6A8F91CB72215C9A4A9B8C681794.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.177.28.0/23 sbgp-autonomousSysNum: critical Autonomous System Numbers: 146758 Signature Algorithm: sha256WithRSAEncryption 87:c0:8b:4f:4b:eb:83:35:2c:ad:97:e7:e2:6c:d3:96:9f:5b: 5c:b7:8b:ef:c0:63:fd:b9:d8:52:db:f5:95:38:b9:b0:5c:2d: 9f:d7:6f:bf:c6:3f:f2:19:2b:be:a2:ff:11:bb:e3:4c:45:c5: 32:39:6e:bf:f3:37:e0:08:43:0b:ad:f8:c7:a7:b5:a0:30:61: 1d:14:86:73:a1:d3:75:4e:fd:c2:01:11:6f:d9:dc:26:54:2b: 78:78:17:ed:9d:e3:71:cb:70:cb:af:3c:f8:46:60:cb:83:a1: 4f:8a:09:cb:3d:b2:f4:c9:1e:be:1d:11:5f:ac:16:3e:7f:1f: e4:8d:16:ef:93:74:05:cd:48:63:31:86:31:fc:a3:7d:71:76: 60:ce:5b:4a:b1:cb:d8:9b:da:1f:82:bd:1c:84:77:2d:b0:a7: 53:47:86:84:d0:bb:2c:30:44:4b:bb:57:74:f3:52:f1:8b:3e: dd:0c:1d:20:7e:78:4a:cb:7b:9d:97:67:41:c7:27:41:91:5a: 52:9e:1a:49:8d:3e:59:6c:38:e1:07:39:9d:5e:97:85:15:e7: 6a:fe:99:5b:92:d7:e1:45:78:75:e3:2a:bd:5b:b3:bd:a0:71: aa:c3:92:6e:4d:a8:90:48:1a:48:0c:3a:71:63:d9:73:1a:d5: 92:8c:51:d3 -----BEGIN CERTIFICATE----- MIIFwzCCBKugAwIBAgIUOtJSejyCX+dREaOJAT8mP3GGeB0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDQyMTAxMzk1NloX DTI3MDQyMDAxNDQ1NlowMzExMC8GA1UEAxMoOERDOUMwM0U5REVDNkE4RjkxQ0I3 MjIxNUM5QTRBOUI4QzY4MTc5NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAM51ZX/+QxnqpuCdvksVJDsFsr6gAtbYR6xGhsI/BqAbVOtqPyZcyamRPld7 yJgvre5pWFVPM/2d/T0ONLk0FXU/CgH9oVTW3zxW0WxwPT4DT95bH66zUk8GsLIT KqDdGZOwQxa+grM4++xm/piw4nIKefgWMoKUZBE8HBxR1BpVWRWr9Jzh53caY/ha PDPqxrnxtQJox4h/rKC9WZQosSHDq7BMpJzZYjE0ALxnkQIVO5YTaaPPLzkjgKEo 5ucJi7bdYFr2SicM9Q7SRd9TdpCPEF8bi9HUNitQtgT7g3ePjMklQo1wsyQfEhhs m4J6J4jDeeN6GLN3FEyJev9RWrkCAwEAAaOCArYwggKyMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFI3JwD6d7GqPkctyIVyaSpuMaBeUMB8GA1UdIwQYMBaAFKVu hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTA5ODc4NjQxMTU1MDYwNTMxNS8wLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDk4Nzg2NDExNTUwNjA1MzE1 LzAvOERDOUMwM0U5REVDNkE4RjkxQ0I3MjIxNUM5QTRBOUI4QzY4MTc5NC5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAFnsRwwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQID Aj1GMA0GCSqGSIb3DQEBCwUAA4IBAQCHwItPS+uDNSytl+fibNOWn1tct4vvwGP9 udhS2/WVOLmwXC2f12+/xj/yGSu+ov8Ru+NMRcUyOW6/8zfgCEMLrfjHp7WgMGEd FIZzodN1Tv3CARFv2dwmVCt4eBftneNxy3DLrzz4RmDLg6FPignLPbL0yR6+HRFf rBY+fx/kjRbvk3QFzUhjMYYx/KN9cXZgzltKscvYm9ofgr0chHctsKdTR4aE0Lss MERLu1d081Lxiz7dDB0gfnhKy3udl2dBxydBkVpSnhpJjT5ZbDjhBzmdXpeFFedq /plbktfhRXh14yq9W7O9oHGqw5JuTaiQSBpIDDpxY9lzGtWSjFHT -----END CERTIFICATE-----Generated at Mon Apr 27 09:38:25 2026 by rpki-client