$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/909D556251A0BE5F9234514028EBD37CE8E1280A.cer File: 909D556251A0BE5F9234514028EBD37CE8E1280A.cer (raw, json) Hash identifier: Lj1JNQjDlRHQUHIJWJhXuiey98PMKEk6s3j2BK/ag6c= Subject key identifier: 90:9D:55:62:51:A0:BE:5F:92:34:51:40:28:EB:D3:7C:E8:E1:28:0A Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Certificate serial: 15D74F0754B34F7CE2EB0E1A32739FE1E6D7063E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/909D556251A0BE5F9234514028EBD37CE8E1280A.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Thu 28 May 2026 08:27:36 +0000 Certificate not after: Thu 27 May 2027 08:32:36 +0000 Subordinate resources: AS: 63641 IP: 103.74.124.0/22 IP: 120.137.0.0/17 IP: 123.49.128.0 -- 123.49.247.255 IP: 2405:6c0::/32 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Jun 2026 19:04:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:d7:4f:07:54:b3:4f:7c:e2:eb:0e:1a:32:73:9f:e1:e6:d7:06:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Validity Not Before: May 28 08:27:36 2026 GMT Not After : May 27 08:32:36 2027 GMT Subject: CN=909D556251A0BE5F9234514028EBD37CE8E1280A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:c5:c7:76:7b:0f:15:5d:f3:03:c5:cd:4b:a2: 98:52:ce:8e:f3:c6:f1:ee:bf:66:4f:ff:8d:a5:1f: 24:ff:75:e5:48:67:83:1f:1e:e3:15:b8:ce:94:36: 15:50:f9:84:c2:43:fc:13:a8:17:93:b6:fe:62:f5: 56:06:c1:9e:47:ce:b1:a8:5d:df:2b:a2:a4:bf:b2: 6f:c6:cb:18:41:75:03:db:fb:7b:9c:ae:dd:79:35: eb:b6:1a:83:50:04:06:86:ff:86:59:f7:c5:c2:c1: f3:46:e6:35:f4:6c:b9:eb:fb:9e:79:b6:ba:00:d8: 0f:23:28:92:f0:18:22:73:06:39:15:7a:47:1c:2a: 99:94:00:5b:79:b5:9a:25:1b:0e:a4:ad:f7:8a:fc: a1:df:66:aa:16:ea:1c:c9:79:44:43:2f:af:cd:de: 3f:59:9e:e1:6c:7f:cb:f8:59:bb:cf:d6:8c:8b:16: 59:37:d2:8a:87:b2:04:3a:2e:86:f4:8f:d2:da:30: cd:6c:97:5f:8d:b8:4a:95:e7:5c:bf:81:9e:ed:8a: 48:cf:04:9a:0f:ba:f2:19:99:33:7a:9f:63:f2:3b: 5b:ee:aa:83:7c:8c:c2:61:21:7c:2b:8d:f7:3d:cf: 49:b0:6a:3e:42:dd:c7:75:42:c2:2f:03:98:a3:63: 5e:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 90:9D:55:62:51:A0:BE:5F:92:34:51:40:28:EB:D3:7C:E8:E1:28:0A X509v3 Authority Key Identifier: keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/909D556251A0BE5F9234514028EBD37CE8E1280A.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.74.124.0/22 120.137.0.0/17 123.49.128.0-123.49.247.255 IPv6: 2405:6c0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 63641 Signature Algorithm: sha256WithRSAEncryption 30:4f:da:27:a1:dc:e3:64:b5:c4:08:79:4b:5a:ea:4b:61:3a: 7b:41:1d:6a:80:cd:fb:d7:de:80:cc:32:9b:e7:11:9a:35:dc: c2:a1:36:5b:23:be:6f:be:e2:12:08:74:16:fe:74:20:ca:42: ae:b1:10:95:e0:52:f5:e0:9e:61:b0:76:67:a5:36:c6:50:01: 98:00:2a:d5:7f:38:85:ca:54:e3:54:db:cd:90:45:fe:6e:01: 04:8e:df:af:72:83:22:75:8f:94:af:d9:11:6b:b6:31:1d:86: 04:13:d2:e7:1c:d4:66:ec:e6:17:46:e1:6c:ff:9f:f5:43:29: fa:7b:49:88:05:9b:ef:21:90:08:fe:fd:b8:f2:19:d8:7f:4a: a1:7c:74:a2:11:05:6a:ea:24:33:19:03:18:92:22:86:78:04: c7:5d:24:f9:f9:f3:43:dd:b8:c4:57:76:ec:bd:53:08:67:c8: b9:93:9d:ae:c4:43:69:90:63:04:84:4f:7a:38:ca:dc:70:32: ea:93:e1:47:3d:95:90:63:67:9e:07:f9:03:51:fc:ed:92:16: 17:5b:a8:df:b6:87:dc:1a:3e:a1:8a:dd:13:58:d7:ff:5d:da: 39:02:71:5d:44:06:91:b9:6c:02:53:61:42:6c:7a:73:55:04: cd:e0:73:55 -----BEGIN CERTIFICATE----- MIIF5jCCBM6gAwIBAgIUFddPB1SzT3zi6w4aMnOf4ebXBj4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDUyODA4MjczNloX DTI3MDUyNzA4MzIzNlowMzExMC8GA1UEAxMoOTA5RDU1NjI1MUEwQkU1RjkyMzQ1 MTQwMjhFQkQzN0NFOEUxMjgwQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAO/Fx3Z7DxVd8wPFzUuimFLOjvPG8e6/Zk//jaUfJP915Uhngx8e4xW4zpQ2 FVD5hMJD/BOoF5O2/mL1VgbBnkfOsahd3yuipL+yb8bLGEF1A9v7e5yu3Xk167Ya g1AEBob/hln3xcLB80bmNfRsuev7nnm2ugDYDyMokvAYInMGORV6RxwqmZQAW3m1 miUbDqSt94r8od9mqhbqHMl5REMvr83eP1me4Wx/y/hZu8/WjIsWWTfSioeyBDou hvSP0towzWyXX424SpXnXL+Bnu2KSM8Emg+68hmZM3qfY/I7W+6qg3yMwmEhfCuN 9z3PSbBqPkLdx3VCwi8DmKNjXsECAwEAAaOCAtkwggLVMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFJCdVWJRoL5fkjRRQCjr03zo4SgKMB8GA1UdIwQYMBaAFKVu hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTA2NTU4MjMzMDM0Njc5OTEwNS8wLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDY1NTgyMzMwMzQ2Nzk5MTA1 LzAvOTA5RDU1NjI1MUEwQkU1RjkyMzQ1MTQwMjhFQkQzN0NFOEUxMjgwQS5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwQgYIKwYBBQUH AQcBAf8EMzAxMCAEAgABMBoDBAJnSnwDBAd4iQAwDAMEB3sxgAMEA3sx8DANBAIA AjAHAwUAJAUGwDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMA+JkwDQYJKoZIhvcN AQELBQADggEBADBP2ieh3ONktcQIeUta6kthOntBHWqAzfvX3oDMMpvnEZo13MKh Nlsjvm++4hIIdBb+dCDKQq6xEJXgUvXgnmGwdmelNsZQAZgAKtV/OIXKVONU282Q Rf5uAQSO369ygyJ1j5Sv2RFrtjEdhgQT0ucc1Gbs5hdG4Wz/n/VDKfp7SYgFm+8h kAj+/bjyGdh/SqF8dKIRBWrqJDMZAxiSIoZ4BMddJPn580PduMRXduy9UwhnyLmT na7EQ2mQYwSET3o4ytxwMuqT4Uc9lZBjZ54H+QNR/O2SFhdbqN+2h9waPqGK3RNY 1/9d2jkCcV1EBpG5bAJTYUJsenNVBM3gc1U= -----END CERTIFICATE-----Generated at Thu Jun 11 22:41:13 2026 by rpki-client