$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF.cer File: 9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF.cer (raw, json) Hash identifier: y4lkQoP58mgWMgtbzwTsG/W23rGSW9rn9anwuGz3Zmk= Subject key identifier: 93:13:66:50:20:BD:F9:5D:FA:4A:AC:0E:1E:4A:9A:8E:16:F3:A7:EF Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Certificate serial: 5177AAF2BF67593714172B16C780BFCD610F6469 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1100968758509305858/0/9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1100968758509305858/0/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Mon 27 Apr 2026 02:11:49 +0000 Certificate not after: Mon 26 Apr 2027 02:16:49 +0000 Subordinate resources: AS: 10212 AS: 17776 AS: 17997 IP: 183.91.144.0/20 IP: 210.5.0.0/19 IP: 218.96.0.0 -- 218.97.127.255 IP: 2403:8d00::/32 IP: 2403:b400::/32 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Apr 2026 07:23:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:77:aa:f2:bf:67:59:37:14:17:2b:16:c7:80:bf:cd:61:0f:64:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Validity Not Before: Apr 27 02:11:49 2026 GMT Not After : Apr 26 02:16:49 2027 GMT Subject: CN=9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:55:6e:da:30:a1:e6:50:bf:3e:96:f7:da:55: ce:5b:ec:b8:43:72:ce:eb:a5:1c:03:d5:71:79:a5: 53:e6:52:30:40:9d:e4:5c:7b:f0:eb:d2:27:bd:43: d0:c4:bb:f1:84:01:f7:b4:4f:d0:a1:9b:a6:86:a9: fc:88:72:0b:e7:a3:03:52:89:8c:67:01:e8:e1:c2: d5:ed:d9:70:57:12:a8:6a:e3:b6:0d:fd:27:a5:3d: 11:f5:ac:14:70:b2:7b:fe:55:00:59:c7:20:8a:3a: bf:e4:4f:60:14:77:0c:58:8e:54:03:5e:f0:5f:1b: 60:89:fa:09:99:16:59:55:89:f5:9a:14:af:0b:08: 83:1b:80:6f:bf:be:a9:41:4f:e6:ca:21:44:9e:0a: ce:0d:fb:22:c5:b2:3f:aa:f5:80:ba:6a:1d:86:72: 24:fe:44:46:a3:38:bc:cd:38:0a:65:39:a4:a1:3a: 4b:03:b1:b8:70:c5:fa:c2:3a:b1:31:b8:46:0c:04: 1d:93:42:6e:39:09:07:2c:33:aa:da:4a:9b:61:59: 46:c0:34:1d:df:64:57:85:70:a3:4b:d7:86:29:7d: fc:a8:53:6e:a2:46:b6:71:a5:bb:b7:19:c9:3e:50: 7a:1f:7b:b5:40:9c:17:2e:33:67:0b:f2:03:3b:dd: 5d:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 93:13:66:50:20:BD:F9:5D:FA:4A:AC:0E:1E:4A:9A:8E:16:F3:A7:EF X509v3 Authority Key Identifier: keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1100968758509305858/0/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1100968758509305858/0/9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 183.91.144.0/20 210.5.0.0/19 218.96.0.0-218.97.127.255 IPv6: 2403:8d00::/32 2403:b400::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 10212 17776 17997 Signature Algorithm: sha256WithRSAEncryption 54:a3:e3:67:0c:e9:c9:6c:c9:c4:e1:c5:69:03:c2:41:9e:81: 7b:38:3c:7a:a8:0d:f6:38:bd:59:f3:a2:e3:ee:7f:eb:8d:78: a8:b9:02:fc:5b:8d:21:42:69:0a:a9:6c:90:bc:63:58:a9:f0: c2:b3:df:1b:24:cb:0c:7f:84:9d:96:36:c5:70:d3:17:11:a5: 57:35:cf:bb:72:b2:ca:ff:30:86:a0:34:3f:77:ad:7d:ed:65: 6a:f3:9c:e6:e7:ef:53:01:ec:8e:80:81:a4:bf:c2:c7:ec:a3: 45:bc:fe:c9:69:06:51:c5:38:17:fa:ac:df:09:f7:0b:56:c2: ee:60:90:7b:93:15:17:8f:d1:b5:82:3e:1b:45:84:78:65:cf: 31:f9:9c:29:13:ce:2b:a0:32:0e:84:cf:c8:6d:ef:43:1f:6d: 41:e2:15:4a:b2:3b:ff:41:2a:e5:af:70:39:3b:31:9b:bf:46: 88:97:f3:e8:a6:2d:a4:fd:a0:72:ae:6e:54:e4:c2:46:dd:8a: 55:c0:74:2f:60:55:ea:a8:fb:a4:cd:c6:3b:0f:30:f7:71:45: 36:b3:05:a9:80:11:41:58:f2:7c:fa:45:3b:0c:6e:31:34:d0: fd:19:29:8a:8d:89:23:64:e4:a9:24:0a:84:39:6d:9e:79:d5: 06:4a:b2:8d -----BEGIN CERTIFICATE----- MIIF8zCCBNugAwIBAgIUUXeq8r9nWTcUFysWx4C/zWEPZGkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDQyNzAyMTE0OVoX DTI3MDQyNjAyMTY0OVowMzExMC8GA1UEAxMoOTMxMzY2NTAyMEJERjk1REZBNEFB QzBFMUU0QTlBOEUxNkYzQTdFRjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANdVbtowoeZQvz6W99pVzlvsuENyzuulHAPVcXmlU+ZSMECd5Fx78OvSJ71D 0MS78YQB97RP0KGbpoap/IhyC+ejA1KJjGcB6OHC1e3ZcFcSqGrjtg39J6U9EfWs FHCye/5VAFnHIIo6v+RPYBR3DFiOVANe8F8bYIn6CZkWWVWJ9ZoUrwsIgxuAb7++ qUFP5sohRJ4Kzg37IsWyP6r1gLpqHYZyJP5ERqM4vM04CmU5pKE6SwOxuHDF+sI6 sTG4RgwEHZNCbjkJBywzqtpKm2FZRsA0Hd9kV4Vwo0vXhil9/KhTbqJGtnGlu7cZ yT5Qeh97tUCcFy4zZwvyAzvdXZ0CAwEAAaOCAuYwggLiMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFJMTZlAgvfld+kqsDh5Kmo4W86fvMB8GA1UdIwQYMBaAFKVu hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTEwMDk2ODc1ODUwOTMwNTg1OC8wLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMTAwOTY4NzU4NTA5MzA1ODU4 LzAvOTMxMzY2NTAyMEJERjk1REZBNEFBQzBFMUU0QTlBOEUxNkYzQTdFRi5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwSAYIKwYBBQUH AQcBAf8EOTA3MB8EAgABMBkDBAS3W5ADBAXSBQAwCwMDBdpgAwQH2mEAMBQEAgAC MA4DBQAkA40AAwUAJAO0ADAhBggrBgEFBQcBCAEB/wQSMBCgDjAMAgIn5AICRXAC AkZNMA0GCSqGSIb3DQEBCwUAA4IBAQBUo+NnDOnJbMnE4cVpA8JBnoF7ODx6qA32 OL1Z86Lj7n/rjXiouQL8W40hQmkKqWyQvGNYqfDCs98bJMsMf4SdljbFcNMXEaVX Nc+7crLK/zCGoDQ/d6197WVq85zm5+9TAeyOgIGkv8LH7KNFvP7JaQZRxTgX+qzf CfcLVsLuYJB7kxUXj9G1gj4bRYR4Zc8x+ZwpE84roDIOhM/Ibe9DH21B4hVKsjv/ QSrlr3A5OzGbv0aIl/Popi2k/aByrm5U5MJG3YpVwHQvYFXqqPukzcY7DzD3cUU2 swWpgBFBWPJ8+kU7DG4xNND9GSmKjYkjZOSpJAqEOW2eedUGSrKN -----END CERTIFICATE-----Generated at Mon Apr 27 09:44:41 2026 by rpki-client