$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/95AFB4515D628A1186D20869CFEAF47D559D5337.cer File: 95AFB4515D628A1186D20869CFEAF47D559D5337.cer (raw, json) Hash identifier: UMimi9ZTOMPp44VgGwhoiKnMTxHobzFwA6tTV0LI4Sk= Subject key identifier: 95:AF:B4:51:5D:62:8A:11:86:D2:08:69:CF:EA:F4:7D:55:9D:53:37 Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Certificate serial: 641215E2EEB9ADF4D158E7828869D848BE054693 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1065585911217520643/0/95AFB4515D628A1186D20869CFEAF47D559D5337.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1065585911217520643/0/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Mon 02 Feb 2026 08:05:43 +0000 Certificate not after: Mon 01 Feb 2027 08:10:43 +0000 Subordinate resources: AS: 151268 IP: 103.109.20.0/22 IP: 103.236.52.0 -- 103.236.67.255 IP: 211.161.224.0/20 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 23 Feb 2026 09:42:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:12:15:e2:ee:b9:ad:f4:d1:58:e7:82:88:69:d8:48:be:05:46:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Validity Not Before: Feb 2 08:05:43 2026 GMT Not After : Feb 1 08:10:43 2027 GMT Subject: CN=95AFB4515D628A1186D20869CFEAF47D559D5337 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:b2:d0:d9:0d:bd:38:03:3a:3a:c8:48:e8:ed: ab:2f:eb:6f:74:51:9d:73:a9:59:0a:6d:f0:b6:a3: e1:68:4d:81:43:db:22:35:14:52:52:5b:e5:5f:46: 0b:47:f0:4a:47:b6:d8:51:42:5f:40:21:3c:5d:54: 36:76:5c:55:78:a4:1b:c3:e8:ae:37:d9:d7:55:91: f7:3b:29:0f:f6:29:e6:7a:a7:32:79:84:e1:08:cd: 05:26:95:be:80:ae:ef:ca:f8:1f:85:e6:50:0c:06: 28:49:f1:34:6b:ee:b6:53:0f:c8:bd:02:07:30:37: 8a:a3:99:b7:f8:c5:fa:7e:f8:f3:e7:c1:c9:1a:f2: a4:b4:59:eb:f6:d8:da:5a:3d:41:82:85:e7:be:5d: 77:64:fc:41:b6:9c:c7:c3:c7:99:90:80:5d:82:23: 7c:fc:f1:73:98:dd:dd:24:b5:bf:5e:33:bc:6b:04: ec:13:55:61:03:6e:df:46:24:be:bf:89:9b:08:4b: 03:98:fa:46:45:44:76:66:99:9b:48:ce:f3:6e:c9: 1c:bb:fe:fc:58:1c:e8:3a:c6:3a:0b:1f:02:b7:4e: d9:76:46:97:ff:6c:80:ff:df:4d:55:55:9d:4c:b8: d0:a9:e9:db:09:88:9e:73:40:32:a8:74:d6:d6:50: 7a:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 95:AF:B4:51:5D:62:8A:11:86:D2:08:69:CF:EA:F4:7D:55:9D:53:37 X509v3 Authority Key Identifier: keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217520643/0/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217520643/0/95AFB4515D628A1186D20869CFEAF47D559D5337.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.109.20.0/22 103.236.52.0-103.236.67.255 211.161.224.0/20 sbgp-autonomousSysNum: critical Autonomous System Numbers: 151268 Signature Algorithm: sha256WithRSAEncryption 6c:ce:61:92:07:f5:a2:b2:b4:71:c9:fa:0f:c1:d0:2b:1f:f6: 1f:0d:65:28:60:7f:f9:0b:a8:f4:04:61:5c:c6:a2:31:35:be: 70:0d:13:95:9e:17:9f:2d:4c:14:49:d1:9a:56:a9:74:01:02: aa:27:76:29:96:b5:b1:d3:ff:1c:6f:10:85:8d:e7:27:f1:65: bd:51:6f:58:44:e7:7c:0a:b3:cb:36:7f:83:56:4a:ec:e3:8c: 6a:b0:f0:8a:4e:c0:8d:41:5e:e9:d7:94:26:2e:ff:9b:cc:9c: 2d:67:17:3a:c2:28:f3:70:29:ff:85:c2:14:bc:8e:cf:fb:b9: 97:f4:fa:ae:13:82:eb:a3:38:62:12:61:ee:6b:09:cf:c2:3c: 38:05:ff:f3:51:7b:47:36:32:74:98:3f:47:24:c1:74:88:e1: 46:67:02:a9:70:d9:ec:24:e3:e8:61:cf:46:b8:87:74:b8:1b: b1:3d:4c:d7:1d:ee:e0:28:39:e7:05:83:75:e7:18:3f:bb:0a: d9:7b:8c:ca:00:e4:d4:2e:6a:c5:a0:a5:70:a2:54:25:f5:5c: e0:03:fa:4c:27:fc:95:f7:e9:90:f8:fc:29:f0:3c:cb:f3:7c: ba:79:6c:06:d3:8c:48:c7:be:c2:4d:b2:d4:f9:43:17:7a:1a: 2b:af:b8:e5 -----BEGIN CERTIFICATE----- MIIF1zCCBL+gAwIBAgIUZBIV4u65rfTRWOeCiGnYSL4FRpMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDIwMjA4MDU0M1oX DTI3MDIwMTA4MTA0M1owMzExMC8GA1UEAxMoOTVBRkI0NTE1RDYyOEExMTg2RDIw ODY5Q0ZFQUY0N0Q1NTlENTMzNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALey0NkNvTgDOjrISOjtqy/rb3RRnXOpWQpt8Laj4WhNgUPbIjUUUlJb5V9G C0fwSke22FFCX0AhPF1UNnZcVXikG8PorjfZ11WR9zspD/Yp5nqnMnmE4QjNBSaV voCu78r4H4XmUAwGKEnxNGvutlMPyL0CBzA3iqOZt/jF+n748+fByRrypLRZ6/bY 2lo9QYKF575dd2T8Qbacx8PHmZCAXYIjfPzxc5jd3SS1v14zvGsE7BNVYQNu30Yk vr+JmwhLA5j6RkVEdmaZm0jO827JHLv+/Fgc6DrGOgsfArdO2XZGl/9sgP/fTVVV nUy40Knp2wmInnNAMqh01tZQenMCAwEAAaOCAsowggLGMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFJWvtFFdYooRhtIIac/q9H1VnVM3MB8GA1UdIwQYMBaAFKVu hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTA2NTU4NTkxMTIxNzUyMDY0My8wLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDY1NTg1OTExMjE3NTIwNjQz LzAvOTVBRkI0NTE1RDYyOEExMTg2RDIwODY5Q0ZFQUY0N0Q1NTlENTMzNy5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwMwYIKwYBBQUH AQcBAf8EJDAiMCAEAgABMBoDBAJnbRQwDAMEAmfsNAMEAmfsQAMEBNOh4DAaBggr BgEFBQcBCAEB/wQLMAmgBzAFAgMCTuQwDQYJKoZIhvcNAQELBQADggEBAGzOYZIH 9aKytHHJ+g/B0Csf9h8NZShgf/kLqPQEYVzGojE1vnANE5WeF58tTBRJ0ZpWqXQB AqondimWtbHT/xxvEIWN5yfxZb1Rb1hE53wKs8s2f4NWSuzjjGqw8IpOwI1BXunX lCYu/5vMnC1nFzrCKPNwKf+FwhS8js/7uZf0+q4TguujOGISYe5rCc/CPDgF//NR e0c2MnSYP0ckwXSI4UZnAqlw2ewk4+hhz0a4h3S4G7E9TNcd7uAoOecFg3XnGD+7 Ctl7jMoA5NQuasWgpXCiVCX1XOAD+kwn/JX36ZD4/CnwPMvzfLp5bAbTjEjHvsJN stT5Qxd6GiuvuOU= -----END CERTIFICATE-----Generated at Mon Feb 23 00:55:39 2026 by rpki-client