$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9684E4B95F47A986892F9930EF9D9E453227439F.cer File: 9684E4B95F47A986892F9930EF9D9E453227439F.cer (raw, json) Hash identifier: 57FOg6PshujkkQznYSyGENelXvJvFGZftl8dg1cqkW0= Subject key identifier: 96:84:E4:B9:5F:47:A9:86:89:2F:99:30:EF:9D:9E:45:32:27:43:9F Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Certificate serial: 4C61B531A3606F09602B3673505912A9633F95B3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1065582741577990146/0/9684E4B95F47A986892F9930EF9D9E453227439F.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1065582741577990146/0/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Fri 29 May 2026 01:11:19 +0000 Certificate not after: Fri 28 May 2027 01:16:19 +0000 Subordinate resources: AS: 59040 AS: 131574 AS: 151302 IP: 43.227.8.0/22 IP: 43.249.168.0/22 IP: 43.250.32.0/22 IP: 103.39.200.0/22 IP: 103.41.0.0/22 IP: 103.41.164.0/22 IP: 103.143.16.0/22 IP: 211.101.208.0/20 IP: 2400:9620::/32 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 15:28:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:61:b5:31:a3:60:6f:09:60:2b:36:73:50:59:12:a9:63:3f:95:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Validity Not Before: May 29 01:11:19 2026 GMT Not After : May 28 01:16:19 2027 GMT Subject: CN=9684E4B95F47A986892F9930EF9D9E453227439F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:4f:19:3c:91:db:1a:11:5f:1e:8d:68:b4:50: f3:4a:b5:e0:22:54:68:5d:28:b0:eb:16:59:66:61: e4:d4:18:18:3b:1b:72:1b:59:a7:3a:53:07:47:fc: ea:ae:84:89:19:9c:b8:39:d1:36:dd:70:89:f7:80: 5e:5f:bd:ea:a4:ec:53:75:0d:ff:8c:37:e4:e3:a8: 86:b3:04:36:87:30:4f:0b:54:66:fa:57:9a:94:85: 66:c8:a6:a1:03:7a:de:42:3a:aa:d9:c8:f1:86:af: 37:ca:fb:a2:29:e3:90:93:26:18:23:3e:a6:c9:23: 82:3c:82:35:b4:b4:74:39:f2:b4:a3:42:49:7f:e6: 12:f4:12:ed:b4:d5:05:35:d4:75:d3:1f:30:05:1e: 17:3b:b5:fe:c2:5d:4a:5f:f5:90:ab:8e:b4:da:06: 90:59:04:ea:c2:52:c3:1e:04:8e:73:6b:cd:a8:9d: 25:10:ce:7a:06:6c:04:40:02:d2:a2:78:00:46:f1: 50:af:23:e5:f3:12:06:f4:aa:c2:ab:a2:04:3f:ed: e8:d5:b7:aa:c3:54:a1:ee:cc:4f:59:39:ea:e6:e2: e8:b9:b6:08:d4:06:34:11:cb:38:f5:9d:47:b3:55: 15:7f:39:e4:c8:47:36:a9:06:76:49:72:5f:6a:35: 9a:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 96:84:E4:B9:5F:47:A9:86:89:2F:99:30:EF:9D:9E:45:32:27:43:9F X509v3 Authority Key Identifier: keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577990146/0/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577990146/0/9684E4B95F47A986892F9930EF9D9E453227439F.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.227.8.0/22 43.249.168.0/22 43.250.32.0/22 103.39.200.0/22 103.41.0.0/22 103.41.164.0/22 103.143.16.0/22 211.101.208.0/20 IPv6: 2400:9620::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 59040 131574 151302 Signature Algorithm: sha256WithRSAEncryption 13:7e:67:0c:ff:1c:f9:4b:f3:75:fe:c7:98:33:64:3a:83:dc: 43:28:fa:16:b9:97:75:02:37:a4:89:08:7e:2d:87:66:25:06: 7e:0f:5c:42:bd:99:d8:7a:ae:d8:77:56:1c:c0:5a:cc:3b:84: 75:57:f5:f4:fe:e9:17:5f:0d:48:2c:7d:78:e5:d7:1c:5c:78: f6:40:f5:ad:fc:b9:80:57:5e:4c:b4:60:87:d9:81:40:9d:e9: ae:73:23:6b:f8:98:70:76:b9:75:48:81:2f:58:b5:7d:16:82: 67:49:63:da:c7:f9:72:ba:8a:cd:b8:9c:d6:ff:aa:fe:fb:12: a3:64:f5:9c:29:3a:6a:ed:1a:3b:a9:c6:cc:97:79:0c:b1:50: a6:65:d5:51:d1:09:d6:83:f6:f5:a7:f9:b3:18:cb:d0:57:a2: ec:47:66:b1:c3:8e:da:c9:da:34:c9:0f:37:1f:db:ce:92:05: 42:ab:e5:5a:0f:f5:0c:8d:ec:3a:4a:cf:7f:b8:2d:81:39:10: 4c:82:66:83:69:9d:86:50:fb:91:05:40:89:8d:2b:51:35:e5: ce:83:05:1e:2a:81:a4:58:ee:98:82:d6:e5:93:53:7b:cb:6c: b3:99:01:f6:7f:20:cd:2d:92:32:67:2b:5e:c9:33:71:a1:e7: 40:7f:08:38 -----BEGIN CERTIFICATE----- MIIGBjCCBO6gAwIBAgIUTGG1MaNgbwlgKzZzUFkSqWM/lbMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDUyOTAxMTExOVoX DTI3MDUyODAxMTYxOVowMzExMC8GA1UEAxMoOTY4NEU0Qjk1RjQ3QTk4Njg5MkY5 OTMwRUY5RDlFNDUzMjI3NDM5RjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALxPGTyR2xoRXx6NaLRQ80q14CJUaF0osOsWWWZh5NQYGDsbchtZpzpTB0f8 6q6EiRmcuDnRNt1wifeAXl+96qTsU3UN/4w35OOohrMENocwTwtUZvpXmpSFZsim oQN63kI6qtnI8YavN8r7oinjkJMmGCM+pskjgjyCNbS0dDnytKNCSX/mEvQS7bTV BTXUddMfMAUeFzu1/sJdSl/1kKuOtNoGkFkE6sJSwx4EjnNrzaidJRDOegZsBEAC 0qJ4AEbxUK8j5fMSBvSqwquiBD/t6NW3qsNUoe7MT1k56ubi6Lm2CNQGNBHLOPWd R7NVFX855MhHNqkGdklyX2o1musCAwEAAaOCAvkwggL1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFJaE5LlfR6mGiS+ZMO+dnkUyJ0OfMB8GA1UdIwQYMBaAFKVu hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTA2NTU4Mjc0MTU3Nzk5MDE0Ni8wLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDY1NTgyNzQxNTc3OTkwMTQ2 LzAvOTY4NEU0Qjk1RjQ3QTk4Njg5MkY5OTMwRUY5RDlFNDUzMjI3NDM5Ri5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwWAYIKwYBBQUH AQcBAf8ESTBHMDYEAgABMDADBAIr4wgDBAIr+agDBAIr+iADBAJnJ8gDBAJnKQAD BAJnKaQDBAJnjxADBATTZdAwDQQCAAIwBwMFACQAliAwJAYIKwYBBQUHAQgBAf8E FTAToBEwDwIDAOagAgMCAfYCAwJPBjANBgkqhkiG9w0BAQsFAAOCAQEAE35nDP8c +Uvzdf7HmDNkOoPcQyj6FrmXdQI3pIkIfi2HZiUGfg9cQr2Z2Hqu2HdWHMBazDuE dVf19P7pF18NSCx9eOXXHFx49kD1rfy5gFdeTLRgh9mBQJ3prnMja/iYcHa5dUiB L1i1fRaCZ0lj2sf5crqKzbic1v+q/vsSo2T1nCk6au0aO6nGzJd5DLFQpmXVUdEJ 1oP29af5sxjL0Fei7EdmscOO2snaNMkPNx/bzpIFQqvlWg/1DI3sOkrPf7gtgTkQ TIJmg2mdhlD7kQVAiY0rUTXlzoMFHiqBpFjumILW5ZNTe8tss5kB9n8gzS2SMmcr XskzcaHnQH8IOA== -----END CERTIFICATE-----Generated at Fri May 29 21:14:00 2026 by rpki-client