$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/98AA7A42F1AD88F64241535778555B0FE42637EA.cer File: 98AA7A42F1AD88F64241535778555B0FE42637EA.cer (raw, json) Hash identifier: O8qNZA6qdj0izfHQEpqoU2s8w0RQgR9Xo2kmtRt1VdY= Subject key identifier: 98:AA:7A:42:F1:AD:88:F6:42:41:53:57:78:55:5B:0F:E4:26:37:EA Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Certificate serial: 24D7D5AAEE669E545D960236D0A04601A97822B1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1094527815195295745/0/98AA7A42F1AD88F64241535778555B0FE42637EA.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1094527815195295745/0/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Thu 09 Apr 2026 07:37:48 +0000 Certificate not after: Thu 08 Apr 2027 07:42:48 +0000 Subordinate resources: IP: 103.60.228.0/22 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 12:10:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:d7:d5:aa:ee:66:9e:54:5d:96:02:36:d0:a0:46:01:a9:78:22:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Validity Not Before: Apr 9 07:37:48 2026 GMT Not After : Apr 8 07:42:48 2027 GMT Subject: CN=98AA7A42F1AD88F64241535778555B0FE42637EA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:d3:8e:40:c1:cc:dd:d5:4e:ec:e2:0b:3f:4f: fb:cc:b2:a1:18:ff:ba:90:85:cc:a4:e1:f9:c0:7e: 54:09:f0:db:f9:74:9d:39:c3:8c:0e:e2:85:36:2b: 05:de:12:88:a3:c4:23:b6:4c:ac:0c:e9:d3:bb:88: 44:9b:91:f0:32:16:ba:67:fd:6b:d9:65:9d:87:e1: de:40:12:f1:c3:d8:f1:3b:45:f5:3a:1c:40:ce:3f: 4b:ea:de:a4:f4:a8:24:25:fd:03:9f:12:04:e9:ec: 07:b4:fc:71:2e:26:34:64:13:51:78:5a:41:e8:4a: c0:0b:ae:78:48:cc:29:53:df:e6:23:6d:d8:03:5f: 0b:30:26:0a:9f:7d:46:c3:d3:e7:1a:d3:c7:59:e4: 8c:de:88:42:e1:35:e4:58:4e:80:2b:0f:5d:24:9c: 84:47:6e:76:38:ed:c4:2c:23:34:96:cf:f3:10:d1: c3:37:f4:98:84:38:fc:7e:df:18:9e:4c:d4:50:39: cd:3a:52:85:80:89:ce:63:21:f4:df:cf:e8:9c:60: 25:65:43:2a:1c:9a:97:a5:bc:dc:74:1f:c7:41:ba: 30:5c:f9:ad:7c:ce:fb:fe:dd:81:b8:db:e6:08:8f: 71:dd:53:1b:f7:75:18:4d:80:4f:ca:0a:9b:98:4a: 0a:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 98:AA:7A:42:F1:AD:88:F6:42:41:53:57:78:55:5B:0F:E4:26:37:EA X509v3 Authority Key Identifier: keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1094527815195295745/0/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1094527815195295745/0/98AA7A42F1AD88F64241535778555B0FE42637EA.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.60.228.0/22 Signature Algorithm: sha256WithRSAEncryption 98:bb:48:b5:4e:d0:df:f0:5e:f1:92:f5:88:ab:46:59:a0:e5: e6:93:03:ee:1d:88:61:55:bd:72:6b:64:a0:a1:31:04:f8:70: 67:a3:e3:fe:d5:6e:60:83:b5:1a:6c:34:ec:35:7b:19:a6:a8: 45:44:bb:f5:2a:bd:22:5e:a2:5d:a7:6f:3d:2c:d2:9b:34:0c: c1:42:74:82:74:a4:f3:25:ba:41:57:3f:cf:08:c1:aa:75:28: b9:f5:fb:33:2b:61:d3:f9:38:8c:26:2d:eb:05:cb:6e:53:ac: d6:12:a6:9b:3f:84:86:63:66:c5:ad:4d:b4:45:2a:90:76:2e: 52:38:36:f6:56:37:f9:51:22:65:0d:a4:d7:0a:a7:3b:2f:66: fe:69:fb:a6:b9:0c:df:05:96:39:56:90:f8:e5:c4:7f:bd:8c: b3:bb:28:f2:65:25:59:34:b6:15:d0:51:38:d6:e9:e1:34:4a: 44:0f:eb:c9:b0:ca:97:c5:6e:43:1b:17:bd:59:c4:77:f0:89: 1f:52:1f:c9:d0:2f:27:0a:6a:7a:75:72:04:52:eb:4b:45:a4: ca:e3:91:d6:b9:2f:e5:57:5d:bd:0d:70:ed:81:c7:c3:76:d3: 97:bf:83:9b:eb:23:67:09:cc:0a:c1:43:b9:c2:27:ee:29:29: 7a:5b:0b:ce -----BEGIN CERTIFICATE----- MIIFpzCCBI+gAwIBAgIUJNfVqu5mnlRdlgI20KBGAal4IrEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDQwOTA3Mzc0OFoX DTI3MDQwODA3NDI0OFowMzExMC8GA1UEAxMoOThBQTdBNDJGMUFEODhGNjQyNDE1 MzU3Nzg1NTVCMEZFNDI2MzdFQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOrTjkDBzN3VTuziCz9P+8yyoRj/upCFzKTh+cB+VAnw2/l0nTnDjA7ihTYr Bd4SiKPEI7ZMrAzp07uIRJuR8DIWumf9a9llnYfh3kAS8cPY8TtF9TocQM4/S+re pPSoJCX9A58SBOnsB7T8cS4mNGQTUXhaQehKwAuueEjMKVPf5iNt2ANfCzAmCp99 RsPT5xrTx1nkjN6IQuE15FhOgCsPXSSchEdudjjtxCwjNJbP8xDRwzf0mIQ4/H7f GJ5M1FA5zTpShYCJzmMh9N/P6JxgJWVDKhyal6W83HQfx0G6MFz5rXzO+/7dgbjb 5giPcd1TG/d1GE2AT8oKm5hKCn0CAwEAAaOCApowggKWMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFJiqekLxrYj2QkFTV3hVWw/kJjfqMB8GA1UdIwQYMBaAFKVu hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTA5NDUyNzgxNTE5NTI5NTc0NS8wLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDk0NTI3ODE1MTk1Mjk1NzQ1 LzAvOThBQTdBNDJGMUFEODhGNjQyNDE1MzU3Nzg1NTVCMEZFNDI2MzdFQS5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAJnPOQwDQYJKoZIhvcNAQELBQADggEBAJi7SLVO 0N/wXvGS9YirRlmg5eaTA+4diGFVvXJrZKChMQT4cGej4/7VbmCDtRpsNOw1exmm qEVEu/UqvSJeol2nbz0s0ps0DMFCdIJ0pPMlukFXP88Iwap1KLn1+zMrYdP5OIwm LesFy25TrNYSpps/hIZjZsWtTbRFKpB2LlI4NvZWN/lRImUNpNcKpzsvZv5p+6a5 DN8FljlWkPjlxH+9jLO7KPJlJVk0thXQUTjW6eE0SkQP68mwypfFbkMbF71ZxHfw iR9SH8nQLycKanp1cgRS60tFpMrjkda5L+VXXb0NcO2Bx8N205e/g5vrI2cJzArB Q7nCJ+4pKXpbC84= -----END CERTIFICATE-----Generated at Mon Apr 13 09:29:04 2026 by rpki-client