$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9B22C19D842E45AA84439366694E4C828C309CEE.cer File: 9B22C19D842E45AA84439366694E4C828C309CEE.cer (raw, json) Hash identifier: /KY3+FUj4lseSyoFWHZe2V1IB+b5jbBB2+TrWQ5Jtbo= Subject key identifier: 9B:22:C1:9D:84:2E:45:AA:84:43:93:66:69:4E:4C:82:8C:30:9C:EE Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Certificate serial: 3629689D759AC511D61C2CB5DB7BB9C616772BD1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1065588553129721859/0/9B22C19D842E45AA84439366694E4C828C309CEE.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1065588553129721859/0/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Fri 29 May 2026 05:46:55 +0000 Certificate not after: Fri 28 May 2027 05:51:55 +0000 Subordinate resources: IP: 27.0.204.0 -- 27.0.215.255 IP: 103.208.48.0/22 IP: 2406:e780::/32 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Jun 2026 04:35:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:29:68:9d:75:9a:c5:11:d6:1c:2c:b5:db:7b:b9:c6:16:77:2b:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Validity Not Before: May 29 05:46:55 2026 GMT Not After : May 28 05:51:55 2027 GMT Subject: CN=9B22C19D842E45AA84439366694E4C828C309CEE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:54:3e:63:2a:13:80:f4:f6:3c:45:6d:3a:86: b3:4e:b3:d9:35:e0:35:f1:9f:42:67:55:68:6b:6a: ac:a0:ca:a9:48:05:df:8c:01:76:44:59:f3:63:fc: 4a:59:0c:c1:84:5c:c9:80:80:a7:8a:8f:ba:71:22: 29:ab:75:36:8a:28:d5:c1:5e:b3:83:d5:1c:15:a3: 5f:a2:54:bd:cb:bd:9c:b6:08:cc:19:19:fc:ea:13: 2e:a3:c5:1c:3f:8a:53:15:c6:a0:1b:69:99:67:0f: e8:3d:7a:56:cb:65:31:7f:62:d5:81:13:de:27:26: 2a:36:f0:16:86:e2:b0:7f:a6:cb:c3:cf:b6:48:8b: c8:2b:c3:48:c1:87:06:0c:94:15:18:d3:1b:35:59: 53:d3:c7:a0:1a:e4:3b:85:cb:54:ac:a4:a5:9f:88: f0:2d:82:40:35:14:d0:52:3a:82:17:d3:dd:b5:87: d2:4c:67:ea:c6:bd:11:0d:c7:14:a6:9d:c0:e1:26: 4d:21:10:91:48:f3:df:fb:b2:30:9e:6c:65:e9:0a: 45:d0:6a:83:11:1e:ef:b9:ba:85:6e:ad:96:92:bf: 23:00:5b:8c:bf:ad:3f:c1:1e:fc:4f:60:da:75:4c: 6d:09:3c:6d:49:f0:88:ab:55:52:31:f7:9a:58:ef: 55:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 9B:22:C1:9D:84:2E:45:AA:84:43:93:66:69:4E:4C:82:8C:30:9C:EE X509v3 Authority Key Identifier: keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129721859/0/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129721859/0/9B22C19D842E45AA84439366694E4C828C309CEE.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 27.0.204.0-27.0.215.255 103.208.48.0/22 IPv6: 2406:e780::/32 Signature Algorithm: sha256WithRSAEncryption 39:9f:45:df:d3:06:5e:0c:b0:d2:ee:31:87:65:25:f4:c2:16: ce:14:7f:30:91:0c:8a:da:6c:3c:3c:bd:0f:fe:01:58:13:b9: 7a:b0:ce:5d:5f:dc:7b:32:fd:45:8a:73:23:72:03:95:3c:65: 8e:1d:f2:36:0c:88:68:52:4d:f5:fc:58:75:f0:6b:1c:24:a8: 3b:d6:7a:c7:af:e2:e7:cb:26:e0:8c:58:32:35:97:a2:24:d4: 96:1a:a2:f4:73:6e:6d:77:4a:9d:b7:09:01:79:bd:0d:fd:96: 8a:d1:24:c1:51:1d:2b:21:1b:8a:55:fc:d4:5a:d1:ae:f0:25: 93:99:97:d9:42:92:80:89:86:3a:7e:ae:29:af:9f:94:4e:dd: 5d:20:57:f2:4e:b2:e9:f9:12:02:ad:3e:5e:8b:f0:e9:0e:ea: 41:ce:51:08:f4:d8:8d:c1:11:62:f2:14:75:45:57:4c:b7:db: d7:2d:ff:fa:22:a5:35:73:35:bc:fc:4f:3f:a4:0d:68:13:9e: 65:b2:19:73:d3:84:9b:94:e3:a1:51:90:ee:44:77:75:ea:0a: 0b:a7:c9:9c:35:f1:e8:10:2b:0e:0d:ce:66:06:02:11:eb:20: be:d6:dd:2c:93:c1:dd:cd:48:e8:05:16:bb:b2:cb:2b:fe:e3: 10:98:6c:79 -----BEGIN CERTIFICATE----- MIIFxDCCBKygAwIBAgIUNilonXWaxRHWHCy123u5xhZ3K9EwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDUyOTA1NDY1NVoX DTI3MDUyODA1NTE1NVowMzExMC8GA1UEAxMoOUIyMkMxOUQ4NDJFNDVBQTg0NDM5 MzY2Njk0RTRDODI4QzMwOUNFRTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJ1UPmMqE4D09jxFbTqGs06z2TXgNfGfQmdVaGtqrKDKqUgF34wBdkRZ82P8 SlkMwYRcyYCAp4qPunEiKat1Nooo1cFes4PVHBWjX6JUvcu9nLYIzBkZ/OoTLqPF HD+KUxXGoBtpmWcP6D16VstlMX9i1YET3icmKjbwFobisH+my8PPtkiLyCvDSMGH BgyUFRjTGzVZU9PHoBrkO4XLVKykpZ+I8C2CQDUU0FI6ghfT3bWH0kxn6sa9EQ3H FKadwOEmTSEQkUjz3/uyMJ5sZekKRdBqgxEe77m6hW6tlpK/IwBbjL+tP8Ee/E9g 2nVMbQk8bUnwiKtVUjH3mljvVc8CAwEAAaOCArcwggKzMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFJsiwZ2ELkWqhEOTZmlOTIKMMJzuMB8GA1UdIwQYMBaAFKVu hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTA2NTU4ODU1MzEyOTcyMTg1OS8wLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDY1NTg4NTUzMTI5NzIxODU5 LzAvOUIyMkMxOUQ4NDJFNDVBQTg0NDM5MzY2Njk0RTRDODI4QzMwOUNFRS5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwPAYIKwYBBQUH AQcBAf8ELTArMBoEAgABMBQwDAMEAhsAzAMEAxsA0AMEAmfQMDANBAIAAjAHAwUA JAbngDANBgkqhkiG9w0BAQsFAAOCAQEAOZ9F39MGXgyw0u4xh2Ul9MIWzhR/MJEM itpsPDy9D/4BWBO5erDOXV/cezL9RYpzI3IDlTxljh3yNgyIaFJN9fxYdfBrHCSo O9Z6x6/i58sm4IxYMjWXoiTUlhqi9HNubXdKnbcJAXm9Df2WitEkwVEdKyEbilX8 1FrRrvAlk5mX2UKSgImGOn6uKa+flE7dXSBX8k6y6fkSAq0+Xovw6Q7qQc5RCPTY jcERYvIUdUVXTLfb1y3/+iKlNXM1vPxPP6QNaBOeZbIZc9OEm5TjoVGQ7kR3deoK C6fJnDXx6BArDg3OZgYCEesgvtbdLJPB3c1I6AUWu7LLK/7jEJhseQ== -----END CERTIFICATE-----Generated at Fri Jun 12 03:56:27 2026 by rpki-client