$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9B5519650F0653145F5D42879890BE1251C8F463.cer File: 9B5519650F0653145F5D42879890BE1251C8F463.cer (raw, json) Hash identifier: eN7DSC+d6XE7jgUinFgOaXep8iWEd7QcwLpcH7Lnf5w= Subject key identifier: 9B:55:19:65:0F:06:53:14:5F:5D:42:87:98:90:BE:12:51:C8:F4:63 Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Certificate serial: 034A9A93FE5B5E670131F635E01C65610963D6DC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1091362986968219649/0/9B5519650F0653145F5D42879890BE1251C8F463.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1091362986968219649/0/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Tue 31 Mar 2026 14:01:55 +0000 Certificate not after: Tue 30 Mar 2027 14:06:55 +0000 Subordinate resources: IP: 103.166.52.0/23 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 07 Apr 2026 06:02:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:4a:9a:93:fe:5b:5e:67:01:31:f6:35:e0:1c:65:61:09:63:d6:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Validity Not Before: Mar 31 14:01:55 2026 GMT Not After : Mar 30 14:06:55 2027 GMT Subject: CN=9B5519650F0653145F5D42879890BE1251C8F463 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:9c:0a:ab:d4:44:cf:65:9f:48:6a:e8:23:8a: c0:76:4f:5d:e5:23:68:70:a2:d7:21:65:68:77:1f: 0b:cb:c9:a4:cc:a2:12:51:39:79:4c:de:8c:38:56: 0a:6d:c3:c2:c1:b0:e8:af:2c:32:63:48:a7:14:52: a2:cb:bc:d8:2c:9a:9d:ee:7d:56:b5:ec:2b:fc:3d: 0f:c6:aa:88:ca:10:78:7f:f3:c9:4f:a7:f2:b8:0f: ee:13:27:4d:fe:06:51:29:f7:8a:95:f8:93:f9:a5: 01:d0:ca:3b:24:a3:fd:ff:27:c9:d6:ce:92:9f:a5: a5:31:14:eb:24:f7:41:5e:6f:3b:5a:5b:82:08:fb: da:ce:ba:6a:64:9f:57:bd:2e:40:e1:2a:e2:d8:ce: 10:a5:a2:05:16:0b:50:46:25:45:e7:e5:87:c7:ea: 98:69:58:3f:58:b5:e3:c1:04:a7:3f:d7:e7:51:1f: db:60:63:fe:64:5f:93:36:83:3c:7c:43:f8:57:2a: dd:0b:e2:85:7e:d8:2d:81:65:20:99:0d:a1:47:7f: f3:5d:c9:3c:96:e9:d8:89:59:14:b5:30:89:e0:62: a9:82:cf:ba:47:d9:87:e8:74:52:65:6a:4f:7a:8b: 6d:21:69:7a:38:4b:78:90:b7:20:23:45:c3:40:49: 95:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 9B:55:19:65:0F:06:53:14:5F:5D:42:87:98:90:BE:12:51:C8:F4:63 X509v3 Authority Key Identifier: keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1091362986968219649/0/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1091362986968219649/0/9B5519650F0653145F5D42879890BE1251C8F463.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.166.52.0/23 Signature Algorithm: sha256WithRSAEncryption 1f:9a:4c:b2:ae:91:f1:b2:82:0f:53:d5:b5:59:2c:a1:b4:54: 79:47:e5:4d:14:46:96:d6:59:6c:42:6e:30:bb:6a:e0:bd:6b: 8b:9c:f9:b4:22:2f:5d:39:08:7c:32:3f:25:f2:35:8f:3d:6c: ed:2a:59:f4:58:9d:9d:b2:e5:25:01:97:b6:bb:7b:b7:fd:b9: 62:c1:e7:ea:e1:ab:97:8a:7f:48:4e:1d:6b:cc:bb:f6:c7:24: 88:a4:1a:41:3a:f9:e8:d5:10:12:8b:3c:82:f6:cb:a9:7e:cc: 03:bb:a0:78:e1:74:8c:f3:16:a9:1c:8c:7d:12:07:49:77:9d: 47:f3:12:7f:53:b6:ec:2c:35:ad:fc:73:55:ae:2e:e4:24:0e: 1c:99:18:f0:f2:7f:06:14:0e:f1:75:58:9e:9c:a3:78:50:34: c9:f5:02:d5:3d:c0:3c:2c:3c:ba:e2:d5:f0:2e:7e:ef:1a:37: bd:f0:bb:64:5b:84:fd:dc:a5:ca:80:a9:e0:ff:14:78:bd:dd: 75:c6:d1:26:2a:45:5a:fb:ff:77:66:66:5c:77:b1:a2:09:05: 88:77:88:3d:0e:f4:a3:9d:39:6d:06:ab:9d:5f:f0:fd:1a:fe: d5:38:0d:1f:e6:08:de:15:4e:6b:65:7b:7c:c7:6c:8d:c8:e2: 5e:9e:47:26 -----BEGIN CERTIFICATE----- MIIFpzCCBI+gAwIBAgIUA0qak/5bXmcBMfY14BxlYQlj1twwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDMzMTE0MDE1NVoX DTI3MDMzMDE0MDY1NVowMzExMC8GA1UEAxMoOUI1NTE5NjUwRjA2NTMxNDVGNUQ0 Mjg3OTg5MEJFMTI1MUM4RjQ2MzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANacCqvURM9ln0hq6COKwHZPXeUjaHCi1yFlaHcfC8vJpMyiElE5eUzejDhW Cm3DwsGw6K8sMmNIpxRSosu82Cyane59VrXsK/w9D8aqiMoQeH/zyU+n8rgP7hMn Tf4GUSn3ipX4k/mlAdDKOySj/f8nydbOkp+lpTEU6yT3QV5vO1pbggj72s66amSf V70uQOEq4tjOEKWiBRYLUEYlReflh8fqmGlYP1i148EEpz/X51Ef22Bj/mRfkzaD PHxD+Fcq3QvihX7YLYFlIJkNoUd/813JPJbp2IlZFLUwieBiqYLPukfZh+h0UmVq T3qLbSFpejhLeJC3ICNFw0BJlXECAwEAAaOCApowggKWMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFJtVGWUPBlMUX11Ch5iQvhJRyPRjMB8GA1UdIwQYMBaAFKVu hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTA5MTM2Mjk4Njk2ODIxOTY0OS8wLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDkxMzYyOTg2OTY4MjE5NjQ5 LzAvOUI1NTE5NjUwRjA2NTMxNDVGNUQ0Mjg3OTg5MEJFMTI1MUM4RjQ2My5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAFnpjQwDQYJKoZIhvcNAQELBQADggEBAB+aTLKu kfGygg9T1bVZLKG0VHlH5U0URpbWWWxCbjC7auC9a4uc+bQiL105CHwyPyXyNY89 bO0qWfRYnZ2y5SUBl7a7e7f9uWLB5+rhq5eKf0hOHWvMu/bHJIikGkE6+ejVEBKL PIL2y6l+zAO7oHjhdIzzFqkcjH0SB0l3nUfzEn9TtuwsNa38c1WuLuQkDhyZGPDy fwYUDvF1WJ6co3hQNMn1AtU9wDwsPLri1fAufu8aN73wu2RbhP3cpcqAqeD/FHi9 3XXG0SYqRVr7/3dmZlx3saIJBYh3iD0O9KOdOW0Gq51f8P0a/tU4DR/mCN4VTmtl e3zHbI3I4l6eRyY= -----END CERTIFICATE-----Generated at Mon Apr 6 13:53:01 2026 by rpki-client