$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9B87DFEBDCCDA813116988D4421B088404578168.cer File: 9B87DFEBDCCDA813116988D4421B088404578168.cer (raw, json) Hash identifier: lLYhd5MYpzuIbc56Y2zhfacCl2zoyqbFdKLGzcf3/P0= Subject key identifier: 9B:87:DF:EB:DC:CD:A8:13:11:69:88:D4:42:1B:08:84:04:57:81:68 Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Certificate serial: 3CD9C1F5FA560A9ADBEB985942DA2312204A31F4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1065579796714749953/0/9B87DFEBDCCDA813116988D4421B088404578168.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1065579796714749953/0/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Thu 28 May 2026 07:58:37 +0000 Certificate not after: Thu 27 May 2027 08:03:37 +0000 Subordinate resources: AS: 9307 IP: 45.116.96.0/22 IP: 103.23.164.0/22 IP: 103.56.140.0/22 IP: 203.86.0.0/19 IP: 211.154.128.0/19 IP: 220.231.128.0/17 IP: 2400:d200::/32 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 15:28:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:d9:c1:f5:fa:56:0a:9a:db:eb:98:59:42:da:23:12:20:4a:31:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Validity Not Before: May 28 07:58:37 2026 GMT Not After : May 27 08:03:37 2027 GMT Subject: CN=9B87DFEBDCCDA813116988D4421B088404578168 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:53:63:92:0a:82:26:9e:89:4e:60:e6:77:1c: 99:5b:19:23:d2:72:1d:ae:44:46:8c:6a:d6:ab:01: 09:40:45:32:72:78:df:b2:45:ba:da:55:00:d0:db: e8:31:ca:60:cf:97:f9:51:cc:99:59:0b:05:8a:99: 84:97:ca:2a:fa:c8:fa:78:59:da:57:57:b5:14:b2: a5:03:e2:1d:7a:d5:cf:28:18:1b:15:fb:f3:cf:01: 82:d6:a2:bb:e6:a3:d1:70:41:f2:4d:a4:2d:c4:2e: 66:b2:1e:af:06:27:f9:cf:0a:fe:33:45:d9:5e:1b: bc:14:4b:a8:50:d6:ce:2d:5e:57:ce:6f:81:a2:ab: f6:00:d3:a2:8c:e5:34:53:17:b3:89:b4:7d:a1:57: 63:b9:ea:82:0a:3f:4d:ab:0a:7d:a0:2f:af:a1:07: e4:35:d7:dd:50:8e:96:0d:12:eb:5b:fe:a2:3e:c2: 4e:d3:f7:33:e6:4d:20:c9:a6:ee:bd:b1:d0:8e:76: 37:a8:bf:69:34:2a:86:93:b6:2c:66:8c:12:da:97: 9d:57:3e:56:6f:de:b7:57:03:fe:c3:a2:e1:65:ea: 9c:4b:50:4b:96:3e:4f:3b:b8:31:74:fb:f6:3e:c8: fc:c9:d8:cc:2a:80:61:b9:59:8e:da:f0:bf:31:bf: e4:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 9B:87:DF:EB:DC:CD:A8:13:11:69:88:D4:42:1B:08:84:04:57:81:68 X509v3 Authority Key Identifier: keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714749953/0/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714749953/0/9B87DFEBDCCDA813116988D4421B088404578168.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.116.96.0/22 103.23.164.0/22 103.56.140.0/22 203.86.0.0/19 211.154.128.0/19 220.231.128.0/17 IPv6: 2400:d200::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 9307 Signature Algorithm: sha256WithRSAEncryption 72:3a:10:12:0f:6e:bc:51:37:ca:52:c0:e9:f7:ad:55:67:d1: f0:af:c5:ef:43:2f:a2:21:a4:a9:77:73:93:0a:e1:f2:f8:79: 4b:cf:b2:5d:50:74:94:bd:3c:5b:f7:4b:5e:84:c4:71:6e:75: b7:e2:1a:43:a4:40:3c:31:5c:8f:78:cd:6e:26:95:0a:c8:b5: 55:5a:39:1a:12:d3:d7:ba:e4:c6:e8:c9:2e:85:8e:5f:85:3e: 8b:83:c0:72:47:25:a8:3a:9d:f4:ac:c7:7f:90:18:0c:1c:19: 56:d9:9a:a5:47:71:b1:49:58:35:0a:6e:fa:3a:50:fe:f7:88: 35:b4:69:a2:8c:09:c2:0d:06:0e:66:1d:0e:45:9e:a6:99:0d: e8:61:5a:22:18:32:67:27:97:ea:9b:4d:3c:11:a2:5c:3a:97: 8e:1f:1b:d9:f9:22:b9:61:7d:aa:cb:d1:37:0a:bd:0e:8c:35: 83:2a:66:fa:f7:e1:5a:56:c4:7c:7f:35:e5:a8:15:3e:d0:64: 3c:7f:f6:e9:95:95:68:73:db:84:2f:d0:bc:25:33:19:d3:cc: 84:ee:6f:d4:b2:ce:b6:5b:c4:06:81:5e:85:fc:86:b3:f0:4a: 3d:06:14:ba:e0:53:73:76:4d:b8:85:5c:75:7f:a2:44:5f:e2: 06:a0:60:de -----BEGIN CERTIFICATE----- MIIF7zCCBNegAwIBAgIUPNnB9fpWCprb65hZQtojEiBKMfQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDUyODA3NTgzN1oX DTI3MDUyNzA4MDMzN1owMzExMC8GA1UEAxMoOUI4N0RGRUJEQ0NEQTgxMzExNjk4 OEQ0NDIxQjA4ODQwNDU3ODE2ODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKdTY5IKgiaeiU5g5nccmVsZI9JyHa5ERoxq1qsBCUBFMnJ437JFutpVANDb 6DHKYM+X+VHMmVkLBYqZhJfKKvrI+nhZ2ldXtRSypQPiHXrVzygYGxX7888Bgtai u+aj0XBB8k2kLcQuZrIerwYn+c8K/jNF2V4bvBRLqFDWzi1eV85vgaKr9gDToozl NFMXs4m0faFXY7nqggo/TasKfaAvr6EH5DXX3VCOlg0S61v+oj7CTtP3M+ZNIMmm 7r2x0I52N6i/aTQqhpO2LGaMEtqXnVc+Vm/et1cD/sOi4WXqnEtQS5Y+Tzu4MXT7 9j7I/MnYzCqAYblZjtrwvzG/5HECAwEAAaOCAuIwggLeMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFJuH3+vczagTEWmI1EIbCIQEV4FoMB8GA1UdIwQYMBaAFKVu hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTA2NTU3OTc5NjcxNDc0OTk1My8wLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDY1NTc5Nzk2NzE0NzQ5OTUz LzAvOUI4N0RGRUJEQ0NEQTgxMzExNjk4OEQ0NDIxQjA4ODQwNDU3ODE2OC5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwTAYIKwYBBQUH AQcBAf8EPTA7MCoEAgABMCQDBAItdGADBAJnF6QDBAJnOIwDBAXLVgADBAXTmoAD BAfc54AwDQQCAAIwBwMFACQA0gAwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAICJFsw DQYJKoZIhvcNAQELBQADggEBAHI6EBIPbrxRN8pSwOn3rVVn0fCvxe9DL6IhpKl3 c5MK4fL4eUvPsl1QdJS9PFv3S16ExHFudbfiGkOkQDwxXI94zW4mlQrItVVaORoS 09e65MboyS6Fjl+FPouDwHJHJag6nfSsx3+QGAwcGVbZmqVHcbFJWDUKbvo6UP73 iDW0aaKMCcINBg5mHQ5FnqaZDehhWiIYMmcnl+qbTTwRolw6l44fG9n5IrlhfarL 0TcKvQ6MNYMqZvr34VpWxHx/NeWoFT7QZDx/9umVlWhz24Qv0LwlMxnTzITub9Sy zrZbxAaBXoX8hrPwSj0GFLrgU3N2TbiFXHV/okRf4gagYN4= -----END CERTIFICATE-----Generated at Fri May 29 21:14:29 2026 by rpki-client