$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.cer File: 9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.cer (raw, json) Hash identifier: vRdwt8ZxwlT7GmW/6I1RHEOU1/1ZiLRLLTmSV4/HzoU= Subject key identifier: 9B:F3:4B:38:17:74:8D:3E:69:CC:38:80:F1:3A:83:83:A9:AA:3C:2C Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Certificate serial: 68569A29918CD5690B69864D98A9DAF86237F284 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Thu 28 May 2026 07:28:14 +0000 Certificate not after: Thu 27 May 2027 07:33:14 +0000 Subordinate resources: AS: 59077 IP: 42.240.128.0/17 IP: 101.237.0.0/16 IP: 103.237.28.0/22 IP: 106.75.0.0/16 IP: 113.31.96.0/19 IP: 113.31.144.0 -- 113.31.255.255 IP: 117.50.0.0/16 IP: 163.53.164.0/22 IP: 2401:3480::/32 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Jun 2026 23:56:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:56:9a:29:91:8c:d5:69:0b:69:86:4d:98:a9:da:f8:62:37:f2:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Validity Not Before: May 28 07:28:14 2026 GMT Not After : May 27 07:33:14 2027 GMT Subject: CN=9BF34B3817748D3E69CC3880F13A8383A9AA3C2C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:da:50:16:24:05:13:73:38:46:f4:79:ea:2b: ba:79:fe:c1:fa:7b:77:10:fa:2f:a6:fb:62:1f:04: ea:7e:cf:9a:50:56:c0:2e:d0:45:2e:84:04:d1:1e: 65:11:44:29:0a:da:f9:e8:0e:8a:c0:85:df:57:75: 84:a5:6a:8a:24:be:0b:ab:9c:24:1f:6d:b4:40:ce: 5a:45:2b:a0:de:50:62:81:48:27:93:cd:7e:b8:5a: df:76:13:f8:12:d0:4d:a4:e9:44:93:0d:3a:36:98: b6:d6:d9:2b:81:77:2f:29:56:76:90:65:75:e9:38: 91:dd:19:22:e9:15:28:d6:dc:90:06:f0:fe:73:65: 86:87:c0:d4:68:3e:2a:52:b4:1c:93:fa:80:82:a4: 86:60:74:e6:e3:df:c5:c1:31:2a:c0:04:dd:92:7d: 24:e5:33:33:47:6c:05:e8:c1:ef:45:3d:61:4d:6e: f6:a1:be:a7:dd:05:01:6a:cf:d2:6a:33:a7:fb:b9: 9e:f6:b6:7b:55:68:b2:76:b9:b7:23:d3:31:63:18: 50:0b:52:0a:e9:2e:4e:b7:aa:33:bd:7b:57:c3:9e: 12:0d:91:63:25:88:27:33:7c:8d:ba:7f:d5:61:52: 7e:71:6b:0a:c5:86:76:c5:b2:74:37:20:42:5e:8e: 9a:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 9B:F3:4B:38:17:74:8D:3E:69:CC:38:80:F1:3A:83:83:A9:AA:3C:2C X509v3 Authority Key Identifier: keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 42.240.128.0/17 101.237.0.0/16 103.237.28.0/22 106.75.0.0/16 113.31.96.0/19 113.31.144.0-113.31.255.255 117.50.0.0/16 163.53.164.0/22 IPv6: 2401:3480::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 59077 Signature Algorithm: sha256WithRSAEncryption 47:21:b3:fd:04:d2:07:c0:d0:6b:64:d3:0a:f5:dc:e7:9f:15: 4e:6e:63:f4:f1:f6:5c:93:3e:6f:d1:9c:b8:ec:79:4d:3b:e9: 13:c4:ea:19:44:a0:32:2b:a4:36:d7:61:b8:e5:43:d9:d9:97: 61:bb:3f:6a:82:da:f9:f6:5c:6d:12:14:b6:9b:c2:2a:00:6d: 4e:26:23:21:b9:2d:71:47:19:2b:91:32:d0:55:51:9d:47:86: 7e:b0:73:a1:43:eb:19:b6:3e:b2:b8:09:9c:09:01:c0:2b:c7: a0:56:2d:b7:0e:3e:0d:3a:e2:da:26:e5:db:35:a4:29:be:f9: bd:c1:f7:7a:9e:d4:11:2b:13:9b:70:f2:39:dc:49:8c:fe:ae: 60:b1:ca:49:c5:48:99:86:dc:f9:55:bf:4a:9d:dd:15:2e:3c: ec:89:b0:63:dc:c2:a0:63:7d:89:d9:70:43:0f:7a:f1:ac:2c: 0a:59:1b:58:90:e3:81:37:56:66:0c:0d:a3:92:30:e9:80:20: 87:96:c4:27:f9:dc:f0:ee:eb:0f:9d:a6:cf:7c:41:7a:b4:ee: be:52:4e:87:42:06:28:9e:62:13:99:a1:cd:46:67:9d:22:ce: 8a:75:b1:95:b4:d3:7d:5a:67:15:47:ea:f7:24:63:03:62:90: 76:a7:e6:20 -----BEGIN CERTIFICATE----- MIIGADCCBOigAwIBAgIUaFaaKZGM1WkLaYZNmKna+GI38oQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDUyODA3MjgxNFoX DTI3MDUyNzA3MzMxNFowMzExMC8GA1UEAxMoOUJGMzRCMzgxNzc0OEQzRTY5Q0Mz ODgwRjEzQTgzODNBOUFBM0MyQzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOXaUBYkBRNzOEb0eeorunn+wfp7dxD6L6b7Yh8E6n7PmlBWwC7QRS6EBNEe ZRFEKQra+egOisCF31d1hKVqiiS+C6ucJB9ttEDOWkUroN5QYoFIJ5PNfrha33YT +BLQTaTpRJMNOjaYttbZK4F3LylWdpBldek4kd0ZIukVKNbckAbw/nNlhofA1Gg+ KlK0HJP6gIKkhmB05uPfxcExKsAE3ZJ9JOUzM0dsBejB70U9YU1u9qG+p90FAWrP 0mozp/u5nva2e1Vosna5tyPTMWMYUAtSCukuTreqM717V8OeEg2RYyWIJzN8jbp/ 1WFSfnFrCsWGdsWydDcgQl6OmskCAwEAAaOCAvMwggLvMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFJvzSzgXdI0+acw4gPE6g4OpqjwsMB8GA1UdIwQYMBaAFKVu hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTA2NTU3OTUzNDM5NDU4OTE4Ny8wLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDY1NTc5NTM0Mzk0NTg5MTg3 LzAvOUJGMzRCMzgxNzc0OEQzRTY5Q0MzODgwRjEzQTgzODNBOUFBM0MyQy5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwXAYIKwYBBQUH AQcBAf8ETTBLMDoEAgABMDQDBAcq8IADAwBl7QMEAmftHAMDAGpLAwQFcR9gMAsD BARxH5ADAwVxAAMDAHUyAwQCozWkMA0EAgACMAcDBQAkATSAMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwDmxTANBgkqhkiG9w0BAQsFAAOCAQEARyGz/QTSB8DQa2TT CvXc558VTm5j9PH2XJM+b9GcuOx5TTvpE8TqGUSgMiukNtdhuOVD2dmXYbs/aoLa +fZcbRIUtpvCKgBtTiYjIbktcUcZK5Ey0FVRnUeGfrBzoUPrGbY+srgJnAkBwCvH oFYttw4+DTri2ibl2zWkKb75vcH3ep7UESsTm3DyOdxJjP6uYLHKScVImYbc+VW/ Sp3dFS487ImwY9zCoGN9idlwQw968awsClkbWJDjgTdWZgwNo5Iw6YAgh5bEJ/nc 8O7rD52mz3xBerTuvlJOh0IGKJ5iE5mhzUZnnSLOinWxlbTTfVpnFUfq9yRjA2KQ dqfmIA== -----END CERTIFICATE-----Generated at Sat Jun 6 13:25:21 2026 by rpki-client