$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9D10FC6E391587CB1F78E8B63FED0E5B46DC8D66.cer File: 9D10FC6E391587CB1F78E8B63FED0E5B46DC8D66.cer (raw, json) Hash identifier: 9VGoH8VdK4EN2Oyu48huMJGjZVl3OnDflagWz/GumsA= Subject key identifier: 9D:10:FC:6E:39:15:87:CB:1F:78:E8:B6:3F:ED:0E:5B:46:DC:8D:66 Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Certificate serial: 030BDA5F9AEF053B6071CAF891F1BFAD15EDED1B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1065588335524970497/0/9D10FC6E391587CB1F78E8B63FED0E5B46DC8D66.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1065588335524970497/0/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Fri 29 May 2026 03:14:35 +0000 Certificate not after: Fri 28 May 2027 03:19:35 +0000 Subordinate resources: IP: 103.15.4.0/22 IP: 2404:c300::/32 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 15:28:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:0b:da:5f:9a:ef:05:3b:60:71:ca:f8:91:f1:bf:ad:15:ed:ed:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Validity Not Before: May 29 03:14:35 2026 GMT Not After : May 28 03:19:35 2027 GMT Subject: CN=9D10FC6E391587CB1F78E8B63FED0E5B46DC8D66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:8d:99:c1:6f:c2:45:30:09:eb:99:d9:cc:d2: f7:0b:19:3d:68:f5:b8:fb:77:94:23:9a:78:f5:29: 8c:10:8b:0c:91:c7:d1:56:34:d7:65:37:05:f0:c1: 21:c2:24:da:f8:e2:cd:8d:83:f5:3f:fb:65:81:ee: cd:d3:fd:c7:b3:d3:9e:99:21:65:22:c6:36:26:03: 03:d2:bd:bf:bd:19:df:cc:19:42:a5:c9:8c:40:83: e5:92:9e:41:2e:10:49:5e:5a:c4:f7:8b:bc:cc:86: 2c:81:27:a2:2c:ba:e2:cd:0b:37:50:42:28:d2:ce: cc:15:14:64:ae:97:c1:4e:43:5a:cd:56:8f:1f:c5: 74:c6:e8:2e:0f:28:9c:a9:20:2f:99:30:90:36:eb: dc:78:09:bf:d4:04:c8:49:8e:51:5c:6f:d8:f5:de: 0a:c0:9e:c3:c7:0a:44:74:8b:26:0f:21:49:ed:30: f8:11:9d:45:2a:26:c9:cb:62:c3:19:4b:5c:57:a1: 4c:97:d4:21:46:2d:86:eb:91:23:63:83:fd:cf:f7: 6c:25:bb:61:cf:db:0e:e7:70:fc:22:b3:e7:3e:a2: 7d:d1:75:30:ca:25:20:1d:70:0c:c8:09:8f:06:f8: c2:85:ad:55:7e:47:fa:21:0d:af:6b:eb:61:77:a7: d3:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 9D:10:FC:6E:39:15:87:CB:1F:78:E8:B6:3F:ED:0E:5B:46:DC:8D:66 X509v3 Authority Key Identifier: keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335524970497/0/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335524970497/0/9D10FC6E391587CB1F78E8B63FED0E5B46DC8D66.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.15.4.0/22 IPv6: 2404:c300::/32 Signature Algorithm: sha256WithRSAEncryption 7a:73:fa:a5:4c:0a:d5:82:cf:0f:df:1a:4e:0e:32:ec:37:c3: fc:79:32:99:cb:6d:39:38:b3:e7:cb:d9:db:25:0a:da:d6:f0: 94:13:fe:7c:4b:ec:c0:9f:87:c5:1e:e6:45:d0:47:07:11:f3: ba:c6:03:48:36:04:e4:42:6d:bd:01:c4:1d:b0:06:c9:fa:50: 46:b5:06:51:73:d2:23:8a:f0:33:9e:e4:92:c8:45:a8:d5:d6: 2b:b3:d7:bf:bf:80:23:bc:6a:aa:69:8f:09:2c:d8:9b:cf:67: dd:5e:61:a1:5f:76:9b:27:83:b4:14:b1:5d:91:d8:e8:8d:bc: 9f:81:e8:51:e5:ef:d1:d9:b1:23:96:25:d3:15:17:7e:07:00: f6:3f:93:fb:03:6b:86:03:f1:f5:b3:3f:e4:8f:60:bd:51:70: b9:49:ed:57:df:23:a0:2c:2b:d8:ac:41:a2:d4:ed:05:c5:56: 52:8c:14:be:00:b6:a9:3e:86:88:e1:b9:a5:c7:10:f4:e4:b3: 41:c3:02:fb:4e:3b:8e:ba:79:cb:03:66:f5:55:66:89:3b:99: 05:00:89:f3:04:f2:01:15:dc:1d:15:ee:70:4a:b2:9e:59:ac: d6:fb:27:39:a8:b9:ab:e6:ad:ba:52:d8:31:50:eb:f5:d1:75: 89:69:40:08 -----BEGIN CERTIFICATE----- MIIFtjCCBJ6gAwIBAgIUAwvaX5rvBTtgccr4kfG/rRXt7RswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDUyOTAzMTQzNVoX DTI3MDUyODAzMTkzNVowMzExMC8GA1UEAxMoOUQxMEZDNkUzOTE1ODdDQjFGNzhF OEI2M0ZFRDBFNUI0NkRDOEQ2NjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJuNmcFvwkUwCeuZ2czS9wsZPWj1uPt3lCOaePUpjBCLDJHH0VY012U3BfDB IcIk2vjizY2D9T/7ZYHuzdP9x7PTnpkhZSLGNiYDA9K9v70Z38wZQqXJjECD5ZKe QS4QSV5axPeLvMyGLIEnoiy64s0LN1BCKNLOzBUUZK6XwU5DWs1Wjx/FdMboLg8o nKkgL5kwkDbr3HgJv9QEyEmOUVxv2PXeCsCew8cKRHSLJg8hSe0w+BGdRSomycti wxlLXFehTJfUIUYthuuRI2OD/c/3bCW7Yc/bDudw/CKz5z6ifdF1MMolIB1wDMgJ jwb4woWtVX5H+iENr2vrYXen0xMCAwEAAaOCAqkwggKlMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFJ0Q/G45FYfLH3jotj/tDltG3I1mMB8GA1UdIwQYMBaAFKVu hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTA2NTU4ODMzNTUyNDk3MDQ5Ny8wLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDY1NTg4MzM1NTI0OTcwNDk3 LzAvOUQxMEZDNkUzOTE1ODdDQjFGNzhFOEI2M0ZFRDBFNUI0NkRDOEQ2Ni5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUH AQcBAf8EHzAdMAwEAgABMAYDBAJnDwQwDQQCAAIwBwMFACQEwwAwDQYJKoZIhvcN AQELBQADggEBAHpz+qVMCtWCzw/fGk4OMuw3w/x5MpnLbTk4s+fL2dslCtrW8JQT /nxL7MCfh8Ue5kXQRwcR87rGA0g2BORCbb0BxB2wBsn6UEa1BlFz0iOK8DOe5JLI RajV1iuz17+/gCO8aqppjwks2JvPZ91eYaFfdpsng7QUsV2R2OiNvJ+B6FHl79HZ sSOWJdMVF34HAPY/k/sDa4YD8fWzP+SPYL1RcLlJ7VffI6AsK9isQaLU7QXFVlKM FL4Atqk+hojhuaXHEPTks0HDAvtOO466ecsDZvVVZok7mQUAifME8gEV3B0V7nBK sp5ZrNb7JzmouavmrbpS2DFQ6/XRdYlpQAg= -----END CERTIFICATE-----Generated at Fri May 29 21:13:51 2026 by rpki-client