$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9DFA5D44CF50EDF56E93BB7FAF863EB60B60D04A.cer File: 9DFA5D44CF50EDF56E93BB7FAF863EB60B60D04A.cer (raw, json) Hash identifier: YDEUmw5h6D0RXmcDVnRC1ZZB10z9RUxVCmqfFfE1r0c= Subject key identifier: 9D:FA:5D:44:CF:50:ED:F5:6E:93:BB:7F:AF:86:3E:B6:0B:60:D0:4A Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Certificate serial: 21704A206916F4EDABA51659A1CCFA4F098DACAC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1118728720266362907/0/9DFA5D44CF50EDF56E93BB7FAF863EB60B60D04A.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1118728720266362907/0/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Mon 15 Jun 2026 02:28:18 +0000 Certificate not after: Mon 14 Jun 2027 02:33:18 +0000 Subordinate resources: AS: 55997 IP: 45.126.112.0/22 IP: 103.76.220.0 -- 103.76.227.255 IP: 103.77.28.0/22 IP: 103.236.244.0/22 IP: 2406:880::/32 IP: 2407:7780::/32 IP: 2407:7880::/32 IP: 2407:8880::/32 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Jun 2026 09:48:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:70:4a:20:69:16:f4:ed:ab:a5:16:59:a1:cc:fa:4f:09:8d:ac:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Validity Not Before: Jun 15 02:28:18 2026 GMT Not After : Jun 14 02:33:18 2027 GMT Subject: CN=9DFA5D44CF50EDF56E93BB7FAF863EB60B60D04A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:b3:d3:98:17:5c:6b:b8:c1:86:4d:eb:dd:5e: b8:c7:88:c0:ae:16:23:35:4c:40:55:55:ab:85:51: f6:8d:9a:09:da:5c:95:c5:b0:c1:81:25:09:b4:d8: 53:12:d8:79:8a:eb:ea:a4:75:cc:77:79:d7:e2:de: 81:09:d7:58:a9:34:a9:00:51:4a:d6:c3:32:3c:4a: d8:d4:e3:7e:ca:50:bb:4b:82:d8:dc:e7:f9:d8:c0: b1:58:90:9f:8c:fc:bf:24:98:90:a0:02:ca:57:e6: f2:ee:42:00:f5:a1:07:3d:16:ef:1a:95:c2:43:1c: e9:f9:bb:6d:78:97:95:9c:40:85:8b:f4:66:f6:b3: 8f:5c:da:5b:fc:89:78:8e:2e:02:a6:f2:fa:2d:e7: db:b8:05:de:5e:62:52:8b:61:68:f2:e4:96:50:a0: 63:81:1d:0e:8b:6e:72:23:68:3f:44:ea:35:80:d3: 0e:cb:84:29:34:1a:7c:2c:78:9f:77:1e:59:68:9c: ae:29:91:7c:ff:25:2a:54:72:1b:9d:8a:d7:ae:3d: 7b:f3:35:5d:73:56:21:65:9a:4d:ce:4d:c7:f1:29: dc:a2:b6:49:f9:c6:08:18:ed:1f:a8:0c:74:4e:5b: 9a:65:14:54:b5:e1:91:e1:57:be:f3:35:51:2e:78: f5:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 9D:FA:5D:44:CF:50:ED:F5:6E:93:BB:7F:AF:86:3E:B6:0B:60:D0:4A X509v3 Authority Key Identifier: keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1118728720266362907/0/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1118728720266362907/0/9DFA5D44CF50EDF56E93BB7FAF863EB60B60D04A.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.126.112.0/22 103.76.220.0-103.76.227.255 103.77.28.0/22 103.236.244.0/22 IPv6: 2406:880::/32 2407:7780::/32 2407:7880::/32 2407:8880::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 55997 Signature Algorithm: sha256WithRSAEncryption 7d:ad:2e:a8:e5:a7:99:2e:b4:8d:51:3b:18:e3:12:a9:f2:be: 53:f8:ff:ff:58:9d:c2:73:48:0e:30:68:2e:16:2c:f5:03:70: 8f:3b:40:29:63:bd:ef:25:93:d7:62:d6:69:69:4b:9b:cb:6b: 4f:e8:ea:37:60:23:ba:82:a8:bc:ae:75:97:1d:cb:47:9e:41: f8:61:0a:09:12:c4:06:44:4b:bf:90:a3:5f:4d:81:95:37:4c: eb:b2:bd:6a:d9:fe:d6:99:16:08:cf:d7:67:1e:b9:ab:9b:ec: 26:c5:8e:00:f7:7d:e3:d8:db:41:33:6c:c5:0c:f6:6a:12:df: 90:f9:b8:e3:67:bc:80:24:c9:16:ab:54:51:10:ea:3b:e4:03: 82:7e:e5:6d:7b:d9:1f:5d:8c:b5:53:a8:b2:a6:9b:af:39:42: b7:b9:42:96:99:ac:40:9e:2d:aa:71:00:83:c0:cf:9d:c9:b8: cc:4d:8e:36:ab:2a:d9:78:be:76:bd:ea:7b:96:de:fa:08:4d: d2:a7:39:c3:60:cf:63:7e:93:bc:18:46:a3:3a:57:ac:8c:b3: 3b:10:99:cd:3b:66:c1:ba:c5:02:83:a4:16:2b:17:fd:36:c3: 9b:45:66:9d:8b:59:52:fe:73:e0:5c:15:93:91:02:9a:1f:7d: 1c:11:02:92 -----BEGIN CERTIFICATE----- MIIGATCCBOmgAwIBAgIUIXBKIGkW9O2rpRZZocz6TwmNrKwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDYxNTAyMjgxOFoX DTI3MDYxNDAyMzMxOFowMzExMC8GA1UEAxMoOURGQTVENDRDRjUwRURGNTZFOTNC QjdGQUY4NjNFQjYwQjYwRDA0QTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMaz05gXXGu4wYZN691euMeIwK4WIzVMQFVVq4VR9o2aCdpclcWwwYElCbTY UxLYeYrr6qR1zHd51+LegQnXWKk0qQBRStbDMjxK2NTjfspQu0uC2Nzn+djAsViQ n4z8vySYkKACylfm8u5CAPWhBz0W7xqVwkMc6fm7bXiXlZxAhYv0Zvazj1zaW/yJ eI4uAqby+i3n27gF3l5iUothaPLkllCgY4EdDotuciNoP0TqNYDTDsuEKTQafCx4 n3ceWWicrimRfP8lKlRyG52K1649e/M1XXNWIWWaTc5Nx/Ep3KK2SfnGCBjtH6gM dE5bmmUUVLXhkeFXvvM1US549UkCAwEAAaOCAvQwggLwMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFJ36XUTPUO31bpO7f6+GPrYLYNBKMB8GA1UdIwQYMBaAFKVu hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTExODcyODcyMDI2NjM2MjkwNy8wLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMTE4NzI4NzIwMjY2MzYyOTA3 LzAvOURGQTVENDRDRjUwRURGNTZFOTNCQjdGQUY4NjNFQjYwQjYwRDA0QS5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwXQYIKwYBBQUH AQcBAf8ETjBMMCYEAgABMCADBAItfnAwDAMEAmdM3AMEAmdM4AMEAmdNHAMEAmfs 9DAiBAIAAjAcAwUAJAYIgAMFACQHd4ADBQAkB3iAAwUAJAeIgDAaBggrBgEFBQcB CAEB/wQLMAmgBzAFAgMA2r0wDQYJKoZIhvcNAQELBQADggEBAH2tLqjlp5kutI1R OxjjEqnyvlP4//9YncJzSA4waC4WLPUDcI87QCljve8lk9di1mlpS5vLa0/o6jdg I7qCqLyudZcdy0eeQfhhCgkSxAZES7+Qo19NgZU3TOuyvWrZ/taZFgjP12ceuaub 7CbFjgD3fePY20EzbMUM9moS35D5uONnvIAkyRarVFEQ6jvkA4J+5W172R9djLVT qLKmm685Qre5QpaZrECeLapxAIPAz53JuMxNjjarKtl4vna96nuW3voITdKnOcNg z2N+k7wYRqM6V6yMszsQmc07ZsG6xQKDpBYrF/02w5tFZp2LWVL+c+BcFZORApof fRwRApI= -----END CERTIFICATE-----Generated at Wed Jun 24 17:07:03 2026 by rpki-client