$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A2FD93BDD3ED305B969E95936A9FCD4829DE6398.cer File: A2FD93BDD3ED305B969E95936A9FCD4829DE6398.cer (raw, json) Hash identifier: BoJ+HgDLm2A/83lCQhMgXqVYUWx0q05SiwvlIL/nZig= Subject key identifier: A2:FD:93:BD:D3:ED:30:5B:96:9E:95:93:6A:9F:CD:48:29:DE:63:98 Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Certificate serial: 098937EC9B4D7C3E242F42E0F7F347B723D1757A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1109747161056215059/0/A2FD93BDD3ED305B969E95936A9FCD4829DE6398.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1109747161056215059/0/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Thu 21 May 2026 07:34:03 +0000 Certificate not after: Thu 20 May 2027 07:39:03 +0000 Subordinate resources: IP: 2401:a620::/32 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 15:28:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:89:37:ec:9b:4d:7c:3e:24:2f:42:e0:f7:f3:47:b7:23:d1:75:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Validity Not Before: May 21 07:34:03 2026 GMT Not After : May 20 07:39:03 2027 GMT Subject: CN=A2FD93BDD3ED305B969E95936A9FCD4829DE6398 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:32:2b:6a:df:c2:da:10:bf:96:b9:f6:8d:ed: 10:bd:02:46:b3:59:39:8c:33:c0:3a:7b:77:e4:88: 50:f7:c6:81:d9:1c:34:9e:f3:61:1d:63:c4:07:2a: 0d:ed:cc:2c:47:07:51:96:f9:b3:07:b8:9d:a8:ae: af:4c:38:61:ba:c5:e3:02:45:f9:24:4a:d1:bf:c1: f0:fa:11:e8:03:bb:30:f2:67:e3:bd:f3:26:8f:32: 84:48:cf:be:45:ac:f5:ad:ed:51:a1:cd:c4:45:da: c2:15:44:03:26:c4:bf:8a:ec:b3:77:49:e4:52:d7: 0e:fd:4b:3a:09:0a:52:0f:b7:4f:f5:ba:2b:c2:ed: 1e:5e:27:35:a7:f3:70:40:87:5c:f7:90:d7:da:a3: 27:41:51:f7:c2:2d:75:f1:27:7f:cc:3e:cb:91:03: 89:0d:a6:13:6b:09:4f:6e:dc:8b:91:ad:7e:25:92: f5:0f:2a:97:d7:b8:43:92:7a:df:ff:2d:74:25:25: 06:97:df:36:80:ed:bc:15:f9:7c:68:a2:6a:17:f8: 39:f7:01:48:a2:de:8a:44:03:d1:8a:22:22:68:3c: 77:32:0d:af:50:75:dc:56:77:ea:00:bc:44:4e:eb: 71:f5:72:96:44:e2:3f:b0:19:6b:99:5d:2b:0f:f1: 27:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: A2:FD:93:BD:D3:ED:30:5B:96:9E:95:93:6A:9F:CD:48:29:DE:63:98 X509v3 Authority Key Identifier: keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1109747161056215059/0/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1109747161056215059/0/A2FD93BDD3ED305B969E95936A9FCD4829DE6398.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2401:a620::/32 Signature Algorithm: sha256WithRSAEncryption 48:cb:3f:95:3e:19:f4:0c:2a:ea:65:bb:5a:42:32:8b:40:8b: 71:63:dd:bb:72:d8:61:f6:d1:4c:4f:96:38:39:e6:7c:1e:33: 57:3f:10:cf:ef:5c:53:54:2f:b5:1f:70:32:d5:56:4a:82:1e: 19:27:35:6d:ac:89:5b:1b:6c:2b:22:13:2c:9c:84:7a:d7:53: 0a:53:8d:17:6c:f1:61:af:93:7a:1a:3a:6a:2d:46:cf:4f:72: 5f:83:b4:ad:b7:af:73:c9:32:45:24:a4:82:a3:89:43:a2:3d: a3:8d:78:c1:59:c3:e1:b5:18:22:59:66:ca:d8:62:55:7e:74: f7:76:c1:61:c3:40:6e:b7:53:d5:b2:9f:fd:dd:ff:d9:24:d3: 3b:07:45:91:44:96:ca:93:b8:d5:16:83:df:cf:25:4b:f8:bb: e4:11:d5:63:82:5a:17:05:34:ea:33:0d:d0:56:b6:84:43:79: 46:f4:98:74:d5:61:b4:4d:4b:bf:b0:27:02:a4:32:0a:f3:73: 3a:4e:26:bc:5c:68:4e:3a:86:89:f4:20:44:ee:18:02:fc:21: 9f:b2:67:df:33:9c:bf:0b:cd:f7:83:07:2f:2c:e8:8c:6d:7d: 13:ab:9f:22:97:43:48:8f:06:fe:6e:8d:65:ae:23:18:36:25: 48:d0:6a:7e -----BEGIN CERTIFICATE----- MIIFqDCCBJCgAwIBAgIUCYk37JtNfD4kL0Lg9/NHtyPRdXowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDUyMTA3MzQwM1oX DTI3MDUyMDA3MzkwM1owMzExMC8GA1UEAxMoQTJGRDkzQkREM0VEMzA1Qjk2OUU5 NTkzNkE5RkNENDgyOURFNjM5ODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMoyK2rfwtoQv5a59o3tEL0CRrNZOYwzwDp7d+SIUPfGgdkcNJ7zYR1jxAcq De3MLEcHUZb5swe4naiur0w4YbrF4wJF+SRK0b/B8PoR6AO7MPJn473zJo8yhEjP vkWs9a3tUaHNxEXawhVEAybEv4rss3dJ5FLXDv1LOgkKUg+3T/W6K8LtHl4nNafz cECHXPeQ19qjJ0FR98ItdfEnf8w+y5EDiQ2mE2sJT27ci5GtfiWS9Q8ql9e4Q5J6 3/8tdCUlBpffNoDtvBX5fGiiahf4OfcBSKLeikQD0YoiImg8dzINr1B13FZ36gC8 RE7rcfVylkTiP7AZa5ldKw/xJ6kCAwEAAaOCApswggKXMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFKL9k73T7TBblp6Vk2qfzUgp3mOYMB8GA1UdIwQYMBaAFKVu hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTEwOTc0NzE2MTA1NjIxNTA1OS8wLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMTA5NzQ3MTYxMDU2MjE1MDU5 LzAvQTJGRDkzQkREM0VEMzA1Qjk2OUU5NTkzNkE5RkNENDgyOURFNjM5OC5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUH AQcBAf8EETAPMA0EAgACMAcDBQAkAaYgMA0GCSqGSIb3DQEBCwUAA4IBAQBIyz+V Phn0DCrqZbtaQjKLQItxY927cthh9tFMT5Y4OeZ8HjNXPxDP71xTVC+1H3Ay1VZK gh4ZJzVtrIlbG2wrIhMsnIR611MKU40XbPFhr5N6GjpqLUbPT3Jfg7Stt69zyTJF JKSCo4lDoj2jjXjBWcPhtRgiWWbK2GJVfnT3dsFhw0But1PVsp/93f/ZJNM7B0WR RJbKk7jVFoPfzyVL+LvkEdVjgloXBTTqMw3QVraEQ3lG9Jh01WG0TUu/sCcCpDIK 83M6Tia8XGhOOoaJ9CBE7hgC/CGfsmffM5y/C833gwcvLOiMbX0Tq58il0NIjwb+ bo1lriMYNiVI0Gp+ -----END CERTIFICATE-----Generated at Fri May 29 21:11:57 2026 by rpki-client