$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AB4AAC8049BFA0F4F278AC22385CA9ABCAB9A341.cer File: AB4AAC8049BFA0F4F278AC22385CA9ABCAB9A341.cer (raw, json) Hash identifier: DxoPfdPtPYTEsqXABANYPIKZHLprLdc2Nrwd71ppFIA= Subject key identifier: AB:4A:AC:80:49:BF:A0:F4:F2:78:AC:22:38:5C:A9:AB:CA:B9:A3:41 Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Certificate serial: 24EE5AD69FC8CE56BA748DB05732BDCF8B361855 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1069195700119535618/0/AB4AAC8049BFA0F4F278AC22385CA9ABCAB9A341.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1069195700119535618/0/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Thu 29 Jan 2026 09:57:01 +0000 Certificate not after: Thu 28 Jan 2027 10:02:01 +0000 Subordinate resources: IP: 27.106.128.0/18 IP: 45.121.96.0/22 IP: 103.61.176.0/22 IP: 211.148.64.0/18 IP: 220.152.128.0/17 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 23 Feb 2026 09:42:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:ee:5a:d6:9f:c8:ce:56:ba:74:8d:b0:57:32:bd:cf:8b:36:18:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Validity Not Before: Jan 29 09:57:01 2026 GMT Not After : Jan 28 10:02:01 2027 GMT Subject: CN=AB4AAC8049BFA0F4F278AC22385CA9ABCAB9A341 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:cf:97:00:8d:c5:a5:6a:3c:b6:dc:30:0b:0b: 01:ac:f4:17:9b:26:59:d5:be:43:71:4d:52:c2:c5: da:a2:37:89:53:bb:9c:2d:54:71:fc:f2:27:3e:84: 06:db:07:79:5b:ca:31:22:88:c4:bc:a7:f1:b4:ff: b3:96:74:3b:b9:d9:32:40:5f:87:89:62:da:d7:c4: cb:e9:49:38:bc:92:7e:4f:36:26:84:e9:91:d1:dc: bd:f9:e3:59:7e:e1:ca:e4:b0:b3:ae:42:d1:5e:d6: d5:25:95:5e:2e:ce:36:17:2e:5e:02:33:87:74:39: ef:88:2a:70:8c:a0:78:41:a5:19:ef:02:26:a8:d4: aa:a7:a2:6d:bc:db:d8:8d:ab:f5:ca:59:fb:84:00: ca:30:48:fd:9d:9b:29:49:c2:03:03:01:dc:66:7e: c2:3c:8a:08:37:41:2d:28:c1:28:6a:f2:52:42:76: f4:e6:0f:0d:2c:98:4d:46:f0:a1:62:00:3f:70:0a: 02:e3:17:80:dd:ce:df:3c:d7:fd:d4:04:17:37:82: 45:42:92:4d:b4:da:58:cf:92:65:61:fc:78:ab:f9: 2d:1b:af:8d:37:77:b8:9b:33:58:55:94:ea:b4:0e: 3c:ae:b7:20:23:dd:16:a1:d2:2f:32:62:68:60:40: fe:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: AB:4A:AC:80:49:BF:A0:F4:F2:78:AC:22:38:5C:A9:AB:CA:B9:A3:41 X509v3 Authority Key Identifier: keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1069195700119535618/0/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1069195700119535618/0/AB4AAC8049BFA0F4F278AC22385CA9ABCAB9A341.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 27.106.128.0/18 45.121.96.0/22 103.61.176.0/22 211.148.64.0/18 220.152.128.0/17 Signature Algorithm: sha256WithRSAEncryption 04:2e:60:aa:47:e6:57:21:a2:64:1b:3c:fb:ae:dc:82:c3:1b: fd:5e:fe:df:de:1a:48:c8:fc:cb:f9:83:5b:9f:fb:6f:3d:a6: 37:31:65:5a:fb:a7:be:75:1c:5a:cd:6e:05:73:34:eb:f6:f9: b5:4d:27:7d:f1:64:52:29:c4:2f:b9:22:73:f3:5a:a0:3f:3c: 7c:80:67:30:7e:69:f0:bf:bd:14:75:61:80:8f:94:cd:07:30: 02:d9:ef:78:07:fa:e9:11:a1:63:bd:30:12:45:9e:51:4a:75: 6c:33:52:a9:59:da:0e:fe:d5:29:5a:20:44:16:af:a3:ad:41: d2:74:1a:b3:cb:e5:cb:ea:2c:4b:77:88:d9:a3:1b:43:83:99: 1c:a3:6d:56:8e:d5:16:e0:6f:06:7e:47:b1:4d:35:e1:aa:3e: b9:19:a1:30:8e:2d:d4:d7:ee:06:4d:01:b7:f7:d4:bf:c9:29: 03:ed:c1:a3:0f:ef:0b:07:72:f2:ec:7c:62:c8:01:65:90:b9: 67:7a:fc:e1:df:6e:d6:90:b1:7f:07:6b:d6:8e:19:e7:6b:a3: 0a:e5:9d:88:24:90:50:8e:b9:54:19:d5:fc:f0:29:5c:39:69: 8f:0d:f1:b9:20:d4:38:63:aa:37:cf:8d:ec:0e:bd:23:c7:c5: 05:a4:b2:8b -----BEGIN CERTIFICATE----- MIIFvzCCBKegAwIBAgIUJO5a1p/Izla6dI2wVzK9z4s2GFUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDEyOTA5NTcwMVoX DTI3MDEyODEwMDIwMVowMzExMC8GA1UEAxMoQUI0QUFDODA0OUJGQTBGNEYyNzhB QzIyMzg1Q0E5QUJDQUI5QTM0MTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMjPlwCNxaVqPLbcMAsLAaz0F5smWdW+Q3FNUsLF2qI3iVO7nC1UcfzyJz6E BtsHeVvKMSKIxLyn8bT/s5Z0O7nZMkBfh4li2tfEy+lJOLySfk82JoTpkdHcvfnj WX7hyuSws65C0V7W1SWVXi7ONhcuXgIzh3Q574gqcIygeEGlGe8CJqjUqqeibbzb 2I2r9cpZ+4QAyjBI/Z2bKUnCAwMB3GZ+wjyKCDdBLSjBKGryUkJ29OYPDSyYTUbw oWIAP3AKAuMXgN3O3zzX/dQEFzeCRUKSTbTaWM+SZWH8eKv5LRuvjTd3uJszWFWU 6rQOPK63ICPdFqHSLzJiaGBA/v0CAwEAAaOCArIwggKuMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFKtKrIBJv6D08nisIjhcqavKuaNBMB8GA1UdIwQYMBaAFKVu hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTA2OTE5NTcwMDExOTUzNTYxOC8wLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDY5MTk1NzAwMTE5NTM1NjE4 LzAvQUI0QUFDODA0OUJGQTBGNEYyNzhBQzIyMzg1Q0E5QUJDQUI5QTM0MS5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwNwYIKwYBBQUH AQcBAf8EKDAmMCQEAgABMB4DBAYbaoADBAIteWADBAJnPbADBAbTlEADBAfcmIAw DQYJKoZIhvcNAQELBQADggEBAAQuYKpH5lchomQbPPuu3ILDG/1e/t/eGkjI/Mv5 g1uf+289pjcxZVr7p751HFrNbgVzNOv2+bVNJ33xZFIpxC+5InPzWqA/PHyAZzB+ afC/vRR1YYCPlM0HMALZ73gH+ukRoWO9MBJFnlFKdWwzUqlZ2g7+1SlaIEQWr6Ot QdJ0GrPL5cvqLEt3iNmjG0ODmRyjbVaO1RbgbwZ+R7FNNeGqPrkZoTCOLdTX7gZN Abf31L/JKQPtwaMP7wsHcvLsfGLIAWWQuWd6/OHfbtaQsX8Ha9aOGedrowrlnYgk kFCOuVQZ1fzwKVw5aY8N8bkg1DhjqjfPjewOvSPHxQWksos= -----END CERTIFICATE-----Generated at Mon Feb 23 00:54:26 2026 by rpki-client