$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C899967B95E32E37CCEAA11CF146FB57B51A7C49.cer File: C899967B95E32E37CCEAA11CF146FB57B51A7C49.cer (raw, json) Hash identifier: Zy9ZPnHItqaAhqy4k8SKQFVdaJT3Ri4F31BoxTJg/Xw= Subject key identifier: C8:99:96:7B:95:E3:2E:37:CC:EA:A1:1C:F1:46:FB:57:B5:1A:7C:49 Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Certificate serial: 32AB7ED73B9F331D09C6EC80A0BD4774BAD962C0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1109314073968902163/0/C899967B95E32E37CCEAA11CF146FB57B51A7C49.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1109314073968902163/0/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Tue 15 Sep 2026 08:31:43 +0000 Certificate not after: Tue 14 Sep 2027 08:36:43 +0000 Subordinate resources: AS: 38373 IP: 119.80.0.0/19 IP: 119.80.128.0/18 IP: 119.80.244.0 -- 119.80.255.255 IP: 2400:5580::/32 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 Oct 2026 01:08:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:ab:7e:d7:3b:9f:33:1d:09:c6:ec:80:a0:bd:47:74:ba:d9:62:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Validity Not Before: Sep 15 08:31:43 2026 GMT Not After : Sep 14 08:36:43 2027 GMT Subject: CN=C899967B95E32E37CCEAA11CF146FB57B51A7C49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:63:87:e2:2c:a6:e5:7b:8e:67:d4:b1:d7:6f: b7:26:6a:cd:22:95:3e:96:d7:1a:df:ec:cf:64:83: 4d:13:18:0f:2d:ab:89:8d:5e:5d:b0:83:91:05:d8: ae:e3:c5:74:da:15:d5:4b:de:55:4d:76:f2:65:17: d1:11:96:27:25:73:2e:33:b8:11:e4:83:bc:c1:2a: d5:66:65:2c:8e:43:b2:57:72:9f:c9:13:d8:52:47: e5:76:33:54:92:08:59:c3:8c:82:5a:c0:51:91:44: 0b:d9:b6:79:0c:79:64:91:5d:e9:64:c0:a5:20:8d: 21:30:da:aa:be:e3:2d:41:81:61:f4:19:52:73:ba: d6:04:f6:39:83:d4:5e:ad:27:30:37:99:e8:64:6d: 32:58:17:48:e9:42:91:79:0d:53:c5:40:64:2c:9c: 8c:1e:dd:f3:fb:ac:49:e6:ab:31:28:87:91:0c:7c: 2b:f0:47:ca:ee:53:f7:43:29:08:a8:c5:bd:3e:b5: 2a:e8:1a:ac:12:41:1f:b0:ac:ed:ac:f6:a1:59:5d: c4:28:53:64:63:11:6c:31:19:02:33:5d:1a:c1:cd: 26:ce:5b:5d:76:a2:b5:fe:36:e9:ab:29:6f:35:6f: 66:38:b0:9b:78:c0:54:74:a6:86:ea:2e:11:13:67: e7:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: C8:99:96:7B:95:E3:2E:37:CC:EA:A1:1C:F1:46:FB:57:B5:1A:7C:49 X509v3 Authority Key Identifier: keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1109314073968902163/0/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1109314073968902163/0/C899967B95E32E37CCEAA11CF146FB57B51A7C49.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 119.80.0.0/19 119.80.128.0/18 119.80.244.0-119.80.255.255 IPv6: 2400:5580::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 38373 Signature Algorithm: sha256WithRSAEncryption 17:b3:f3:3b:bd:be:d1:4f:ef:01:48:92:c9:e6:2a:49:19:ec: 8b:65:91:20:97:a3:c1:73:5d:49:fa:63:3c:e1:f0:23:1e:ed: 65:58:62:c2:e1:8c:7d:20:0d:f1:f3:11:9d:8d:b4:a2:4d:5a: 01:00:f0:e6:6d:e8:12:39:45:9a:97:77:5d:dd:f3:06:73:06: 06:1b:25:30:55:57:d3:b2:cc:ce:c3:51:e8:3a:c8:f3:a2:5e: f7:84:b0:1e:71:75:54:71:e7:a2:a1:a5:ea:c6:65:7f:0b:83: b2:81:79:9a:89:2b:4a:b6:6d:fd:ab:41:b0:e1:10:d5:ca:57: e3:7c:a8:09:13:bb:e7:6f:e0:cf:dc:f3:35:df:91:3b:4a:0a: b6:bd:a1:9b:20:f3:12:fb:15:8e:4a:40:d2:49:2b:db:6e:68: 78:90:5d:4e:cf:71:6b:e5:ee:11:33:2e:ac:82:12:bf:a2:37: d3:3a:f6:a1:1a:77:d7:88:48:3c:43:6a:1e:96:3a:84:1d:79: 29:f3:0b:a3:dc:eb:43:39:26:1a:3e:8e:ed:f3:aa:99:4c:96: b6:8d:07:39:98:8f:ee:ae:32:16:7d:b9:38:95:57:0f:34:6b: 8f:b1:71:f8:3b:48:b8:c7:ea:ac:51:00:5d:a3:cd:e6:85:c3: 6e:53:44:f3 -----BEGIN CERTIFICATE----- MIIF5TCCBM2gAwIBAgIUMqt+1zufMx0JxuyAoL1HdLrZYsAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDkxNTA4MzE0M1oX DTI3MDkxNDA4MzY0M1owMzExMC8GA1UEAxMoQzg5OTk2N0I5NUUzMkUzN0NDRUFB MTFDRjE0NkZCNTdCNTFBN0M0OTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALFjh+IspuV7jmfUsddvtyZqzSKVPpbXGt/sz2SDTRMYDy2riY1eXbCDkQXY ruPFdNoV1UveVU128mUX0RGWJyVzLjO4EeSDvMEq1WZlLI5Dsldyn8kT2FJH5XYz VJIIWcOMglrAUZFEC9m2eQx5ZJFd6WTApSCNITDaqr7jLUGBYfQZUnO61gT2OYPU Xq0nMDeZ6GRtMlgXSOlCkXkNU8VAZCycjB7d8/usSearMSiHkQx8K/BHyu5T90Mp CKjFvT61KugarBJBH7Cs7az2oVldxChTZGMRbDEZAjNdGsHNJs5bXXaitf426asp bzVvZjiwm3jAVHSmhuouERNn5yUCAwEAAaOCAtgwggLUMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFMiZlnuV4y43zOqhHPFG+1e1GnxJMB8GA1UdIwQYMBaAFKVu hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTEwOTMxNDA3Mzk2ODkwMjE2My8wLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMTA5MzE0MDczOTY4OTAyMTYz LzAvQzg5OTk2N0I5NUUzMkUzN0NDRUFBMTFDRjE0NkZCNTdCNTFBN0M0OS5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwQQYIKwYBBQUH AQcBAf8EMjAwMB8EAgABMBkDBAV3UAADBAZ3UIAwCwMEAndQ9AMDAHdQMA0EAgAC MAcDBQAkAFWAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwCV5TANBgkqhkiG9w0B AQsFAAOCAQEAF7PzO72+0U/vAUiSyeYqSRnsi2WRIJejwXNdSfpjPOHwIx7tZVhi wuGMfSAN8fMRnY20ok1aAQDw5m3oEjlFmpd3Xd3zBnMGBhslMFVX07LMzsNR6DrI 86Je94SwHnF1VHHnoqGl6sZlfwuDsoF5mokrSrZt/atBsOEQ1cpX43yoCRO752/g z9zzNd+RO0oKtr2hmyDzEvsVjkpA0kkr225oeJBdTs9xa+XuETMurIISv6I30zr2 oRp314hIPENqHpY6hB15KfMLo9zrQzkmGj6O7fOqmUyWto0HOZiP7q4yFn25OJVX DzRrj7Fx+DtIuMfqrFEAXaPN5oXDblNE8w== -----END CERTIFICATE-----Generated at Tue Oct 13 23:05:28 2026 by rpki-client