$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C899967B95E32E37CCEAA11CF146FB57B51A7C49.cer File: C899967B95E32E37CCEAA11CF146FB57B51A7C49.cer (raw, json) Hash identifier: qGaq0yjUqKeEJpB93vbZbvewhhDcvLVwnuyLDbPsN+0= Subject key identifier: C8:99:96:7B:95:E3:2E:37:CC:EA:A1:1C:F1:46:FB:57:B5:1A:7C:49 Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Certificate serial: 73B2240B821FD88F46F0A37DAAE0708243B11698 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1109314073968902163/0/C899967B95E32E37CCEAA11CF146FB57B51A7C49.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1109314073968902163/0/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Wed 20 May 2026 03:01:19 +0000 Certificate not after: Wed 19 May 2027 03:06:19 +0000 Subordinate resources: AS: 38373 IP: 119.80.0.0/19 IP: 119.80.48.0 -- 119.80.191.255 IP: 119.80.204.0 -- 119.80.239.255 IP: 119.80.244.0 -- 119.80.255.255 IP: 2400:5580::/32 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 May 2026 02:27:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:b2:24:0b:82:1f:d8:8f:46:f0:a3:7d:aa:e0:70:82:43:b1:16:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Validity Not Before: May 20 03:01:19 2026 GMT Not After : May 19 03:06:19 2027 GMT Subject: CN=C899967B95E32E37CCEAA11CF146FB57B51A7C49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:63:87:e2:2c:a6:e5:7b:8e:67:d4:b1:d7:6f: b7:26:6a:cd:22:95:3e:96:d7:1a:df:ec:cf:64:83: 4d:13:18:0f:2d:ab:89:8d:5e:5d:b0:83:91:05:d8: ae:e3:c5:74:da:15:d5:4b:de:55:4d:76:f2:65:17: d1:11:96:27:25:73:2e:33:b8:11:e4:83:bc:c1:2a: d5:66:65:2c:8e:43:b2:57:72:9f:c9:13:d8:52:47: e5:76:33:54:92:08:59:c3:8c:82:5a:c0:51:91:44: 0b:d9:b6:79:0c:79:64:91:5d:e9:64:c0:a5:20:8d: 21:30:da:aa:be:e3:2d:41:81:61:f4:19:52:73:ba: d6:04:f6:39:83:d4:5e:ad:27:30:37:99:e8:64:6d: 32:58:17:48:e9:42:91:79:0d:53:c5:40:64:2c:9c: 8c:1e:dd:f3:fb:ac:49:e6:ab:31:28:87:91:0c:7c: 2b:f0:47:ca:ee:53:f7:43:29:08:a8:c5:bd:3e:b5: 2a:e8:1a:ac:12:41:1f:b0:ac:ed:ac:f6:a1:59:5d: c4:28:53:64:63:11:6c:31:19:02:33:5d:1a:c1:cd: 26:ce:5b:5d:76:a2:b5:fe:36:e9:ab:29:6f:35:6f: 66:38:b0:9b:78:c0:54:74:a6:86:ea:2e:11:13:67: e7:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: C8:99:96:7B:95:E3:2E:37:CC:EA:A1:1C:F1:46:FB:57:B5:1A:7C:49 X509v3 Authority Key Identifier: keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1109314073968902163/0/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1109314073968902163/0/C899967B95E32E37CCEAA11CF146FB57B51A7C49.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 119.80.0.0/19 119.80.48.0-119.80.191.255 119.80.204.0-119.80.239.255 119.80.244.0-119.80.255.255 IPv6: 2400:5580::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 38373 Signature Algorithm: sha256WithRSAEncryption 6a:4c:be:bd:7e:23:f0:8b:cc:54:ad:14:ee:3c:f1:76:fe:27: 2c:43:13:11:95:15:b9:6f:ab:1a:de:0e:14:92:6e:38:69:52: ab:f8:9d:77:7d:29:88:7a:25:af:2f:6f:d3:a5:bc:f0:25:21: 32:f6:8d:25:7f:23:5a:df:9a:cf:28:39:84:68:f0:b8:5e:65: bf:79:2c:f1:aa:ce:62:95:48:2d:db:93:0e:93:4b:c5:85:b2: 7c:37:ae:6e:c5:0e:f1:3b:04:bd:77:14:5c:25:0c:92:f3:49: 9f:ff:be:82:c0:33:16:10:94:2b:93:2f:54:38:98:6e:4d:c5: 97:70:e4:0c:03:c7:18:39:5f:88:cf:f4:0c:ca:65:c9:26:b6: 31:80:8c:cb:5f:4c:e6:0d:d5:d0:8c:83:78:2a:7e:6f:b5:9a: 2d:6b:bc:72:bb:d4:fd:4b:8a:db:13:95:d4:b0:87:11:3e:6b: 81:61:df:22:30:5a:d8:51:8f:8c:08:1d:da:bd:58:e0:31:97: 4f:33:a8:7f:37:91:14:55:ed:13:b4:cd:4f:29:ab:95:d6:b4: 65:44:00:3a:00:95:e0:aa:39:8a:69:69:d3:53:12:58:07:90: 52:93:6e:bd:3a:92:97:74:f4:07:e5:da:c8:1f:10:87:3f:41: a1:4e:be:2a -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUc7IkC4If2I9G8KN9quBwgkOxFpgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDUyMDAzMDExOVoX DTI3MDUxOTAzMDYxOVowMzExMC8GA1UEAxMoQzg5OTk2N0I5NUUzMkUzN0NDRUFB MTFDRjE0NkZCNTdCNTFBN0M0OTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALFjh+IspuV7jmfUsddvtyZqzSKVPpbXGt/sz2SDTRMYDy2riY1eXbCDkQXY ruPFdNoV1UveVU128mUX0RGWJyVzLjO4EeSDvMEq1WZlLI5Dsldyn8kT2FJH5XYz VJIIWcOMglrAUZFEC9m2eQx5ZJFd6WTApSCNITDaqr7jLUGBYfQZUnO61gT2OYPU Xq0nMDeZ6GRtMlgXSOlCkXkNU8VAZCycjB7d8/usSearMSiHkQx8K/BHyu5T90Mp CKjFvT61KugarBJBH7Cs7az2oVldxChTZGMRbDEZAjNdGsHNJs5bXXaitf426asp bzVvZjiwm3jAVHSmhuouERNn5yUCAwEAAaOCAu4wggLqMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFMiZlnuV4y43zOqhHPFG+1e1GnxJMB8GA1UdIwQYMBaAFKVu hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTEwOTMxNDA3Mzk2ODkwMjE2My8wLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMTA5MzE0MDczOTY4OTAyMTYz LzAvQzg5OTk2N0I5NUUzMkUzN0NDRUFBMTFDRjE0NkZCNTdCNTFBN0M0OS5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwVwYIKwYBBQUH AQcBAf8ESDBGMDUEAgABMC8DBAV3UAAwDAMEBHdQMAMEBndQgDAMAwQCd1DMAwQE d1DgMAsDBAJ3UPQDAwB3UDANBAIAAjAHAwUAJABVgDAaBggrBgEFBQcBCAEB/wQL MAmgBzAFAgMAleUwDQYJKoZIhvcNAQELBQADggEBAGpMvr1+I/CLzFStFO488Xb+ JyxDExGVFblvqxreDhSSbjhpUqv4nXd9KYh6Ja8vb9OlvPAlITL2jSV/I1rfms8o OYRo8LheZb95LPGqzmKVSC3bkw6TS8WFsnw3rm7FDvE7BL13FFwlDJLzSZ//voLA MxYQlCuTL1Q4mG5NxZdw5AwDxxg5X4jP9AzKZckmtjGAjMtfTOYN1dCMg3gqfm+1 mi1rvHK71P1LitsTldSwhxE+a4Fh3yIwWthRj4wIHdq9WOAxl08zqH83kRRV7RO0 zU8pq5XWtGVEADoAleCqOYppadNTElgHkFKTbr06kpd09Afl2sgfEIc/QaFOvio= -----END CERTIFICATE-----Generated at Sat May 23 03:46:57 2026 by rpki-client