$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D96931B6DFA45C70AE4FA57DE6DD96DCD91B93E5.cer File: D96931B6DFA45C70AE4FA57DE6DD96DCD91B93E5.cer (raw, json) Hash identifier: Otmt7jDOrMdDS3ncrP32Zjt9hpa1MxPjkpfaMZx4zkM= Subject key identifier: D9:69:31:B6:DF:A4:5C:70:AE:4F:A5:7D:E6:DD:96:DC:D9:1B:93:E5 Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Certificate serial: 4880026A7F594429B321D0D59819DB56DC307301 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1065588553130049539/0/D96931B6DFA45C70AE4FA57DE6DD96DCD91B93E5.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1065588553130049539/0/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Fri 29 May 2026 05:54:16 +0000 Certificate not after: Fri 28 May 2027 05:59:16 +0000 Subordinate resources: IP: 103.120.96.0/22 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 15:28:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:80:02:6a:7f:59:44:29:b3:21:d0:d5:98:19:db:56:dc:30:73:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Validity Not Before: May 29 05:54:16 2026 GMT Not After : May 28 05:59:16 2027 GMT Subject: CN=D96931B6DFA45C70AE4FA57DE6DD96DCD91B93E5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:13:fe:0f:b9:c1:45:ce:ed:d1:61:3d:83:ff: d2:c1:64:02:33:6e:dd:77:69:11:5f:49:55:ec:d6: 38:c6:85:58:aa:75:23:8f:d2:c3:05:3d:b3:6f:b4: 15:c5:20:d9:8d:b3:b1:71:55:cb:65:3a:cb:a5:ce: fe:66:4d:de:18:0e:21:78:01:ef:11:cd:07:ed:90: 45:a6:db:ec:3f:e1:f7:73:0b:54:1e:55:05:e0:50: 95:7a:44:17:ab:80:78:ce:89:75:0c:12:b8:4c:73: 6d:a0:de:6b:ab:86:50:2f:b2:20:95:1d:bd:2b:6d: ef:14:f8:eb:a7:b7:de:c0:ca:28:79:03:c5:64:30: 7a:92:a6:da:4f:61:83:93:8a:3a:ed:97:f8:3a:d6: 96:2e:30:3f:dc:b5:fa:7b:97:25:f7:9c:c4:19:e0: 3e:a6:78:91:94:6a:d1:e1:02:96:58:f0:04:37:32: 97:90:2a:2f:c9:37:97:8e:78:14:ab:8e:b9:95:89: 9b:f2:a4:c3:fb:6e:98:d5:75:c9:cc:fb:a5:2f:7e: e4:bb:7f:5f:0a:08:e0:14:62:fe:c6:07:20:ae:bf: f0:78:d7:82:39:4a:25:d9:c6:f3:b0:ce:56:52:72: 43:af:83:e7:ab:5c:ab:1c:95:93:4e:76:aa:c3:b3: e3:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: D9:69:31:B6:DF:A4:5C:70:AE:4F:A5:7D:E6:DD:96:DC:D9:1B:93:E5 X509v3 Authority Key Identifier: keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553130049539/0/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553130049539/0/D96931B6DFA45C70AE4FA57DE6DD96DCD91B93E5.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.120.96.0/22 Signature Algorithm: sha256WithRSAEncryption 07:c4:db:6e:19:60:d4:1a:47:93:8d:a4:aa:e8:ee:06:6a:40: 88:12:b5:13:df:a6:da:fb:28:70:72:7a:23:87:a2:99:ee:9f: da:91:75:90:bc:f7:0a:07:c4:58:6c:75:52:b4:af:3a:1b:ef: d8:08:16:01:8a:45:91:bc:e5:44:5f:d3:34:63:8e:a8:e1:7c: c4:c4:a5:ee:d9:0a:cd:77:9c:5c:20:db:1f:f0:23:b6:ee:ef: 5e:01:52:5f:07:37:be:be:62:a8:3e:9d:f2:c2:cc:95:88:04: 61:98:0c:11:9e:f5:6d:09:2f:9a:b3:da:66:f8:4a:a4:16:a3: ca:92:f6:c4:3c:5b:3f:72:4b:c2:4f:fa:a5:90:4d:3b:c2:37: 64:90:55:56:a4:8a:15:6f:77:17:d9:1a:c3:9e:2e:d6:ee:0a: de:12:31:e2:af:65:c0:4e:0d:f0:a1:6f:55:6b:54:d1:5b:92: c3:6e:b4:13:51:a5:d2:13:4f:af:60:a8:76:3e:56:c1:37:a1: 3c:ba:7d:25:98:0c:43:ca:33:80:79:a4:d5:28:8f:8c:28:d4: 95:ba:ad:d5:01:68:d9:5c:2f:a8:0c:c8:4c:e3:dd:7e:3b:53: 41:3a:7e:c1:37:18:a3:f3:f2:51:c1:78:16:ba:48:e7:d6:6a: 20:c3:d6:e1 -----BEGIN CERTIFICATE----- MIIFpzCCBI+gAwIBAgIUSIACan9ZRCmzIdDVmBnbVtwwcwEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDUyOTA1NTQxNloX DTI3MDUyODA1NTkxNlowMzExMC8GA1UEAxMoRDk2OTMxQjZERkE0NUM3MEFFNEZB NTdERTZERDk2RENEOTFCOTNFNTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOcT/g+5wUXO7dFhPYP/0sFkAjNu3XdpEV9JVezWOMaFWKp1I4/SwwU9s2+0 FcUg2Y2zsXFVy2U6y6XO/mZN3hgOIXgB7xHNB+2QRabb7D/h93MLVB5VBeBQlXpE F6uAeM6JdQwSuExzbaDea6uGUC+yIJUdvStt7xT466e33sDKKHkDxWQwepKm2k9h g5OKOu2X+DrWli4wP9y1+nuXJfecxBngPqZ4kZRq0eEClljwBDcyl5AqL8k3l454 FKuOuZWJm/Kkw/tumNV1ycz7pS9+5Lt/XwoI4BRi/sYHIK6/8HjXgjlKJdnG87DO VlJyQ6+D56tcqxyVk052qsOz4xcCAwEAAaOCApowggKWMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFNlpMbbfpFxwrk+lfebdltzZG5PlMB8GA1UdIwQYMBaAFKVu hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTA2NTU4ODU1MzEzMDA0OTUzOS8wLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDY1NTg4NTUzMTMwMDQ5NTM5 LzAvRDk2OTMxQjZERkE0NUM3MEFFNEZBNTdERTZERDk2RENEOTFCOTNFNS5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAJneGAwDQYJKoZIhvcNAQELBQADggEBAAfE224Z YNQaR5ONpKro7gZqQIgStRPfptr7KHByeiOHopnun9qRdZC89woHxFhsdVK0rzob 79gIFgGKRZG85URf0zRjjqjhfMTEpe7ZCs13nFwg2x/wI7bu714BUl8HN76+Yqg+ nfLCzJWIBGGYDBGe9W0JL5qz2mb4SqQWo8qS9sQ8Wz9yS8JP+qWQTTvCN2SQVVak ihVvdxfZGsOeLtbuCt4SMeKvZcBODfChb1VrVNFbksNutBNRpdITT69gqHY+VsE3 oTy6fSWYDEPKM4B5pNUoj4wo1JW6rdUBaNlcL6gMyEzj3X47U0E6fsE3GKPz8lHB eBa6SOfWaiDD1uE= -----END CERTIFICATE-----Generated at Fri May 29 21:14:08 2026 by rpki-client