$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D9EB5C6DC17682949F5243587DA38740C3EEA953.cer File: D9EB5C6DC17682949F5243587DA38740C3EEA953.cer (raw, json) Hash identifier: GZ5lVnauUNvBmOWlvviiqIgunSmCnalwbPhXmkg3kjE= Subject key identifier: D9:EB:5C:6D:C1:76:82:94:9F:52:43:58:7D:A3:87:40:C3:EE:A9:53 Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Certificate serial: 2DFA95970526EC2ACB38555203EE7AE31FA806CC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1065582330346864641/0/D9EB5C6DC17682949F5243587DA38740C3EEA953.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1065582330346864641/0/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Thu 28 May 2026 08:29:48 +0000 Certificate not after: Thu 27 May 2027 08:34:48 +0000 Subordinate resources: AS: 63631 -- 63632 IP: 103.77.72.0/22 IP: 103.77.88.0/22 IP: 110.172.224.0/22 IP: 119.161.136.0 -- 119.161.167.255 IP: 2407:8b80::/32 IP: 2407:9080::/32 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 15:28:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:fa:95:97:05:26:ec:2a:cb:38:55:52:03:ee:7a:e3:1f:a8:06:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Validity Not Before: May 28 08:29:48 2026 GMT Not After : May 27 08:34:48 2027 GMT Subject: CN=D9EB5C6DC17682949F5243587DA38740C3EEA953 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:9a:84:c9:a6:8d:62:35:9c:0a:29:33:44:26: 91:8d:0c:e3:43:f5:cd:19:5c:23:3b:82:19:76:98: 3c:95:76:09:0c:08:45:b9:f3:a3:1c:e9:d5:6a:48: 6d:7a:86:63:e7:9f:59:17:7f:b8:4b:45:35:d2:63: 28:6c:93:a5:77:05:fa:55:42:90:bc:8d:39:e5:7a: 73:63:aa:1c:cc:b2:2f:88:34:f0:0e:1c:ad:78:08: fc:6f:5b:d9:9f:d3:5a:6f:9c:cb:de:9a:65:8a:bd: 2b:55:f9:a6:31:87:6c:73:9d:08:c3:42:19:3d:72: 2e:d3:0d:c9:83:10:fa:29:06:63:0c:ec:0e:5a:79: a8:62:e1:e8:4a:cc:92:11:9a:8b:c5:48:9e:5e:63: ed:1b:bc:23:32:c9:ba:54:02:0f:76:43:ab:4e:6a: df:83:24:5a:ac:5a:4b:90:d9:07:36:52:06:b0:fb: 26:74:f3:58:f6:61:2a:06:aa:8c:ca:c2:c0:11:67: c8:66:de:9b:ba:12:53:0b:71:89:68:8f:1b:ab:8f: 69:4b:84:16:57:a5:ae:31:66:f0:b7:6a:b1:f6:53: 92:af:fc:2e:28:18:1d:19:d7:cf:ee:f8:5c:b3:c6: 6b:1d:da:60:b3:35:55:21:11:1c:3d:ce:d1:f7:0b: 09:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: D9:EB:5C:6D:C1:76:82:94:9F:52:43:58:7D:A3:87:40:C3:EE:A9:53 X509v3 Authority Key Identifier: keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330346864641/0/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330346864641/0/D9EB5C6DC17682949F5243587DA38740C3EEA953.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.77.72.0/22 103.77.88.0/22 110.172.224.0/22 119.161.136.0-119.161.167.255 IPv6: 2407:8b80::/32 2407:9080::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 63631-63632 Signature Algorithm: sha256WithRSAEncryption 7b:e0:0b:75:31:98:0c:a1:f0:eb:50:05:a6:a9:7f:d5:d1:e6: da:b8:da:ec:ad:76:6c:e6:49:23:8c:26:75:85:21:d6:6b:fd: 2a:b2:8e:04:e7:ad:6a:f0:80:10:a7:77:f1:ae:ff:28:4f:80: 0d:91:4b:8b:58:c2:54:68:7c:ea:1c:2f:2b:69:5e:7a:a0:41: af:a4:91:10:91:be:32:26:66:7f:fd:64:77:5b:df:2a:82:4a: 5b:51:05:63:3d:2b:c8:a0:23:ad:bd:ec:cd:1d:05:0b:11:e8: b3:9d:74:b9:fd:2c:39:40:99:e3:b8:1c:55:4c:e5:c0:f6:04: ba:5e:7c:74:02:f2:fc:5c:c2:54:b4:f6:79:11:3e:02:32:f8: 55:1a:77:31:7d:af:98:b6:3b:76:0a:f1:31:c3:96:e3:aa:97: 2f:4a:c9:e7:45:e0:c8:40:33:09:10:59:0e:b4:4d:c3:3f:8f: 0e:d6:ae:50:85:c5:60:89:7c:f7:f8:aa:df:d8:5d:c2:00:1d: 55:b8:bf:57:69:37:53:6c:a5:cc:66:50:27:6e:42:a4:37:5f: 7e:45:a9:da:04:41:1a:f2:b5:59:32:2c:6f:d7:e7:fb:8f:69: 17:54:ce:ce:67:88:7a:9b:3a:ad:a0:9e:ab:bb:9f:c5:a2:6b: 55:49:51:1e -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIULfqVlwUm7CrLOFVSA+564x+oBswwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDUyODA4Mjk0OFoX DTI3MDUyNzA4MzQ0OFowMzExMC8GA1UEAxMoRDlFQjVDNkRDMTc2ODI5NDlGNTI0 MzU4N0RBMzg3NDBDM0VFQTk1MzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALaahMmmjWI1nAopM0QmkY0M40P1zRlcIzuCGXaYPJV2CQwIRbnzoxzp1WpI bXqGY+efWRd/uEtFNdJjKGyTpXcF+lVCkLyNOeV6c2OqHMyyL4g08A4crXgI/G9b 2Z/TWm+cy96aZYq9K1X5pjGHbHOdCMNCGT1yLtMNyYMQ+ikGYwzsDlp5qGLh6ErM khGai8VInl5j7Ru8IzLJulQCD3ZDq05q34MkWqxaS5DZBzZSBrD7JnTzWPZhKgaq jMrCwBFnyGbem7oSUwtxiWiPG6uPaUuEFlelrjFm8LdqsfZTkq/8LigYHRnXz+74 XLPGax3aYLM1VSERHD3O0fcLCf0CAwEAAaOCAu0wggLpMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFNnrXG3BdoKUn1JDWH2jh0DD7qlTMB8GA1UdIwQYMBaAFKVu hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTA2NTU4MjMzMDM0Njg2NDY0MS8wLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDY1NTgyMzMwMzQ2ODY0NjQx LzAvRDlFQjVDNkRDMTc2ODI5NDlGNTI0MzU4N0RBMzg3NDBDM0VFQTk1My5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwTwYIKwYBBQUH AQcBAf8EQDA+MCYEAgABMCADBAJnTUgDBAJnTVgDBAJurOAwDAMEA3ehiAMEA3eh oDAUBAIAAjAOAwUAJAeLgAMFACQHkIAwIQYIKwYBBQUHAQgBAf8EEjAQoA4wDDAK AgMA+I8CAwD4kDANBgkqhkiG9w0BAQsFAAOCAQEAe+ALdTGYDKHw61AFpql/1dHm 2rja7K12bOZJI4wmdYUh1mv9KrKOBOetavCAEKd38a7/KE+ADZFLi1jCVGh86hwv K2leeqBBr6SREJG+MiZmf/1kd1vfKoJKW1EFYz0ryKAjrb3szR0FCxHos510uf0s OUCZ47gcVUzlwPYEul58dALy/FzCVLT2eRE+AjL4VRp3MX2vmLY7dgrxMcOW46qX L0rJ50XgyEAzCRBZDrRNwz+PDtauUIXFYIl89/iq39hdwgAdVbi/V2k3U2ylzGZQ J25CpDdffkWp2gRBGvK1WTIsb9fn+49pF1TOzmeIeps6raCeq7ufxaJrVUlRHg== -----END CERTIFICATE-----Generated at Fri May 29 21:12:52 2026 by rpki-client