$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E95A4C6575A537BA764908DB55E8E20D56BCCFA4.cer File: E95A4C6575A537BA764908DB55E8E20D56BCCFA4.cer (raw, json) Hash identifier: kXW9MSfnFjBD3IrT3KbXx2MCBfCX0UJqN0xyBJFY7Cs= Subject key identifier: E9:5A:4C:65:75:A5:37:BA:76:49:08:DB:55:E8:E2:0D:56:BC:CF:A4 Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Certificate serial: 13089D4D92D9C767D2C0252CD6ED8317A7861DE6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1155077214371315761/0/E95A4C6575A537BA764908DB55E8E20D56BCCFA4.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1155077214371315761/0/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Wed 23 Sep 2026 09:39:30 +0000 Certificate not after: Wed 22 Sep 2027 09:44:30 +0000 Subordinate resources: IP: 218.247.32.0/19 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 Oct 2026 09:52:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:08:9d:4d:92:d9:c7:67:d2:c0:25:2c:d6:ed:83:17:a7:86:1d:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Validity Not Before: Sep 23 09:39:30 2026 GMT Not After : Sep 22 09:44:30 2027 GMT Subject: CN=E95A4C6575A537BA764908DB55E8E20D56BCCFA4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:74:d9:f1:21:5f:bb:dc:15:d9:c8:a7:dd:32: ea:0f:76:32:68:6c:65:a0:73:9b:d0:73:f0:20:2f: 4e:af:f9:13:6a:fc:54:cd:f4:c8:54:57:58:9d:45: 49:ed:22:eb:69:36:3d:d7:c6:e3:65:26:62:4f:64: 9a:64:79:b8:30:02:7a:25:5d:40:74:37:88:5f:09: 23:55:dc:0d:82:2d:91:96:10:6d:e6:e6:01:40:f0: 94:ee:09:95:89:29:d5:bd:37:b9:d5:e1:85:88:38: 3b:5c:9c:07:77:b0:bf:62:97:40:df:ac:7d:0f:b0: 27:bb:e1:60:93:16:79:fc:8f:98:07:c9:f7:82:32: 3b:7f:bc:2b:b6:70:93:cc:69:6f:8c:08:ec:b1:20: c2:74:98:81:9b:5c:70:b8:c2:4f:2c:10:f1:93:40: a1:a0:00:fa:2b:0c:ef:01:08:01:bc:70:ea:d7:c7: 75:42:78:d7:db:29:7c:7d:4b:33:b5:60:fb:9e:04: f6:67:2e:eb:a7:74:ae:e0:a5:fc:71:de:57:90:2c: cf:f6:6a:21:81:12:20:24:ce:aa:a9:d2:9c:47:91: 51:d7:4c:9e:1c:5c:52:06:0a:5c:ae:69:e6:66:52: ac:22:35:63:e7:02:8b:12:e4:be:a4:62:02:23:b7: c9:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: E9:5A:4C:65:75:A5:37:BA:76:49:08:DB:55:E8:E2:0D:56:BC:CF:A4 X509v3 Authority Key Identifier: keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1155077214371315761/0/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1155077214371315761/0/E95A4C6575A537BA764908DB55E8E20D56BCCFA4.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 218.247.32.0/19 Signature Algorithm: sha256WithRSAEncryption 67:17:d3:31:2d:77:29:2c:fc:79:43:d4:4c:ac:6e:ad:5f:c0: 34:0c:c4:43:a0:60:ee:b6:e2:28:51:da:85:ee:b3:4a:99:f7: 87:fe:9a:45:e0:36:ea:95:50:10:f0:fa:2b:2f:db:48:a3:c2: 8f:24:c3:b0:0d:98:d2:b5:e0:86:7f:92:f4:3f:16:17:7d:77: 0c:46:19:95:be:56:f1:7d:b7:14:78:90:f9:21:ea:fc:2f:ff: f4:fc:a4:2c:92:bd:2e:2f:e2:e0:8a:2e:78:f1:00:d2:21:df: e4:5c:ca:4b:ea:ad:a8:94:1f:6b:ac:e7:cb:92:88:33:b4:3f: 24:87:f7:93:d9:96:6a:8a:f8:87:9d:8c:97:ab:3c:4e:59:ca: cb:d7:b5:d0:5a:98:86:e1:61:7b:4f:af:8e:7a:bc:b5:bf:8b: 80:31:65:fa:d4:96:77:7a:6c:90:99:4a:9a:2c:ac:de:de:19: 40:32:a5:39:31:89:ac:ce:02:03:33:7d:3e:33:10:f3:9f:9a: 6d:6b:5d:3c:0e:fe:ca:d2:b3:62:e6:cf:60:b5:55:33:a1:fe: 6f:85:53:51:f9:96:a2:ee:96:17:45:59:cc:96:f2:e2:9a:c0: d2:cf:98:1d:be:1e:40:47:f7:60:dc:0e:1c:bd:dd:cd:6c:6e: 4b:b2:1f:b4 -----BEGIN CERTIFICATE----- MIIFpzCCBI+gAwIBAgIUEwidTZLZx2fSwCUs1u2DF6eGHeYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDkyMzA5MzkzMFoX DTI3MDkyMjA5NDQzMFowMzExMC8GA1UEAxMoRTk1QTRDNjU3NUE1MzdCQTc2NDkw OERCNTVFOEUyMEQ1NkJDQ0ZBNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAM902fEhX7vcFdnIp90y6g92MmhsZaBzm9Bz8CAvTq/5E2r8VM30yFRXWJ1F Se0i62k2PdfG42UmYk9kmmR5uDACeiVdQHQ3iF8JI1XcDYItkZYQbebmAUDwlO4J lYkp1b03udXhhYg4O1ycB3ewv2KXQN+sfQ+wJ7vhYJMWefyPmAfJ94IyO3+8K7Zw k8xpb4wI7LEgwnSYgZtccLjCTywQ8ZNAoaAA+isM7wEIAbxw6tfHdUJ419spfH1L M7Vg+54E9mcu66d0ruCl/HHeV5Asz/ZqIYESICTOqqnSnEeRUddMnhxcUgYKXK5p 5mZSrCI1Y+cCixLkvqRiAiO3yasCAwEAAaOCApowggKWMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFOlaTGV1pTe6dkkI21Xo4g1WvM+kMB8GA1UdIwQYMBaAFKVu hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTE1NTA3NzIxNDM3MTMxNTc2MS8wLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMTU1MDc3MjE0MzcxMzE1NzYx LzAvRTk1QTRDNjU3NUE1MzdCQTc2NDkwOERCNTVFOEUyMEQ1NkJDQ0ZBNC5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAXa9yAwDQYJKoZIhvcNAQELBQADggEBAGcX0zEt dyks/HlD1Eysbq1fwDQMxEOgYO624ihR2oXus0qZ94f+mkXgNuqVUBDw+isv20ij wo8kw7ANmNK14IZ/kvQ/Fhd9dwxGGZW+VvF9txR4kPkh6vwv//T8pCySvS4v4uCK LnjxANIh3+RcykvqraiUH2us58uSiDO0PySH95PZlmqK+IedjJerPE5ZysvXtdBa mIbhYXtPr456vLW/i4AxZfrUlnd6bJCZSposrN7eGUAypTkxiazOAgMzfT4zEPOf mm1rXTwO/srSs2Lmz2C1VTOh/m+FU1H5lqLulhdFWcyW8uKawNLPmB2+HkBH92Dc Dhy93c1sbkuyH7Q= -----END CERTIFICATE-----Generated at Sat Oct 10 21:25:52 2026 by rpki-client