$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/823A9D24802AB10026095D92952BEC936120C9F0.cer File: 823A9D24802AB10026095D92952BEC936120C9F0.cer (raw, json) Hash identifier: M/32Qpsjg3Z06SVEj8BWYPBd/mwHS5/hBZkAN78J8oA= Subject key identifier: 82:3A:9D:24:80:2A:B1:00:26:09:5D:92:95:2B:EC:93:61:20:C9:F0 Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Certificate serial: 3025D6BE96727A53BC9BCCEB00510E772E50EABC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1116910113051901977/2/823A9D24802AB10026095D92952BEC936120C9F0.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1116910113051901977/2/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Wed 10 Jun 2026 01:57:05 +0000 Certificate not after: Wed 09 Jun 2027 02:02:05 +0000 Subordinate resources: AS: 137801 IP: 103.115.248.0/22 IP: 2402:f140::/32 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 16:02:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:25:d6:be:96:72:7a:53:bc:9b:cc:eb:00:51:0e:77:2e:50:ea:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Validity Not Before: Jun 10 01:57:05 2026 GMT Not After : Jun 9 02:02:05 2027 GMT Subject: CN=823A9D24802AB10026095D92952BEC936120C9F0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:ef:65:a5:ca:29:2b:b7:7c:6a:50:2c:f2:9c: 9d:93:03:0b:4b:e3:43:33:44:3e:eb:a8:c5:2b:05: e8:7a:40:5b:cb:c9:15:da:3c:64:c4:b1:b9:03:97: 29:c5:10:a5:11:61:b7:f2:ad:65:1c:96:81:83:7b: ad:9a:91:ef:36:60:19:55:d8:dd:9e:da:f5:4c:b4: 16:16:f9:17:e6:b7:b4:88:a3:4a:48:b6:b3:14:b9: 09:84:ac:0c:dd:af:c9:71:a1:dc:3a:c0:76:e9:7e: 2c:4b:af:dd:0b:c4:91:e5:72:02:42:ce:cc:fd:45: cb:88:04:e3:77:59:53:23:4f:76:6b:53:e5:b9:af: ba:4c:0f:b3:30:2d:8f:b0:ef:3f:ab:2d:d8:12:23: 8f:5e:64:0e:85:23:cf:e7:b9:1a:5c:55:4c:c5:fd: 65:65:3a:1b:54:dc:ba:78:2e:6e:be:65:9a:7d:58: 1f:80:29:c0:ce:03:91:c6:2b:46:a7:cc:a5:77:57: 5d:8a:82:13:ec:9a:c9:eb:7f:45:bb:5c:a8:15:47: 3c:3a:0c:4c:a8:29:33:f4:82:0b:56:24:4f:22:70: 47:f7:cf:07:2e:8d:78:61:ad:7d:ef:11:ff:19:de: c8:5e:24:54:7c:18:73:b8:08:1c:22:6f:96:5e:6a: e4:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 82:3A:9D:24:80:2A:B1:00:26:09:5D:92:95:2B:EC:93:61:20:C9:F0 X509v3 Authority Key Identifier: keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1116910113051901977/2/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1116910113051901977/2/823A9D24802AB10026095D92952BEC936120C9F0.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.115.248.0/22 IPv6: 2402:f140::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 137801 Signature Algorithm: sha256WithRSAEncryption 41:10:29:ee:74:bd:76:a2:26:61:ed:83:c9:2c:b8:5b:07:20: 09:16:98:5a:fc:44:ba:96:83:9d:62:bb:fa:52:2e:77:e5:5b: 40:13:36:a8:12:52:3c:2f:12:70:ad:d6:a7:9f:a4:5b:13:5b: 1f:08:1e:50:ea:5b:de:44:5e:c5:43:c9:c3:50:18:f3:33:f3: 77:2d:0c:f0:e6:65:53:9a:9a:41:21:b8:38:b2:e6:26:14:aa: 35:71:e2:44:c7:7b:4f:02:c3:ae:49:d1:e8:3f:96:43:ec:53: 28:ce:3a:3d:e4:15:a8:6f:4f:37:67:61:74:9d:24:37:84:f5: ce:70:e2:33:8f:d2:4f:2a:3e:7c:7a:13:a6:46:dc:f7:ff:0d: 55:fa:39:44:8c:61:b6:56:a9:98:2e:72:60:42:f3:a5:4f:f4: a2:bf:e5:a0:92:e0:c3:6c:7a:39:88:bf:60:8a:d2:77:0d:91: 73:ca:a0:fe:a0:87:db:94:8b:37:6e:16:06:0f:39:45:a6:bb: 80:dc:1b:2e:74:87:3c:b2:d5:22:be:77:01:16:c8:8c:97:ed: 02:5a:a0:d1:17:47:13:37:8c:23:15:21:cb:12:63:c2:c0:21: 7d:5e:cd:6f:1c:4a:7b:11:e5:7e:c8:24:a8:66:de:4c:1e:45: d6:6a:60:4b -----BEGIN CERTIFICATE----- MIIF0jCCBLqgAwIBAgIUMCXWvpZyelO8m8zrAFEOdy5Q6rwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDYxMDAxNTcwNVoX DTI3MDYwOTAyMDIwNVowMzExMC8GA1UEAxMoODIzQTlEMjQ4MDJBQjEwMDI2MDk1 RDkyOTUyQkVDOTM2MTIwQzlGMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALzvZaXKKSu3fGpQLPKcnZMDC0vjQzNEPuuoxSsF6HpAW8vJFdo8ZMSxuQOX KcUQpRFht/KtZRyWgYN7rZqR7zZgGVXY3Z7a9Uy0Fhb5F+a3tIijSki2sxS5CYSs DN2vyXGh3DrAdul+LEuv3QvEkeVyAkLOzP1Fy4gE43dZUyNPdmtT5bmvukwPszAt j7DvP6st2BIjj15kDoUjz+e5GlxVTMX9ZWU6G1Tcungubr5lmn1YH4ApwM4DkcYr RqfMpXdXXYqCE+yayet/RbtcqBVHPDoMTKgpM/SCC1YkTyJwR/fPBy6NeGGtfe8R /xneyF4kVHwYc7gIHCJvll5q5FcCAwEAAaOCAsUwggLBMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFII6nSSAKrEAJgldkpUr7JNhIMnwMB8GA1UdIwQYMBaAFKVu hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTExNjkxMDExMzA1MTkwMTk3Ny8yLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMTE2OTEwMTEzMDUxOTAxOTc3 LzIvODIzQTlEMjQ4MDJBQjEwMDI2MDk1RDkyOTUyQkVDOTM2MTIwQzlGMC5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUH AQcBAf8EHzAdMAwEAgABMAYDBAJnc/gwDQQCAAIwBwMFACQC8UAwGgYIKwYBBQUH AQgBAf8ECzAJoAcwBQIDAhpJMA0GCSqGSIb3DQEBCwUAA4IBAQBBECnudL12oiZh 7YPJLLhbByAJFpha/ES6loOdYrv6Ui535VtAEzaoElI8LxJwrdann6RbE1sfCB5Q 6lveRF7FQ8nDUBjzM/N3LQzw5mVTmppBIbg4suYmFKo1ceJEx3tPAsOuSdHoP5ZD 7FMozjo95BWob083Z2F0nSQ3hPXOcOIzj9JPKj58ehOmRtz3/w1V+jlEjGG2VqmY LnJgQvOlT/Siv+WgkuDDbHo5iL9gitJ3DZFzyqD+oIfblIs3bhYGDzlFpruA3Bsu dIc8stUivncBFsiMl+0CWqDRF0cTN4wjFSHLEmPCwCF9Xs1vHEp7EeV+yCSoZt5M HkXWamBL -----END CERTIFICATE-----Generated at Sun Jun 14 03:46:31 2026 by rpki-client