$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/874FA1B711DC9AFDC5C0CFC20E6E74499209C59B.cer File: 874FA1B711DC9AFDC5C0CFC20E6E74499209C59B.cer (raw, json) Hash identifier: TtdCb1avyFdag6oR8znxKC16FsP5J2nAX6rhacsNBDY= Subject key identifier: 87:4F:A1:B7:11:DC:9A:FD:C5:C0:CF:C2:0E:6E:74:49:92:09:C5:9B Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Certificate serial: 9896C9B7263694DF65696A80ADE645AC9F05C4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1096996979474432002/0/874FA1B711DC9AFDC5C0CFC20E6E74499209C59B.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1096996979474432002/0/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Thu 16 Apr 2026 03:09:23 +0000 Certificate not after: Thu 15 Apr 2027 03:14:23 +0000 Subordinate resources: AS: 9810 IP: 211.155.160.0/19 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 01:26:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 98:96:c9:b7:26:36:94:df:65:69:6a:80:ad:e6:45:ac:9f:05:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Validity Not Before: Apr 16 03:09:23 2026 GMT Not After : Apr 15 03:14:23 2027 GMT Subject: CN=874FA1B711DC9AFDC5C0CFC20E6E74499209C59B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:ce:72:ca:ad:c9:e3:29:41:62:b6:ef:88:5a: a6:e0:c7:aa:db:7a:8e:d1:7d:98:c3:19:62:38:bc: 58:77:7a:fd:7e:f8:32:3a:99:15:99:54:28:97:17: a4:e8:68:96:4b:cf:6d:fd:63:0a:65:01:25:05:36: 11:49:c9:e3:67:eb:13:77:73:e5:9d:da:9e:65:3a: e5:6b:71:47:e2:ba:19:a3:f4:fd:73:6f:81:65:44: 97:2e:8e:10:7d:9f:5f:10:6f:0a:eb:5f:a0:eb:27: c3:f3:e0:a3:89:08:62:ca:d3:90:c8:6e:a6:c7:cb: 45:e4:b0:b0:dd:08:19:f0:18:e0:1d:c4:1b:1f:33: 76:24:77:cb:f0:3b:3b:73:b8:14:4e:8d:64:20:58: b4:9a:21:3d:46:e6:ac:08:49:dc:96:45:bb:cb:0e: 1a:7f:e8:e1:4b:67:7a:fe:13:2f:a2:49:cd:3c:13: 64:b2:dd:8f:85:94:4c:6d:f6:64:15:ad:93:fd:71: 25:e6:4f:17:8e:8d:4d:7e:58:b6:b7:e3:9a:46:b3: 52:f5:9f:ae:37:59:30:11:df:a9:67:b7:18:4c:c0: 50:c1:1d:57:6e:f0:c2:a4:14:52:28:9f:8f:a9:30: e9:88:c2:e0:61:d9:8e:3a:fe:6f:4c:fb:3c:77:30: 8e:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 87:4F:A1:B7:11:DC:9A:FD:C5:C0:CF:C2:0E:6E:74:49:92:09:C5:9B X509v3 Authority Key Identifier: keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1096996979474432002/0/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1096996979474432002/0/874FA1B711DC9AFDC5C0CFC20E6E74499209C59B.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 211.155.160.0/19 sbgp-autonomousSysNum: critical Autonomous System Numbers: 9810 Signature Algorithm: sha256WithRSAEncryption 81:e4:8f:9a:c7:fa:90:b2:8b:da:52:7b:17:2f:a6:ea:2d:31: 5e:4f:34:3b:f9:54:c8:95:4c:d7:c9:9a:db:4b:ca:0b:28:32: cf:c7:f9:d4:46:d6:d1:b1:ca:f2:3d:33:8e:5e:af:c9:f1:d8: 58:cd:ca:a8:65:19:40:0e:9f:29:b4:ba:36:85:49:5b:34:04: 48:05:6b:ef:71:e8:cb:a5:06:49:a3:46:6b:56:2d:6c:63:5c: 00:68:c3:b5:a8:54:e0:a1:dc:75:1b:b4:27:cb:81:85:3f:f5: 27:b0:52:1c:15:17:55:98:37:bc:cf:05:36:b0:d5:97:b1:1c: 7a:9f:cd:5b:38:e4:1c:cf:74:75:49:7b:6a:ed:15:53:c1:ec: a1:7b:df:d4:d0:7a:4d:e4:d1:9a:44:f8:f7:4b:64:b7:42:2a: 13:bf:4a:4f:6b:8e:d1:05:90:a3:a1:d9:57:99:c7:18:77:ac: ff:e5:cd:cd:10:bd:57:ca:5a:16:81:b1:cd:00:90:c8:ff:fd: 43:4a:46:a3:e2:ac:3d:1e:bc:2b:78:4c:40:c2:9a:77:aa:29: f9:23:06:fb:fd:04:1e:fc:b0:13:06:8c:5d:69:04:aa:f5:52: 72:6d:4a:90:ce:47:78:a9:49:1a:ee:2e:6a:3c:e6:40:81:a0: 53:3e:37:4f -----BEGIN CERTIFICATE----- MIIFwjCCBKqgAwIBAgIUAJiWybcmNpTfZWlqgK3mRayfBcQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDQxNjAzMDkyM1oX DTI3MDQxNTAzMTQyM1owMzExMC8GA1UEAxMoODc0RkExQjcxMURDOUFGREM1QzBD RkMyMEU2RTc0NDk5MjA5QzU5QjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMzOcsqtyeMpQWK274hapuDHqtt6jtF9mMMZYji8WHd6/X74MjqZFZlUKJcX pOholkvPbf1jCmUBJQU2EUnJ42frE3dz5Z3anmU65WtxR+K6GaP0/XNvgWVEly6O EH2fXxBvCutfoOsnw/Pgo4kIYsrTkMhupsfLReSwsN0IGfAY4B3EGx8zdiR3y/A7 O3O4FE6NZCBYtJohPUbmrAhJ3JZFu8sOGn/o4Utnev4TL6JJzTwTZLLdj4WUTG32 ZBWtk/1xJeZPF46NTX5YtrfjmkazUvWfrjdZMBHfqWe3GEzAUMEdV27wwqQUUiif j6kw6YjC4GHZjjr+b0z7PHcwjp0CAwEAAaOCArUwggKxMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFIdPobcR3Jr9xcDPwg5udEmSCcWbMB8GA1UdIwQYMBaAFKVu hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTA5Njk5Njk3OTQ3NDQzMjAwMi8wLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDk2OTk2OTc5NDc0NDMyMDAy LzAvODc0RkExQjcxMURDOUFGREM1QzBDRkMyMEU2RTc0NDk5MjA5QzU5Qi5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAXTm6AwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAIC JlIwDQYJKoZIhvcNAQELBQADggEBAIHkj5rH+pCyi9pSexcvpuotMV5PNDv5VMiV TNfJmttLygsoMs/H+dRG1tGxyvI9M45er8nx2FjNyqhlGUAOnym0ujaFSVs0BEgF a+9x6MulBkmjRmtWLWxjXABow7WoVOCh3HUbtCfLgYU/9SewUhwVF1WYN7zPBTaw 1ZexHHqfzVs45BzPdHVJe2rtFVPB7KF739TQek3k0ZpE+PdLZLdCKhO/Sk9rjtEF kKOh2VeZxxh3rP/lzc0QvVfKWhaBsc0AkMj//UNKRqPirD0evCt4TEDCmneqKfkj Bvv9BB78sBMGjF1pBKr1UnJtSpDOR3ipSRruLmo85kCBoFM+N08= -----END CERTIFICATE-----Generated at Fri Apr 17 01:48:43 2026 by rpki-client