$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9006F3ED77C8551A72B9D224109F782F6A4251D9.cer File: 9006F3ED77C8551A72B9D224109F782F6A4251D9.cer (raw, json) Hash identifier: zh94mXEwXn64dopLDenb7mvUPjMduO3GmxQJxSp7/M8= Subject key identifier: 90:06:F3:ED:77:C8:55:1A:72:B9:D2:24:10:9F:78:2F:6A:42:51:D9 Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Certificate serial: 3B48D89502F28B450E75CFA07ECAC60836E6869B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1097087053666975747/0/9006F3ED77C8551A72B9D224109F782F6A4251D9.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1097087053666975747/0/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Thu 16 Apr 2026 09:07:17 +0000 Certificate not after: Thu 15 Apr 2027 09:12:17 +0000 Subordinate resources: IP: 27.50.128.0/17 IP: 42.1.128.0/17 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 17 Apr 2026 17:57:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:48:d8:95:02:f2:8b:45:0e:75:cf:a0:7e:ca:c6:08:36:e6:86:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Validity Not Before: Apr 16 09:07:17 2026 GMT Not After : Apr 15 09:12:17 2027 GMT Subject: CN=9006F3ED77C8551A72B9D224109F782F6A4251D9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:6a:a3:ba:08:df:f1:0d:5c:f1:6d:3d:22:85: 6a:6e:1a:82:7e:1c:64:0b:63:49:9e:6c:63:30:7c: 02:43:f9:5d:4e:79:79:bc:4e:c1:f2:80:23:06:3f: 6c:f9:ae:1b:40:c7:fe:7b:40:70:13:1a:26:0b:a2: 00:0e:51:46:d0:85:6d:f3:7d:9b:a0:dd:c2:92:02: d9:cf:92:f3:8d:2d:38:fc:e1:5e:e8:c7:46:4a:bf: 01:6c:16:54:2c:d8:cc:7d:43:6d:22:76:fb:1c:1f: 8a:82:9d:4a:d1:a5:9b:f8:a8:e4:9a:d3:2d:14:8b: c0:ee:6d:e2:6c:5c:6c:a0:5e:18:56:98:ad:17:0e: 28:dc:10:cb:a0:a8:11:af:c1:aa:d8:0f:8b:cc:41: 11:5c:8c:97:d4:b0:0b:d0:64:0f:42:aa:38:95:7e: ce:eb:d8:24:d3:9f:6e:c0:b2:37:42:30:62:ca:17: 58:04:6b:df:1e:d7:e6:f4:8f:cd:ed:05:8d:57:b7: 67:2e:98:dd:fc:3e:55:a1:7a:ac:64:aa:dd:cd:f7: ac:72:2a:9d:bb:67:2c:3a:6f:02:a6:eb:98:08:bb: 2e:73:9a:34:4a:b1:29:73:95:97:14:45:40:ad:07: 49:ba:02:0a:c0:bf:66:ac:24:4a:be:bd:13:b0:4b: 47:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 90:06:F3:ED:77:C8:55:1A:72:B9:D2:24:10:9F:78:2F:6A:42:51:D9 X509v3 Authority Key Identifier: keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1097087053666975747/0/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1097087053666975747/0/9006F3ED77C8551A72B9D224109F782F6A4251D9.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 27.50.128.0/17 42.1.128.0/17 Signature Algorithm: sha256WithRSAEncryption 5b:ec:51:4e:42:2e:0b:5d:5c:b4:22:68:3b:47:c5:e7:8e:a9: ce:21:fe:63:db:55:8f:80:08:15:ab:ca:3c:9b:0f:ef:02:0b: 4f:94:87:3b:1a:2e:ed:c3:28:20:43:f1:fa:c1:b9:bb:c7:17: d7:df:4b:31:7c:e5:5c:5e:b5:0b:9b:18:ae:b4:a3:e3:4f:22: 9f:75:95:2e:4b:49:4e:6c:7c:f0:f2:58:a9:9c:53:dc:37:4a: 79:c2:35:fe:4f:e8:25:d9:97:02:be:bc:94:cf:9e:bd:b9:d3: 81:67:05:41:af:42:d7:87:23:65:9b:3e:39:b9:72:d9:44:e3: 24:03:f3:a0:99:cc:8b:8a:ea:5f:ea:25:5e:ad:e9:b6:27:33: e4:00:e8:ab:6d:8e:e6:09:a2:b0:f2:46:15:10:e7:11:ff:82: 56:55:99:62:d5:22:b0:cc:a9:66:fa:5e:fd:b3:d4:1d:82:0a: b0:28:c0:ef:95:60:e1:56:69:22:97:b3:34:50:8c:df:0e:27: c0:89:a5:8b:1a:f5:a3:41:69:a9:c2:8d:b5:ec:13:b7:73:62: 92:dc:ef:a4:38:85:b3:80:7a:b5:e6:6b:fc:61:66:a2:83:a0: fb:3d:67:fc:01:cb:d3:81:e9:4b:1e:33:f1:f0:6c:86:53:a0: e2:8d:9e:12 -----BEGIN CERTIFICATE----- MIIFrTCCBJWgAwIBAgIUO0jYlQLyi0UOdc+gfsrGCDbmhpswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDQxNjA5MDcxN1oX DTI3MDQxNTA5MTIxN1owMzExMC8GA1UEAxMoOTAwNkYzRUQ3N0M4NTUxQTcyQjlE MjI0MTA5Rjc4MkY2QTQyNTFEOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALtqo7oI3/ENXPFtPSKFam4agn4cZAtjSZ5sYzB8AkP5XU55ebxOwfKAIwY/ bPmuG0DH/ntAcBMaJguiAA5RRtCFbfN9m6DdwpIC2c+S840tOPzhXujHRkq/AWwW VCzYzH1DbSJ2+xwfioKdStGlm/io5JrTLRSLwO5t4mxcbKBeGFaYrRcOKNwQy6Co Ea/BqtgPi8xBEVyMl9SwC9BkD0KqOJV+zuvYJNOfbsCyN0IwYsoXWARr3x7X5vSP ze0FjVe3Zy6Y3fw+VaF6rGSq3c33rHIqnbtnLDpvAqbrmAi7LnOaNEqxKXOVlxRF QK0HSboCCsC/ZqwkSr69E7BLRzkCAwEAAaOCAqAwggKcMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFJAG8+13yFUacrnSJBCfeC9qQlHZMB8GA1UdIwQYMBaAFKVu hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTA5NzA4NzA1MzY2Njk3NTc0Ny8wLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDk3MDg3MDUzNjY2OTc1NzQ3 LzAvOTAwNkYzRUQ3N0M4NTUxQTcyQjlEMjI0MTA5Rjc4MkY2QTQyNTFEOS5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwJQYIKwYBBQUH AQcBAf8EFjAUMBIEAgABMAwDBAcbMoADBAcqAYAwDQYJKoZIhvcNAQELBQADggEB AFvsUU5CLgtdXLQiaDtHxeeOqc4h/mPbVY+ACBWryjybD+8CC0+UhzsaLu3DKCBD 8frBubvHF9ffSzF85VxetQubGK60o+NPIp91lS5LSU5sfPDyWKmcU9w3SnnCNf5P 6CXZlwK+vJTPnr2504FnBUGvQteHI2WbPjm5ctlE4yQD86CZzIuK6l/qJV6t6bYn M+QA6KttjuYJorDyRhUQ5xH/glZVmWLVIrDMqWb6Xv2z1B2CCrAowO+VYOFWaSKX szRQjN8OJ8CJpYsa9aNBaanCjbXsE7dzYpLc76Q4hbOAerXma/xhZqKDoPs9Z/wB y9OB6UseM/HwbIZToOKNnhI= -----END CERTIFICATE-----Generated at Thu Apr 16 23:53:59 2026 by rpki-client