$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9256C7E8713211251A9F619DBC38D99394ABAA9D.cer File: 9256C7E8713211251A9F619DBC38D99394ABAA9D.cer (raw, json) Hash identifier: 5OgmZKfPiW4ULWpAYN3+O06jdQh+kes45bWXysrRCrg= Subject key identifier: 92:56:C7:E8:71:32:11:25:1A:9F:61:9D:BC:38:D9:93:94:AB:AA:9D Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Certificate serial: 7A9C8DD58262F26A24CB7465C16F5518C811D153 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1096708749504020482/0/9256C7E8713211251A9F619DBC38D99394ABAA9D.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1096708749504020482/0/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Wed 15 Apr 2026 08:04:02 +0000 Certificate not after: Wed 14 Apr 2027 08:09:02 +0000 Subordinate resources: IP: 43.254.100.0/22 IP: 59.80.0.0/17 IP: 59.81.0.0/17 IP: 103.224.232.0/22 IP: 103.243.136.0/22 IP: 106.74.0.0/16 IP: 120.52.0.0/16 IP: 123.58.0.0/20 IP: 123.58.240.0/20 IP: 150.242.8.0/22 IP: 2400:7f80::/32 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 17:12:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:9c:8d:d5:82:62:f2:6a:24:cb:74:65:c1:6f:55:18:c8:11:d1:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Validity Not Before: Apr 15 08:04:02 2026 GMT Not After : Apr 14 08:09:02 2027 GMT Subject: CN=9256C7E8713211251A9F619DBC38D99394ABAA9D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:97:6a:06:be:07:66:3b:56:56:79:67:b6:2d: ff:03:8c:a0:13:67:e6:0f:58:56:3c:3c:65:a6:2e: aa:fd:2f:76:e1:17:ef:98:0c:74:f1:89:bd:70:68: 02:8f:d1:ad:6a:6c:4b:65:ec:13:74:4a:d0:45:64: c9:f5:7c:0d:a1:8e:b6:63:0c:12:54:cc:7a:1b:a9: 62:89:b5:f5:57:a4:76:00:a3:c7:e7:5d:da:15:3f: dd:f1:c9:52:c2:a8:96:a0:17:c1:f6:3e:31:89:03: 3d:d4:86:d3:f4:f9:49:23:ac:23:04:e8:df:71:4f: b5:fe:b9:bd:3e:49:38:9c:57:75:c2:92:25:2c:e1: 5e:bf:8b:85:94:9d:ce:18:38:9b:7e:c8:f8:02:8c: 8f:01:ad:4a:bf:3b:c3:ce:c8:fd:c8:29:fa:ec:5d: fe:20:1d:f3:87:50:87:85:20:03:82:9a:b4:38:c7: 98:29:3d:26:63:36:03:ff:aa:4f:30:c1:81:6e:67: 51:14:a9:48:1c:45:7e:65:09:54:f7:9b:e2:73:85: f7:d5:5c:b5:1c:14:d0:74:e0:c1:37:73:32:ad:a6: df:84:35:f3:c2:c3:af:c2:ef:1c:c4:47:76:e1:90: a6:4d:29:3b:13:49:0b:53:98:2c:11:93:01:89:5b: 51:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 92:56:C7:E8:71:32:11:25:1A:9F:61:9D:BC:38:D9:93:94:AB:AA:9D X509v3 Authority Key Identifier: keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1096708749504020482/0/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1096708749504020482/0/9256C7E8713211251A9F619DBC38D99394ABAA9D.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.254.100.0/22 59.80.0.0/17 59.81.0.0/17 103.224.232.0/22 103.243.136.0/22 106.74.0.0/16 120.52.0.0/16 123.58.0.0/20 123.58.240.0/20 150.242.8.0/22 IPv6: 2400:7f80::/32 Signature Algorithm: sha256WithRSAEncryption 32:43:c2:92:26:ac:8f:00:c9:27:0c:47:40:dc:08:a8:88:89: 67:07:a0:1d:d9:23:98:35:6c:89:b9:16:fe:cf:b7:15:5b:46: b9:60:7a:68:4d:a0:4f:04:93:7e:1e:d2:b6:d1:d7:c9:5b:40: b9:0c:47:e1:b1:30:39:a6:12:28:e9:96:6d:32:58:7d:c6:d1: 16:91:ed:3b:c6:98:54:b6:d6:73:e7:e0:20:4c:f5:59:dd:48: 47:07:22:44:97:84:89:d0:ef:74:77:27:b6:a1:e1:da:81:3d: d2:6b:79:bd:d2:8d:c3:9f:0f:52:84:6b:13:ca:d1:5c:10:40: b5:f0:73:3d:f4:07:4e:37:4d:ec:d9:64:ee:cf:5e:25:78:e6: fb:e2:2a:38:cd:49:78:87:a7:c3:51:5b:a3:fc:36:2f:9a:2a: c7:2d:93:8f:6a:b8:e0:28:93:db:0b:eb:50:4d:88:ae:ff:1f: 92:2d:77:8d:db:33:72:05:82:06:92:a0:b7:31:c2:19:8d:c9: 55:46:17:f8:84:ef:14:a0:1f:c2:98:40:4b:06:8a:0d:35:da: e5:dd:0c:21:e6:8f:53:e3:09:e7:23:e1:49:86:ce:60:99:b6: 1e:38:2d:0c:8b:ad:55:9c:a9:5c:44:bf:1b:49:db:10:0a:61: e1:13:37:00 -----BEGIN CERTIFICATE----- MIIF6jCCBNKgAwIBAgIUepyN1YJi8moky3RlwW9VGMgR0VMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDQxNTA4MDQwMloX DTI3MDQxNDA4MDkwMlowMzExMC8GA1UEAxMoOTI1NkM3RTg3MTMyMTEyNTFBOUY2 MTlEQkMzOEQ5OTM5NEFCQUE5RDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALGXaga+B2Y7VlZ5Z7Yt/wOMoBNn5g9YVjw8ZaYuqv0vduEX75gMdPGJvXBo Ao/RrWpsS2XsE3RK0EVkyfV8DaGOtmMMElTMehupYom19VekdgCjx+dd2hU/3fHJ UsKolqAXwfY+MYkDPdSG0/T5SSOsIwTo33FPtf65vT5JOJxXdcKSJSzhXr+LhZSd zhg4m37I+AKMjwGtSr87w87I/cgp+uxd/iAd84dQh4UgA4KatDjHmCk9JmM2A/+q TzDBgW5nURSpSBxFfmUJVPeb4nOF99VctRwU0HTgwTdzMq2m34Q188LDr8LvHMRH duGQpk0pOxNJC1OYLBGTAYlbUaMCAwEAAaOCAt0wggLZMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFJJWx+hxMhElGp9hnbw42ZOUq6qdMB8GA1UdIwQYMBaAFKVu hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTA5NjcwODc0OTUwNDAyMDQ4Mi8wLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDk2NzA4NzQ5NTA0MDIwNDgy LzAvOTI1NkM3RTg3MTMyMTEyNTFBOUY2MTlEQkMzOEQ5OTM5NEFCQUE5RC5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwYgYIKwYBBQUH AQcBAf8EUzBRMEAEAgABMDoDBAIr/mQDBAc7UAADBAc7UQADBAJn4OgDBAJn84gD AwBqSgMDAHg0AwQEezoAAwQEezrwAwQClvIIMA0EAgACMAcDBQAkAH+AMA0GCSqG SIb3DQEBCwUAA4IBAQAyQ8KSJqyPAMknDEdA3AioiIlnB6Ad2SOYNWyJuRb+z7cV W0a5YHpoTaBPBJN+HtK20dfJW0C5DEfhsTA5phIo6ZZtMlh9xtEWke07xphUttZz 5+AgTPVZ3UhHByJEl4SJ0O90dye2oeHagT3Sa3m90o3Dnw9ShGsTytFcEEC18HM9 9AdON03s2WTuz14leOb74io4zUl4h6fDUVuj/DYvmirHLZOParjgKJPbC+tQTYiu /x+SLXeN2zNyBYIGkqC3McIZjclVRhf4hO8UoB/CmEBLBooNNdrl3Qwh5o9T4wnn I+FJhs5gmbYeOC0Mi61VnKlcRL8bSdsQCmHhEzcA -----END CERTIFICATE-----Generated at Fri Apr 17 20:32:55 2026 by rpki-client