$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9A8AFA7F033956E0425F15B1070A606F5F3E424E.cer File: 9A8AFA7F033956E0425F15B1070A606F5F3E424E.cer (raw, json) Hash identifier: XB6Ec0mQ2/H3gp+xLn/Zmf+pEC5o2ScOntY22Yjg7JM= Subject key identifier: 9A:8A:FA:7F:03:39:56:E0:42:5F:15:B1:07:0A:60:6F:5F:3E:42:4E Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Certificate serial: 0D102A06293967FD99902043E84CE1AA827555EE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1097387398460866561/0/9A8AFA7F033956E0425F15B1070A606F5F3E424E.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1097387398460866561/0/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Fri 17 Apr 2026 05:00:45 +0000 Certificate not after: Fri 16 Apr 2027 05:05:45 +0000 Subordinate resources: AS: 59044 IP: 119.37.0.0 -- 119.37.191.255 IP: 203.166.160.0/19 IP: 211.152.32.0/19 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 17:12:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:10:2a:06:29:39:67:fd:99:90:20:43:e8:4c:e1:aa:82:75:55:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Validity Not Before: Apr 17 05:00:45 2026 GMT Not After : Apr 16 05:05:45 2027 GMT Subject: CN=9A8AFA7F033956E0425F15B1070A606F5F3E424E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:b0:60:28:69:0a:05:2c:b7:18:23:f1:38:89: 12:3b:bc:52:80:d7:52:ee:58:6c:bf:59:b1:1d:ab: 8d:9d:dc:76:c9:17:44:2e:5e:ba:20:07:2f:41:78: a3:55:c6:e9:f8:a6:7e:0c:e8:51:30:ee:c7:03:9d: 9c:22:f0:4d:3a:50:ce:cd:a7:86:61:8d:89:41:cd: 44:e0:be:ef:a2:20:9b:51:c6:00:03:be:5c:98:47: 7e:64:e4:fa:df:ba:b4:5d:64:d6:e3:9c:4e:aa:6a: e6:13:20:a1:2c:5c:aa:70:f7:af:ea:70:0c:c6:08: 2a:33:d4:68:11:a0:fa:66:cd:5e:55:a7:a9:0b:e4: aa:49:69:d9:ba:80:76:6d:17:18:90:5f:09:27:2c: 9d:70:f1:60:46:57:7c:0f:eb:f7:f8:da:e0:94:1d: 54:da:e8:d9:63:95:c9:79:0c:4c:28:22:92:a2:32: d7:67:75:da:9c:f0:82:ba:9d:c3:05:d9:42:cf:09: 00:41:ab:65:c0:a8:87:e0:b9:fd:15:b7:3c:3b:a8: 41:a8:e1:52:f4:aa:d3:74:d6:89:99:8b:a3:a0:f5: b9:ee:1f:ea:50:05:63:b2:c8:0c:04:a9:cf:39:3e: 10:c7:de:66:75:20:27:0b:45:1f:86:c6:28:2e:57: 99:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 9A:8A:FA:7F:03:39:56:E0:42:5F:15:B1:07:0A:60:6F:5F:3E:42:4E X509v3 Authority Key Identifier: keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1097387398460866561/0/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1097387398460866561/0/9A8AFA7F033956E0425F15B1070A606F5F3E424E.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 119.37.0.0-119.37.191.255 203.166.160.0/19 211.152.32.0/19 sbgp-autonomousSysNum: critical Autonomous System Numbers: 59044 Signature Algorithm: sha256WithRSAEncryption 57:65:96:8a:b1:a3:24:e7:e2:3c:18:ca:25:75:e9:0b:e2:49: f7:14:ea:03:88:48:af:8c:d1:8f:24:7e:69:bd:cf:8b:a6:2b: a8:ca:d0:20:d1:28:4d:9a:65:a9:7d:6b:0b:89:1b:31:65:f3: 18:af:7c:8b:89:c4:a0:3f:46:43:ae:f1:b7:c5:e6:b3:bf:e9: 2e:23:2c:13:6c:fe:36:8c:1a:e2:5e:48:df:e7:b8:4d:f7:e2: d0:ba:71:13:ad:ca:39:e9:eb:a8:b6:5a:d5:b5:6c:cd:56:3c: 87:52:cb:7a:21:b8:1d:ae:60:e3:59:c5:b3:87:35:c6:97:3f: 9c:0f:ea:66:5f:e1:24:c4:71:bb:12:e3:dc:cd:34:84:2a:db: 32:7a:0b:72:07:5d:83:b8:5b:22:43:25:6c:7e:a2:06:f7:f8: 8a:33:08:c5:30:9c:fa:ce:8f:4b:02:41:8c:de:96:ae:22:90: 4a:e4:0f:01:0b:52:0d:e9:20:58:04:67:c9:31:cd:e5:b8:47: c7:61:09:b8:70:4e:3c:27:ce:a7:b0:da:b8:0d:a2:74:9a:d7: 21:b1:72:ce:3b:b7:97:31:da:81:0e:8b:ab:79:e1:1e:96:13: ca:1d:b5:16:33:fd:5c:c5:01:e9:26:06:c1:69:51:4c:e2:ea: fa:b5:e0:8f -----BEGIN CERTIFICATE----- MIIF1jCCBL6gAwIBAgIUDRAqBik5Z/2ZkCBD6EzhqoJ1Ve4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDQxNzA1MDA0NVoX DTI3MDQxNjA1MDU0NVowMzExMC8GA1UEAxMoOUE4QUZBN0YwMzM5NTZFMDQyNUYx NUIxMDcwQTYwNkY1RjNFNDI0RTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALiwYChpCgUstxgj8TiJEju8UoDXUu5YbL9ZsR2rjZ3cdskXRC5euiAHL0F4 o1XG6fimfgzoUTDuxwOdnCLwTTpQzs2nhmGNiUHNROC+76Igm1HGAAO+XJhHfmTk +t+6tF1k1uOcTqpq5hMgoSxcqnD3r+pwDMYIKjPUaBGg+mbNXlWnqQvkqklp2bqA dm0XGJBfCScsnXDxYEZXfA/r9/ja4JQdVNro2WOVyXkMTCgikqIy12d12pzwgrqd wwXZQs8JAEGrZcCoh+C5/RW3PDuoQajhUvSq03TWiZmLo6D1ue4f6lAFY7LIDASp zzk+EMfeZnUgJwtFH4bGKC5XmScCAwEAAaOCAskwggLFMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFJqK+n8DOVbgQl8VsQcKYG9fPkJOMB8GA1UdIwQYMBaAFKVu hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTA5NzM4NzM5ODQ2MDg2NjU2MS8wLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDk3Mzg3Mzk4NDYwODY2NTYx LzAvOUE4QUZBN0YwMzM5NTZFMDQyNUYxNUIxMDcwQTYwNkY1RjNFNDI0RS5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwMgYIKwYBBQUH AQcBAf8EIzAhMB8EAgABMBkwCwMDAHclAwQGdyWAAwQFy6agAwQF05ggMBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwDmpDANBgkqhkiG9w0BAQsFAAOCAQEAV2WWirGj JOfiPBjKJXXpC+JJ9xTqA4hIr4zRjyR+ab3Pi6YrqMrQINEoTZplqX1rC4kbMWXz GK98i4nEoD9GQ67xt8Xms7/pLiMsE2z+Nowa4l5I3+e4Tffi0LpxE63KOenrqLZa 1bVszVY8h1LLeiG4Ha5g41nFs4c1xpc/nA/qZl/hJMRxuxLj3M00hCrbMnoLcgdd g7hbIkMlbH6iBvf4ijMIxTCc+s6PSwJBjN6WriKQSuQPAQtSDekgWARnyTHN5bhH x2EJuHBOPCfOp7DauA2idJrXIbFyzju3lzHagQ6Lq3nhHpYTyh21FjP9XMUB6SYG wWlRTOLq+rXgjw== -----END CERTIFICATE-----Generated at Fri Apr 17 22:46:02 2026 by rpki-client