$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9B54A822D8B1EAB7E60C85D2B31DA4886EAB52D4.cer File: 9B54A822D8B1EAB7E60C85D2B31DA4886EAB52D4.cer (raw, json) Hash identifier: vEEM80c+ObmWopxSpocWjez/osKFC+TPxHV058QyqVI= Subject key identifier: 9B:54:A8:22:D8:B1:EA:B7:E6:0C:85:D2:B3:1D:A4:88:6E:AB:52:D4 Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Certificate serial: 0D02654199BFC47F53908A9EFDC85D295584CC7E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1096330859092443137/0/9B54A822D8B1EAB7E60C85D2B31DA4886EAB52D4.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1096330859092443137/0/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Tue 14 Apr 2026 07:04:04 +0000 Certificate not after: Tue 13 Apr 2027 07:09:04 +0000 Subordinate resources: IP: 103.100.64.0/22 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 17:12:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:02:65:41:99:bf:c4:7f:53:90:8a:9e:fd:c8:5d:29:55:84:cc:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Validity Not Before: Apr 14 07:04:04 2026 GMT Not After : Apr 13 07:09:04 2027 GMT Subject: CN=9B54A822D8B1EAB7E60C85D2B31DA4886EAB52D4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:7d:64:1f:c6:f3:f9:07:b6:fc:39:8f:6a:9f: 2c:17:6e:ce:36:56:2e:d6:4e:62:73:ff:b8:58:99: 73:22:ac:ad:a4:a2:19:98:d4:65:be:6a:72:82:b3: 73:03:54:c8:3e:fa:f9:7a:68:e8:99:19:5b:e0:de: 81:0f:a1:c0:36:f6:45:cd:33:b1:92:8f:ec:bf:48: e0:ea:fc:75:ce:aa:48:25:e0:62:03:01:dd:d9:5a: 34:e4:05:84:13:1e:cc:9f:53:33:72:8c:54:23:42: 0f:50:ca:46:08:f1:13:7b:3a:5e:13:15:16:d8:e3: 63:ca:85:d3:0c:ff:66:64:cf:64:fe:ca:02:0a:21: f8:71:ab:93:8c:09:6b:92:fb:8e:ba:e1:1d:dd:dd: e6:12:32:23:af:dc:35:37:af:5c:c1:d6:87:99:c7: e2:6a:d5:17:15:5c:05:d5:2e:91:d5:5a:b4:03:2b: 13:d6:8d:36:1a:51:cc:de:4b:a2:c6:78:07:32:eb: c9:9b:a0:16:d5:10:9f:6f:a2:38:e4:21:10:18:00: 8e:46:6b:68:69:9b:59:c3:37:17:10:5c:e0:cc:97: 30:1a:84:bc:39:99:82:e2:ec:96:67:55:b6:cc:5b: d1:63:ba:ed:34:4a:20:68:0c:9f:76:45:54:63:94: 7b:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 9B:54:A8:22:D8:B1:EA:B7:E6:0C:85:D2:B3:1D:A4:88:6E:AB:52:D4 X509v3 Authority Key Identifier: keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1096330859092443137/0/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1096330859092443137/0/9B54A822D8B1EAB7E60C85D2B31DA4886EAB52D4.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.100.64.0/22 Signature Algorithm: sha256WithRSAEncryption 90:ab:57:f0:e0:f9:9a:25:c6:9c:bd:4d:75:e9:76:fa:81:c5: b2:f0:92:eb:9e:71:af:b8:86:df:43:28:a2:aa:45:24:39:ff: c3:c6:f3:f5:f5:1b:69:87:78:50:eb:0b:de:98:d6:df:30:96: 24:29:89:0f:75:1f:10:7f:df:d0:d0:8a:c3:f7:c1:b9:e6:2c: a7:79:df:62:70:d5:02:f6:2c:54:b0:b2:d4:8b:b8:0d:90:ad: 77:5f:1d:8c:fc:d1:28:4a:47:c4:d9:70:ca:eb:1d:40:10:29: 19:a6:e6:41:24:11:d4:10:3b:73:b2:d0:44:19:d2:45:41:8f: 2a:ff:68:97:d3:4d:c8:4f:7c:e6:f2:28:47:ee:d8:5c:41:ab: 32:0f:73:1c:d9:bf:fe:b6:39:b4:8d:3e:c0:c1:f5:20:99:35: 08:d3:d1:cf:f4:46:47:c5:9c:41:ba:4a:92:05:4d:c7:4d:1d: 6b:82:98:9c:52:35:da:28:00:44:57:5c:88:74:44:9d:d0:0e: 49:44:0e:f8:d3:14:88:52:07:db:df:57:ce:fd:a6:65:5e:1e: fa:98:92:3b:75:ef:4b:24:b9:54:0b:d1:3e:8b:99:82:a2:98: c2:78:2d:36:f4:a0:1a:0f:97:24:67:17:71:12:99:39:a2:43: 0b:66:56:12 -----BEGIN CERTIFICATE----- MIIFpzCCBI+gAwIBAgIUDQJlQZm/xH9TkIqe/chdKVWEzH4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDQxNDA3MDQwNFoX DTI3MDQxMzA3MDkwNFowMzExMC8GA1UEAxMoOUI1NEE4MjJEOEIxRUFCN0U2MEM4 NUQyQjMxREE0ODg2RUFCNTJENDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMp9ZB/G8/kHtvw5j2qfLBduzjZWLtZOYnP/uFiZcyKsraSiGZjUZb5qcoKz cwNUyD76+Xpo6JkZW+DegQ+hwDb2Rc0zsZKP7L9I4Or8dc6qSCXgYgMB3dlaNOQF hBMezJ9TM3KMVCNCD1DKRgjxE3s6XhMVFtjjY8qF0wz/ZmTPZP7KAgoh+HGrk4wJ a5L7jrrhHd3d5hIyI6/cNTevXMHWh5nH4mrVFxVcBdUukdVatAMrE9aNNhpRzN5L osZ4BzLryZugFtUQn2+iOOQhEBgAjkZraGmbWcM3FxBc4MyXMBqEvDmZguLslmdV tsxb0WO67TRKIGgMn3ZFVGOUezECAwEAAaOCApowggKWMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFJtUqCLYseq35gyF0rMdpIhuq1LUMB8GA1UdIwQYMBaAFKVu hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTA5NjMzMDg1OTA5MjQ0MzEzNy8wLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDk2MzMwODU5MDkyNDQzMTM3 LzAvOUI1NEE4MjJEOEIxRUFCN0U2MEM4NUQyQjMxREE0ODg2RUFCNTJENC5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAJnZEAwDQYJKoZIhvcNAQELBQADggEBAJCrV/Dg +Zolxpy9TXXpdvqBxbLwkuueca+4ht9DKKKqRSQ5/8PG8/X1G2mHeFDrC96Y1t8w liQpiQ91HxB/39DQisP3wbnmLKd532Jw1QL2LFSwstSLuA2QrXdfHYz80ShKR8TZ cMrrHUAQKRmm5kEkEdQQO3Oy0EQZ0kVBjyr/aJfTTchPfObyKEfu2FxBqzIPcxzZ v/62ObSNPsDB9SCZNQjT0c/0RkfFnEG6SpIFTcdNHWuCmJxSNdooAERXXIh0RJ3Q DklEDvjTFIhSB9vfV879pmVeHvqYkjt170skuVQL0T6LmYKimMJ4LTb0oBoPlyRn F3ESmTmiQwtmVhI= -----END CERTIFICATE-----Generated at Fri Apr 17 19:09:47 2026 by rpki-client