$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9E07B02EF274E339B3C4B2259855E52AFD2C0115.cer File: 9E07B02EF274E339B3C4B2259855E52AFD2C0115.cer (raw, json) Hash identifier: oqWraAOMGZ28FUO7SbLYT3jfMXnn8QQnN5+CQdWObSo= Subject key identifier: 9E:07:B0:2E:F2:74:E3:39:B3:C4:B2:25:98:55:E5:2A:FD:2C:01:15 Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Certificate serial: 61F511BCF0898BF0DF16902DF8E5FC63957428AA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1065588993548156930/0/9E07B02EF274E339B3C4B2259855E52AFD2C0115.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1065588993548156930/0/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Mon 01 Jun 2026 01:50:56 +0000 Certificate not after: Mon 31 May 2027 01:55:56 +0000 Subordinate resources: IP: 101.251.192.0/18 IP: 103.244.232.0/22 IP: 103.252.36.0/22 IP: 106.2.128.0/19 IP: 106.3.128.0/19 IP: 119.61.160.0 -- 119.61.255.255 IP: 210.73.208.0/20 IP: 218.244.96.0/20 IP: 2400:5280::/32 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 16:02:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:f5:11:bc:f0:89:8b:f0:df:16:90:2d:f8:e5:fc:63:95:74:28:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Validity Not Before: Jun 1 01:50:56 2026 GMT Not After : May 31 01:55:56 2027 GMT Subject: CN=9E07B02EF274E339B3C4B2259855E52AFD2C0115 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:ee:80:28:7d:05:a2:08:46:fc:f3:57:75:34: e8:9f:5f:31:7c:ff:78:92:4d:63:77:8f:09:a5:3e: 36:f0:57:aa:72:09:fc:c4:ab:28:10:2a:44:e5:88: 28:0b:67:53:84:cc:06:9b:77:8d:d6:89:c2:72:60: 05:5a:e6:5a:bd:97:45:c7:c2:9e:79:84:c5:89:3a: aa:5a:74:3e:be:25:9c:f1:8a:ae:51:39:71:dc:48: 5d:ff:3f:45:b9:1f:e6:53:7b:6a:46:5b:7e:c8:44: 67:f2:4b:24:10:6b:ce:fc:fc:4e:28:99:72:5e:af: 41:c7:59:20:86:56:7f:a7:3b:23:c6:a2:c6:9a:16: a9:21:12:b2:6e:88:c4:e2:01:6a:78:64:41:4d:0d: ab:07:4e:37:66:16:fb:4f:1e:a8:c9:48:61:8c:91: 1a:7a:fe:62:bf:e7:45:91:ed:9e:c1:12:eb:32:e6: 56:a2:f6:dc:50:b8:3e:c5:cc:e5:24:ab:bb:0a:dd: ca:97:de:d3:76:23:79:70:80:4d:5f:5b:0f:c0:e1: 44:9d:78:c3:b0:9b:63:2a:70:15:d8:6e:e0:32:e7: 98:d3:88:57:57:0e:63:c7:ad:6c:a5:29:d5:bb:88: ce:a6:82:3f:d5:d3:47:6b:ce:56:de:6d:fa:65:36: 0c:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 9E:07:B0:2E:F2:74:E3:39:B3:C4:B2:25:98:55:E5:2A:FD:2C:01:15 X509v3 Authority Key Identifier: keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548156930/0/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548156930/0/9E07B02EF274E339B3C4B2259855E52AFD2C0115.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 101.251.192.0/18 103.244.232.0/22 103.252.36.0/22 106.2.128.0/19 106.3.128.0/19 119.61.160.0-119.61.255.255 210.73.208.0/20 218.244.96.0/20 IPv6: 2400:5280::/32 Signature Algorithm: sha256WithRSAEncryption 8f:03:88:29:50:ef:92:37:6d:b3:ea:b3:42:5e:af:9c:52:30: 2c:30:a6:7a:31:3d:0a:5b:e9:3a:6b:08:48:3f:02:a3:4e:d1: 8c:fb:56:97:75:1a:e6:c3:f2:99:79:5c:65:d2:c1:16:77:0a: 24:05:32:fa:e7:94:65:73:be:ba:fe:03:53:0a:7c:e4:d5:e7: 97:39:e4:2a:0f:e7:88:84:fd:3a:bb:01:51:12:7c:15:f9:60: fc:83:46:64:c2:9e:11:55:74:d7:35:78:36:00:8c:75:f2:7f: 7d:4c:56:59:67:0b:1f:2b:8d:7a:bd:c6:e1:15:37:bd:82:a5: 57:97:ca:7f:d8:2a:58:80:70:33:0f:e6:7c:f7:dd:db:d8:87: cf:28:96:19:d3:c2:e8:b2:8f:98:04:1c:32:96:bc:d7:b1:96: 04:94:7e:29:16:2f:be:17:80:1e:0a:00:08:11:83:a1:8a:c4: 03:3f:fd:73:82:e7:66:12:5f:aa:fb:c6:72:32:e1:e1:39:68: 61:2c:8f:08:3e:5b:c5:5c:f5:7c:eb:74:df:32:30:11:d2:76: 52:e2:33:63:58:ef:02:cd:d0:af:81:94:6d:e8:92:6c:24:5b: 88:51:c9:94:3a:c2:22:ca:12:53:3b:bb:44:5a:81:0a:c0:be: db:2e:95:ed -----BEGIN CERTIFICATE----- MIIF5zCCBM+gAwIBAgIUYfURvPCJi/DfFpAt+OX8Y5V0KKowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDYwMTAxNTA1NloX DTI3MDUzMTAxNTU1NlowMzExMC8GA1UEAxMoOUUwN0IwMkVGMjc0RTMzOUIzQzRC MjI1OTg1NUU1MkFGRDJDMDExNTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALLugCh9BaIIRvzzV3U06J9fMXz/eJJNY3ePCaU+NvBXqnIJ/MSrKBAqROWI KAtnU4TMBpt3jdaJwnJgBVrmWr2XRcfCnnmExYk6qlp0Pr4lnPGKrlE5cdxIXf8/ Rbkf5lN7akZbfshEZ/JLJBBrzvz8TiiZcl6vQcdZIIZWf6c7I8aixpoWqSESsm6I xOIBanhkQU0NqwdON2YW+08eqMlIYYyRGnr+Yr/nRZHtnsES6zLmVqL23FC4PsXM 5SSruwrdypfe03YjeXCATV9bD8DhRJ14w7CbYypwFdhu4DLnmNOIV1cOY8etbKUp 1buIzqaCP9XTR2vOVt5t+mU2DGsCAwEAAaOCAtowggLWMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFJ4HsC7ydOM5s8SyJZhV5Sr9LAEVMB8GA1UdIwQYMBaAFKVu hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTA2NTU4ODk5MzU0ODE1NjkzMC8wLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDY1NTg4OTkzNTQ4MTU2OTMw LzAvOUUwN0IwMkVGMjc0RTMzOUIzQzRCMjI1OTg1NUU1MkFGRDJDMDExNS5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwXwYIKwYBBQUH AQcBAf8EUDBOMD0EAgABMDcDBAZl+8ADBAJn9OgDBAJn/CQDBAVqAoADBAVqA4Aw CwMEBXc9oAMDAXc8AwQE0knQAwQE2vRgMA0EAgACMAcDBQAkAFKAMA0GCSqGSIb3 DQEBCwUAA4IBAQCPA4gpUO+SN22z6rNCXq+cUjAsMKZ6MT0KW+k6awhIPwKjTtGM +1aXdRrmw/KZeVxl0sEWdwokBTL655Rlc766/gNTCnzk1eeXOeQqD+eIhP06uwFR EnwV+WD8g0Zkwp4RVXTXNXg2AIx18n99TFZZZwsfK416vcbhFTe9gqVXl8p/2CpY gHAzD+Z8993b2IfPKJYZ08Loso+YBBwylrzXsZYElH4pFi++F4AeCgAIEYOhisQD P/1zgudmEl+q+8ZyMuHhOWhhLI8IPlvFXPV863TfMjAR0nZS4jNjWO8CzdCvgZRt 6JJsJFuIUcmUOsIiyhJTO7tEWoEKwL7bLpXt -----END CERTIFICATE-----Generated at Sun Jun 14 03:44:07 2026 by rpki-client