$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9FEF44F113313B4929575EF55ED937D41AA80334.cer File: 9FEF44F113313B4929575EF55ED937D41AA80334.cer (raw, json) Hash identifier: zHV6SBtjT9JtCvCRh9hVTopGjJlkKBfPyvfQptJ4BRs= Subject key identifier: 9F:EF:44:F1:13:31:3B:49:29:57:5E:F5:5E:D9:37:D4:1A:A8:03:34 Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Certificate serial: 10AB5371EE6C02785A868D1732F7FDCFCA257A94 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1095997847876141057/0/9FEF44F113313B4929575EF55ED937D41AA80334.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1095997847876141057/0/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Mon 13 Apr 2026 08:59:11 +0000 Certificate not after: Mon 12 Apr 2027 09:04:11 +0000 Subordinate resources: AS: 137728 -- 137729 IP: 103.124.24.0/22 IP: 2403:d7c0::/32 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 17:12:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:ab:53:71:ee:6c:02:78:5a:86:8d:17:32:f7:fd:cf:ca:25:7a:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Validity Not Before: Apr 13 08:59:11 2026 GMT Not After : Apr 12 09:04:11 2027 GMT Subject: CN=9FEF44F113313B4929575EF55ED937D41AA80334 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:68:d4:b2:f3:79:d1:65:6b:a0:cd:0c:8b:40: 26:62:fc:67:20:b2:b1:05:87:05:e7:14:b7:c3:d0: df:be:06:0a:b7:fa:72:77:91:ef:52:55:1d:8f:19: 16:a9:fa:e2:38:57:d0:dc:f8:53:22:21:4e:dd:d2: 50:c7:64:a6:df:b5:3e:65:4e:5f:49:a1:d4:e9:8c: f4:5f:cc:4f:b4:e9:34:b6:3e:25:49:07:bf:cd:52: 1c:17:72:67:4d:2a:be:b7:58:50:36:3b:c6:c8:c2: 7a:7a:fc:69:1d:a4:99:25:5c:e6:f4:21:f8:1d:a8: ba:a1:74:3f:5e:cc:b1:9f:30:8e:2b:1c:33:35:ea: 9d:f8:bb:aa:68:18:25:0d:94:1e:09:dd:24:fb:96: d8:b2:a4:03:3e:46:d0:75:a9:00:81:87:0e:e8:eb: 18:94:06:11:9b:2a:e6:83:c0:ad:7a:e5:b7:3f:cb: 78:11:34:85:53:5d:54:92:15:e8:5c:7b:90:1a:d6: 2a:9c:47:2f:d1:f6:55:18:f8:bb:f1:90:22:3c:f4: a1:4e:df:2a:a0:3c:93:60:75:b4:5a:c0:e1:e4:ad: f2:4d:e8:3e:97:de:70:5f:fe:a5:fd:bf:56:66:e4: 9a:27:4c:dd:f3:52:e8:ea:b2:07:ef:04:3b:21:24: 59:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 9F:EF:44:F1:13:31:3B:49:29:57:5E:F5:5E:D9:37:D4:1A:A8:03:34 X509v3 Authority Key Identifier: keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1095997847876141057/0/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1095997847876141057/0/9FEF44F113313B4929575EF55ED937D41AA80334.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.124.24.0/22 IPv6: 2403:d7c0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 137728-137729 Signature Algorithm: sha256WithRSAEncryption 13:87:66:55:bc:74:35:0c:cd:70:fe:04:a8:1f:08:2e:6c:87: 09:dc:c1:93:27:e5:c1:d7:3e:54:1c:c4:ad:53:8a:53:08:63: ec:7f:9d:05:8e:bb:2b:26:64:f7:92:39:4e:6b:67:01:80:d2: a9:f8:e5:37:f3:b8:08:06:28:d0:11:38:73:7b:bf:8b:26:43: bc:6e:f7:37:99:59:21:c9:be:20:db:e6:2e:3a:d8:49:b0:34: c5:aa:32:be:49:d5:80:66:33:de:16:d1:bc:5f:19:5c:f2:e8: c1:7d:79:ed:61:b7:25:6b:ac:45:4a:d8:49:04:f9:6a:3d:26: 5d:b4:20:88:36:7a:ae:0e:37:00:6c:24:24:d9:7e:b5:f5:0e: c4:a3:d1:a6:3d:38:e9:7c:75:2b:36:be:f2:03:16:af:42:b4: 3c:9a:ed:85:4f:47:d3:a8:62:b6:73:be:53:7c:42:df:46:7a: 96:a1:04:5d:57:f5:a0:88:b1:68:d0:f1:92:c3:bd:02:3e:a0: 0e:2a:fe:a1:ca:d9:67:d9:cd:b0:77:80:87:bb:01:fb:8c:8a: 37:e4:e4:19:12:0d:5d:61:f2:b3:f6:71:e6:d1:ec:a0:71:41: 95:80:c9:a2:fa:26:83:55:76:4c:a1:80:3c:9f:1f:b6:3b:f8: 99:fc:05:08 -----BEGIN CERTIFICATE----- MIIF2TCCBMGgAwIBAgIUEKtTce5sAnhaho0XMvf9z8olepQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDQxMzA4NTkxMVoX DTI3MDQxMjA5MDQxMVowMzExMC8GA1UEAxMoOUZFRjQ0RjExMzMxM0I0OTI5NTc1 RUY1NUVEOTM3RDQxQUE4MDMzNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKJo1LLzedFla6DNDItAJmL8ZyCysQWHBecUt8PQ374GCrf6cneR71JVHY8Z Fqn64jhX0Nz4UyIhTt3SUMdkpt+1PmVOX0mh1OmM9F/MT7TpNLY+JUkHv81SHBdy Z00qvrdYUDY7xsjCenr8aR2kmSVc5vQh+B2ouqF0P17MsZ8wjiscMzXqnfi7qmgY JQ2UHgndJPuW2LKkAz5G0HWpAIGHDujrGJQGEZsq5oPArXrltz/LeBE0hVNdVJIV 6Fx7kBrWKpxHL9H2VRj4u/GQIjz0oU7fKqA8k2B1tFrA4eSt8k3oPpfecF/+pf2/ VmbkmidM3fNS6OqyB+8EOyEkWVsCAwEAAaOCAswwggLIMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFJ/vRPETMTtJKVde9V7ZN9QaqAM0MB8GA1UdIwQYMBaAFKVu hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTA5NTk5Nzg0Nzg3NjE0MTA1Ny8wLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDk1OTk3ODQ3ODc2MTQxMDU3 LzAvOUZFRjQ0RjExMzMxM0I0OTI5NTc1RUY1NUVEOTM3RDQxQUE4MDMzNC5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUH AQcBAf8EHzAdMAwEAgABMAYDBAJnfBgwDQQCAAIwBwMFACQD18AwIQYIKwYBBQUH AQgBAf8EEjAQoA4wDDAKAgMCGgACAwIaATANBgkqhkiG9w0BAQsFAAOCAQEAE4dm Vbx0NQzNcP4EqB8ILmyHCdzBkyflwdc+VBzErVOKUwhj7H+dBY67KyZk95I5Tmtn AYDSqfjlN/O4CAYo0BE4c3u/iyZDvG73N5lZIcm+INvmLjrYSbA0xaoyvknVgGYz 3hbRvF8ZXPLowX157WG3JWusRUrYSQT5aj0mXbQgiDZ6rg43AGwkJNl+tfUOxKPR pj046Xx1Kza+8gMWr0K0PJrthU9H06hitnO+U3xC30Z6lqEEXVf1oIixaNDxksO9 Aj6gDir+ocrZZ9nNsHeAh7sB+4yKN+TkGRINXWHys/Zx5tHsoHFBlYDJovomg1V2 TKGAPJ8ftjv4mfwFCA== -----END CERTIFICATE-----Generated at Fri Apr 17 18:07:08 2026 by rpki-client