$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A0C998BFCCAE8946353EA73912CB7156A19A818C.cer File: A0C998BFCCAE8946353EA73912CB7156A19A818C.cer (raw, json) Hash identifier: zR4L1RwBv7UnNe0uYQ7IW6f1D3qNtjxOAMKjr+I1bGw= Subject key identifier: A0:C9:98:BF:CC:AE:89:46:35:3E:A7:39:12:CB:71:56:A1:9A:81:8C Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Certificate serial: 0AED5F47F009ED962F060D1F07D57A3AC910F156 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1114859310908768281/0/A0C998BFCCAE8946353EA73912CB7156A19A818C.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1114859310908768281/0/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Thu 04 Jun 2026 10:13:36 +0000 Certificate not after: Thu 03 Jun 2027 10:18:36 +0000 Subordinate resources: IP: 43.224.72.0/22 IP: 103.43.100.0/22 IP: 2402:98c0::/32 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 16:02:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:ed:5f:47:f0:09:ed:96:2f:06:0d:1f:07:d5:7a:3a:c9:10:f1:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Validity Not Before: Jun 4 10:13:36 2026 GMT Not After : Jun 3 10:18:36 2027 GMT Subject: CN=A0C998BFCCAE8946353EA73912CB7156A19A818C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:12:2e:7a:8a:79:b3:3f:f3:12:70:f9:3a:67: 2a:af:6b:70:11:08:a8:23:08:05:5a:80:40:c3:41: d8:85:dc:78:d5:6e:c0:40:ad:25:e2:0b:60:db:2a: ee:41:34:0f:e3:dd:f2:fd:ca:71:8b:b9:78:f7:7b: 20:d4:0a:b1:f9:4e:aa:0e:36:49:ea:9e:f2:c0:b9: f7:a5:b4:8e:b0:38:49:a8:72:20:3c:73:09:7f:bd: 7f:70:22:cd:33:0c:59:09:81:5c:f2:50:99:bb:79: f1:5e:fc:11:1d:4e:64:5a:58:23:15:7e:83:2b:c8: a9:3d:69:d1:35:d9:93:1b:89:e3:6e:01:b0:3f:97: 66:25:21:73:5e:a6:07:a9:51:2e:94:6f:46:b1:d5: ba:c2:d5:9d:67:b4:ce:9c:5f:44:3f:63:c6:05:64: ac:a1:64:10:de:32:98:cf:25:82:79:39:0c:0c:82: 04:58:51:9d:d1:3f:e1:38:b8:bd:e1:f8:46:8e:75: a1:80:7a:79:0a:70:be:df:83:85:f7:20:91:06:f8: af:c3:17:91:37:21:3f:8d:64:33:06:7a:d3:f5:9b: 44:58:ea:e4:1e:3b:36:ce:0e:5b:ca:f6:3e:68:db: ce:12:af:6c:3f:0b:c9:d0:34:bf:ca:fe:b5:91:9d: 01:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: A0:C9:98:BF:CC:AE:89:46:35:3E:A7:39:12:CB:71:56:A1:9A:81:8C X509v3 Authority Key Identifier: keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1114859310908768281/0/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1114859310908768281/0/A0C998BFCCAE8946353EA73912CB7156A19A818C.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.224.72.0/22 103.43.100.0/22 IPv6: 2402:98c0::/32 Signature Algorithm: sha256WithRSAEncryption 45:71:84:3d:01:cd:3d:48:ee:b3:a5:f4:23:3f:60:36:39:5d: 2d:26:3b:6a:a5:23:e8:13:f3:bb:dd:e9:b3:b8:b1:d1:01:81: 3d:d1:c6:be:8f:91:be:71:ec:c1:0b:33:b9:85:f4:c6:e8:2c: 21:f9:69:10:b8:cb:ea:6b:8a:9a:0e:00:c4:0e:d5:c8:af:e4: d4:0f:e4:32:ae:22:75:26:97:51:50:cc:cb:6b:3c:2d:5a:ed: 11:22:96:f9:83:ac:a0:4c:85:f6:43:ec:84:6d:e3:07:4c:be: 11:4f:cc:7f:fa:ad:3d:e8:a2:ed:ad:bd:3e:bd:c1:15:87:8a: 17:b7:97:05:f2:8f:ac:27:8b:8d:82:3a:6d:30:40:2f:01:3e: 84:48:85:91:e5:c4:c9:93:04:c6:28:72:17:fb:7a:59:b2:33: 9e:36:8c:2b:16:5e:91:98:6e:c8:95:bc:68:0f:8f:b9:96:7c: 46:cf:7b:82:a6:f7:82:2c:b9:b8:56:f5:76:81:16:b5:61:11: e4:c1:ec:0a:f1:6c:32:07:f6:74:98:48:86:1b:bd:21:3e:f6: bb:ba:a4:1b:71:a5:9b:d3:67:49:d7:4a:15:2e:ce:47:6f:e9: a4:5f:49:24:36:9d:71:0b:58:9e:56:50:de:39:8f:3e:99:ec: 02:ef:9c:11 -----BEGIN CERTIFICATE----- MIIFvDCCBKSgAwIBAgIUCu1fR/AJ7ZYvBg0fB9V6OskQ8VYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDYwNDEwMTMzNloX DTI3MDYwMzEwMTgzNlowMzExMC8GA1UEAxMoQTBDOTk4QkZDQ0FFODk0NjM1M0VB NzM5MTJDQjcxNTZBMTlBODE4QzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKwSLnqKebM/8xJw+TpnKq9rcBEIqCMIBVqAQMNB2IXceNVuwECtJeILYNsq 7kE0D+Pd8v3KcYu5ePd7INQKsflOqg42Seqe8sC596W0jrA4SahyIDxzCX+9f3Ai zTMMWQmBXPJQmbt58V78ER1OZFpYIxV+gyvIqT1p0TXZkxuJ424BsD+XZiUhc16m B6lRLpRvRrHVusLVnWe0zpxfRD9jxgVkrKFkEN4ymM8lgnk5DAyCBFhRndE/4Ti4 veH4Ro51oYB6eQpwvt+DhfcgkQb4r8MXkTchP41kMwZ60/WbRFjq5B47Ns4OW8r2 PmjbzhKvbD8LydA0v8r+tZGdAd0CAwEAAaOCAq8wggKrMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFKDJmL/MrolGNT6nORLLcVahmoGMMB8GA1UdIwQYMBaAFKVu hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTExNDg1OTMxMDkwODc2ODI4MS8wLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMTE0ODU5MzEwOTA4NzY4Mjgx LzAvQTBDOTk4QkZDQ0FFODk0NjM1M0VBNzM5MTJDQjcxNTZBMTlBODE4Qy5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwNAYIKwYBBQUH AQcBAf8EJTAjMBIEAgABMAwDBAIr4EgDBAJnK2QwDQQCAAIwBwMFACQCmMAwDQYJ KoZIhvcNAQELBQADggEBAEVxhD0BzT1I7rOl9CM/YDY5XS0mO2qlI+gT87vd6bO4 sdEBgT3Rxr6Pkb5x7MELM7mF9MboLCH5aRC4y+pripoOAMQO1civ5NQP5DKuInUm l1FQzMtrPC1a7REilvmDrKBMhfZD7IRt4wdMvhFPzH/6rT3oou2tvT69wRWHihe3 lwXyj6wni42COm0wQC8BPoRIhZHlxMmTBMYochf7elmyM542jCsWXpGYbsiVvGgP j7mWfEbPe4Km94IsubhW9XaBFrVhEeTB7ArxbDIH9nSYSIYbvSE+9ru6pBtxpZvT Z0nXShUuzkdv6aRfSSQ2nXELWJ5WUN45jz6Z7ALvnBE= -----END CERTIFICATE-----Generated at Sun Jun 14 01:16:32 2026 by rpki-client