$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C979A435EE505D2600A38B057A1D127AADD915A7.cer File: C979A435EE505D2600A38B057A1D127AADD915A7.cer (raw, json) Hash identifier: Zx6THl3DJ/RvJyWeRvzJg5dXyrm3XSmHDNfkSxyGT24= Subject key identifier: C9:79:A4:35:EE:50:5D:26:00:A3:8B:05:7A:1D:12:7A:AD:D9:15:A7 Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Certificate serial: 196CC76CF3AC92D230BC7B9B9D137D63D836E7A4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1096002718172053505/0/C979A435EE505D2600A38B057A1D127AADD915A7.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1096002718172053505/0/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Mon 13 Apr 2026 09:28:13 +0000 Certificate not after: Mon 12 Apr 2027 09:33:13 +0000 Subordinate resources: IP: 103.76.60.0/22 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 17:12:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:6c:c7:6c:f3:ac:92:d2:30:bc:7b:9b:9d:13:7d:63:d8:36:e7:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Validity Not Before: Apr 13 09:28:13 2026 GMT Not After : Apr 12 09:33:13 2027 GMT Subject: CN=C979A435EE505D2600A38B057A1D127AADD915A7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:6d:54:d1:3e:af:70:7f:4e:de:25:38:a7:4d: d8:db:14:12:6f:b0:15:f8:cc:7c:d3:be:da:6e:08: fe:00:78:66:f0:12:9b:35:0f:22:e7:50:b9:b4:8a: af:e0:5f:0c:2c:72:4e:21:96:14:28:ec:15:13:8a: ad:26:71:ee:0a:56:70:6b:a2:1f:ac:11:f6:22:c1: bb:81:fd:c6:92:ee:71:0f:8a:12:ee:5e:93:a1:32: 94:38:cf:09:aa:d6:44:4a:48:39:85:e0:c5:fe:e6: c9:33:03:89:66:21:3a:ec:fe:2c:b1:e7:ed:ae:3b: 4d:4b:6a:c4:4c:68:eb:bb:02:a4:c1:2b:0b:d0:3e: db:5c:10:42:5e:ca:50:d2:ac:8d:e4:e4:8c:87:ed: 72:83:85:c0:80:bb:49:90:23:ec:e8:eb:19:7d:f9: 7b:4b:4f:11:85:b4:6a:9b:b8:0e:9f:29:d7:77:0f: 18:5b:52:4d:4a:70:b7:1a:c6:4e:f3:b1:e3:7f:24: 46:24:ad:7b:d8:2f:9a:d4:12:07:ad:a8:8f:fd:07: ff:28:59:53:c5:fc:60:02:e4:13:1e:3f:2c:74:00: 97:7c:2a:c5:22:0a:c7:6b:d7:21:06:3b:b1:00:dd: b2:bd:c4:0b:06:3d:03:42:29:34:e8:ef:75:21:e0: 2c:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: C9:79:A4:35:EE:50:5D:26:00:A3:8B:05:7A:1D:12:7A:AD:D9:15:A7 X509v3 Authority Key Identifier: keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1096002718172053505/0/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1096002718172053505/0/C979A435EE505D2600A38B057A1D127AADD915A7.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.76.60.0/22 Signature Algorithm: sha256WithRSAEncryption 60:b1:b4:f8:93:ec:f5:d7:c3:1b:b2:86:f5:3e:22:77:63:6c: b5:7d:cc:15:11:42:78:97:59:68:e6:e4:ab:eb:60:31:cc:d0: e7:c3:63:d4:48:7d:eb:cd:7d:d5:00:4e:90:c0:bb:61:17:67: ff:95:04:ad:44:a6:1d:73:06:fb:45:07:3e:3b:38:53:d0:58: fa:98:81:92:2f:43:8e:1f:fa:b3:30:74:5b:26:cd:d9:24:a6: e5:86:3b:d8:67:4b:b4:09:61:68:14:eb:91:87:9b:45:bc:91: 5e:a5:04:b1:8b:48:c2:5e:3a:a4:26:14:52:87:08:60:e9:b5: f7:e1:1e:2a:84:8b:08:69:fe:84:04:31:f7:c8:86:15:f1:74: 48:cd:73:77:71:65:0a:bf:8e:c5:84:83:d6:fb:15:74:e3:cc: f6:0a:0f:18:b3:59:d6:8d:76:29:6d:f9:cb:92:c8:bf:87:26: c9:13:36:e1:3f:af:9d:74:1a:ab:29:2e:34:19:19:d4:40:c4: b2:c3:aa:85:c6:4d:6e:e1:3f:99:55:81:d3:98:a2:cb:be:bc: 87:dd:e5:e2:df:92:26:8c:a2:df:50:51:5d:7a:8c:23:f8:b2: 9d:ff:f6:52:3d:cc:54:e9:9e:3c:a7:6c:0a:a6:69:eb:65:31: fe:88:6a:72 -----BEGIN CERTIFICATE----- MIIFpzCCBI+gAwIBAgIUGWzHbPOsktIwvHubnRN9Y9g256QwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDQxMzA5MjgxM1oX DTI3MDQxMjA5MzMxM1owMzExMC8GA1UEAxMoQzk3OUE0MzVFRTUwNUQyNjAwQTM4 QjA1N0ExRDEyN0FBREQ5MTVBNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKltVNE+r3B/Tt4lOKdN2NsUEm+wFfjMfNO+2m4I/gB4ZvASmzUPIudQubSK r+BfDCxyTiGWFCjsFROKrSZx7gpWcGuiH6wR9iLBu4H9xpLucQ+KEu5ek6EylDjP CarWREpIOYXgxf7myTMDiWYhOuz+LLHn7a47TUtqxExo67sCpMErC9A+21wQQl7K UNKsjeTkjIftcoOFwIC7SZAj7OjrGX35e0tPEYW0apu4Dp8p13cPGFtSTUpwtxrG TvOx438kRiSte9gvmtQSB62oj/0H/yhZU8X8YALkEx4/LHQAl3wqxSIKx2vXIQY7 sQDdsr3ECwY9A0IpNOjvdSHgLIcCAwEAAaOCApowggKWMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFMl5pDXuUF0mAKOLBXodEnqt2RWnMB8GA1UdIwQYMBaAFKVu hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTA5NjAwMjcxODE3MjA1MzUwNS8wLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDk2MDAyNzE4MTcyMDUzNTA1 LzAvQzk3OUE0MzVFRTUwNUQyNjAwQTM4QjA1N0ExRDEyN0FBREQ5MTVBNy5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAJnTDwwDQYJKoZIhvcNAQELBQADggEBAGCxtPiT 7PXXwxuyhvU+IndjbLV9zBURQniXWWjm5KvrYDHM0OfDY9RIfevNfdUATpDAu2EX Z/+VBK1Eph1zBvtFBz47OFPQWPqYgZIvQ44f+rMwdFsmzdkkpuWGO9hnS7QJYWgU 65GHm0W8kV6lBLGLSMJeOqQmFFKHCGDptffhHiqEiwhp/oQEMffIhhXxdEjNc3dx ZQq/jsWEg9b7FXTjzPYKDxizWdaNdilt+cuSyL+HJskTNuE/r510GqspLjQZGdRA xLLDqoXGTW7hP5lVgdOYosu+vIfd5eLfkiaMot9QUV16jCP4sp3/9lI9zFTpnjyn bAqmaetlMf6IanI= -----END CERTIFICATE-----Generated at Fri Apr 17 20:32:42 2026 by rpki-client