$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CAA1931F96137E124A84BFBFF4963C4475B970C7.cer File: CAA1931F96137E124A84BFBFF4963C4475B970C7.cer (raw, json) Hash identifier: GHtIYp2yjmbsTv6IAwQ7bUe0Jcr6Q+oMiOn8F7lvLUs= Subject key identifier: CA:A1:93:1F:96:13:7E:12:4A:84:BF:BF:F4:96:3C:44:75:B9:70:C7 Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Certificate serial: 43BA97AA2B50F19AF205B166533AC0D50E44D607 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1065585911217651715/0/CAA1931F96137E124A84BFBFF4963C4475B970C7.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1065585911217651715/0/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Mon 01 Jun 2026 01:43:08 +0000 Certificate not after: Mon 31 May 2027 01:48:08 +0000 Subordinate resources: AS: 139187 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 16:02:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:ba:97:aa:2b:50:f1:9a:f2:05:b1:66:53:3a:c0:d5:0e:44:d6:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Validity Not Before: Jun 1 01:43:08 2026 GMT Not After : May 31 01:48:08 2027 GMT Subject: CN=CAA1931F96137E124A84BFBFF4963C4475B970C7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:7b:b0:eb:c7:1d:53:fa:e7:71:40:58:66:8d: 80:6e:3b:60:a1:9a:ab:90:c8:5d:5b:4b:88:37:8f: d8:c3:e6:a5:54:20:98:7d:0b:82:70:ba:9e:0e:a9: f3:97:68:f6:f5:8a:96:6b:13:20:23:ce:cb:26:17: 12:20:c6:25:a1:af:33:30:ab:e6:cf:94:f6:e3:ef: 2e:b5:ef:93:34:92:1c:c8:f1:91:d6:b0:1e:20:45: ad:d0:9b:1a:ee:0a:f0:40:36:00:65:32:c4:24:57: a4:00:38:57:46:aa:f4:68:66:05:aa:6e:84:d8:f6: ab:68:57:99:65:ca:71:18:75:17:1c:ac:69:9e:2c: ec:d7:5f:56:50:17:5e:29:6b:06:e2:19:a0:f9:ca: 5f:27:ef:3f:cc:63:1e:d9:4a:c0:48:fe:40:03:04: c2:f9:bc:c6:65:41:7f:83:68:30:9e:58:3b:9e:0e: f7:68:05:9a:5b:b3:d4:90:5b:d1:f9:b9:59:33:c9: 02:5d:71:40:2c:6a:4b:e1:b8:f9:5c:c1:b9:dd:11: 8c:09:f7:6a:0d:89:d2:ea:6b:9e:6b:b4:9d:96:07: 3a:df:6d:cd:ae:9a:30:97:d4:26:81:4b:52:a5:c1: 48:c5:32:67:cc:94:ca:62:9a:84:fe:8d:aa:8f:ba: 72:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: CA:A1:93:1F:96:13:7E:12:4A:84:BF:BF:F4:96:3C:44:75:B9:70:C7 X509v3 Authority Key Identifier: keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217651715/0/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217651715/0/CAA1931F96137E124A84BFBFF4963C4475B970C7.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 139187 Signature Algorithm: sha256WithRSAEncryption 25:03:53:91:76:12:37:34:79:94:b9:e9:c5:22:f3:81:cf:24: 1b:8a:37:e7:2f:fa:4a:16:d9:c0:c7:60:d2:29:e5:9b:b5:ba: fd:70:9f:93:5b:5b:e1:e6:83:dc:c0:40:28:66:35:64:93:c9: e7:f2:14:cf:29:32:4e:b1:59:38:ba:f5:ad:d5:18:05:ec:88: f2:87:aa:a8:d5:10:77:90:60:fd:98:7a:72:3b:cd:ce:e1:f3: 7e:e1:58:80:90:23:9d:e3:82:40:e9:95:06:aa:b0:47:31:d1: 3d:12:af:6c:eb:b1:a2:da:70:96:e8:13:e1:01:60:10:f2:42: 49:dc:ae:36:54:29:a9:a4:a2:eb:c7:fc:83:b1:05:5e:71:51: 87:62:73:24:8a:8e:3d:0e:0e:a3:fc:41:54:00:59:08:09:8d: b0:c9:b1:94:72:64:70:bd:3f:3c:5b:85:c9:46:c2:c8:ae:34: d3:2b:6e:88:db:52:97:2d:b2:34:b8:69:99:82:61:80:d7:02: 82:eb:ea:aa:6c:60:e5:cc:07:71:b3:67:55:00:26:5e:33:aa: e3:6e:51:9d:8d:d3:ed:79:4d:42:45:9f:a4:4d:68:f4:9e:7a: 3b:d3:f2:09:99:5f:77:e9:f4:32:1f:fa:f4:f9:aa:75:36:98: f2:9e:9b:0f -----BEGIN CERTIFICATE----- MIIFojCCBIqgAwIBAgIUQ7qXqitQ8ZryBbFmUzrA1Q5E1gcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDYwMTAxNDMwOFoX DTI3MDUzMTAxNDgwOFowMzExMC8GA1UEAxMoQ0FBMTkzMUY5NjEzN0UxMjRBODRC RkJGRjQ5NjNDNDQ3NUI5NzBDNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANR7sOvHHVP653FAWGaNgG47YKGaq5DIXVtLiDeP2MPmpVQgmH0LgnC6ng6p 85do9vWKlmsTICPOyyYXEiDGJaGvMzCr5s+U9uPvLrXvkzSSHMjxkdawHiBFrdCb Gu4K8EA2AGUyxCRXpAA4V0aq9GhmBapuhNj2q2hXmWXKcRh1FxysaZ4s7NdfVlAX XilrBuIZoPnKXyfvP8xjHtlKwEj+QAMEwvm8xmVBf4NoMJ5YO54O92gFmluz1JBb 0fm5WTPJAl1xQCxqS+G4+VzBud0RjAn3ag2J0uprnmu0nZYHOt9tza6aMJfUJoFL UqXBSMUyZ8yUymKahP6Nqo+6cscCAwEAAaOCApUwggKRMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFMqhkx+WE34SSoS/v/SWPER1uXDHMB8GA1UdIwQYMBaAFKVu hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTA2NTU4NTkxMTIxNzY1MTcxNS8wLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDY1NTg1OTExMjE3NjUxNzE1 LzAvQ0FBMTkzMUY5NjEzN0UxMjRBODRCRkJGRjQ5NjNDNDQ3NUI5NzBDNy5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwGgYIKwYBBQUH AQgBAf8ECzAJoAcwBQIDAh+zMA0GCSqGSIb3DQEBCwUAA4IBAQAlA1ORdhI3NHmU uenFIvOBzyQbijfnL/pKFtnAx2DSKeWbtbr9cJ+TW1vh5oPcwEAoZjVkk8nn8hTP KTJOsVk4uvWt1RgF7Ijyh6qo1RB3kGD9mHpyO83O4fN+4ViAkCOd44JA6ZUGqrBH MdE9Eq9s67Gi2nCW6BPhAWAQ8kJJ3K42VCmppKLrx/yDsQVecVGHYnMkio49Dg6j /EFUAFkICY2wybGUcmRwvT88W4XJRsLIrjTTK26I21KXLbI0uGmZgmGA1wKC6+qq bGDlzAdxs2dVACZeM6rjblGdjdPteU1CRZ+kTWj0nno70/IJmV936fQyH/r0+ap1 NpjynpsP -----END CERTIFICATE-----Generated at Sun Jun 14 05:51:07 2026 by rpki-client