$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/0/28DFD9381458E1E763ECB35799823E4D24EAD13F.cer File: 28DFD9381458E1E763ECB35799823E4D24EAD13F.cer (raw, json) Hash identifier: o70YW01WN/snqbMQaSoFG4fKLxwfwdrRlkNxiJsO3KM= Subject key identifier: 28:DF:D9:38:14:58:E1:E7:63:EC:B3:57:99:82:3E:4D:24:EA:D1:3F Authority key identifier: CB:02:14:A5:C4:04:D6:F8:40:43:3B:12:0C:AC:BB:5B:8C:59:E6:13 Certificate issuer: /CN=A9162E3D0001/serialNumber=CB0214A5C404D6F840433B120CACBB5B8C59E613 Certificate serial: 199789B954E6DED573774AB8989A13BCEF640CDA Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1102067388175613959/0/28DFD9381458E1E763ECB35799823E4D24EAD13F.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1102067388175613959/0/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Thu 30 Apr 2026 02:57:22 +0000 Certificate not after: Thu 29 Apr 2027 03:02:22 +0000 Subordinate resources: IP: 162.4.54.0/23 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 12:20:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:97:89:b9:54:e6:de:d5:73:77:4a:b8:98:9a:13:bc:ef:64:0c:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=CB0214A5C404D6F840433B120CACBB5B8C59E613 Validity Not Before: Apr 30 02:57:22 2026 GMT Not After : Apr 29 03:02:22 2027 GMT Subject: CN=28DFD9381458E1E763ECB35799823E4D24EAD13F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:7a:09:cf:80:93:9c:4a:33:cd:ad:cb:e2:5d: a8:75:11:ad:e5:22:b7:54:72:d2:72:92:50:29:cc: 0a:ef:5c:ba:2d:9b:93:5c:b6:3e:c9:49:24:d2:b8: 77:b3:3b:27:62:89:cf:82:9b:d4:73:93:fd:c4:88: 1c:45:ea:1c:59:aa:b0:ea:87:79:06:b5:dd:0a:52: 14:96:d8:90:26:e6:03:45:63:3b:d7:15:5f:c0:51: a4:9d:98:d0:f7:14:2c:af:a0:da:4e:c7:03:8b:c2: 62:1b:49:c9:26:a1:94:c2:bd:36:72:2e:c2:89:36: 93:ea:dc:dc:53:63:3c:ce:85:05:bb:40:51:fe:23: ad:10:26:13:3e:bc:a1:8c:ea:44:af:76:3b:21:91: eb:44:dc:17:0f:44:a2:e9:51:7e:aa:82:9d:83:0e: 99:af:b3:b9:18:bd:5e:9b:d2:a1:19:4d:29:a8:75: fc:d7:d9:52:5e:e0:be:17:23:81:6b:4d:7b:df:9e: 5f:bf:e4:3c:7d:78:80:1d:84:80:ec:83:b4:a5:f5: d8:72:d0:f8:b2:b0:1b:ee:22:19:ba:5a:ce:ca:d7: f4:bf:f3:8b:45:91:b3:0a:58:1e:e1:cd:8d:df:c6: 6b:3c:44:55:23:6b:61:5c:ac:65:82:ec:8b:d9:02: 00:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 28:DF:D9:38:14:58:E1:E7:63:EC:B3:57:99:82:3E:4D:24:EA:D1:3F X509v3 Authority Key Identifier: keyid:CB:02:14:A5:C4:04:D6:F8:40:43:3B:12:0C:AC:BB:5B:8C:59:E6:13 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1102067388175613959/0/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1102067388175613959/0/28DFD9381458E1E763ECB35799823E4D24EAD13F.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 162.4.54.0/23 Signature Algorithm: sha256WithRSAEncryption 8c:6f:da:27:30:9c:f6:59:bc:94:5c:95:69:0b:72:ff:eb:8a: c3:d8:20:41:7d:a1:6f:25:a4:d4:88:1d:0f:fa:e8:5e:64:9f: 16:bc:c6:aa:3c:4a:f0:d0:79:9a:ea:70:37:49:7e:aa:9e:27: de:e3:78:7d:dc:39:2d:96:9a:1c:bd:ee:cd:7c:46:1c:ca:0a: 58:ea:ea:45:a0:4e:40:79:ba:f3:89:16:3d:94:cb:65:10:c9: b4:c2:bf:bb:0d:58:1b:eb:c9:47:63:e6:92:63:85:39:ec:3c: 45:a5:e4:70:10:6a:31:82:c9:4c:a8:f2:22:98:4e:e4:d0:e2: 75:31:94:5a:26:ad:67:bb:a6:76:1c:7d:84:88:89:b5:bb:51: 52:d4:59:3b:55:21:1c:b0:6d:94:22:8f:64:b4:8b:dd:a0:a7: b7:34:de:ba:fd:09:6d:48:8f:42:d4:ff:59:1a:a5:4e:de:36: 5d:a0:ab:c8:9d:95:3f:22:5e:75:8d:a4:6d:53:3a:ba:78:be: d4:3d:38:b1:e3:85:0b:1a:a1:9a:a5:b0:ea:af:b0:23:00:d1: 2a:13:a3:75:d6:49:64:c0:0a:fb:fb:34:e9:a8:f0:45:a3:7e: 46:81:6f:00:38:a7:0d:d1:6a:fb:ed:38:d7:d1:b5:2c:bb:8a: 50:d6:93:c3 -----BEGIN CERTIFICATE----- MIIFpzCCBI+gAwIBAgIUGZeJuVTm3tVzd0q4mJoTvO9kDNowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhDQjAyMTRBNUM0 MDRENkY4NDA0MzNCMTIwQ0FDQkI1QjhDNTlFNjEzMB4XDTI2MDQzMDAyNTcyMloX DTI3MDQyOTAzMDIyMlowMzExMC8GA1UEAxMoMjhERkQ5MzgxNDU4RTFFNzYzRUNC MzU3OTk4MjNFNEQyNEVBRDEzRjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALF6Cc+Ak5xKM82ty+JdqHURreUit1Ry0nKSUCnMCu9cui2bk1y2PslJJNK4 d7M7J2KJz4Kb1HOT/cSIHEXqHFmqsOqHeQa13QpSFJbYkCbmA0VjO9cVX8BRpJ2Y 0PcULK+g2k7HA4vCYhtJySahlMK9NnIuwok2k+rc3FNjPM6FBbtAUf4jrRAmEz68 oYzqRK92OyGR60TcFw9EoulRfqqCnYMOma+zuRi9XpvSoRlNKah1/NfZUl7gvhcj gWtNe9+eX7/kPH14gB2EgOyDtKX12HLQ+LKwG+4iGbpazsrX9L/zi0WRswpYHuHN jd/GazxEVSNrYVysZYLsi9kCABsCAwEAAaOCApowggKWMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFCjf2TgUWOHnY+yzV5mCPk0k6tE/MB8GA1UdIwQYMBaAFMsC FKXEBNb4QEM7Egysu1uMWeYTMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMC9DQjAyMTRBNUM0MDRENkY4NDA0MzNCMTIwQ0FDQkI1QjhDNTlF NjEzLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CM0EyNEYyMDFENjYxMUUyOEFDODgzN0M3 MkZEMUZGMi95d0lVcGNRRTF2aEFRenNTREt5N1c0eFo1aE0uY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTEwMjA2NzM4ODE3NTYxMzk1OS8wLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMTAyMDY3Mzg4MTc1NjEzOTU5 LzAvMjhERkQ5MzgxNDU4RTFFNzYzRUNCMzU3OTk4MjNFNEQyNEVBRDEzRi5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAGiBDYwDQYJKoZIhvcNAQELBQADggEBAIxv2icw nPZZvJRclWkLcv/risPYIEF9oW8lpNSIHQ/66F5knxa8xqo8SvDQeZrqcDdJfqqe J97jeH3cOS2Wmhy97s18RhzKCljq6kWgTkB5uvOJFj2Uy2UQybTCv7sNWBvryUdj 5pJjhTnsPEWl5HAQajGCyUyo8iKYTuTQ4nUxlFomrWe7pnYcfYSIibW7UVLUWTtV IRywbZQij2S0i92gp7c03rr9CW1Ij0LU/1kapU7eNl2gq8idlT8iXnWNpG1TOrp4 vtQ9OLHjhQsaoZqlsOqvsCMA0SoTo3XWSWTACvv7NOmo8EWjfkaBbwA4pw3Ravvt ONfRtSy7ilDWk8M= -----END CERTIFICATE-----Generated at Wed May 13 15:56:09 2026 by rpki-client