$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2949D20EB3FEA14E986D0754348A679E44983AEE.cer File: 2949D20EB3FEA14E986D0754348A679E44983AEE.cer (raw, json) Hash identifier: ZO8GSjFX22xB/rute4ZGYHKYTq/qQvYOMmCV3Zzx7pA= Subject key identifier: 29:49:D2:0E:B3:FE:A1:4E:98:6D:07:54:34:8A:67:9E:44:98:3A:EE Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Certificate serial: 15CCE6A321161C1A380D1C93E59997BE9B3558D3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1105445865205530639/0/2949D20EB3FEA14E986D0754348A679E44983AEE.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1105445865205530639/0/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Sat 09 May 2026 10:42:14 +0000 Certificate not after: Sat 08 May 2027 10:47:14 +0000 Subordinate resources: IP: 103.48.232.0/22 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 11:49:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:cc:e6:a3:21:16:1c:1a:38:0d:1c:93:e5:99:97:be:9b:35:58:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Validity Not Before: May 9 10:42:14 2026 GMT Not After : May 8 10:47:14 2027 GMT Subject: CN=2949D20EB3FEA14E986D0754348A679E44983AEE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:5c:03:7e:4c:2c:23:dc:12:96:9c:a9:73:4d: 22:fc:96:ab:32:fb:e3:39:5e:66:4d:23:6b:7d:c3: 9c:3c:40:1a:fc:9d:86:78:6c:76:2b:28:e4:b1:99: 66:64:d4:75:e5:89:78:6f:8e:89:f2:2a:a3:05:29: dd:85:11:dc:e8:e2:eb:ca:df:31:19:6e:b0:16:f0: e8:77:5c:f5:02:d8:4b:c5:c7:93:0a:10:f0:22:cf: a2:bc:89:e8:6a:90:a8:96:28:4e:17:c9:03:77:38: e4:d8:ab:1d:15:6f:26:a5:31:32:34:df:a7:a7:b2: 37:84:58:c2:2a:ff:69:da:a8:49:f6:a4:e4:33:99: 13:62:89:da:b0:12:d9:30:3b:d4:86:40:2f:1e:7d: 74:ff:d5:92:78:84:86:c2:db:1d:e6:a0:5b:48:48: 4d:62:59:9d:41:20:82:94:0a:9b:e0:5f:87:9f:48: 87:c1:b6:44:76:d7:af:47:3b:0e:44:8c:94:df:9a: 28:b0:dc:73:93:f0:0a:d4:e3:11:82:69:9b:ad:76: 1d:f7:a3:b3:29:a2:8a:d1:d1:bb:af:7f:01:e3:24: 36:13:e8:75:72:5b:1a:02:86:2f:70:1d:4d:48:30: 22:ac:26:63:ab:7f:f2:21:f9:2c:aa:a7:68:13:02: 02:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 29:49:D2:0E:B3:FE:A1:4E:98:6D:07:54:34:8A:67:9E:44:98:3A:EE X509v3 Authority Key Identifier: keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1105445865205530639/0/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1105445865205530639/0/2949D20EB3FEA14E986D0754348A679E44983AEE.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.48.232.0/22 Signature Algorithm: sha256WithRSAEncryption 07:e8:c3:d1:1e:e1:60:9f:93:9d:68:5c:b4:ec:18:19:ee:fe: b3:f6:1b:8d:02:a5:53:c9:be:e9:9e:f2:77:4e:18:9c:76:85: 2a:fe:09:29:85:a6:8e:c6:00:82:13:c0:2a:90:31:3c:81:5a: e0:f6:e5:60:ca:28:84:2b:6e:c2:4d:a5:fe:f3:f8:71:a9:da: 5e:bb:0f:36:61:c9:47:3c:3d:4f:c8:47:0f:62:8f:df:aa:f5: 34:bc:2a:7c:da:b1:ac:f4:4c:8b:10:53:c5:b7:26:4d:f8:ed: ec:ce:8d:a2:6d:29:f3:68:95:9c:f7:51:91:3a:73:bd:c6:25: 32:c6:58:94:e1:ff:29:7d:67:b3:51:0e:42:67:33:c2:0d:60: 31:3e:a5:49:48:25:cc:6c:0c:b7:bd:40:d4:52:e0:1a:39:39: 31:57:b5:c8:e4:12:62:2d:06:0e:44:76:67:ce:b6:80:a9:6f: 53:52:41:05:7b:55:63:08:b9:f3:82:02:77:54:96:48:0c:d1: 41:93:f4:bc:6a:6e:1f:18:a8:64:2d:39:d9:ee:de:86:f4:1b: a5:99:21:5d:90:99:50:41:1c:b6:2f:9b:5b:cd:99:f5:ae:57: bf:1b:e4:8f:66:80:da:36:f6:27:de:7f:4c:f6:65:04:ba:5f: 8d:4f:45:2c -----BEGIN CERTIFICATE----- MIIFpzCCBI+gAwIBAgIUFczmoyEWHBo4DRyT5ZmXvps1WNMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDUwOTEwNDIxNFoX DTI3MDUwODEwNDcxNFowMzExMC8GA1UEAxMoMjk0OUQyMEVCM0ZFQTE0RTk4NkQw NzU0MzQ4QTY3OUU0NDk4M0FFRTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANRcA35MLCPcEpacqXNNIvyWqzL74zleZk0ja33DnDxAGvydhnhsdiso5LGZ ZmTUdeWJeG+OifIqowUp3YUR3Oji68rfMRlusBbw6Hdc9QLYS8XHkwoQ8CLPoryJ 6GqQqJYoThfJA3c45NirHRVvJqUxMjTfp6eyN4RYwir/adqoSfak5DOZE2KJ2rAS 2TA71IZALx59dP/VkniEhsLbHeagW0hITWJZnUEggpQKm+Bfh59Ih8G2RHbXr0c7 DkSMlN+aKLDcc5PwCtTjEYJpm612HfejsymiitHRu69/AeMkNhPodXJbGgKGL3Ad TUgwIqwmY6t/8iH5LKqnaBMCAj0CAwEAAaOCApowggKWMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFClJ0g6z/qFOmG0HVDSKZ55EmDruMB8GA1UdIwQYMBaAFKVu hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTEwNTQ0NTg2NTIwNTUzMDYzOS8wLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMTA1NDQ1ODY1MjA1NTMwNjM5 LzAvMjk0OUQyMEVCM0ZFQTE0RTk4NkQwNzU0MzQ4QTY3OUU0NDk4M0FFRS5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAJnMOgwDQYJKoZIhvcNAQELBQADggEBAAfow9Ee 4WCfk51oXLTsGBnu/rP2G40CpVPJvume8ndOGJx2hSr+CSmFpo7GAIITwCqQMTyB WuD25WDKKIQrbsJNpf7z+HGp2l67DzZhyUc8PU/IRw9ij9+q9TS8Knzasaz0TIsQ U8W3Jk347ezOjaJtKfNolZz3UZE6c73GJTLGWJTh/yl9Z7NRDkJnM8INYDE+pUlI JcxsDLe9QNRS4Bo5OTFXtcjkEmItBg5EdmfOtoCpb1NSQQV7VWMIufOCAndUlkgM 0UGT9Lxqbh8YqGQtOdnu3ob0G6WZIV2QmVBBHLYvm1vNmfWuV78b5I9mgNo29ife f0z2ZQS6X41PRSw= -----END CERTIFICATE-----Generated at Wed May 13 14:27:17 2026 by rpki-client