$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/294F4A37AD2D0A4596249EB948E82B84D1031CCB.cer File: 294F4A37AD2D0A4596249EB948E82B84D1031CCB.cer (raw, json) Hash identifier: Zd8SPAD8jOMMJ1lMod9MoxhUJFkl/RjKBYlszxhi+Fw= Subject key identifier: 29:4F:4A:37:AD:2D:0A:45:96:24:9E:B9:48:E8:2B:84:D1:03:1C:CB Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Certificate serial: 04072F7F67B8CBE3F7BFA5D8CBFF63F967DBAA2B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1106050679627055119/0/294F4A37AD2D0A4596249EB948E82B84D1031CCB.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1106050679627055119/0/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Mon 11 May 2026 02:45:33 +0000 Certificate not after: Mon 10 May 2027 02:50:33 +0000 Subordinate resources: IP: 103.111.64.0/22 IP: 2402:96c0::/32 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 11:49:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:07:2f:7f:67:b8:cb:e3:f7:bf:a5:d8:cb:ff:63:f9:67:db:aa:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Validity Not Before: May 11 02:45:33 2026 GMT Not After : May 10 02:50:33 2027 GMT Subject: CN=294F4A37AD2D0A4596249EB948E82B84D1031CCB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:94:05:9c:21:4e:a3:b8:27:95:68:8c:b3:89: e2:b4:7a:6a:4e:07:06:41:a1:8b:03:d9:1b:7c:78: ed:79:c1:70:ad:50:40:be:ff:fc:bd:86:f5:60:0d: 56:c2:b4:59:ad:1b:8c:48:00:5e:ba:47:06:d7:d4: 78:21:62:93:31:78:46:1c:47:76:14:08:10:6e:72: 0b:c6:53:66:3d:18:da:15:9b:ed:2c:69:87:bc:cb: a0:9a:1c:5e:d6:e5:de:8f:e6:67:58:40:a7:e4:52: bf:1a:0f:5e:a4:ae:f9:cd:58:13:25:46:19:71:aa: 95:e8:46:4b:da:b3:f0:65:6d:3f:c5:a0:8a:36:aa: 75:71:79:ee:ab:63:d5:f0:91:bd:02:3b:1b:f3:2b: f9:a0:40:6c:7e:3e:30:12:42:b1:22:21:3f:b7:96: be:9e:f4:7c:05:15:44:05:28:7c:57:2c:cc:35:bf: dc:86:ba:e9:a3:41:99:a5:2a:c7:c6:10:fc:7e:5e: 0b:15:ca:1a:8c:39:18:e3:43:da:3e:55:6e:ad:fe: bd:8a:d3:4c:46:40:29:e9:76:04:42:eb:99:1a:1c: 9b:08:98:86:b7:3d:20:9c:01:73:a3:2b:7f:30:91: ff:04:55:6d:66:09:0f:34:27:d8:33:c5:d2:b9:92: 0d:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 29:4F:4A:37:AD:2D:0A:45:96:24:9E:B9:48:E8:2B:84:D1:03:1C:CB X509v3 Authority Key Identifier: keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1106050679627055119/0/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1106050679627055119/0/294F4A37AD2D0A4596249EB948E82B84D1031CCB.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.111.64.0/22 IPv6: 2402:96c0::/32 Signature Algorithm: sha256WithRSAEncryption 89:b3:de:85:98:d2:31:22:c2:08:f1:55:a0:c9:0b:57:fd:2e: a7:bc:5e:02:19:12:b2:3b:0e:1c:dc:dc:87:5b:f9:54:12:6d: 23:65:20:8a:42:4a:9b:37:95:35:de:c2:26:fb:d8:e4:e2:8d: 87:1f:54:e5:8d:d7:9f:99:e8:08:6a:af:d2:f4:e4:99:4b:57: ed:7f:2d:e1:ae:39:57:b1:29:1d:f9:a3:9b:5b:5b:18:88:c4: 89:32:63:e4:6a:f8:b5:f5:8f:d3:9e:85:21:13:e3:ee:13:39: 37:86:52:88:9e:54:20:e7:62:35:bc:f7:e7:e5:da:d2:ef:9d: e3:49:b9:5b:c9:f3:ac:57:a3:4f:a8:a5:5d:ec:76:44:05:49: ae:b8:44:6f:56:4a:5e:c8:80:0a:0b:d9:ad:46:54:79:b0:81: 58:9c:19:3a:36:c9:16:14:c2:a2:34:b4:0e:a0:80:2a:83:9b: cc:c0:44:9a:86:0c:51:c3:cd:ef:5f:a6:bf:5c:d1:77:ca:2e: f8:11:37:f6:41:2e:c2:1b:45:74:11:b6:1a:34:e5:02:84:01: 53:52:d9:09:dd:55:67:b4:5c:00:41:d2:b5:3e:77:82:ff:4d: 9e:1d:0d:d9:0e:24:f0:f6:29:b7:59:74:e9:ea:46:f6:38:1c: dc:86:51:f8 -----BEGIN CERTIFICATE----- MIIFtjCCBJ6gAwIBAgIUBAcvf2e4y+P3v6XYy/9j+WfbqiswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDUxMTAyNDUzM1oX DTI3MDUxMDAyNTAzM1owMzExMC8GA1UEAxMoMjk0RjRBMzdBRDJEMEE0NTk2MjQ5 RUI5NDhFODJCODREMTAzMUNDQjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKmUBZwhTqO4J5VojLOJ4rR6ak4HBkGhiwPZG3x47XnBcK1QQL7//L2G9WAN VsK0Wa0bjEgAXrpHBtfUeCFikzF4RhxHdhQIEG5yC8ZTZj0Y2hWb7Sxph7zLoJoc Xtbl3o/mZ1hAp+RSvxoPXqSu+c1YEyVGGXGqlehGS9qz8GVtP8WgijaqdXF57qtj 1fCRvQI7G/Mr+aBAbH4+MBJCsSIhP7eWvp70fAUVRAUofFcszDW/3Ia66aNBmaUq x8YQ/H5eCxXKGow5GOND2j5Vbq3+vYrTTEZAKel2BELrmRocmwiYhrc9IJwBc6Mr fzCR/wRVbWYJDzQn2DPF0rmSDSUCAwEAAaOCAqkwggKlMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFClPSjetLQpFliSeuUjoK4TRAxzLMB8GA1UdIwQYMBaAFKVu hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTEwNjA1MDY3OTYyNzA1NTExOS8wLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMTA2MDUwNjc5NjI3MDU1MTE5 LzAvMjk0RjRBMzdBRDJEMEE0NTk2MjQ5RUI5NDhFODJCODREMTAzMUNDQi5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUH AQcBAf8EHzAdMAwEAgABMAYDBAJnb0AwDQQCAAIwBwMFACQClsAwDQYJKoZIhvcN AQELBQADggEBAImz3oWY0jEiwgjxVaDJC1f9Lqe8XgIZErI7Dhzc3Idb+VQSbSNl IIpCSps3lTXewib72OTijYcfVOWN15+Z6Ahqr9L05JlLV+1/LeGuOVexKR35o5tb WxiIxIkyY+Rq+LX1j9OehSET4+4TOTeGUoieVCDnYjW89+fl2tLvneNJuVvJ86xX o0+opV3sdkQFSa64RG9WSl7IgAoL2a1GVHmwgVicGTo2yRYUwqI0tA6ggCqDm8zA RJqGDFHDze9fpr9c0XfKLvgRN/ZBLsIbRXQRtho05QKEAVNS2QndVWe0XABB0rU+ d4L/TZ4dDdkOJPD2KbdZdOnqRvY4HNyGUfg= -----END CERTIFICATE-----Generated at Wed May 13 17:32:38 2026 by rpki-client