$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4405894DDA31D4181DB39F5C413EAD20B4EADE08.cer File: 4405894DDA31D4181DB39F5C413EAD20B4EADE08.cer (raw, json) Hash identifier: znfzecN5XkdIU7iXw4ccaXZuquZQe/VjFwfJPEgm4J8= Subject key identifier: 44:05:89:4D:DA:31:D4:18:1D:B3:9F:5C:41:3E:AD:20:B4:EA:DE:08 Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Certificate serial: 14B9B2156869B238CC9AB4F0AC4598989A3AA07D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1105386480877961231/0/4405894DDA31D4181DB39F5C413EAD20B4EADE08.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1105386480877961231/0/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Sat 09 May 2026 06:46:15 +0000 Certificate not after: Sat 08 May 2027 06:51:15 +0000 Subordinate resources: IP: 43.254.72.0/22 IP: 103.254.64.0/22 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 07:02:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:b9:b2:15:68:69:b2:38:cc:9a:b4:f0:ac:45:98:98:9a:3a:a0:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Validity Not Before: May 9 06:46:15 2026 GMT Not After : May 8 06:51:15 2027 GMT Subject: CN=4405894DDA31D4181DB39F5C413EAD20B4EADE08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:ff:71:11:76:53:97:b0:72:7d:4c:be:45:ec: 3f:23:f8:8b:5d:97:00:00:06:2e:96:cb:26:44:79: b0:00:29:b6:84:5f:ca:e5:fa:fb:a7:43:b2:b6:52: 58:27:43:1d:f3:ca:b1:4f:13:ee:79:d8:d4:c5:1c: 73:d1:03:34:ba:2e:bf:f5:d7:50:1a:b0:5b:46:9b: 6d:e1:94:8a:95:19:2d:cb:67:89:12:36:15:3a:fa: 6c:ad:2a:dd:ed:b2:ec:1c:c7:98:53:d3:c4:02:8d: 67:fe:b1:bc:20:53:47:54:0f:3e:35:4e:c7:09:e1: eb:88:aa:dc:8e:10:00:6d:b7:1b:0d:3e:7c:ba:19: 95:c0:5f:3c:eb:dc:65:44:44:83:11:84:c2:e4:04: 75:fd:9d:c5:60:10:84:47:74:91:8f:3f:90:6f:19: 65:2b:16:29:21:24:06:ac:f0:72:2f:81:b6:2d:82: 2a:fa:73:c7:e0:be:d3:f8:cb:7a:30:73:02:0e:48: 49:6f:3a:47:6f:b1:34:5a:ab:07:19:cb:91:59:8d: 79:7d:af:3c:82:34:54:76:06:cc:a3:86:b0:47:09: 63:17:bb:cb:00:5b:ef:e4:b8:96:1f:ef:73:07:c1: 1b:f3:ae:0b:de:a9:13:a7:d5:dc:0f:52:c0:46:a3: 45:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 44:05:89:4D:DA:31:D4:18:1D:B3:9F:5C:41:3E:AD:20:B4:EA:DE:08 X509v3 Authority Key Identifier: keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1105386480877961231/0/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1105386480877961231/0/4405894DDA31D4181DB39F5C413EAD20B4EADE08.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.254.72.0/22 103.254.64.0/22 Signature Algorithm: sha256WithRSAEncryption 7d:4e:07:de:b5:dd:f0:78:c8:ce:30:d9:e0:89:99:3d:94:9b: af:0f:37:40:41:28:e5:e8:cc:bd:21:ad:78:3b:c2:1b:80:8a: 11:13:92:ca:35:2a:cc:19:b2:2c:bc:a9:f7:c5:3b:bb:a3:e8: ff:db:f0:a6:41:fd:3b:46:3a:b2:20:2c:a4:57:ad:4d:65:fa: e7:50:c5:41:df:22:d0:f1:45:8f:ef:21:85:d9:ce:c6:c2:d8: 3b:f6:8d:c0:7c:97:a2:9f:bc:65:87:2b:bc:95:f8:01:2a:6a: 58:d4:dd:4b:1c:0a:c4:35:f5:03:c2:22:0a:e7:cf:31:77:5f: a9:f1:f6:1f:e1:e5:b5:7a:17:d3:22:38:57:c9:e1:51:c3:c1: 1c:89:4a:7e:af:1d:c7:2b:de:7c:16:cc:a8:93:45:7e:fc:a2: 02:1c:51:d4:3c:fb:37:da:3d:02:04:13:29:d2:b7:bc:c5:04: de:f5:99:0f:0f:d6:50:8b:f4:d5:99:5e:be:bc:64:be:45:45: c2:d7:52:53:a4:fe:ba:cb:34:d7:22:5a:c9:be:8c:50:02:e2: 6c:02:ab:5f:ef:94:12:2a:2f:30:b3:b0:12:ff:83:6d:f0:4a: 59:16:21:75:a4:59:e8:b3:52:fb:a6:03:ca:c9:fa:6a:bd:ce: 41:7e:31:3f -----BEGIN CERTIFICATE----- MIIFrTCCBJWgAwIBAgIUFLmyFWhpsjjMmrTwrEWYmJo6oH0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDUwOTA2NDYxNVoX DTI3MDUwODA2NTExNVowMzExMC8GA1UEAxMoNDQwNTg5NEREQTMxRDQxODFEQjM5 RjVDNDEzRUFEMjBCNEVBREUwODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMv/cRF2U5ewcn1MvkXsPyP4i12XAAAGLpbLJkR5sAAptoRfyuX6+6dDsrZS WCdDHfPKsU8T7nnY1MUcc9EDNLouv/XXUBqwW0abbeGUipUZLctniRI2FTr6bK0q 3e2y7BzHmFPTxAKNZ/6xvCBTR1QPPjVOxwnh64iq3I4QAG23Gw0+fLoZlcBfPOvc ZUREgxGEwuQEdf2dxWAQhEd0kY8/kG8ZZSsWKSEkBqzwci+Bti2CKvpzx+C+0/jL ejBzAg5ISW86R2+xNFqrBxnLkVmNeX2vPII0VHYGzKOGsEcJYxe7ywBb7+S4lh/v cwfBG/OuC96pE6fV3A9SwEajRb8CAwEAAaOCAqAwggKcMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFEQFiU3aMdQYHbOfXEE+rSC06t4IMB8GA1UdIwQYMBaAFKVu hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTEwNTM4NjQ4MDg3Nzk2MTIzMS8wLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMTA1Mzg2NDgwODc3OTYxMjMx LzAvNDQwNTg5NEREQTMxRDQxODFEQjM5RjVDNDEzRUFEMjBCNEVBREUwOC5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwJQYIKwYBBQUH AQcBAf8EFjAUMBIEAgABMAwDBAIr/kgDBAJn/kAwDQYJKoZIhvcNAQELBQADggEB AH1OB9613fB4yM4w2eCJmT2Um68PN0BBKOXozL0hrXg7whuAihETkso1KswZsiy8 qffFO7uj6P/b8KZB/TtGOrIgLKRXrU1l+udQxUHfItDxRY/vIYXZzsbC2Dv2jcB8 l6KfvGWHK7yV+AEqaljU3UscCsQ19QPCIgrnzzF3X6nx9h/h5bV6F9MiOFfJ4VHD wRyJSn6vHccr3nwWzKiTRX78ogIcUdQ8+zfaPQIEEynSt7zFBN71mQ8P1lCL9NWZ Xr68ZL5FRcLXUlOk/rrLNNciWsm+jFAC4mwCq1/vlBIqLzCzsBL/g23wSlkWIXWk WeizUvumA8rJ+mq9zkF+MT8= -----END CERTIFICATE-----Generated at Wed May 13 07:35:15 2026 by rpki-client