$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/94CD4C01C346E7777BF9874A62B37929003445D7.cer File: 94CD4C01C346E7777BF9874A62B37929003445D7.cer (raw, json) Hash identifier: xKSaUODnVZngRyNPCdfd3vgZ02ccVYzHggPhoxSTLjs= Subject key identifier: 94:CD:4C:01:C3:46:E7:77:7B:F9:87:4A:62:B3:79:29:00:34:45:D7 Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Certificate serial: 239ED9EF56702AF48389FEAE23DA681DC8CA7709 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1105055744207683593/0/94CD4C01C346E7777BF9874A62B37929003445D7.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1105055744207683593/0/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Fri 08 May 2026 09:01:41 +0000 Certificate not after: Fri 07 May 2027 09:06:41 +0000 Subordinate resources: IP: 103.107.108.0/22 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 11:49:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:9e:d9:ef:56:70:2a:f4:83:89:fe:ae:23:da:68:1d:c8:ca:77:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Validity Not Before: May 8 09:01:41 2026 GMT Not After : May 7 09:06:41 2027 GMT Subject: CN=94CD4C01C346E7777BF9874A62B37929003445D7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:b2:38:6b:91:47:7e:d7:3d:d2:aa:af:c2:f7: 44:fb:db:f8:17:fe:ed:cd:b0:d9:90:ce:85:2b:98: d6:6a:88:fc:84:48:98:2a:7e:9d:68:6d:b5:14:7f: a8:69:aa:7a:12:4a:80:fb:f7:b6:cd:02:92:66:12: a9:22:31:da:56:00:15:e0:97:23:b0:f3:9e:b0:9b: b1:60:cf:9f:b1:e1:e0:ea:a2:25:82:48:68:6a:8b: 24:f6:f4:7d:3c:ed:fe:29:52:ca:2d:a8:e4:ed:27: 99:fe:b5:ad:bc:df:5f:60:cd:e9:49:74:a1:f3:66: 13:20:cd:12:54:85:c1:3f:ba:45:7c:8b:36:8e:44: 18:20:b4:04:d9:87:e3:b7:5f:57:a7:84:cb:cf:ef: 24:36:3e:1a:9f:bb:9b:d1:17:05:1c:38:9a:0d:1c: 6e:c2:fc:ff:c3:e1:34:ea:28:80:52:77:36:00:1f: 94:7f:e2:ab:bc:ca:2e:14:8c:4f:d3:37:7d:b5:37: 9d:b4:e6:45:28:77:66:f3:f2:92:38:4d:9f:fc:71: f4:2c:da:0d:75:76:ca:8b:dc:bb:59:56:49:75:b8: 2a:7a:a6:a6:46:a0:51:1a:6e:4b:16:23:6b:91:2c: 7f:47:47:69:bc:b0:73:b3:ac:f0:3b:33:84:de:4d: c2:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 94:CD:4C:01:C3:46:E7:77:7B:F9:87:4A:62:B3:79:29:00:34:45:D7 X509v3 Authority Key Identifier: keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1105055744207683593/0/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1105055744207683593/0/94CD4C01C346E7777BF9874A62B37929003445D7.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.107.108.0/22 Signature Algorithm: sha256WithRSAEncryption 36:08:1d:75:1d:00:88:30:31:ab:07:74:be:9d:6e:80:4e:f0: 43:5f:c0:57:9d:e4:42:95:6d:78:2f:94:3c:09:44:a5:46:c1: 75:ef:64:0e:b2:3a:4f:86:09:ec:0a:b6:9a:01:a3:a5:8f:f2: 51:aa:c9:65:77:a3:83:2d:5c:5f:61:4d:a9:d9:43:e0:ec:10: ec:33:e5:b7:a5:bd:77:ea:6e:02:ee:0b:e6:10:b2:f3:15:37: eb:b3:64:56:d5:be:3b:57:90:75:98:49:f0:7e:d7:e5:33:dc: 0f:6a:2c:42:8d:11:9f:b6:07:57:aa:a2:c7:62:e5:63:a4:1f: 2f:1b:a8:ef:c8:85:4e:07:6c:4d:c9:fc:43:ef:8d:82:24:d5: a8:4f:7b:b6:c8:2b:48:df:b4:e1:c4:2c:da:a6:bf:af:98:1a: 07:6c:7e:57:28:21:3b:88:37:17:0c:5a:86:df:07:32:0f:a0: 2d:fc:5e:23:8b:09:32:ab:74:3d:b8:0d:69:f1:95:d0:85:7d: 4a:f2:e2:34:25:6d:50:4d:7b:d0:91:d9:a6:32:8a:cf:b9:29: 4f:76:f8:75:16:25:63:a7:5c:86:af:5c:68:56:1f:3b:37:8b: 53:bf:04:c3:aa:99:c2:89:29:10:43:09:ad:61:df:fc:d0:0e: 47:18:92:a7 -----BEGIN CERTIFICATE----- MIIFpzCCBI+gAwIBAgIUI57Z71ZwKvSDif6uI9poHcjKdwkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDUwODA5MDE0MVoX DTI3MDUwNzA5MDY0MVowMzExMC8GA1UEAxMoOTRDRDRDMDFDMzQ2RTc3NzdCRjk4 NzRBNjJCMzc5MjkwMDM0NDVENzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAN2yOGuRR37XPdKqr8L3RPvb+Bf+7c2w2ZDOhSuY1mqI/IRImCp+nWhttRR/ qGmqehJKgPv3ts0CkmYSqSIx2lYAFeCXI7DznrCbsWDPn7Hh4OqiJYJIaGqLJPb0 fTzt/ilSyi2o5O0nmf61rbzfX2DN6Ul0ofNmEyDNElSFwT+6RXyLNo5EGCC0BNmH 47dfV6eEy8/vJDY+Gp+7m9EXBRw4mg0cbsL8/8PhNOoogFJ3NgAflH/iq7zKLhSM T9M3fbU3nbTmRSh3ZvPykjhNn/xx9CzaDXV2yovcu1lWSXW4KnqmpkagURpuSxYj a5Esf0dHabywc7Os8DszhN5NwuMCAwEAAaOCApowggKWMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFJTNTAHDRud3e/mHSmKzeSkANEXXMB8GA1UdIwQYMBaAFKVu hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTEwNTA1NTc0NDIwNzY4MzU5My8wLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMTA1MDU1NzQ0MjA3NjgzNTkz LzAvOTRDRDRDMDFDMzQ2RTc3NzdCRjk4NzRBNjJCMzc5MjkwMDM0NDVENy5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAJna2wwDQYJKoZIhvcNAQELBQADggEBADYIHXUd AIgwMasHdL6dboBO8ENfwFed5EKVbXgvlDwJRKVGwXXvZA6yOk+GCewKtpoBo6WP 8lGqyWV3o4MtXF9hTanZQ+DsEOwz5belvXfqbgLuC+YQsvMVN+uzZFbVvjtXkHWY SfB+1+Uz3A9qLEKNEZ+2B1eqosdi5WOkHy8bqO/IhU4HbE3J/EPvjYIk1ahPe7bI K0jftOHELNqmv6+YGgdsflcoITuINxcMWobfBzIPoC38XiOLCTKrdD24DWnxldCF fUry4jQlbVBNe9CR2aYyis+5KU92+HUWJWOnXIavXGhWHzs3i1O/BMOqmcKJKRBD Ca1h3/zQDkcYkqc= -----END CERTIFICATE-----Generated at Wed May 13 16:14:35 2026 by rpki-client