$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C2290F2F6159F1C8C146AE9C6469BFBC481CC7D9.cer File: C2290F2F6159F1C8C146AE9C6469BFBC481CC7D9.cer (raw, json) Hash identifier: mTfWtH/Iy+8SbaClXZaIb953uDEbTCFazsce/RdijU4= Subject key identifier: C2:29:0F:2F:61:59:F1:C8:C1:46:AE:9C:64:69:BF:BC:48:1C:C7:D9 Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Certificate serial: 25A611231753E62E0921557C8F0831F76656CAFE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1106516114969460755/0/C2290F2F6159F1C8C146AE9C6469BFBC481CC7D9.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1106516114969460755/0/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Tue 12 May 2026 09:35:00 +0000 Certificate not after: Tue 11 May 2027 09:40:00 +0000 Subordinate resources: AS: 45097 IP: 103.79.200.0/22 IP: 117.74.64.0/20 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 11:49:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:a6:11:23:17:53:e6:2e:09:21:55:7c:8f:08:31:f7:66:56:ca:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Validity Not Before: May 12 09:35:00 2026 GMT Not After : May 11 09:40:00 2027 GMT Subject: CN=C2290F2F6159F1C8C146AE9C6469BFBC481CC7D9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:d6:5d:e7:6f:10:ba:7c:5f:4e:9f:d7:5d:dc: a7:f7:4b:79:47:65:f1:9c:be:f3:34:bb:71:a5:9f: 6a:09:05:da:fa:3a:b7:49:59:08:96:5e:77:49:c4: 7b:6a:98:00:59:d3:5a:f2:76:05:e2:64:f3:40:f1: 73:48:f5:e8:a1:81:99:93:53:57:17:0a:ff:8a:46: 11:1d:13:47:88:cf:18:af:6c:df:aa:fc:a4:94:24: 76:48:2c:62:5c:58:3e:82:73:c2:a2:17:0b:35:47: 36:c2:fa:dc:e9:ff:31:0c:bc:02:d3:58:b2:a8:13: af:c6:5e:fe:95:bb:4a:2a:aa:b3:9e:63:5e:6b:1a: e6:4f:eb:4a:89:1d:b3:7a:15:e1:59:9b:bc:de:e6: 6b:58:45:00:b8:b3:54:e7:63:0f:97:52:f8:46:d8: d2:b9:ad:41:b1:03:6f:e8:dd:63:f4:bf:c0:02:fe: 37:19:16:55:c4:c7:1b:9f:d5:f0:cb:39:46:d4:56: 9d:50:bd:e5:30:88:98:35:7b:98:04:22:92:24:ae: b0:b0:eb:6a:21:97:eb:c9:ae:21:c0:42:db:e8:62: c7:5d:bf:28:7e:2e:84:e2:c9:bc:b2:af:df:1c:de: 56:d6:00:f6:ee:60:17:c0:0a:72:11:97:f5:3a:72: 0a:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: C2:29:0F:2F:61:59:F1:C8:C1:46:AE:9C:64:69:BF:BC:48:1C:C7:D9 X509v3 Authority Key Identifier: keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1106516114969460755/0/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1106516114969460755/0/C2290F2F6159F1C8C146AE9C6469BFBC481CC7D9.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.79.200.0/22 117.74.64.0/20 sbgp-autonomousSysNum: critical Autonomous System Numbers: 45097 Signature Algorithm: sha256WithRSAEncryption 50:6c:d1:49:b2:58:7a:68:4a:e6:63:44:f4:86:9d:e9:74:f3: ba:15:94:68:2e:58:66:87:3c:5e:1e:0a:98:f8:98:df:34:cf: ea:eb:b9:0c:06:44:b7:9a:96:9a:85:f3:b8:a7:f3:5b:c1:c9: 5b:4d:09:d5:4d:73:98:d5:59:ba:e5:5e:66:d3:6b:f3:c4:5a: d9:b5:9c:58:55:9b:75:3e:1c:8c:f9:8c:96:4b:57:cf:7e:a8: b8:42:4a:6d:0b:db:53:b1:87:2d:4a:9a:e0:52:fc:1c:e0:b0: a9:54:99:2a:23:18:00:7d:75:ea:3f:ac:b0:aa:da:7b:40:33: 0e:f6:b3:cb:f9:bf:e7:de:51:d7:3d:2c:9b:63:b2:5d:e1:77: 3d:16:96:73:57:78:03:a5:d4:75:e1:f8:51:3d:fe:8e:e5:0d: f8:7f:8e:05:7a:4e:ee:e1:8c:0d:d8:9a:64:30:d8:e1:86:2f: 72:3d:ea:03:9b:51:7e:ac:48:a6:25:b9:b5:f2:21:48:c4:70: 88:3d:28:e0:2e:3c:dd:2c:17:88:b7:5e:c7:fc:19:a5:be:91: d9:4d:ae:09:a7:4b:7d:76:5d:25:ba:75:48:7c:35:57:73:ea: 43:f0:92:11:83:da:b1:fa:af:15:60:89:b1:f9:1f:9e:fe:d9: 4f:c0:2f:8a -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUJaYRIxdT5i4JIVV8jwgx92ZWyv4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDUxMjA5MzUwMFoX DTI3MDUxMTA5NDAwMFowMzExMC8GA1UEAxMoQzIyOTBGMkY2MTU5RjFDOEMxNDZB RTlDNjQ2OUJGQkM0ODFDQzdEOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALfWXedvELp8X06f113cp/dLeUdl8Zy+8zS7caWfagkF2vo6t0lZCJZed0nE e2qYAFnTWvJ2BeJk80Dxc0j16KGBmZNTVxcK/4pGER0TR4jPGK9s36r8pJQkdkgs YlxYPoJzwqIXCzVHNsL63On/MQy8AtNYsqgTr8Ze/pW7Siqqs55jXmsa5k/rSokd s3oV4VmbvN7ma1hFALizVOdjD5dS+EbY0rmtQbEDb+jdY/S/wAL+NxkWVcTHG5/V 8Ms5RtRWnVC95TCImDV7mAQikiSusLDraiGX68muIcBC2+hix12/KH4uhOLJvLKv 3xzeVtYA9u5gF8AKchGX9TpyCtkCAwEAAaOCArwwggK4MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFMIpDy9hWfHIwUaunGRpv7xIHMfZMB8GA1UdIwQYMBaAFKVu hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTEwNjUxNjExNDk2OTQ2MDc1NS8wLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMTA2NTE2MTE0OTY5NDYwNzU1 LzAvQzIyOTBGMkY2MTU5RjFDOEMxNDZBRTlDNjQ2OUJGQkM0ODFDQzdEOS5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwJQYIKwYBBQUH AQcBAf8EFjAUMBIEAgABMAwDBAJnT8gDBAR1SkAwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDALApMA0GCSqGSIb3DQEBCwUAA4IBAQBQbNFJslh6aErmY0T0hp3pdPO6 FZRoLlhmhzxeHgqY+JjfNM/q67kMBkS3mpaahfO4p/NbwclbTQnVTXOY1Vm65V5m 02vzxFrZtZxYVZt1PhyM+YyWS1fPfqi4QkptC9tTsYctSprgUvwc4LCpVJkqIxgA fXXqP6ywqtp7QDMO9rPL+b/n3lHXPSybY7Jd4Xc9FpZzV3gDpdR14fhRPf6O5Q34 f44Fek7u4YwN2JpkMNjhhi9yPeoDm1F+rEimJbm18iFIxHCIPSjgLjzdLBeIt17H /BmlvpHZTa4Jp0t9dl0lunVIfDVXc+pD8JIRg9qx+q8VYImx+R+e/tlPwC+K -----END CERTIFICATE-----Generated at Wed May 13 14:52:56 2026 by rpki-client