$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C38BD0765C4FF987B70BD4790E738FA576EAAA15.cer File: C38BD0765C4FF987B70BD4790E738FA576EAAA15.cer (raw, json) Hash identifier: ZtXFlSa22k0DwfgsLAjb6TwU1muyYLEq6RlW1FgQ6wY= Subject key identifier: C3:8B:D0:76:5C:4F:F9:87:B7:0B:D4:79:0E:73:8F:A5:76:EA:AA:15 Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Certificate serial: 34C5943C0CB0724DC7E83B2FF3DD79200927B59C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/0/C38BD0765C4FF987B70BD4790E738FA576EAAA15.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/0/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Mon 20 Apr 2026 08:33:08 +0000 Certificate not after: Mon 19 Apr 2027 08:38:08 +0000 Subordinate resources: AS: 151270 IP: 45.113.208.0/20 IP: 45.249.188.0/22 IP: 103.53.128.0 -- 103.53.147.255 IP: 103.217.180.0/22 IP: 103.236.68.0 -- 103.236.99.255 IP: 144.48.180.0 -- 144.48.187.255 IP: 2401:d0e0::/32 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 11:49:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:c5:94:3c:0c:b0:72:4d:c7:e8:3b:2f:f3:dd:79:20:09:27:b5:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Validity Not Before: Apr 20 08:33:08 2026 GMT Not After : Apr 19 08:38:08 2027 GMT Subject: CN=C38BD0765C4FF987B70BD4790E738FA576EAAA15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:ea:03:7d:21:6a:9f:e1:be:95:1b:f5:31:20: fc:ce:e3:0f:0a:ef:3a:84:28:73:62:a4:1f:1c:59: 06:56:38:dd:cc:61:69:59:aa:be:07:ee:75:d9:e5: dc:da:40:c6:f9:22:95:66:ab:8a:47:1e:bb:3e:15: 11:10:ef:28:02:18:e7:96:e2:44:57:99:0b:ce:63: 19:65:f2:ee:31:d3:0e:6c:c7:6f:e8:81:e2:67:11: 9f:6c:4d:ad:f4:c2:65:9c:7a:06:3e:df:36:18:79: e4:c3:53:af:a8:36:ea:e0:9c:da:77:1e:cd:d3:69: 7c:49:96:c9:ee:cf:45:63:67:61:1d:36:d6:f5:78: 8f:f7:1c:cf:f3:11:54:ac:d3:29:d0:ee:70:fa:e1: 87:2c:49:12:f4:76:07:b1:3f:13:4b:9d:60:7d:90: 6b:bd:c2:a0:a5:1a:31:3e:93:41:5b:fa:70:6e:d8: 21:02:46:a8:19:0a:90:c1:8b:c5:4d:a4:92:65:e0: a9:9a:59:51:d7:7a:16:f6:2d:c9:a6:78:35:79:b2: 18:51:d8:c5:72:88:46:7f:c7:be:e2:bc:42:20:a9: 13:49:5c:96:00:44:d8:c4:a5:86:b5:e4:33:78:50: 44:d4:ce:91:69:a0:f6:d5:17:59:a4:c2:51:9b:0b: e4:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: C3:8B:D0:76:5C:4F:F9:87:B7:0B:D4:79:0E:73:8F:A5:76:EA:AA:15 X509v3 Authority Key Identifier: keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/0/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/0/C38BD0765C4FF987B70BD4790E738FA576EAAA15.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.113.208.0/20 45.249.188.0/22 103.53.128.0-103.53.147.255 103.217.180.0/22 103.236.68.0-103.236.99.255 144.48.180.0-144.48.187.255 IPv6: 2401:d0e0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 151270 Signature Algorithm: sha256WithRSAEncryption 4a:1c:33:a1:e6:6a:91:d0:03:a2:c6:1c:3d:8d:fd:de:e3:b9: ec:fa:86:e5:f2:25:3c:41:46:07:3f:8f:cb:43:88:47:fe:91: 09:fa:2d:eb:55:03:4b:f9:4e:cb:f4:24:ce:25:e9:eb:87:a9: 05:2a:be:3c:4c:6e:ce:93:59:17:40:90:ae:d3:b8:4f:e4:2d: 45:56:da:95:17:ef:de:7d:b5:66:0d:43:14:fd:67:08:12:be: c4:a3:2b:9f:b4:45:f5:6a:e8:76:6b:47:bf:f5:c4:f0:a6:64: aa:6e:70:8c:cb:22:aa:93:10:e0:ad:67:fe:60:bc:59:b4:6b: 08:24:68:d4:08:e0:25:df:a7:0b:d9:a6:45:7a:94:49:6a:79: c5:2f:23:e4:c8:8f:ba:02:a8:a2:e8:2a:4f:4b:32:aa:94:35: 4a:ac:66:83:7a:a0:12:ce:df:af:26:4b:13:69:b3:24:8b:d5: 12:d2:74:96:ec:7f:9a:a6:79:39:a2:63:1e:09:6d:7c:ff:6f: 98:da:ca:f6:82:7f:ee:fe:dc:d3:c7:f8:dc:e9:b3:b7:cb:ed: 8a:23:ed:a4:e5:ff:e1:d6:0a:66:82:8c:5d:4f:18:32:e4:e1: dc:26:d3:19:95:7e:82:17:9d:5e:56:13:4e:f6:c2:01:77:31: c3:ff:c2:36 -----BEGIN CERTIFICATE----- MIIGCDCCBPCgAwIBAgIUNMWUPAywck3H6Dsv8915IAkntZwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDQyMDA4MzMwOFoX DTI3MDQxOTA4MzgwOFowMzExMC8GA1UEAxMoQzM4QkQwNzY1QzRGRjk4N0I3MEJE NDc5MEU3MzhGQTU3NkVBQUExNTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALLqA30hap/hvpUb9TEg/M7jDwrvOoQoc2KkHxxZBlY43cxhaVmqvgfuddnl 3NpAxvkilWarikceuz4VERDvKAIY55biRFeZC85jGWXy7jHTDmzHb+iB4mcRn2xN rfTCZZx6Bj7fNhh55MNTr6g26uCc2ncezdNpfEmWye7PRWNnYR021vV4j/ccz/MR VKzTKdDucPrhhyxJEvR2B7E/E0udYH2Qa73CoKUaMT6TQVv6cG7YIQJGqBkKkMGL xU2kkmXgqZpZUdd6FvYtyaZ4NXmyGFHYxXKIRn/HvuK8QiCpE0lclgBE2MSlhrXk M3hQRNTOkWmg9tUXWaTCUZsL5OECAwEAAaOCAvswggL3MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFMOL0HZcT/mHtwvUeQ5zj6V26qoVMB8GA1UdIwQYMBaAFKVu hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTA2NTU4NTkxMTIxNzQ1NTEwNy8wLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDY1NTg1OTExMjE3NDU1MTA3 LzAvQzM4QkQwNzY1QzRGRjk4N0I3MEJENDc5MEU3MzhGQTU3NkVBQUExNS5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwZAYIKwYBBQUH AQcBAf8EVTBTMEIEAgABMDwDBAQtcdADBAIt+bwwDAMEB2c1gAMEAmc1kAMEAmfZ tDAMAwQCZ+xEAwQCZ+xgMAwDBAKQMLQDBAKQMLgwDQQCAAIwBwMFACQB0OAwGgYI KwYBBQUHAQgBAf8ECzAJoAcwBQIDAk7mMA0GCSqGSIb3DQEBCwUAA4IBAQBKHDOh 5mqR0AOixhw9jf3e47ns+obl8iU8QUYHP4/LQ4hH/pEJ+i3rVQNL+U7L9CTOJenr h6kFKr48TG7Ok1kXQJCu07hP5C1FVtqVF+/efbVmDUMU/WcIEr7EoyuftEX1auh2 a0e/9cTwpmSqbnCMyyKqkxDgrWf+YLxZtGsIJGjUCOAl36cL2aZFepRJannFLyPk yI+6Aqii6CpPSzKqlDVKrGaDeqASzt+vJksTabMki9US0nSW7H+apnk5omMeCW18 /2+Y2sr2gn/u/tzTx/jc6bO3y+2KI+2k5f/h1gpmgoxdTxgy5OHcJtMZlX6CF51e VhNO9sIBdzHD/8I2 -----END CERTIFICATE-----Generated at Wed May 13 19:13:32 2026 by rpki-client