$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D5EF2A792166F94FBE33377E0239034ED2FC2F80.cer File: D5EF2A792166F94FBE33377E0239034ED2FC2F80.cer (raw, json) Hash identifier: Q6kuuhzarJsiYyZUSo/KjLQQx1XgXJ4SCO54Svaquoo= Subject key identifier: D5:EF:2A:79:21:66:F9:4F:BE:33:37:7E:02:39:03:4E:D2:FC:2F:80 Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Certificate serial: 1AB5FABCE7D8A46A202AF5DB33BC609E930F2553 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1088651015181303810/0/D5EF2A792166F94FBE33377E0239034ED2FC2F80.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1088651015181303810/0/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Tue 24 Mar 2026 02:59:47 +0000 Certificate not after: Tue 23 Mar 2027 03:04:47 +0000 Subordinate resources: AS: 18245 IP: 45.253.68.0/22 IP: 59.108.0.0/15 IP: 103.222.192.0/22 IP: 103.235.148.0/22 IP: 150.242.168.0/22 IP: 219.232.32.0/19 IP: 2400:5400::/32 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 22:39:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:b5:fa:bc:e7:d8:a4:6a:20:2a:f5:db:33:bc:60:9e:93:0f:25:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Validity Not Before: Mar 24 02:59:47 2026 GMT Not After : Mar 23 03:04:47 2027 GMT Subject: CN=D5EF2A792166F94FBE33377E0239034ED2FC2F80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:7e:39:af:80:63:b0:1b:2d:5c:f1:44:22:59: 81:94:4f:05:3e:07:35:b6:09:fb:f6:d6:db:60:20: 9a:44:80:bf:dd:d0:4c:92:87:72:26:f3:29:46:95: 02:f8:5c:e5:b3:6d:c6:bf:44:7c:fd:d7:c2:c6:61: e0:71:11:f1:70:d4:bf:db:37:48:2c:0d:d6:6a:0c: f6:8a:ed:00:80:0a:bb:bf:f7:8c:9f:6c:d1:5f:12: 87:73:3b:3d:2d:43:a6:44:93:54:42:2b:87:ee:59: 52:f7:59:61:d4:d6:0d:c7:66:5e:b8:2b:b9:1c:27: 9d:cb:0f:2f:5b:d4:10:6b:4b:8a:2c:09:be:56:a9: 77:6e:87:26:1d:ca:d9:0d:35:3c:94:56:1b:03:79: ad:e5:1a:d3:8f:c9:ab:b7:ef:a8:06:e7:cd:47:9b: 94:5b:c8:68:e0:b3:e9:36:a2:c1:23:e8:37:9e:96: 0f:1b:5f:22:f3:df:e4:af:5c:6b:8d:21:5b:97:59: f0:29:ac:9f:64:cf:f1:8e:57:ff:78:02:94:ce:01: 73:51:d4:21:b2:a0:4c:f0:a4:74:5c:3c:fc:12:97: 4d:67:47:9d:42:d2:e6:79:fb:40:41:bb:83:f3:84: 38:10:c8:1f:27:29:81:2f:9c:8d:a4:9c:5c:90:3e: 0c:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: D5:EF:2A:79:21:66:F9:4F:BE:33:37:7E:02:39:03:4E:D2:FC:2F:80 X509v3 Authority Key Identifier: keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1088651015181303810/0/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1088651015181303810/0/D5EF2A792166F94FBE33377E0239034ED2FC2F80.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.253.68.0/22 59.108.0.0/15 103.222.192.0/22 103.235.148.0/22 150.242.168.0/22 219.232.32.0/19 IPv6: 2400:5400::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 18245 Signature Algorithm: sha256WithRSAEncryption 3b:f4:02:9f:2c:d4:7e:f1:6f:83:45:7a:d7:0c:8a:a1:33:e0: 44:d0:74:fb:27:31:00:53:51:2e:57:d9:a1:23:b7:3b:b3:4d: fe:2b:ae:d4:7c:53:53:87:22:93:b9:b1:9f:11:92:d4:13:86: 4f:dc:7c:eb:8d:b4:62:1c:3e:41:0b:8f:9b:67:78:c5:5b:4c: 56:98:e7:3a:8b:8a:83:45:b8:65:f1:f5:9e:eb:17:ba:b9:59: 83:fe:84:8b:37:e6:17:f2:d2:11:9f:da:21:73:21:78:40:64: 4c:0b:91:70:6f:53:ac:85:99:00:f3:6c:54:bb:84:dc:22:1e: d2:29:58:72:2d:fe:05:2a:a9:59:2e:5e:33:1b:14:3f:88:5a: f7:87:83:eb:10:ad:e9:10:eb:06:dc:19:4c:dc:5f:7d:12:26: aa:32:4d:cc:90:09:49:78:fe:ba:86:4e:2e:28:09:33:17:8f: 41:f8:eb:68:78:02:04:b0:4e:12:9d:a6:03:7f:61:3f:55:76: dd:70:1e:aa:4b:52:bc:13:06:4f:4f:34:b6:79:40:11:08:a6: 17:43:5e:fe:f3:1f:e6:99:82:38:13:7f:72:a1:94:b6:90:ac: 0f:59:db:c2:d4:60:4e:45:fd:94:99:98:78:43:e1:20:b2:9a: 9c:5f:4b:62 -----BEGIN CERTIFICATE----- MIIF7jCCBNagAwIBAgIUGrX6vOfYpGogKvXbM7xgnpMPJVMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDMyNDAyNTk0N1oX DTI3MDMyMzAzMDQ0N1owMzExMC8GA1UEAxMoRDVFRjJBNzkyMTY2Rjk0RkJFMzMz NzdFMDIzOTAzNEVEMkZDMkY4MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMp+Oa+AY7AbLVzxRCJZgZRPBT4HNbYJ+/bW22AgmkSAv93QTJKHcibzKUaV Avhc5bNtxr9EfP3XwsZh4HER8XDUv9s3SCwN1moM9ortAIAKu7/3jJ9s0V8Sh3M7 PS1DpkSTVEIrh+5ZUvdZYdTWDcdmXrgruRwnncsPL1vUEGtLiiwJvlapd26HJh3K 2Q01PJRWGwN5reUa04/Jq7fvqAbnzUeblFvIaOCz6TaiwSPoN56WDxtfIvPf5K9c a40hW5dZ8Cmsn2TP8Y5X/3gClM4Bc1HUIbKgTPCkdFw8/BKXTWdHnULS5nn7QEG7 g/OEOBDIHycpgS+cjaScXJA+DK0CAwEAAaOCAuEwggLdMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFNXvKnkhZvlPvjM3fgI5A07S/C+AMB8GA1UdIwQYMBaAFKVu hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTA4ODY1MTAxNTE4MTMwMzgxMC8wLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDg4NjUxMDE1MTgxMzAzODEw LzAvRDVFRjJBNzkyMTY2Rjk0RkJFMzMzNzdFMDIzOTAzNEVEMkZDMkY4MC5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwSwYIKwYBBQUH AQcBAf8EPDA6MCkEAgABMCMDBAIt/UQDAwE7bAMEAmfewAMEAmfrlAMEApbyqAME BdvoIDANBAIAAjAHAwUAJABUADAZBggrBgEFBQcBCAEB/wQKMAigBjAEAgJHRTAN BgkqhkiG9w0BAQsFAAOCAQEAO/QCnyzUfvFvg0V61wyKoTPgRNB0+ycxAFNRLlfZ oSO3O7NN/iuu1HxTU4cik7mxnxGS1BOGT9x86420Yhw+QQuPm2d4xVtMVpjnOouK g0W4ZfH1nusXurlZg/6EizfmF/LSEZ/aIXMheEBkTAuRcG9TrIWZAPNsVLuE3CIe 0ilYci3+BSqpWS5eMxsUP4ha94eD6xCt6RDrBtwZTNxffRImqjJNzJAJSXj+uoZO LigJMxePQfjraHgCBLBOEp2mA39hP1V23XAeqktSvBMGT080tnlAEQimF0Ne/vMf 5pmCOBN/cqGUtpCsD1nbwtRgTkX9lJmYeEPhILKanF9LYg== -----END CERTIFICATE-----Generated at Fri Mar 27 00:19:30 2026 by rpki-client