$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/200F3395B71E54CEA9D9E15A8452B36EA909B567.cer File: 200F3395B71E54CEA9D9E15A8452B36EA909B567.cer (raw, json) Hash identifier: R4WEEziNSccutUXA2WYJh1o6G+SKlyvwTk/gVWUCDKY= Subject key identifier: 20:0F:33:95:B7:1E:54:CE:A9:D9:E1:5A:84:52:B3:6E:A9:09:B5:67 Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Certificate serial: 46D5F68C1F1DDA6FAE796D3A04FBF3E76AF72CC6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1097437560596070403/0/200F3395B71E54CEA9D9E15A8452B36EA909B567.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1097437560596070403/0/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Fri 17 Apr 2026 08:20:05 +0000 Certificate not after: Fri 16 Apr 2027 08:25:05 +0000 Subordinate resources: AS: 137778 IP: 45.252.104.0/22 IP: 103.208.40.0/21 IP: 103.221.140.0/22 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 17:12:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:d5:f6:8c:1f:1d:da:6f:ae:79:6d:3a:04:fb:f3:e7:6a:f7:2c:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Validity Not Before: Apr 17 08:20:05 2026 GMT Not After : Apr 16 08:25:05 2027 GMT Subject: CN=200F3395B71E54CEA9D9E15A8452B36EA909B567 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:85:3a:11:9d:db:b4:47:f4:42:95:22:2b:ef: 8a:f2:06:ca:56:98:28:b0:d6:ab:08:42:fa:4e:2e: 2a:85:b9:89:1c:67:d7:f3:92:e3:f7:c4:76:23:83: 9d:e9:72:40:8c:65:cf:50:c2:b9:55:65:dd:ff:bd: d1:0c:87:32:c3:da:fe:21:ec:e0:0f:d1:c4:18:fe: 81:f6:3b:43:5b:17:ce:09:01:6d:2a:0a:bd:9c:b2: f2:04:8e:af:df:b2:a3:44:3c:0e:17:b1:1b:08:b8: 7d:e1:ba:c9:e3:61:ab:0e:ed:38:05:74:63:fd:3f: 07:0d:c8:95:b6:5f:8c:a7:e8:f9:2a:93:16:8a:66: ee:cc:b3:eb:22:c7:9a:21:6f:3b:96:aa:ee:ec:19: 66:d0:0f:61:9d:bd:61:ef:8c:4c:97:cd:ca:22:36: 26:46:9c:a1:fe:d1:f6:d6:24:1d:2f:6a:70:e1:6c: c0:e7:6e:a2:f4:3e:1a:d6:23:0e:42:8b:1b:7f:09: 89:b2:fa:9b:4b:ff:42:4e:9f:3e:73:a3:ac:7f:a7: 4c:6e:8f:97:8a:03:28:51:a1:f3:cf:9e:3f:f4:33: 83:a1:53:b6:53:61:16:6e:05:72:ad:9b:c0:e6:2c: 4c:ac:4b:b7:26:be:11:82:0f:67:2b:68:e5:16:64: b9:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 20:0F:33:95:B7:1E:54:CE:A9:D9:E1:5A:84:52:B3:6E:A9:09:B5:67 X509v3 Authority Key Identifier: keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1097437560596070403/0/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1097437560596070403/0/200F3395B71E54CEA9D9E15A8452B36EA909B567.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.252.104.0/22 103.208.40.0/21 103.221.140.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 137778 Signature Algorithm: sha256WithRSAEncryption 0e:cb:82:f7:12:44:bc:45:0c:1e:08:e0:f7:19:31:84:e6:f2: 79:28:47:38:be:04:86:35:dd:cc:d5:29:30:96:7c:98:9e:7c: 35:6d:e3:cf:3a:79:d7:0c:79:3c:d3:b7:9d:80:aa:ef:d9:59: f9:e9:42:c0:fb:50:39:7b:ef:dd:9a:58:15:50:0e:d3:f2:b6: ee:36:3f:db:d5:bd:b0:ef:7e:38:00:4e:36:2f:07:4f:da:87: ae:3e:00:72:d9:0a:c6:7b:5e:c6:e9:af:ca:db:a1:4c:73:98: 2c:86:ff:e0:c5:50:0f:19:95:50:88:74:9f:f0:e4:e7:5d:23: e5:74:b6:01:81:a5:b0:c0:55:0f:6e:7e:c7:94:7c:3d:26:70: 24:30:e3:ee:8e:1e:13:7e:8e:3e:ef:b3:33:f9:30:29:6f:ff: f1:00:71:f5:73:ab:7e:7b:f4:a1:58:78:96:a2:f2:e3:16:a4: e4:45:15:da:79:e8:61:d8:be:d7:21:b1:7d:8c:46:3d:ad:45: d0:83:8f:e9:d5:15:5e:46:ff:7e:59:27:d8:1f:22:64:84:d3: 38:83:b9:14:4f:d1:8d:78:83:da:aa:32:d0:ad:9a:63:f4:38: cd:e9:d8:57:73:b3:81:8c:38:8d:fa:4b:82:57:65:2e:89:c6: fd:b6:e8:74 -----BEGIN CERTIFICATE----- MIIFzzCCBLegAwIBAgIURtX2jB8d2m+ueW06BPvz52r3LMYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDQxNzA4MjAwNVoX DTI3MDQxNjA4MjUwNVowMzExMC8GA1UEAxMoMjAwRjMzOTVCNzFFNTRDRUE5RDlF MTVBODQ1MkIzNkVBOTA5QjU2NzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJ+FOhGd27RH9EKVIivvivIGylaYKLDWqwhC+k4uKoW5iRxn1/OS4/fEdiOD nelyQIxlz1DCuVVl3f+90QyHMsPa/iHs4A/RxBj+gfY7Q1sXzgkBbSoKvZyy8gSO r9+yo0Q8DhexGwi4feG6yeNhqw7tOAV0Y/0/Bw3IlbZfjKfo+SqTFopm7syz6yLH miFvO5aq7uwZZtAPYZ29Ye+MTJfNyiI2Jkacof7R9tYkHS9qcOFswOduovQ+GtYj DkKLG38JibL6m0v/Qk6fPnOjrH+nTG6Pl4oDKFGh88+eP/Qzg6FTtlNhFm4Fcq2b wOYsTKxLtya+EYIPZyto5RZkuR0CAwEAAaOCAsIwggK+MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFCAPM5W3HlTOqdnhWoRSs26pCbVnMB8GA1UdIwQYMBaAFKVu hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTA5NzQzNzU2MDU5NjA3MDQwMy8wLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDk3NDM3NTYwNTk2MDcwNDAz LzAvMjAwRjMzOTVCNzFFNTRDRUE5RDlFMTVBODQ1MkIzNkVBOTA5QjU2Ny5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwKwYIKwYBBQUH AQcBAf8EHDAaMBgEAgABMBIDBAIt/GgDBANn0CgDBAJn3YwwGgYIKwYBBQUHAQgB Af8ECzAJoAcwBQIDAhoyMA0GCSqGSIb3DQEBCwUAA4IBAQAOy4L3EkS8RQweCOD3 GTGE5vJ5KEc4vgSGNd3M1SkwlnyYnnw1bePPOnnXDHk807edgKrv2Vn56ULA+1A5 e+/dmlgVUA7T8rbuNj/b1b2w7344AE42LwdP2oeuPgBy2QrGe17G6a/K26FMc5gs hv/gxVAPGZVQiHSf8OTnXSPldLYBgaWwwFUPbn7HlHw9JnAkMOPujh4Tfo4+77Mz +TApb//xAHH1c6t+e/ShWHiWovLjFqTkRRXaeehh2L7XIbF9jEY9rUXQg4/p1RVe Rv9+WSfYHyJkhNM4g7kUT9GNeIPaqjLQrZpj9DjN6dhXc7OBjDiN+kuCV2Uuicb9 tuh0 -----END CERTIFICATE-----Generated at Fri Apr 17 22:45:51 2026 by rpki-client