$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/289251F0DCA3FF6ACE101E469CCB4C906CB60D6E.cer File: 289251F0DCA3FF6ACE101E469CCB4C906CB60D6E.cer (raw, json) Hash identifier: CTIm1x/M969t4Lg9Ss0PnPec0B8UA24Jtpn+3MOz340= Subject key identifier: 28:92:51:F0:DC:A3:FF:6A:CE:10:1E:46:9C:CB:4C:90:6C:B6:0D:6E Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Certificate serial: 237D66C3DB2CA3F560B6091E346D511EBB288456 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1097328917783511042/0/289251F0DCA3FF6ACE101E469CCB4C906CB60D6E.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1097328917783511042/0/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Fri 17 Apr 2026 01:08:22 +0000 Certificate not after: Fri 16 Apr 2027 01:13:22 +0000 Subordinate resources: IP: 202.136.72.0/23 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 17:12:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:7d:66:c3:db:2c:a3:f5:60:b6:09:1e:34:6d:51:1e:bb:28:84:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Validity Not Before: Apr 17 01:08:22 2026 GMT Not After : Apr 16 01:13:22 2027 GMT Subject: CN=289251F0DCA3FF6ACE101E469CCB4C906CB60D6E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:38:2e:35:51:f4:52:81:8a:9a:47:50:08:6d: 97:0f:9b:b6:21:12:c1:f5:3a:2d:3d:37:1e:5f:46: cb:09:bb:67:4a:2d:36:75:d3:b3:f4:f5:99:eb:b2: 91:4a:1e:c3:97:74:8b:b9:f5:2e:76:6e:4a:b6:e3: 31:72:21:2c:fc:65:18:70:cd:18:91:a7:46:23:6c: 69:14:ef:7d:58:d3:f1:59:fe:c3:ff:15:54:82:34: 63:c8:8d:a8:14:74:6a:6a:00:83:80:04:8e:c5:71: 25:59:13:c3:8a:8f:80:73:4c:a6:30:ae:bd:df:41: e4:b8:f8:1e:4c:37:ea:80:eb:af:a3:4e:a3:e9:2c: 49:02:6c:ac:b7:7b:a3:9e:d1:5b:d0:f7:dd:88:93: 50:e3:8d:26:8f:97:ec:97:f2:ec:a8:61:09:7e:6a: 10:50:1e:40:3c:ab:51:5a:cf:af:a1:5c:b6:b6:96: fd:7d:d9:c9:0f:cb:09:36:7c:ff:95:e5:10:42:d3: 56:94:0f:27:cd:0d:95:6a:86:f3:6e:db:a8:2a:19: 97:0c:1a:e1:38:9d:a4:6d:d2:b2:a1:5f:5d:bc:d9: 2a:6c:cf:14:a6:e9:6f:6b:07:ed:78:62:99:9f:c9: 73:97:26:35:93:27:4f:37:f2:01:c9:b9:79:32:26: f9:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 28:92:51:F0:DC:A3:FF:6A:CE:10:1E:46:9C:CB:4C:90:6C:B6:0D:6E X509v3 Authority Key Identifier: keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1097328917783511042/0/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1097328917783511042/0/289251F0DCA3FF6ACE101E469CCB4C906CB60D6E.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.136.72.0/23 Signature Algorithm: sha256WithRSAEncryption 89:d5:e7:7d:c4:22:8f:58:a2:77:24:aa:a9:2c:57:a1:52:c7: 70:b9:69:8d:88:47:72:ca:6a:63:0c:8b:d3:87:2d:88:1f:99: d6:f1:66:2a:63:c1:2e:3d:c0:03:ae:4f:d8:e1:96:f1:5b:60: ef:bd:05:6a:af:f4:fe:24:13:15:62:7c:b4:13:dd:ad:42:31: 74:61:d9:f6:5f:ed:d7:25:78:bb:72:ea:1c:59:6c:9e:77:d4: f8:fc:72:8c:c8:d1:08:67:7b:be:d8:e1:10:e6:e0:fb:72:54: 03:86:11:f2:82:7f:14:1e:9d:a7:d5:38:84:fb:d7:35:34:73: 95:aa:41:1e:af:96:a4:fc:65:cf:bb:40:57:b2:f5:1a:51:e9: 9c:22:cb:03:45:f1:63:d9:5c:3c:d0:62:02:23:b1:b3:e4:88: 25:70:f2:e1:37:cc:f5:fa:84:da:62:49:55:f5:91:8d:ea:d8: f6:0a:5f:c0:e4:aa:20:7e:72:30:19:39:d3:3d:08:42:f8:11: 3b:35:c8:c6:bb:88:0d:22:d7:b5:77:f0:56:03:b0:7e:97:20: 17:e8:e5:d8:87:89:9a:1a:ab:19:f9:b7:a8:77:c9:b5:f4:69: a2:80:81:8d:70:aa:34:81:d9:c5:a8:6c:e9:0b:85:bd:19:a2: 1c:ff:f7:0c -----BEGIN CERTIFICATE----- MIIFpzCCBI+gAwIBAgIUI31mw9sso/VgtgkeNG1RHrsohFYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDQxNzAxMDgyMloX DTI3MDQxNjAxMTMyMlowMzExMC8GA1UEAxMoMjg5MjUxRjBEQ0EzRkY2QUNFMTAx RTQ2OUNDQjRDOTA2Q0I2MEQ2RTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALI4LjVR9FKBippHUAhtlw+btiESwfU6LT03Hl9Gywm7Z0otNnXTs/T1meuy kUoew5d0i7n1LnZuSrbjMXIhLPxlGHDNGJGnRiNsaRTvfVjT8Vn+w/8VVII0Y8iN qBR0amoAg4AEjsVxJVkTw4qPgHNMpjCuvd9B5Lj4Hkw36oDrr6NOo+ksSQJsrLd7 o57RW9D33YiTUOONJo+X7Jfy7KhhCX5qEFAeQDyrUVrPr6FctraW/X3ZyQ/LCTZ8 /5XlEELTVpQPJ80NlWqG827bqCoZlwwa4TidpG3SsqFfXbzZKmzPFKbpb2sH7Xhi mZ/Jc5cmNZMnTzfyAcm5eTIm+aUCAwEAAaOCApowggKWMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFCiSUfDco/9qzhAeRpzLTJBstg1uMB8GA1UdIwQYMBaAFKVu hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTA5NzMyODkxNzc4MzUxMTA0Mi8wLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDk3MzI4OTE3NzgzNTExMDQy LzAvMjg5MjUxRjBEQ0EzRkY2QUNFMTAxRTQ2OUNDQjRDOTA2Q0I2MEQ2RS5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAHKiEgwDQYJKoZIhvcNAQELBQADggEBAInV533E Io9YonckqqksV6FSx3C5aY2IR3LKamMMi9OHLYgfmdbxZipjwS49wAOuT9jhlvFb YO+9BWqv9P4kExVifLQT3a1CMXRh2fZf7dcleLty6hxZbJ531Pj8cozI0Qhne77Y 4RDm4PtyVAOGEfKCfxQenafVOIT71zU0c5WqQR6vlqT8Zc+7QFey9RpR6ZwiywNF 8WPZXDzQYgIjsbPkiCVw8uE3zPX6hNpiSVX1kY3q2PYKX8DkqiB+cjAZOdM9CEL4 ETs1yMa7iA0i17V38FYDsH6XIBfo5diHiZoaqxn5t6h3ybX0aaKAgY1wqjSB2cWo bOkLhb0Zohz/9ww= -----END CERTIFICATE-----Generated at Fri Apr 17 20:26:03 2026 by rpki-client