$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3518C1E70B30D501EC0803B85E52F5905EE82052.cer File: 3518C1E70B30D501EC0803B85E52F5905EE82052.cer (raw, json) Hash identifier: banHTzyRnHbfKM0linJBikfmlMtgGOgRY1edjqkLxRo= Subject key identifier: 35:18:C1:E7:0B:30:D5:01:EC:08:03:B8:5E:52:F5:90:5E:E8:20:52 Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Certificate serial: 38738482913A5924E66EA46101E7A595A9957C09 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1095958018182348801/0/3518C1E70B30D501EC0803B85E52F5905EE82052.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1095958018182348801/0/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Mon 13 Apr 2026 06:20:55 +0000 Certificate not after: Mon 12 Apr 2027 06:25:55 +0000 Subordinate resources: IP: 103.49.176.0/22 IP: 103.131.152.0/22 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 17:12:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:73:84:82:91:3a:59:24:e6:6e:a4:61:01:e7:a5:95:a9:95:7c:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Validity Not Before: Apr 13 06:20:55 2026 GMT Not After : Apr 12 06:25:55 2027 GMT Subject: CN=3518C1E70B30D501EC0803B85E52F5905EE82052 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:cd:60:4f:a5:31:74:d4:50:38:5f:d5:4c:ea: 42:de:c0:80:cb:94:3d:04:53:d3:72:58:03:0a:60: 42:28:83:7d:50:cf:f7:ff:4c:15:17:2a:2e:2c:91: f2:98:5a:6b:75:1d:7f:b6:06:27:25:1d:79:ef:b3: 63:04:ab:27:83:ab:4e:4b:3f:a4:77:b2:2a:c3:77: cd:d9:1a:7c:b1:6f:14:19:fa:47:02:0e:ba:51:59: 69:75:57:a8:a1:dd:47:3b:36:da:fe:d6:bd:72:31: 54:bc:25:21:63:1c:35:42:7f:d9:94:7b:ea:eb:13: 14:3b:21:43:29:70:a5:e6:2d:54:12:65:97:cb:02: 23:d4:b9:51:92:d9:22:1c:49:43:d9:91:ac:d7:08: 2d:2f:d5:1d:d5:f5:f8:72:5d:59:de:d4:01:92:d8: d4:95:fd:c1:bb:04:38:00:fc:d7:04:da:d3:aa:ca: fe:fb:5d:fe:53:ec:f0:75:ee:4a:bb:20:a5:8d:ab: ca:19:47:86:c1:cd:44:f9:62:58:e9:64:99:d3:92: 42:95:60:fe:eb:b9:8f:14:2a:54:2b:99:a8:ec:f2: 01:3b:6a:e3:f9:c5:ca:61:8b:63:7e:79:20:bc:fc: be:80:2d:10:b4:39:9a:42:e4:48:e6:b4:fb:6d:34: 12:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 35:18:C1:E7:0B:30:D5:01:EC:08:03:B8:5E:52:F5:90:5E:E8:20:52 X509v3 Authority Key Identifier: keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1095958018182348801/0/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1095958018182348801/0/3518C1E70B30D501EC0803B85E52F5905EE82052.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.49.176.0/22 103.131.152.0/22 Signature Algorithm: sha256WithRSAEncryption 37:6d:ad:d1:d1:33:0c:04:8d:fa:35:c3:35:05:7e:e1:89:bd: 4e:ff:9f:94:da:8f:e8:fc:8c:ad:93:54:8f:51:22:99:c0:50: dd:a7:a1:64:e7:45:24:78:54:ab:ca:7a:1f:22:7a:a9:1a:cf: 90:54:04:19:84:73:30:f6:da:70:e5:e9:d9:56:6e:fd:95:9b: 98:8c:c9:3d:7c:15:48:27:a7:89:0b:4d:51:67:61:5d:b8:a2: e0:39:55:31:5b:6a:cd:ce:ec:cf:89:20:89:27:29:bc:63:d9: 54:1f:f5:f9:04:cc:da:74:6c:c9:1b:ac:4e:bc:a4:3a:bc:3c: 54:e8:1b:19:f3:85:bb:7c:b6:d9:6e:c6:7d:5a:91:e4:7e:fe: 82:1d:80:d9:a4:2a:6f:33:3a:79:d4:ea:0a:56:2e:c2:2f:b7: a4:04:26:53:91:63:1c:15:38:53:a8:50:e3:30:22:da:72:c9: 01:a1:f9:54:6b:69:c2:8c:bf:f1:db:b7:0a:f6:98:3e:fc:d7: b3:ae:6e:7f:4e:e5:cf:84:e1:13:cf:25:6d:13:6b:a1:a9:d2: dd:9c:ca:a8:54:a1:5e:99:8d:36:c3:24:87:b7:73:a6:1c:09: 1d:1d:66:03:85:f0:71:14:1a:0c:d8:95:a3:db:3d:c3:58:6e: 2f:33:9f:bc -----BEGIN CERTIFICATE----- MIIFrTCCBJWgAwIBAgIUOHOEgpE6WSTmbqRhAeellamVfAkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDQxMzA2MjA1NVoX DTI3MDQxMjA2MjU1NVowMzExMC8GA1UEAxMoMzUxOEMxRTcwQjMwRDUwMUVDMDgw M0I4NUU1MkY1OTA1RUU4MjA1MjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAM/NYE+lMXTUUDhf1UzqQt7AgMuUPQRT03JYAwpgQiiDfVDP9/9MFRcqLiyR 8phaa3Udf7YGJyUdee+zYwSrJ4OrTks/pHeyKsN3zdkafLFvFBn6RwIOulFZaXVX qKHdRzs22v7WvXIxVLwlIWMcNUJ/2ZR76usTFDshQylwpeYtVBJll8sCI9S5UZLZ IhxJQ9mRrNcILS/VHdX1+HJdWd7UAZLY1JX9wbsEOAD81wTa06rK/vtd/lPs8HXu SrsgpY2ryhlHhsHNRPliWOlkmdOSQpVg/uu5jxQqVCuZqOzyATtq4/nFymGLY355 ILz8voAtELQ5mkLkSOa0+200EiMCAwEAAaOCAqAwggKcMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFDUYwecLMNUB7AgDuF5S9ZBe6CBSMB8GA1UdIwQYMBaAFKVu hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTA5NTk1ODAxODE4MjM0ODgwMS8wLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDk1OTU4MDE4MTgyMzQ4ODAx LzAvMzUxOEMxRTcwQjMwRDUwMUVDMDgwM0I4NUU1MkY1OTA1RUU4MjA1Mi5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwJQYIKwYBBQUH AQcBAf8EFjAUMBIEAgABMAwDBAJnMbADBAJng5gwDQYJKoZIhvcNAQELBQADggEB ADdtrdHRMwwEjfo1wzUFfuGJvU7/n5Taj+j8jK2TVI9RIpnAUN2noWTnRSR4VKvK eh8ieqkaz5BUBBmEczD22nDl6dlWbv2Vm5iMyT18FUgnp4kLTVFnYV24ouA5VTFb as3O7M+JIIknKbxj2VQf9fkEzNp0bMkbrE68pDq8PFToGxnzhbt8ttluxn1akeR+ /oIdgNmkKm8zOnnU6gpWLsIvt6QEJlORYxwVOFOoUOMwItpyyQGh+VRracKMv/Hb twr2mD7817Oubn9O5c+E4RPPJW0Ta6Gp0t2cyqhUoV6ZjTbDJIe3c6YcCR0dZgOF 8HEUGgzYlaPbPcNYbi8zn7w= -----END CERTIFICATE-----Generated at Fri Apr 17 19:42:44 2026 by rpki-client