$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/36A0D10DA513DC7AC8B68A8B94936C33D0F1331D.cer File: 36A0D10DA513DC7AC8B68A8B94936C33D0F1331D.cer (raw, json) Hash identifier: Il49ksO1+3WZaHKORlBK9dvEQhgrvZu2fIfFq+z3X+8= Subject key identifier: 36:A0:D1:0D:A5:13:DC:7A:C8:B6:8A:8B:94:93:6C:33:D0:F1:33:1D Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Certificate serial: 5DC6F350F9B85A42F3A3D294F2D5E1BB69649368 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1097072106652303362/0/36A0D10DA513DC7AC8B68A8B94936C33D0F1331D.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1097072106652303362/0/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Thu 16 Apr 2026 08:07:54 +0000 Certificate not after: Thu 15 Apr 2027 08:12:54 +0000 Subordinate resources: IP: 103.79.136.0/22 IP: 103.215.140.0/22 IP: 157.119.28.0/22 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 17 Apr 2026 17:57:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:c6:f3:50:f9:b8:5a:42:f3:a3:d2:94:f2:d5:e1:bb:69:64:93:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Validity Not Before: Apr 16 08:07:54 2026 GMT Not After : Apr 15 08:12:54 2027 GMT Subject: CN=36A0D10DA513DC7AC8B68A8B94936C33D0F1331D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:4e:a1:54:e5:8e:ac:1b:68:6a:c1:7a:81:43: 7d:e2:eb:99:dd:e9:4f:c1:4e:f9:18:0f:bd:31:b1: a0:5a:2f:23:8d:38:7a:dd:ac:3c:44:86:d8:22:66: 09:78:d3:b5:16:ec:19:04:3b:73:55:72:6d:47:4b: 14:a1:aa:5e:d2:2d:2f:9d:85:12:f4:7e:bd:c2:68: 47:8c:f8:97:5a:36:29:8e:ec:c1:50:a7:ce:93:85: 99:d2:f3:b1:d7:25:50:89:c1:65:18:ac:12:7d:2f: e3:4f:df:7d:53:25:94:5f:ce:02:bc:08:41:60:5b: 15:8b:df:43:e3:a0:32:1c:e0:31:81:ce:2d:c2:0b: 00:8f:8e:49:af:46:77:50:06:bf:43:0f:65:54:0a: a4:5d:16:04:34:27:2a:63:98:2d:c0:36:84:49:0b: 1c:eb:44:b3:99:a7:03:c1:c8:f8:bf:36:71:ef:f2: 6a:35:e3:64:a1:7b:f3:8d:4c:1b:50:a7:31:c1:61: fd:0b:74:61:12:69:02:eb:3c:b1:d9:f2:5b:79:df: 59:60:75:8c:7f:ee:d7:27:be:fb:6b:ec:67:00:86: 9f:d4:e6:fa:bf:cd:e2:54:2c:5f:2b:a4:39:f7:94: 6c:c2:5d:8e:86:54:79:bb:f8:ca:b4:72:1a:ea:2e: 63:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 36:A0:D1:0D:A5:13:DC:7A:C8:B6:8A:8B:94:93:6C:33:D0:F1:33:1D X509v3 Authority Key Identifier: keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1097072106652303362/0/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1097072106652303362/0/36A0D10DA513DC7AC8B68A8B94936C33D0F1331D.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.79.136.0/22 103.215.140.0/22 157.119.28.0/22 Signature Algorithm: sha256WithRSAEncryption 13:57:b5:b4:9a:9a:96:86:1e:70:bc:22:9c:c1:e2:33:e6:43: 6c:52:44:58:23:15:c7:b5:4c:7b:11:01:12:25:b5:62:3d:a6: c7:75:01:b8:69:5b:07:90:41:a7:cd:b3:a3:8f:49:b4:9a:8a: b3:53:f0:e2:bc:c8:70:10:5c:14:dd:84:3a:d8:7a:39:ef:4f: 32:86:7d:78:e2:e1:17:50:31:88:9e:1c:5f:85:6a:1d:d4:83: 26:e7:a5:d8:61:67:1e:cb:ab:7c:45:e9:a3:30:3a:ff:ff:6a: e2:b6:89:7d:4c:d5:78:8b:63:d6:72:3d:b5:22:54:1c:c2:e3: 7a:e4:75:7d:e7:ad:02:41:63:28:8f:2e:6c:38:50:e8:82:17: dd:07:b5:53:e9:66:31:49:5f:2b:87:fe:1b:1b:ff:5c:90:ec: 24:7f:b9:53:5d:b7:03:1a:ef:7a:74:8c:de:62:9e:42:07:f7: 89:05:50:94:25:3d:5c:d7:bc:e3:f9:a9:1d:8b:98:b5:0f:44: 86:ca:a5:50:3b:1a:7b:18:96:a6:bf:a6:8e:7a:33:e3:8f:02: 94:c7:b9:3d:45:16:f5:52:52:84:b8:02:d5:4d:07:1d:7e:6a: fc:4e:a8:e1:8c:40:63:96:31:05:13:a8:37:5a:e0:31:18:16: d5:3e:9a:9a -----BEGIN CERTIFICATE----- MIIFszCCBJugAwIBAgIUXcbzUPm4WkLzo9KU8tXhu2lkk2gwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDQxNjA4MDc1NFoX DTI3MDQxNTA4MTI1NFowMzExMC8GA1UEAxMoMzZBMEQxMERBNTEzREM3QUM4QjY4 QThCOTQ5MzZDMzNEMEYxMzMxRDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJhOoVTljqwbaGrBeoFDfeLrmd3pT8FO+RgPvTGxoFovI404et2sPESG2CJm CXjTtRbsGQQ7c1VybUdLFKGqXtItL52FEvR+vcJoR4z4l1o2KY7swVCnzpOFmdLz sdclUInBZRisEn0v40/ffVMllF/OArwIQWBbFYvfQ+OgMhzgMYHOLcILAI+OSa9G d1AGv0MPZVQKpF0WBDQnKmOYLcA2hEkLHOtEs5mnA8HI+L82ce/yajXjZKF7841M G1CnMcFh/Qt0YRJpAus8sdnyW3nfWWB1jH/u1ye++2vsZwCGn9Tm+r/N4lQsXyuk OfeUbMJdjoZUebv4yrRyGuouY0UCAwEAAaOCAqYwggKiMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFDag0Q2lE9x6yLaKi5STbDPQ8TMdMB8GA1UdIwQYMBaAFKVu hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTA5NzA3MjEwNjY1MjMwMzM2Mi8wLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDk3MDcyMTA2NjUyMzAzMzYy LzAvMzZBMEQxMERBNTEzREM3QUM4QjY4QThCOTQ5MzZDMzNEMEYxMzMxRC5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwKwYIKwYBBQUH AQcBAf8EHDAaMBgEAgABMBIDBAJnT4gDBAJn14wDBAKddxwwDQYJKoZIhvcNAQEL BQADggEBABNXtbSampaGHnC8IpzB4jPmQ2xSRFgjFce1THsRARIltWI9psd1Abhp WweQQafNs6OPSbSairNT8OK8yHAQXBTdhDrYejnvTzKGfXji4RdQMYieHF+Fah3U gybnpdhhZx7Lq3xF6aMwOv//auK2iX1M1XiLY9ZyPbUiVBzC43rkdX3nrQJBYyiP Lmw4UOiCF90HtVPpZjFJXyuH/hsb/1yQ7CR/uVNdtwMa73p0jN5inkIH94kFUJQl PVzXvOP5qR2LmLUPRIbKpVA7GnsYlqa/po56M+OPApTHuT1FFvVSUoS4AtVNBx1+ avxOqOGMQGOWMQUTqDda4DEYFtU+mpo= -----END CERTIFICATE-----Generated at Thu Apr 16 23:54:04 2026 by rpki-client