$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/40ABF413CD330E0A4D2BAE8F1E66AF8BFCB73D71.cer File: 40ABF413CD330E0A4D2BAE8F1E66AF8BFCB73D71.cer (raw, json) Hash identifier: H+0taw01HxncJYxp/dyo5hDDU2pzAuxBmjhWHSwEXxQ= Subject key identifier: 40:AB:F4:13:CD:33:0E:0A:4D:2B:AE:8F:1E:66:AF:8B:FC:B7:3D:71 Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Certificate serial: 578E8F32ADEDE281C28C9758D7CFB58784541CFE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1096962404895424515/0/40ABF413CD330E0A4D2BAE8F1E66AF8BFCB73D71.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1096962404895424515/0/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Thu 16 Apr 2026 00:51:59 +0000 Certificate not after: Thu 15 Apr 2027 00:56:59 +0000 Subordinate resources: IP: 45.252.0.0/22 IP: 103.220.240.0/22 IP: 2405:9780::/32 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 17 Apr 2026 17:57:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:8e:8f:32:ad:ed:e2:81:c2:8c:97:58:d7:cf:b5:87:84:54:1c:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Validity Not Before: Apr 16 00:51:59 2026 GMT Not After : Apr 15 00:56:59 2027 GMT Subject: CN=40ABF413CD330E0A4D2BAE8F1E66AF8BFCB73D71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:76:df:25:f2:2f:48:60:c1:b5:10:98:81:e9: 0b:31:87:a9:eb:88:48:7d:84:cf:a8:4a:2c:80:a4: 11:ba:0a:0c:2c:42:29:14:0b:4b:27:2b:75:30:ba: 1b:85:ed:20:fe:95:f3:71:db:66:cf:5d:ff:18:2c: fe:10:92:64:08:5f:6a:a7:14:3f:c9:09:d4:91:ff: 34:5f:48:4b:f5:73:fa:4c:ce:1f:c9:fe:3e:14:c7: f0:cf:9d:29:4f:5c:3e:27:c4:07:e7:72:68:34:48: 1f:19:6a:18:01:08:05:d0:80:88:1f:dc:f7:cf:ab: b2:bf:37:66:f7:aa:93:a5:ed:1c:be:2a:34:2d:e1: ea:b5:88:49:23:75:9b:d3:8a:d2:42:14:55:b4:86: 4c:15:93:b3:8a:17:81:45:ba:66:a0:47:9e:49:2d: 24:72:cc:93:77:42:d8:d9:a5:f2:99:c5:78:92:6d: 4f:9a:db:db:10:fe:3a:cf:11:46:f6:30:b2:a2:25: f5:40:02:6f:19:74:b3:4a:60:fe:bb:d0:d6:da:44: 9b:2a:d8:12:9d:07:78:01:45:d6:06:f6:46:aa:68: 93:be:eb:93:25:cd:7e:a4:3b:db:5a:29:15:1b:3f: 4c:fc:c9:d2:54:1a:17:3c:fa:d6:f2:c1:fb:ef:73: ec:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 40:AB:F4:13:CD:33:0E:0A:4D:2B:AE:8F:1E:66:AF:8B:FC:B7:3D:71 X509v3 Authority Key Identifier: keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1096962404895424515/0/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1096962404895424515/0/40ABF413CD330E0A4D2BAE8F1E66AF8BFCB73D71.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.252.0.0/22 103.220.240.0/22 IPv6: 2405:9780::/32 Signature Algorithm: sha256WithRSAEncryption 2c:7e:f5:80:fe:57:ae:35:c5:84:96:bd:40:be:f6:a3:99:13: e5:c0:a3:88:e8:ae:6d:78:79:89:80:c7:74:70:86:4a:67:be: bd:c3:31:7a:64:f9:0b:38:7e:6a:a0:8d:26:f0:37:0b:9e:44: 82:bf:55:2f:5b:5f:7b:2e:a7:c7:09:7c:9c:51:bb:9f:e1:d6: dd:69:2e:cd:4c:da:eb:8e:80:0c:21:c7:33:a0:d5:2c:f7:5b: 3f:50:ee:e5:28:ee:8e:35:76:53:d4:99:a9:5a:48:da:cf:fa: 13:32:5d:e6:6c:a6:f9:b7:44:b5:b2:f5:36:93:27:5b:e7:9b: b4:16:09:4c:fb:ae:21:93:09:13:3c:92:c6:ba:f0:29:0f:80: 6a:a8:72:c1:6e:73:a4:49:48:62:00:13:12:99:84:88:94:22: 65:e2:21:15:be:5a:04:45:28:5b:91:d1:f0:bd:b8:0b:05:2a: 8c:8d:a3:cc:45:62:94:07:ce:c1:66:57:5c:a9:29:65:25:2d: c6:8d:2c:f1:55:9a:3c:02:06:80:20:b4:90:f4:f9:62:a1:e6: 9d:90:6b:80:2c:20:e9:6e:49:0c:04:f6:0d:b8:eb:30:c1:73: bb:6a:49:2c:d0:f3:d6:e1:49:41:89:fa:86:0b:c4:c3:22:74: f2:4f:c4:41 -----BEGIN CERTIFICATE----- MIIFvDCCBKSgAwIBAgIUV46PMq3t4oHCjJdY18+1h4RUHP4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDQxNjAwNTE1OVoX DTI3MDQxNTAwNTY1OVowMzExMC8GA1UEAxMoNDBBQkY0MTNDRDMzMEUwQTREMkJB RThGMUU2NkFGOEJGQ0I3M0Q3MTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALJ23yXyL0hgwbUQmIHpCzGHqeuISH2Ez6hKLICkEboKDCxCKRQLSycrdTC6 G4XtIP6V83HbZs9d/xgs/hCSZAhfaqcUP8kJ1JH/NF9IS/Vz+kzOH8n+PhTH8M+d KU9cPifEB+dyaDRIHxlqGAEIBdCAiB/c98+rsr83Zveqk6XtHL4qNC3h6rWISSN1 m9OK0kIUVbSGTBWTs4oXgUW6ZqBHnkktJHLMk3dC2Nml8pnFeJJtT5rb2xD+Os8R RvYwsqIl9UACbxl0s0pg/rvQ1tpEmyrYEp0HeAFF1gb2Rqpok77rkyXNfqQ721op FRs/TPzJ0lQaFzz61vLB++9z7LcCAwEAAaOCAq8wggKrMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFECr9BPNMw4KTSuujx5mr4v8tz1xMB8GA1UdIwQYMBaAFKVu hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTA5Njk2MjQwNDg5NTQyNDUxNS8wLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDk2OTYyNDA0ODk1NDI0NTE1 LzAvNDBBQkY0MTNDRDMzMEUwQTREMkJBRThGMUU2NkFGOEJGQ0I3M0Q3MS5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwNAYIKwYBBQUH AQcBAf8EJTAjMBIEAgABMAwDBAIt/AADBAJn3PAwDQQCAAIwBwMFACQFl4AwDQYJ KoZIhvcNAQELBQADggEBACx+9YD+V641xYSWvUC+9qOZE+XAo4jorm14eYmAx3Rw hkpnvr3DMXpk+Qs4fmqgjSbwNwueRIK/VS9bX3sup8cJfJxRu5/h1t1pLs1M2uuO gAwhxzOg1Sz3Wz9Q7uUo7o41dlPUmalaSNrP+hMyXeZspvm3RLWy9TaTJ1vnm7QW CUz7riGTCRM8ksa68CkPgGqocsFuc6RJSGIAExKZhIiUImXiIRW+WgRFKFuR0fC9 uAsFKoyNo8xFYpQHzsFmV1ypKWUlLcaNLPFVmjwCBoAgtJD0+WKh5p2Qa4AsIOlu SQwE9g246zDBc7tqSSzQ89bhSUGJ+oYLxMMidPJPxEE= -----END CERTIFICATE-----Generated at Thu Apr 16 23:52:27 2026 by rpki-client