$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/429F1E5B18A7A7C936E7F2A5D6F48F41416C61CE.cer File: 429F1E5B18A7A7C936E7F2A5D6F48F41416C61CE.cer (raw, json) Hash identifier: Yt+fTLA52R7wb5938VAAU9tvch6yh2+phWKxpLXKp/E= Subject key identifier: 42:9F:1E:5B:18:A7:A7:C9:36:E7:F2:A5:D6:F4:8F:41:41:6C:61:CE Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Certificate serial: 74BD63DD4BFEE8BEA06D802724CF08893282510B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1097062473040723971/0/429F1E5B18A7A7C936E7F2A5D6F48F41416C61CE.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1097062473040723971/0/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Thu 16 Apr 2026 07:31:52 +0000 Certificate not after: Thu 15 Apr 2027 07:36:52 +0000 Subordinate resources: AS: 58828 IP: 2407:2840::/32 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 17 Apr 2026 17:57:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:bd:63:dd:4b:fe:e8:be:a0:6d:80:27:24:cf:08:89:32:82:51:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Validity Not Before: Apr 16 07:31:52 2026 GMT Not After : Apr 15 07:36:52 2027 GMT Subject: CN=429F1E5B18A7A7C936E7F2A5D6F48F41416C61CE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:8b:13:75:6a:ab:0f:55:99:09:1f:4a:50:25: 9d:30:a5:75:81:5d:7e:79:ba:48:ec:e4:4f:18:8f: 8a:cc:86:46:a3:41:59:87:3e:74:0b:de:c9:98:7c: 96:63:42:82:43:5e:34:a1:04:ce:95:4f:ad:da:c6: e6:e0:05:c6:6a:13:ce:29:e2:39:c3:71:49:d2:d4: 04:31:82:be:fa:d7:35:23:ae:ad:f0:fc:65:50:54: e4:0e:6c:0d:66:b7:76:14:12:f4:47:22:5f:95:fd: 30:69:84:30:2e:c9:e0:19:42:70:59:13:a4:ff:3e: 90:70:27:06:4d:da:02:48:29:54:f8:78:0f:5d:95: 57:f4:46:c5:d6:80:70:6d:e2:11:b5:ae:f8:b1:c9: 2e:cc:7c:18:64:58:05:84:36:6c:2a:ba:bb:27:48: 2b:57:77:8a:73:df:63:b8:f1:fe:5f:ee:f0:85:ef: f8:92:3d:f1:52:5b:74:49:88:43:ca:1a:94:7a:7c: 34:46:0c:7b:5b:da:c5:65:5a:b3:dd:8a:d4:05:38: 45:ea:73:2a:3d:b3:57:6a:c6:2c:b8:14:cb:70:c6: 99:e8:03:d5:39:f2:14:56:d6:91:18:87:7e:3e:70: 91:4b:28:e8:fe:8e:8c:c2:0c:11:be:54:95:a0:8b: 23:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 42:9F:1E:5B:18:A7:A7:C9:36:E7:F2:A5:D6:F4:8F:41:41:6C:61:CE X509v3 Authority Key Identifier: keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1097062473040723971/0/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1097062473040723971/0/429F1E5B18A7A7C936E7F2A5D6F48F41416C61CE.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2407:2840::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 58828 Signature Algorithm: sha256WithRSAEncryption 4b:01:69:f2:c4:3f:4b:a4:5a:06:23:d3:24:01:1f:9e:1f:91: 53:7f:e5:56:66:c0:f3:1c:20:55:00:b3:ee:1f:a4:18:a9:f1: a2:5b:83:c8:c9:d9:4a:e7:86:70:82:2e:cb:9e:1f:7f:96:25: 20:93:fb:d5:4c:f6:49:63:da:7d:5a:1e:8f:7c:91:00:e0:f4: f7:1d:e1:de:81:04:34:30:5d:54:59:5e:e9:a7:97:7c:a4:ec: 98:02:ce:ab:ec:45:a4:11:1b:d1:26:54:cf:0c:06:35:f1:bc: c7:d0:ba:b4:71:d6:ff:d0:75:33:3d:cc:f6:24:92:5b:62:90: db:dd:69:29:07:6a:cd:39:08:95:20:e1:b2:41:f5:11:09:4b: 2d:e4:96:e7:18:f5:90:67:24:f6:cc:48:8f:ca:d9:15:d5:8c: 34:1f:0a:cc:2a:a0:a4:a7:ef:84:95:c9:89:c7:72:b2:21:79: f7:59:99:fd:87:84:4d:aa:4b:02:60:ba:13:ff:86:fd:09:6e: f9:43:87:e0:b1:ea:55:73:e0:3a:c2:d9:73:9b:b5:80:21:12: 96:26:df:61:e6:84:45:88:ba:ef:2e:72:2c:86:3d:74:80:c4: 3e:d2:49:be:3e:81:e5:94:fc:90:e2:6f:f6:85:f2:b7:25:00: a2:8c:31:4b -----BEGIN CERTIFICATE----- MIIFxDCCBKygAwIBAgIUdL1j3Uv+6L6gbYAnJM8IiTKCUQswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDQxNjA3MzE1MloX DTI3MDQxNTA3MzY1MlowMzExMC8GA1UEAxMoNDI5RjFFNUIxOEE3QTdDOTM2RTdG MkE1RDZGNDhGNDE0MTZDNjFDRTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKKLE3Vqqw9VmQkfSlAlnTCldYFdfnm6SOzkTxiPisyGRqNBWYc+dAveyZh8 lmNCgkNeNKEEzpVPrdrG5uAFxmoTziniOcNxSdLUBDGCvvrXNSOurfD8ZVBU5A5s DWa3dhQS9EciX5X9MGmEMC7J4BlCcFkTpP8+kHAnBk3aAkgpVPh4D12VV/RGxdaA cG3iEbWu+LHJLsx8GGRYBYQ2bCq6uydIK1d3inPfY7jx/l/u8IXv+JI98VJbdEmI Q8oalHp8NEYMe1vaxWVas92K1AU4RepzKj2zV2rGLLgUy3DGmegD1TnyFFbWkRiH fj5wkUso6P6OjMIMEb5UlaCLIzMCAwEAAaOCArcwggKzMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFEKfHlsYp6fJNufypdb0j0FBbGHOMB8GA1UdIwQYMBaAFKVu hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTA5NzA2MjQ3MzA0MDcyMzk3MS8wLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDk3MDYyNDczMDQwNzIzOTcx LzAvNDI5RjFFNUIxOEE3QTdDOTM2RTdGMkE1RDZGNDhGNDE0MTZDNjFDRS5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUH AQcBAf8EETAPMA0EAgACMAcDBQAkByhAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwDlzDANBgkqhkiG9w0BAQsFAAOCAQEASwFp8sQ/S6RaBiPTJAEfnh+RU3/lVmbA 8xwgVQCz7h+kGKnxoluDyMnZSueGcIIuy54ff5YlIJP71Uz2SWPafVoej3yRAOD0 9x3h3oEENDBdVFle6aeXfKTsmALOq+xFpBEb0SZUzwwGNfG8x9C6tHHW/9B1Mz3M 9iSSW2KQ291pKQdqzTkIlSDhskH1EQlLLeSW5xj1kGck9sxIj8rZFdWMNB8KzCqg pKfvhJXJicdysiF591mZ/YeETapLAmC6E/+G/Qlu+UOH4LHqVXPgOsLZc5u1gCES libfYeaERYi67y5yLIY9dIDEPtJJvj6B5ZT8kOJv9oXytyUAoowxSw== -----END CERTIFICATE-----Generated at Thu Apr 16 23:53:54 2026 by rpki-client