$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5CFD6F5150236B766305D5CD47F180D751FBED31.cer File: 5CFD6F5150236B766305D5CD47F180D751FBED31.cer (raw, json) Hash identifier: fzldsBXwPvlY+T034j40KLlZP0n9KtF21Wtfs3NNFGU= Subject key identifier: 5C:FD:6F:51:50:23:6B:76:63:05:D5:CD:47:F1:80:D7:51:FB:ED:31 Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Certificate serial: 490D85836FBDEB85A5AD38211903945BC518A063 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1097423735075373059/0/5CFD6F5150236B766305D5CD47F180D751FBED31.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1097423735075373059/0/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Fri 17 Apr 2026 07:25:08 +0000 Certificate not after: Fri 16 Apr 2027 07:30:08 +0000 Subordinate resources: IP: 163.61.178.0/23 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 17:12:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:0d:85:83:6f:bd:eb:85:a5:ad:38:21:19:03:94:5b:c5:18:a0:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Validity Not Before: Apr 17 07:25:08 2026 GMT Not After : Apr 16 07:30:08 2027 GMT Subject: CN=5CFD6F5150236B766305D5CD47F180D751FBED31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:d9:d8:fe:53:02:d9:4a:bd:db:75:4d:5a:35: 0c:d6:2f:f8:f3:83:fb:34:48:ec:20:bd:27:32:55: 10:f7:d5:13:fd:5a:cd:c6:7d:e8:ed:c9:ac:3e:ca: 1d:03:6f:c0:bf:76:3c:69:8e:63:4f:54:f9:f3:e5: 13:2d:24:bc:36:71:86:b5:3c:de:ad:7a:5c:f3:e8: 17:fe:86:16:81:5b:ac:3d:70:a0:3b:85:33:3e:d1: 40:ff:65:21:28:8e:98:74:19:b9:02:e7:62:52:4e: 77:f1:a1:3a:74:99:ed:83:51:70:ae:9a:f9:fa:31: 71:19:ea:26:b2:1d:37:ba:81:94:77:83:d0:09:33: d8:8a:e8:57:00:8e:2e:91:fe:d9:32:4d:be:54:0b: f0:de:3c:29:20:b9:d9:6f:71:c3:a0:0f:ce:93:5a: 5d:0f:71:89:a9:0c:80:8b:9b:16:33:85:17:6a:7d: b5:81:f1:7a:8f:01:00:d2:d1:46:e8:0c:b8:a7:0b: 46:d5:cc:2d:68:52:01:2a:59:8e:66:74:99:79:a7: cb:cc:53:56:bf:41:1a:4d:33:c5:e5:39:2f:d0:1e: 2b:4d:7e:dc:d0:73:f4:b3:d3:20:04:c2:65:39:ee: 22:98:b7:30:fd:b4:f0:0d:f0:75:ec:6b:3e:34:59: 34:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 5C:FD:6F:51:50:23:6B:76:63:05:D5:CD:47:F1:80:D7:51:FB:ED:31 X509v3 Authority Key Identifier: keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1097423735075373059/0/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1097423735075373059/0/5CFD6F5150236B766305D5CD47F180D751FBED31.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 163.61.178.0/23 Signature Algorithm: sha256WithRSAEncryption 82:4e:19:49:0a:3a:26:44:08:2f:c3:74:af:a8:d6:eb:9b:50: 86:5e:9a:9e:11:d9:e2:f7:1b:e6:f9:7c:17:2f:b7:8b:d8:4d: b8:70:09:8a:a7:f0:35:1c:0b:be:8e:2c:1d:fb:00:5f:2d:91: 20:0e:8b:15:60:96:71:f8:ad:fe:ea:ec:90:43:43:b9:87:e7: 36:37:cf:32:11:a3:26:89:d0:54:97:00:20:29:40:00:c1:4f: 09:9a:b7:c5:ba:54:0a:87:02:18:e2:2b:0d:fb:ab:03:52:d7: b4:35:87:85:f0:a6:88:dc:a3:5a:da:40:c6:7e:35:39:74:2c: ff:85:9c:f1:7a:9e:61:d7:8a:ab:60:6f:5f:97:74:80:64:ba: 57:fb:46:5a:a0:ea:46:30:d2:79:ee:a2:b8:a1:e0:95:19:4f: 9d:4f:8e:d0:92:20:1a:f0:7e:8e:da:9e:0a:24:b6:37:ca:94: d5:2f:f4:5a:29:87:e2:7e:27:e5:7e:9c:1a:e1:f4:9f:bf:9b: 00:ec:b2:43:11:1b:ba:c9:55:2c:fc:46:f5:ef:f9:62:31:b3: 21:7f:b2:d4:90:74:12:9d:8b:60:fa:20:5e:a6:d5:10:6c:ed: f6:4f:79:17:5d:a4:6b:7e:b3:a4:6e:04:86:32:46:67:56:95: 44:f4:c2:e8 -----BEGIN CERTIFICATE----- MIIFpzCCBI+gAwIBAgIUSQ2Fg2+964WlrTghGQOUW8UYoGMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDQxNzA3MjUwOFoX DTI3MDQxNjA3MzAwOFowMzExMC8GA1UEAxMoNUNGRDZGNTE1MDIzNkI3NjYzMDVE NUNENDdGMTgwRDc1MUZCRUQzMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANvZ2P5TAtlKvdt1TVo1DNYv+POD+zRI7CC9JzJVEPfVE/1azcZ96O3JrD7K HQNvwL92PGmOY09U+fPlEy0kvDZxhrU83q16XPPoF/6GFoFbrD1woDuFMz7RQP9l ISiOmHQZuQLnYlJOd/GhOnSZ7YNRcK6a+foxcRnqJrIdN7qBlHeD0Akz2IroVwCO LpH+2TJNvlQL8N48KSC52W9xw6APzpNaXQ9xiakMgIubFjOFF2p9tYHxeo8BANLR RugMuKcLRtXMLWhSASpZjmZ0mXmny8xTVr9BGk0zxeU5L9AeK01+3NBz9LPTIATC ZTnuIpi3MP208A3wdexrPjRZNIUCAwEAAaOCApowggKWMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFFz9b1FQI2t2YwXVzUfxgNdR++0xMB8GA1UdIwQYMBaAFKVu hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTA5NzQyMzczNTA3NTM3MzA1OS8wLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDk3NDIzNzM1MDc1MzczMDU5 LzAvNUNGRDZGNTE1MDIzNkI3NjYzMDVENUNENDdGMTgwRDc1MUZCRUQzMS5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAGjPbIwDQYJKoZIhvcNAQELBQADggEBAIJOGUkK OiZECC/DdK+o1uubUIZemp4R2eL3G+b5fBcvt4vYTbhwCYqn8DUcC76OLB37AF8t kSAOixVglnH4rf7q7JBDQ7mH5zY3zzIRoyaJ0FSXACApQADBTwmat8W6VAqHAhji Kw37qwNS17Q1h4Xwpojco1raQMZ+NTl0LP+FnPF6nmHXiqtgb1+XdIBkulf7Rlqg 6kYw0nnuorih4JUZT51PjtCSIBrwfo7angoktjfKlNUv9Foph+J+J+V+nBrh9J+/ mwDsskMRG7rJVSz8RvXv+WIxsyF/stSQdBKdi2D6IF6m1RBs7fZPeRddpGt+s6Ru BIYyRmdWlUT0wug= -----END CERTIFICATE-----Generated at Sat Apr 18 01:21:29 2026 by rpki-client