$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/634581F1B95FBA204B1C8D0271BB81C7A7A08F63.cer File: 634581F1B95FBA204B1C8D0271BB81C7A7A08F63.cer (raw, json) Hash identifier: eos3hvQ8O8EKbVwzA5UOVch3Cqj0IxJYIQcDZ2YEISc= Subject key identifier: 63:45:81:F1:B9:5F:BA:20:4B:1C:8D:02:71:BB:81:C7:A7:A0:8F:63 Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Certificate serial: 39327CE601726260F0FC3DFF93C67C4977EAB9FF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1096632003199041538/0/634581F1B95FBA204B1C8D0271BB81C7A7A08F63.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1096632003199041538/0/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Wed 15 Apr 2026 03:03:27 +0000 Certificate not after: Wed 14 Apr 2027 03:08:27 +0000 Subordinate resources: AS: 55959 IP: 101.251.144.0/20 IP: 103.18.224.0/22 IP: 121.52.224.0/19 IP: 150.242.28.0/22 IP: 2406:c900::/32 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 17:12:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:32:7c:e6:01:72:62:60:f0:fc:3d:ff:93:c6:7c:49:77:ea:b9:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Validity Not Before: Apr 15 03:03:27 2026 GMT Not After : Apr 14 03:08:27 2027 GMT Subject: CN=634581F1B95FBA204B1C8D0271BB81C7A7A08F63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:b6:7d:53:cb:c0:31:2d:a4:90:35:f1:fb:ef: 2d:64:08:ab:f8:c7:e6:5e:d7:06:45:0b:28:fb:04: ce:61:18:71:16:ca:d8:e9:61:a9:ab:8e:e8:7e:2d: e8:80:fe:a9:d9:fe:f6:69:38:37:ea:21:ed:3e:61: 9d:86:29:a1:e4:74:f5:a5:11:1b:cb:9f:da:98:6d: ee:49:82:ed:72:ad:2c:f5:3a:85:1d:b8:f8:be:3a: a9:0e:f5:33:44:3d:86:0e:b0:b1:8d:da:3c:50:33: 7c:32:6f:0f:1f:f8:42:ef:43:40:53:48:cd:4f:fa: 0e:a4:93:6a:94:8c:78:11:8e:e2:ec:e4:1a:4d:78: 14:ed:eb:59:a8:d9:f2:82:07:13:29:cf:5d:17:b8: 4f:d4:36:66:eb:00:6e:26:52:47:1d:4a:f6:e9:eb: 1a:1a:27:c2:73:2a:ca:ea:82:12:18:b7:dc:a3:33: 87:2f:f3:aa:5a:58:b2:36:d8:6f:bd:3b:78:6c:ab: cb:4e:31:f4:a7:e1:2e:2b:f1:22:5e:37:9e:eb:5d: f4:ee:4f:5c:af:ec:c9:d5:80:32:b1:b7:3e:be:be: 84:12:45:43:6b:1d:fd:f8:f2:38:16:b0:a5:31:b8: 32:80:86:77:d5:b4:a3:f3:0a:c1:c9:99:0b:12:74: 82:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 63:45:81:F1:B9:5F:BA:20:4B:1C:8D:02:71:BB:81:C7:A7:A0:8F:63 X509v3 Authority Key Identifier: keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1096632003199041538/0/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1096632003199041538/0/634581F1B95FBA204B1C8D0271BB81C7A7A08F63.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 101.251.144.0/20 103.18.224.0/22 121.52.224.0/19 150.242.28.0/22 IPv6: 2406:c900::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 55959 Signature Algorithm: sha256WithRSAEncryption 42:f7:d4:6c:b9:fd:3a:57:f9:a2:76:f5:ce:75:e3:77:95:ec: 5e:47:04:95:cd:d0:58:0d:08:28:77:a5:06:6e:3a:f9:55:d1: 7b:5a:ff:ff:4a:38:b9:98:7b:a5:a7:df:8e:08:27:86:8b:c2: e4:e7:bb:a2:78:d0:35:ce:84:fa:4f:d9:3a:ad:b7:20:0e:3d: 18:a2:e4:f9:f5:58:db:6f:48:d2:a8:13:cc:6e:04:4e:63:48: a3:0f:ba:83:cd:bc:37:4c:59:2f:00:0a:18:bd:60:d3:23:20: 0a:14:61:c0:ea:d2:d9:98:72:38:43:09:be:ec:e9:33:0b:de: 1b:29:ef:7a:e1:e9:c4:25:9f:19:81:af:72:08:1d:13:1a:0e: 29:73:e5:b5:57:de:66:b8:94:fd:51:55:c7:e2:62:15:02:41: f0:8a:ac:62:bc:2c:c1:b7:cf:ca:f6:7c:76:3e:46:74:ed:05: 70:e6:e2:3a:52:76:45:41:93:47:cb:b2:f1:67:7c:67:bd:04: bc:25:db:11:cf:aa:c3:db:74:85:33:d1:a0:2d:24:8c:83:9a: ac:aa:31:53:ac:41:95:36:8a:45:3d:cb:af:73:9f:a8:55:8c: 8c:44:e9:e1:dd:87:91:10:0e:cf:5c:93:6d:5b:9f:47:66:db: 24:43:51:19 -----BEGIN CERTIFICATE----- MIIF5DCCBMygAwIBAgIUOTJ85gFyYmDw/D3/k8Z8SXfquf8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDQxNTAzMDMyN1oX DTI3MDQxNDAzMDgyN1owMzExMC8GA1UEAxMoNjM0NTgxRjFCOTVGQkEyMDRCMUM4 RDAyNzFCQjgxQzdBN0EwOEY2MzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOG2fVPLwDEtpJA18fvvLWQIq/jH5l7XBkULKPsEzmEYcRbK2OlhqauO6H4t 6ID+qdn+9mk4N+oh7T5hnYYpoeR09aURG8uf2pht7kmC7XKtLPU6hR24+L46qQ71 M0Q9hg6wsY3aPFAzfDJvDx/4Qu9DQFNIzU/6DqSTapSMeBGO4uzkGk14FO3rWajZ 8oIHEynPXRe4T9Q2ZusAbiZSRx1K9unrGhonwnMqyuqCEhi33KMzhy/zqlpYsjbY b707eGyry04x9KfhLivxIl43nutd9O5PXK/sydWAMrG3Pr6+hBJFQ2sd/fjyOBaw pTG4MoCGd9W0o/MKwcmZCxJ0gjkCAwEAAaOCAtcwggLTMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFGNFgfG5X7ogSxyNAnG7gcenoI9jMB8GA1UdIwQYMBaAFKVu hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTA5NjYzMjAwMzE5OTA0MTUzOC8wLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDk2NjMyMDAzMTk5MDQxNTM4 LzAvNjM0NTgxRjFCOTVGQkEyMDRCMUM4RDAyNzFCQjgxQzdBN0EwOEY2My5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwQAYIKwYBBQUH AQcBAf8EMTAvMB4EAgABMBgDBARl+5ADBAJnEuADBAV5NOADBAKW8hwwDQQCAAIw BwMFACQGyQAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDANqXMA0GCSqGSIb3DQEB CwUAA4IBAQBC99Rsuf06V/midvXOdeN3lexeRwSVzdBYDQgod6UGbjr5VdF7Wv// Sji5mHulp9+OCCeGi8Lk57uieNA1zoT6T9k6rbcgDj0YouT59Vjbb0jSqBPMbgRO Y0ijD7qDzbw3TFkvAAoYvWDTIyAKFGHA6tLZmHI4Qwm+7OkzC94bKe964enEJZ8Z ga9yCB0TGg4pc+W1V95muJT9UVXH4mIVAkHwiqxivCzBt8/K9nx2PkZ07QVw5uI6 UnZFQZNHy7LxZ3xnvQS8JdsRz6rD23SFM9GgLSSMg5qsqjFTrEGVNopFPcuvc5+o VYyMROnh3YeREA7PXJNtW59HZtskQ1EZ -----END CERTIFICATE-----Generated at Fri Apr 17 20:16:23 2026 by rpki-client