$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/64CE724CC33744853B20D6E7922A2F808B8C300C.cer File: 64CE724CC33744853B20D6E7922A2F808B8C300C.cer (raw, json) Hash identifier: MniFVrRmP4Z6WMJ3yF82OOSyEnD/mh6lGiGuKONAx5o= Subject key identifier: 64:CE:72:4C:C3:37:44:85:3B:20:D6:E7:92:2A:2F:80:8B:8C:30:0C Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Certificate serial: 3A32D63266853D110776E950D5516276DB58B652 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1096989114063912963/0/64CE724CC33744853B20D6E7922A2F808B8C300C.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1096989114063912963/0/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Thu 16 Apr 2026 02:38:08 +0000 Certificate not after: Thu 15 Apr 2027 02:43:08 +0000 Subordinate resources: AS: 55982 IP: 103.245.128.0/22 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 17:12:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:32:d6:32:66:85:3d:11:07:76:e9:50:d5:51:62:76:db:58:b6:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Validity Not Before: Apr 16 02:38:08 2026 GMT Not After : Apr 15 02:43:08 2027 GMT Subject: CN=64CE724CC33744853B20D6E7922A2F808B8C300C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:a7:29:e4:50:16:fe:da:fc:5a:f1:a4:a3:00: 6a:b9:6b:e8:31:a1:af:c6:30:d7:fc:97:36:ea:db: 61:c9:86:ea:9d:6e:42:57:6a:d6:9f:d3:1d:11:d3: 2f:2e:3b:bf:1e:68:23:bc:d4:66:ab:fa:72:d5:20: 3e:29:17:da:98:54:9c:6b:96:d5:9b:0a:a5:1a:2a: 67:79:72:c0:d0:f9:11:36:99:70:5a:93:7e:d1:88: ec:06:0b:1a:38:df:3c:00:34:7d:ca:4f:44:ff:82: 35:ea:80:6c:4b:e6:06:e2:94:e7:23:76:8a:00:1d: 4a:ec:fd:20:90:2c:b0:10:98:0a:d1:52:bb:43:0e: cd:89:8c:d1:ed:44:0d:f9:25:52:e9:69:5b:86:44: 8e:5b:42:82:a8:37:88:c8:81:0c:b2:ed:18:82:c5: c1:c4:f2:a4:98:4d:15:d1:e6:cd:be:86:21:c9:2b: cb:7d:ee:f5:5a:d2:f7:d0:f5:6f:e3:00:5c:5a:db: c3:63:97:9e:f9:51:02:20:cb:95:f4:fc:34:f6:41: 88:8b:72:ab:f7:70:79:26:f7:26:77:10:ab:23:4a: 52:68:04:02:2f:fc:dd:25:b5:1e:1a:3e:95:09:55: 15:0f:d3:55:71:67:24:27:be:83:77:fe:94:d4:c3: 19:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 64:CE:72:4C:C3:37:44:85:3B:20:D6:E7:92:2A:2F:80:8B:8C:30:0C X509v3 Authority Key Identifier: keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1096989114063912963/0/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1096989114063912963/0/64CE724CC33744853B20D6E7922A2F808B8C300C.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.245.128.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 55982 Signature Algorithm: sha256WithRSAEncryption 6f:5d:d0:2c:46:d9:8d:ca:12:e9:4b:ca:37:7d:59:d5:fa:4e: a0:c2:ba:ec:f5:0f:fa:50:1e:2c:c1:fe:27:b1:a6:20:8f:44: f6:39:7c:5e:3d:35:d8:bd:2d:eb:75:70:f4:38:63:59:40:6f: 27:8d:b6:90:fd:d1:0c:c1:ea:1c:f8:24:84:92:00:0d:0b:2b: ae:a1:b3:58:93:e2:ae:5c:1f:8e:60:3f:b6:05:6e:2d:07:ff: 02:64:51:dc:2d:69:f1:8d:d8:40:69:29:a3:a7:cb:5d:6b:f5: 95:83:31:f5:b8:5b:55:9c:07:35:0e:90:25:7a:9d:a0:9e:44: e9:41:6b:d7:44:60:c8:04:21:d7:43:ad:fd:76:9f:34:ac:9c: a7:b7:09:6a:ae:73:68:70:fd:51:42:04:95:e9:93:e5:65:d4: 14:68:cf:e8:52:49:9c:ec:d1:37:d1:12:b1:87:4b:f8:4c:3c: 6c:9a:7c:fd:a3:ed:97:50:fb:44:0b:df:31:7c:ea:ae:52:96: 10:88:5d:c5:4b:03:7b:6e:b4:95:0c:7f:af:d8:ec:a4:19:b3: a4:bb:f7:93:64:31:9f:2e:1a:e0:e4:f9:13:20:bd:c2:30:d2: 4b:80:c4:72:d5:b0:40:e3:5f:de:df:4f:9c:e7:45:a1:a1:4b: 1d:a3:d4:f3 -----BEGIN CERTIFICATE----- MIIFwzCCBKugAwIBAgIUOjLWMmaFPREHdulQ1VFidttYtlIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDQxNjAyMzgwOFoX DTI3MDQxNTAyNDMwOFowMzExMC8GA1UEAxMoNjRDRTcyNENDMzM3NDQ4NTNCMjBE NkU3OTIyQTJGODA4QjhDMzAwQzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOKnKeRQFv7a/FrxpKMAarlr6DGhr8Yw1/yXNurbYcmG6p1uQldq1p/THRHT Ly47vx5oI7zUZqv6ctUgPikX2phUnGuW1ZsKpRoqZ3lywND5ETaZcFqTftGI7AYL GjjfPAA0fcpPRP+CNeqAbEvmBuKU5yN2igAdSuz9IJAssBCYCtFSu0MOzYmM0e1E DfklUulpW4ZEjltCgqg3iMiBDLLtGILFwcTypJhNFdHmzb6GIckry33u9VrS99D1 b+MAXFrbw2OXnvlRAiDLlfT8NPZBiItyq/dweSb3JncQqyNKUmgEAi/83SW1Hho+ lQlVFQ/TVXFnJCe+g3f+lNTDGfECAwEAAaOCArYwggKyMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFGTOckzDN0SFOyDW55IqL4CLjDAMMB8GA1UdIwQYMBaAFKVu hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTA5Njk4OTExNDA2MzkxMjk2My8wLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDk2OTg5MTE0MDYzOTEyOTYz LzAvNjRDRTcyNENDMzM3NDQ4NTNCMjBENkU3OTIyQTJGODA4QjhDMzAwQy5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAJn9YAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQID ANquMA0GCSqGSIb3DQEBCwUAA4IBAQBvXdAsRtmNyhLpS8o3fVnV+k6gwrrs9Q/6 UB4swf4nsaYgj0T2OXxePTXYvS3rdXD0OGNZQG8njbaQ/dEMweoc+CSEkgANCyuu obNYk+KuXB+OYD+2BW4tB/8CZFHcLWnxjdhAaSmjp8tda/WVgzH1uFtVnAc1DpAl ep2gnkTpQWvXRGDIBCHXQ639dp80rJyntwlqrnNocP1RQgSV6ZPlZdQUaM/oUkmc 7NE30RKxh0v4TDxsmnz9o+2XUPtEC98xfOquUpYQiF3FSwN7brSVDH+v2OykGbOk u/eTZDGfLhrg5PkTIL3CMNJLgMRy1bBA41/e30+c50WhoUsdo9Tz -----END CERTIFICATE-----Generated at Fri Apr 17 21:21:14 2026 by rpki-client