$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/833355AAAB477A3A1D2F649973B483982F9BA6CE.cer File: 833355AAAB477A3A1D2F649973B483982F9BA6CE.cer (raw, json) Hash identifier: FkhAIGp3uWEMZx8VtX75pNhUn5hU3hFViYWXXlrrKwM= Subject key identifier: 83:33:55:AA:AB:47:7A:3A:1D:2F:64:99:73:B4:83:98:2F:9B:A6:CE Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Certificate serial: 76B531B6AB75C7CD84C578EB5F05C5AB95B88395 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1096689320682651650/0/833355AAAB477A3A1D2F649973B483982F9BA6CE.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1096689320682651650/0/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Wed 15 Apr 2026 06:47:42 +0000 Certificate not after: Wed 14 Apr 2027 06:52:42 +0000 Subordinate resources: AS: 24137 IP: 43.255.4.0/22 IP: 103.238.252.0/22 IP: 110.76.192.0 -- 110.77.127.255 IP: 119.31.192.0/19 IP: 210.76.0.0/19 IP: 2404:a000::/32 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 17:12:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:b5:31:b6:ab:75:c7:cd:84:c5:78:eb:5f:05:c5:ab:95:b8:83:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Validity Not Before: Apr 15 06:47:42 2026 GMT Not After : Apr 14 06:52:42 2027 GMT Subject: CN=833355AAAB477A3A1D2F649973B483982F9BA6CE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:8b:66:96:15:ce:d4:d2:9d:a2:59:65:c1:12: 7d:c7:cd:19:93:82:94:ad:6a:01:23:df:d3:d4:d9: 7d:4b:d5:fa:d6:ba:5b:b4:6f:3d:d6:22:6f:cd:c6: cd:4b:7a:da:30:a3:a8:41:9c:45:61:b1:b8:b1:74: 7b:c2:a3:cd:d4:9a:63:15:60:cb:85:27:34:db:4d: 4c:05:b8:9f:22:52:d6:04:de:76:01:f7:5a:4c:0e: bd:15:f0:da:84:94:99:92:01:fd:e3:03:50:f0:8d: 62:6c:93:91:92:9a:18:20:f8:61:86:f7:d7:67:96: 05:e4:83:8b:b3:f7:df:63:4a:0e:0d:14:18:ad:91: 00:7e:ff:87:35:84:a5:d3:d5:b5:84:7d:4f:31:92: b6:3c:22:a8:ac:e3:37:7b:cb:68:61:8f:a5:c8:0e: 5f:23:13:a9:84:f1:b0:c2:19:4d:2e:f9:80:b8:6c: c8:bc:07:0a:a9:15:5d:7e:f8:19:a4:15:e1:05:72: a4:03:9d:ce:ab:01:4b:de:75:3c:86:12:0b:6b:b8: 20:7d:ee:ec:17:94:b1:e5:f9:aa:49:0e:9f:e8:66: 44:4c:d0:fe:bc:43:ba:3b:a0:92:0b:b1:19:66:d9: 11:e0:7a:67:73:cd:78:e0:99:eb:0e:2e:1f:6c:62: 9e:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 83:33:55:AA:AB:47:7A:3A:1D:2F:64:99:73:B4:83:98:2F:9B:A6:CE X509v3 Authority Key Identifier: keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1096689320682651650/0/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1096689320682651650/0/833355AAAB477A3A1D2F649973B483982F9BA6CE.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.255.4.0/22 103.238.252.0/22 110.76.192.0-110.77.127.255 119.31.192.0/19 210.76.0.0/19 IPv6: 2404:a000::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 24137 Signature Algorithm: sha256WithRSAEncryption 79:e1:7c:04:16:32:72:42:3f:e2:7b:ed:00:8e:21:59:3d:91: fa:f2:7f:26:98:cc:22:26:a6:6b:31:bf:03:5d:1f:cb:2e:ed: 9d:08:f4:71:35:d2:99:a0:22:9e:82:12:3b:3e:2c:db:28:ab: 6c:fe:0c:c2:78:dc:5d:fe:61:9a:6e:06:c2:c3:a1:60:c6:46: 6c:26:57:a0:47:ef:28:d9:00:42:78:e8:65:56:05:a1:50:e5: b0:06:89:79:c8:f3:8c:72:eb:52:f5:70:86:b9:71:04:1a:73: 2e:c0:3b:e9:c2:aa:4f:ff:8b:65:59:56:a5:7e:80:4d:42:30: a5:0a:6d:c7:6e:49:5e:29:75:16:14:02:52:ba:65:3e:90:a4: b4:1e:69:9c:12:a5:81:81:37:4a:e7:d3:04:e0:35:e0:4b:e0: 8c:a0:a4:26:97:42:34:10:de:85:1c:e4:ff:fe:10:b2:f2:e3: b1:84:50:ca:29:9a:f1:80:af:81:33:ce:90:26:e2:ed:47:bb: ea:ff:39:81:9d:41:08:8d:8f:ae:c8:cc:00:c7:96:cf:26:80: 89:72:26:1b:ef:6a:ab:cf:c9:df:16:85:07:2a:17:82:2d:0c: f4:08:d4:7a:0b:51:72:6c:41:e7:67:89:ee:6a:fb:46:1b:c5: 96:a9:39:66 -----BEGIN CERTIFICATE----- MIIF8TCCBNmgAwIBAgIUdrUxtqt1x82ExXjrXwXFq5W4g5UwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDQxNTA2NDc0MloX DTI3MDQxNDA2NTI0MlowMzExMC8GA1UEAxMoODMzMzU1QUFBQjQ3N0EzQTFEMkY2 NDk5NzNCNDgzOTgyRjlCQTZDRTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKWLZpYVztTSnaJZZcESfcfNGZOClK1qASPf09TZfUvV+ta6W7RvPdYib83G zUt62jCjqEGcRWGxuLF0e8KjzdSaYxVgy4UnNNtNTAW4nyJS1gTedgH3WkwOvRXw 2oSUmZIB/eMDUPCNYmyTkZKaGCD4YYb312eWBeSDi7P332NKDg0UGK2RAH7/hzWE pdPVtYR9TzGStjwiqKzjN3vLaGGPpcgOXyMTqYTxsMIZTS75gLhsyLwHCqkVXX74 GaQV4QVypAOdzqsBS951PIYSC2u4IH3u7BeUseX5qkkOn+hmREzQ/rxDujugkgux GWbZEeB6Z3PNeOCZ6w4uH2xinkcCAwEAAaOCAuQwggLgMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFIMzVaqrR3o6HS9kmXO0g5gvm6bOMB8GA1UdIwQYMBaAFKVu hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTA5NjY4OTMyMDY4MjY1MTY1MC8wLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDk2Njg5MzIwNjgyNjUxNjUw LzAvODMzMzU1QUFBQjQ3N0EzQTFEMkY2NDk5NzNCNDgzOTgyRjlCQTZDRS5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwTgYIKwYBBQUH AQcBAf8EPzA9MCwEAgABMCYDBAIr/wQDBAJn7vwwDAMEBm5MwAMEB25NAAMEBXcf wAMEBdJMADANBAIAAjAHAwUAJASgADAZBggrBgEFBQcBCAEB/wQKMAigBjAEAgJe STANBgkqhkiG9w0BAQsFAAOCAQEAeeF8BBYyckI/4nvtAI4hWT2R+vJ/JpjMIiam azG/A10fyy7tnQj0cTXSmaAinoISOz4s2yirbP4MwnjcXf5hmm4GwsOhYMZGbCZX oEfvKNkAQnjoZVYFoVDlsAaJecjzjHLrUvVwhrlxBBpzLsA76cKqT/+LZVlWpX6A TUIwpQptx25JXil1FhQCUrplPpCktB5pnBKlgYE3SufTBOA14EvgjKCkJpdCNBDe hRzk//4QsvLjsYRQyima8YCvgTPOkCbi7Ue76v85gZ1BCI2PrsjMAMeWzyaAiXIm G+9qq8/J3xaFByoXgi0M9AjUegtRcmxB52eJ7mr7RhvFlqk5Zg== -----END CERTIFICATE-----Generated at Fri Apr 17 17:19:04 2026 by rpki-client