$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/951830FAEB53F8097C135F16292E2995BBCF3DC4.cer File: 951830FAEB53F8097C135F16292E2995BBCF3DC4.cer (raw, json) Hash identifier: mgW+TK96F54RGkRKwJM/5zM+c1amNMi8LssbcB8MCcU= Subject key identifier: 95:18:30:FA:EB:53:F8:09:7C:13:5F:16:29:2E:29:95:BB:CF:3D:C4 Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Certificate serial: 15D3F10C928543931A23E6BA54B485F96E43F18E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1097366082127134723/0/951830FAEB53F8097C135F16292E2995BBCF3DC4.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1097366082127134723/0/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Fri 17 Apr 2026 03:36:03 +0000 Certificate not after: Fri 16 Apr 2027 03:41:03 +0000 Subordinate resources: IP: 103.98.124.0/22 IP: 103.98.248.0/21 IP: 2401:98c0::/32 IP: 2401:a5c0::/32 IP: 2401:a640::/32 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 17:12:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:d3:f1:0c:92:85:43:93:1a:23:e6:ba:54:b4:85:f9:6e:43:f1:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Validity Not Before: Apr 17 03:36:03 2026 GMT Not After : Apr 16 03:41:03 2027 GMT Subject: CN=951830FAEB53F8097C135F16292E2995BBCF3DC4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:1c:e1:91:b7:d7:1a:2b:b2:e7:37:0e:3c:8f: 06:a8:85:09:d7:df:8d:64:b4:0b:f5:ea:67:fe:d5: 17:28:23:06:9b:5d:bd:99:98:fb:70:66:29:24:89: 4b:e1:ec:46:55:56:92:75:24:06:fb:c8:dd:1c:17: 41:4b:1c:73:4f:cb:23:c2:16:21:42:fd:60:0a:df: 05:ae:6e:78:90:d8:ad:55:a2:ea:27:a9:39:4b:4f: 1e:7c:c8:44:fe:23:37:3c:c0:1a:c6:6e:3d:bd:d9: cb:14:f5:dc:5d:a9:1a:38:92:48:43:5a:57:ae:8a: 7e:ba:58:de:61:7e:29:df:7b:94:9f:01:4e:58:7f: cd:f7:02:05:4f:3a:87:70:89:84:63:b7:05:01:35: d0:9e:26:c9:82:05:1c:a6:2f:58:2f:16:ab:08:e6: d7:c7:2b:e5:94:e8:60:69:4a:e0:78:c7:ab:17:eb: 6b:0d:cf:7e:c8:f9:0c:de:ed:7a:97:6f:c3:fb:8a: 76:f6:de:70:20:33:98:1d:27:19:e9:67:9c:e3:92: 6e:c5:28:45:29:65:29:9d:d7:1e:c4:4c:e4:bf:dc: c7:9d:ab:4d:dc:ce:99:08:f6:76:b2:5f:3e:e6:1e: cb:fe:ae:88:e7:41:8d:f7:27:f3:36:be:7c:42:9d: e0:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 95:18:30:FA:EB:53:F8:09:7C:13:5F:16:29:2E:29:95:BB:CF:3D:C4 X509v3 Authority Key Identifier: keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1097366082127134723/0/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1097366082127134723/0/951830FAEB53F8097C135F16292E2995BBCF3DC4.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.98.124.0/22 103.98.248.0/21 IPv6: 2401:98c0::/32 2401:a5c0::/32 2401:a640::/32 Signature Algorithm: sha256WithRSAEncryption 20:a4:f4:e3:71:16:1c:da:f8:12:18:f2:b7:a4:b8:7b:0f:b9: 39:5d:4c:01:c8:9f:7e:07:0b:8a:2f:3f:85:98:1c:45:75:f8: e8:c8:89:b6:a5:1a:49:b9:29:ec:08:c5:cc:17:c0:d2:6a:bc: 9f:a6:6b:80:07:97:01:21:42:5c:4a:50:55:a7:90:c1:33:85: de:0e:1e:83:6b:b0:f3:54:9a:33:51:b0:34:2f:1f:09:30:ab: dc:45:6b:33:36:12:ea:d9:aa:92:2a:8b:4b:be:c6:9c:87:7b: b9:c7:e5:ea:2b:8c:67:83:0c:b9:4c:60:19:84:90:db:58:30: c9:13:20:9b:a4:53:61:de:db:85:5c:e2:a5:99:82:a4:b1:90: 17:54:94:7a:1f:ac:8e:e8:36:eb:ed:4a:cb:a1:92:36:16:ad: 5b:73:68:41:f5:60:cd:2a:cb:97:6b:61:c2:59:05:34:54:d2: 74:cc:f2:e6:c5:a9:f5:2d:b7:9e:74:71:8b:56:6c:48:36:11: fd:a8:49:18:1d:c7:0a:52:e4:74:7b:c3:84:06:15:ae:0e:b0: 34:9f:b9:cb:0f:43:dc:13:99:e5:12:a2:b7:5e:4a:ce:c8:87: 68:c1:b6:27:d9:10:27:fc:a6:06:af:d7:b9:87:12:88:bb:23: 86:9a:cb:8f -----BEGIN CERTIFICATE----- MIIFyjCCBLKgAwIBAgIUFdPxDJKFQ5MaI+a6VLSF+W5D8Y4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDQxNzAzMzYwM1oX DTI3MDQxNjAzNDEwM1owMzExMC8GA1UEAxMoOTUxODMwRkFFQjUzRjgwOTdDMTM1 RjE2MjkyRTI5OTVCQkNGM0RDNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMUc4ZG31xorsuc3DjyPBqiFCdffjWS0C/XqZ/7VFygjBptdvZmY+3BmKSSJ S+HsRlVWknUkBvvI3RwXQUscc0/LI8IWIUL9YArfBa5ueJDYrVWi6iepOUtPHnzI RP4jNzzAGsZuPb3ZyxT13F2pGjiSSENaV66KfrpY3mF+Kd97lJ8BTlh/zfcCBU86 h3CJhGO3BQE10J4myYIFHKYvWC8Wqwjm18cr5ZToYGlK4HjHqxfraw3Pfsj5DN7t epdvw/uKdvbecCAzmB0nGelnnOOSbsUoRSllKZ3XHsRM5L/cx52rTdzOmQj2drJf PuYey/6uiOdBjfcn8za+fEKd4JkCAwEAAaOCAr0wggK5MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFJUYMPrrU/gJfBNfFikuKZW7zz3EMB8GA1UdIwQYMBaAFKVu hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTA5NzM2NjA4MjEyNzEzNDcyMy8wLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDk3MzY2MDgyMTI3MTM0NzIz LzAvOTUxODMwRkFFQjUzRjgwOTdDMTM1RjE2MjkyRTI5OTVCQkNGM0RDNC5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwQgYIKwYBBQUH AQcBAf8EMzAxMBIEAgABMAwDBAJnYnwDBANnYvgwGwQCAAIwFQMFACQBmMADBQAk AaXAAwUAJAGmQDANBgkqhkiG9w0BAQsFAAOCAQEAIKT043EWHNr4Ehjyt6S4ew+5 OV1MAciffgcLii8/hZgcRXX46MiJtqUaSbkp7AjFzBfA0mq8n6ZrgAeXASFCXEpQ VaeQwTOF3g4eg2uw81SaM1GwNC8fCTCr3EVrMzYS6tmqkiqLS77GnId7ucfl6iuM Z4MMuUxgGYSQ21gwyRMgm6RTYd7bhVzipZmCpLGQF1SUeh+sjug26+1Ky6GSNhat W3NoQfVgzSrLl2thwlkFNFTSdMzy5sWp9S23nnRxi1ZsSDYR/ahJGB3HClLkdHvD hAYVrg6wNJ+5yw9D3BOZ5RKit15KzsiHaMG2J9kQJ/ymBq/XuYcSiLsjhprLjw== -----END CERTIFICATE-----Generated at Fri Apr 17 23:54:28 2026 by rpki-client