$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A29880A26322EAD895FA176AD4CD3EEC5B8916F3.cer File: A29880A26322EAD895FA176AD4CD3EEC5B8916F3.cer (raw, json) Hash identifier: u24HPrBkBThvYklbtGM3AUazyiRk1E1WkFBMG17Nodk= Subject key identifier: A2:98:80:A2:63:22:EA:D8:95:FA:17:6A:D4:CD:3E:EC:5B:89:16:F3 Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Certificate serial: 797A91C184A76DFE044121D1EE0EB4DA3E9A8080 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1095984486035816451/1/A29880A26322EAD895FA176AD4CD3EEC5B8916F3.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1095984486035816451/1/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Mon 13 Apr 2026 08:13:47 +0000 Certificate not after: Mon 12 Apr 2027 08:18:47 +0000 Subordinate resources: AS: 151280 IP: 2401:b360::/32 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 01:26:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:7a:91:c1:84:a7:6d:fe:04:41:21:d1:ee:0e:b4:da:3e:9a:80:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Validity Not Before: Apr 13 08:13:47 2026 GMT Not After : Apr 12 08:18:47 2027 GMT Subject: CN=A29880A26322EAD895FA176AD4CD3EEC5B8916F3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:63:71:f4:30:dc:1c:a9:1b:e7:ca:f6:a0:fe: 0f:b7:96:28:76:e2:8f:b1:37:2b:1a:90:90:d2:62: f9:30:f0:3f:ec:21:4d:f0:f7:81:27:91:2b:1e:a1: 34:20:a0:8e:80:63:86:c0:d9:74:d6:1f:72:85:42: 53:de:58:33:9c:38:ca:de:67:ce:1f:6b:bd:b2:84: 15:00:ce:64:ee:a6:58:63:49:c9:76:69:7d:29:91: 81:17:ec:0b:7c:47:61:f0:82:06:36:4b:bc:77:cb: 0e:34:aa:f2:85:2f:93:bc:56:f3:62:b9:ff:24:58: a9:e3:86:13:50:58:82:50:8e:42:ea:b5:b2:76:a5: b3:56:66:70:96:0f:2c:06:8e:e5:ca:c8:f0:72:49: d8:3d:29:69:af:73:7f:25:2a:a6:94:8f:f0:57:d3: a3:18:9c:74:5c:53:ce:a5:36:5a:ce:78:87:71:48: 87:3a:0d:16:f1:3f:ac:89:3d:04:46:ff:46:c1:5f: f4:e1:82:46:be:9d:55:de:42:b4:7e:88:a7:46:f7: 65:1a:42:ba:b0:47:3e:59:41:f3:55:cc:ba:d7:de: 9b:31:f4:af:05:98:f6:1f:6e:5e:dc:f7:a9:0a:bc: 0d:19:91:f0:c7:9e:0e:47:e1:cb:06:80:ad:47:44: a1:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: A2:98:80:A2:63:22:EA:D8:95:FA:17:6A:D4:CD:3E:EC:5B:89:16:F3 X509v3 Authority Key Identifier: keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1095984486035816451/1/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1095984486035816451/1/A29880A26322EAD895FA176AD4CD3EEC5B8916F3.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2401:b360::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 151280 Signature Algorithm: sha256WithRSAEncryption 7a:8d:65:08:a6:33:ce:9a:f9:ef:6c:76:b0:4e:bb:41:f1:ba: 6b:ae:63:b5:c8:3b:ab:52:f2:23:08:1d:31:62:cd:53:91:c0: c4:48:9f:60:65:e4:95:b7:31:e0:7e:87:b9:b3:fd:54:b4:be: 8d:cb:a9:da:1c:33:04:50:8b:93:42:5e:35:a4:0c:9d:31:b4: f8:77:f4:5e:2a:b3:19:48:e6:fb:9f:56:59:c1:11:89:da:ad: 7e:20:3a:4d:11:b1:f9:09:ec:7c:b2:fd:76:bf:f7:9d:32:3e: 2c:3b:45:78:ed:fc:76:6c:5f:6c:73:8f:4a:e4:a7:ae:27:65: 60:44:25:eb:48:61:5a:41:af:a8:19:3b:ed:26:66:05:d7:81: 03:19:71:58:bf:ca:51:0a:68:d7:99:f4:c1:40:7e:e8:88:2e: f8:b4:d3:8c:ab:f4:00:93:61:84:cd:16:ca:78:f1:a6:e0:d9: c4:25:b3:70:56:b6:82:62:cf:b1:be:b0:3d:3b:c8:d5:62:1d: e3:53:25:18:21:6d:2c:37:bb:7e:47:3c:b8:d4:38:34:40:3c: 34:e8:e7:a1:a5:1a:39:e7:08:7d:5e:05:8f:02:55:38:93:ce: f2:2b:2b:15:55:f9:2d:88:db:d9:55:c6:69:c7:b2:6e:33:86: 92:6e:58:e9 -----BEGIN CERTIFICATE----- MIIFxDCCBKygAwIBAgIUeXqRwYSnbf4EQSHR7g602j6agIAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDQxMzA4MTM0N1oX DTI3MDQxMjA4MTg0N1owMzExMC8GA1UEAxMoQTI5ODgwQTI2MzIyRUFEODk1RkEx NzZBRDRDRDNFRUM1Qjg5MTZGMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOljcfQw3BypG+fK9qD+D7eWKHbij7E3KxqQkNJi+TDwP+whTfD3gSeRKx6h NCCgjoBjhsDZdNYfcoVCU95YM5w4yt5nzh9rvbKEFQDOZO6mWGNJyXZpfSmRgRfs C3xHYfCCBjZLvHfLDjSq8oUvk7xW82K5/yRYqeOGE1BYglCOQuq1snals1ZmcJYP LAaO5crI8HJJ2D0paa9zfyUqppSP8FfToxicdFxTzqU2Ws54h3FIhzoNFvE/rIk9 BEb/RsFf9OGCRr6dVd5CtH6Ip0b3ZRpCurBHPllB81XMutfemzH0rwWY9h9uXtz3 qQq8DRmR8MeeDkfhywaArUdEoakCAwEAAaOCArcwggKzMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFKKYgKJjIurYlfoXatTNPuxbiRbzMB8GA1UdIwQYMBaAFKVu hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTA5NTk4NDQ4NjAzNTgxNjQ1MS8xLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDk1OTg0NDg2MDM1ODE2NDUx LzEvQTI5ODgwQTI2MzIyRUFEODk1RkExNzZBRDRDRDNFRUM1Qjg5MTZGMy5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUH AQcBAf8EETAPMA0EAgACMAcDBQAkAbNgMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwJO8DANBgkqhkiG9w0BAQsFAAOCAQEAeo1lCKYzzpr572x2sE67QfG6a65jtcg7 q1LyIwgdMWLNU5HAxEifYGXklbcx4H6HubP9VLS+jcup2hwzBFCLk0JeNaQMnTG0 +Hf0XiqzGUjm+59WWcERidqtfiA6TRGx+QnsfLL9dr/3nTI+LDtFeO38dmxfbHOP SuSnridlYEQl60hhWkGvqBk77SZmBdeBAxlxWL/KUQpo15n0wUB+6Igu+LTTjKv0 AJNhhM0WynjxpuDZxCWzcFa2gmLPsb6wPTvI1WId41MlGCFtLDe7fkc8uNQ4NEA8 NOjnoaUaOecIfV4FjwJVOJPO8isrFVX5LYjb2VXGaceybjOGkm5Y6Q== -----END CERTIFICATE-----Generated at Fri Apr 17 01:36:32 2026 by rpki-client