$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A85A1C61546E7F0064133F83A79B3D7456C0703F.cer File: A85A1C61546E7F0064133F83A79B3D7456C0703F.cer (raw, json) Hash identifier: H55Wg6QMGJqUlmfCNVxhX52VjAaszG39v+0P+h6rfQk= Subject key identifier: A8:5A:1C:61:54:6E:7F:00:64:13:3F:83:A7:9B:3D:74:56:C0:70:3F Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Certificate serial: 1C95501EB2C5FE206641B694DA2EF46F175C6CF2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1096704155977842691/0/A85A1C61546E7F0064133F83A79B3D7456C0703F.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1096704155977842691/0/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Wed 15 Apr 2026 07:45:56 +0000 Certificate not after: Wed 14 Apr 2027 07:50:56 +0000 Subordinate resources: IP: 45.119.64.0/22 IP: 45.250.28.0/22 IP: 103.59.116.0/22 IP: 103.219.24.0/22 IP: 180.188.0.0/20 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 17:12:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:95:50:1e:b2:c5:fe:20:66:41:b6:94:da:2e:f4:6f:17:5c:6c:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Validity Not Before: Apr 15 07:45:56 2026 GMT Not After : Apr 14 07:50:56 2027 GMT Subject: CN=A85A1C61546E7F0064133F83A79B3D7456C0703F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:af:99:3d:0c:23:6c:4d:f7:c7:8e:2c:23:ae: 58:3d:03:55:5b:06:6b:4f:50:48:3f:d9:fc:2a:65: 21:ac:86:b5:46:2c:44:c3:d5:b3:74:a8:87:08:1d: 46:cc:e5:85:50:ac:cc:e1:bf:ce:4e:cd:3a:fc:b2: a2:35:9d:6b:e1:5e:3c:23:db:00:52:9d:5b:74:bd: 4d:07:11:08:b2:da:27:ae:21:f5:45:e2:7d:53:7f: 87:3c:a8:fc:e0:e0:82:82:68:ac:16:5a:05:d7:d8: 32:15:75:e4:42:c3:46:02:2a:e0:14:e3:66:db:db: 06:89:9a:2e:95:96:c0:72:50:a5:24:9d:f6:5d:85: 15:04:23:6d:cb:53:8f:99:e4:d3:d6:21:2b:2c:56: 76:1b:fe:2c:68:6f:5e:a1:d5:f3:fc:f9:6c:d6:18: 0a:b8:7a:c9:63:e7:85:37:d1:3f:70:9e:f3:28:45: 39:a9:7d:b6:54:f1:e4:13:88:fe:1e:4e:20:6d:5b: 0f:1b:90:05:a9:94:d5:12:2b:45:8e:e7:e2:2d:41: 28:5e:b3:cd:7a:76:a3:ae:03:69:8c:9b:3d:da:1b: ab:55:b1:59:83:4b:3f:68:cc:8b:a9:10:45:26:4f: 01:da:2d:3f:94:5a:a3:fe:d4:8e:6d:05:aa:cb:b0: 73:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: A8:5A:1C:61:54:6E:7F:00:64:13:3F:83:A7:9B:3D:74:56:C0:70:3F X509v3 Authority Key Identifier: keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1096704155977842691/0/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1096704155977842691/0/A85A1C61546E7F0064133F83A79B3D7456C0703F.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.119.64.0/22 45.250.28.0/22 103.59.116.0/22 103.219.24.0/22 180.188.0.0/20 Signature Algorithm: sha256WithRSAEncryption 51:f9:6a:02:8d:54:70:ae:bc:56:a6:76:df:4c:7e:4a:f8:d6: 05:5b:58:2c:a2:a1:c3:4a:cd:a4:69:5e:a0:69:f4:62:9b:55: 0c:70:75:93:15:75:37:d3:9a:5a:ff:e9:8b:70:74:e1:29:80: 27:c8:5a:c9:92:76:8f:95:93:69:a4:d4:09:0d:30:d0:a3:a1: b6:46:f6:2e:7c:02:48:00:9b:92:a8:18:2f:8c:61:e5:23:c0: e3:e7:65:e3:9d:5e:0d:71:13:77:cb:a9:c4:73:02:73:bf:ac: b9:81:0f:97:8c:de:de:25:48:81:87:e0:e7:a3:73:44:d6:5a: c6:e5:14:d2:54:77:b4:4b:94:cf:ed:30:5b:89:f2:16:4e:b4: 21:55:c1:f8:ef:7d:c9:33:c2:6c:b3:06:ed:d3:55:e3:44:4c: a7:8a:96:15:f2:8e:2a:54:7c:98:b9:96:ff:59:1e:e1:0a:7f: f7:c3:0f:15:9a:6c:ab:69:a7:23:1d:0c:51:18:0b:c7:a6:36: 9b:8f:4b:a8:32:57:f6:7b:5a:77:64:23:23:7d:04:95:c6:1f: 26:e0:08:5a:73:20:53:28:0c:2b:7a:df:26:57:00:c8:75:95: a3:e5:5c:44:c8:83:48:ea:a1:2a:d5:59:94:bd:26:42:02:8e: f8:26:57:03 -----BEGIN CERTIFICATE----- MIIFvzCCBKegAwIBAgIUHJVQHrLF/iBmQbaU2i70bxdcbPIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDQxNTA3NDU1NloX DTI3MDQxNDA3NTA1NlowMzExMC8GA1UEAxMoQTg1QTFDNjE1NDZFN0YwMDY0MTMz RjgzQTc5QjNENzQ1NkMwNzAzRjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAPevmT0MI2xN98eOLCOuWD0DVVsGa09QSD/Z/CplIayGtUYsRMPVs3Sohwgd RszlhVCszOG/zk7NOvyyojWda+FePCPbAFKdW3S9TQcRCLLaJ64h9UXifVN/hzyo /ODggoJorBZaBdfYMhV15ELDRgIq4BTjZtvbBomaLpWWwHJQpSSd9l2FFQQjbctT j5nk09YhKyxWdhv+LGhvXqHV8/z5bNYYCrh6yWPnhTfRP3Ce8yhFOal9tlTx5BOI /h5OIG1bDxuQBamU1RIrRY7n4i1BKF6zzXp2o64DaYybPdobq1WxWYNLP2jMi6kQ RSZPAdotP5Rao/7Ujm0Fqsuwc1UCAwEAAaOCArIwggKuMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFKhaHGFUbn8AZBM/g6ebPXRWwHA/MB8GA1UdIwQYMBaAFKVu hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTA5NjcwNDE1NTk3Nzg0MjY5MS8wLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDk2NzA0MTU1OTc3ODQyNjkx LzAvQTg1QTFDNjE1NDZFN0YwMDY0MTMzRjgzQTc5QjNENzQ1NkMwNzAzRi5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwNwYIKwYBBQUH AQcBAf8EKDAmMCQEAgABMB4DBAItd0ADBAIt+hwDBAJnO3QDBAJn2xgDBAS0vAAw DQYJKoZIhvcNAQELBQADggEBAFH5agKNVHCuvFamdt9Mfkr41gVbWCyiocNKzaRp XqBp9GKbVQxwdZMVdTfTmlr/6YtwdOEpgCfIWsmSdo+Vk2mk1AkNMNCjobZG9i58 AkgAm5KoGC+MYeUjwOPnZeOdXg1xE3fLqcRzAnO/rLmBD5eM3t4lSIGH4Oejc0TW WsblFNJUd7RLlM/tMFuJ8hZOtCFVwfjvfckzwmyzBu3TVeNETKeKlhXyjipUfJi5 lv9ZHuEKf/fDDxWabKtppyMdDFEYC8emNpuPS6gyV/Z7WndkIyN9BJXGHybgCFpz IFMoDCt63yZXAMh1laPlXETIg0jqoSrVWZS9JkICjvgmVwM= -----END CERTIFICATE-----Generated at Sat Apr 18 07:28:50 2026 by rpki-client