$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A885AC793FB5E02C3AF1358C8DD23412EA28CC0B.cer File: A885AC793FB5E02C3AF1358C8DD23412EA28CC0B.cer (raw, json) Hash identifier: VTyKatNPY2uIQVxoS/VKnxBlBn8OMBFqNmS5MIwCL4k= Subject key identifier: A8:85:AC:79:3F:B5:E0:2C:3A:F1:35:8C:8D:D2:34:12:EA:28:CC:0B Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Certificate serial: 2ED23E62243C7E27AB91634875C1F73B7DFDAE1F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1096638331497742338/0/A885AC793FB5E02C3AF1358C8DD23412EA28CC0B.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1096638331497742338/0/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Wed 15 Apr 2026 03:24:14 +0000 Certificate not after: Wed 14 Apr 2027 03:29:14 +0000 Subordinate resources: AS: 146804 IP: 45.120.140.0/22 IP: 103.5.36.0/22 IP: 103.246.8.0/22 IP: 103.246.124.0/22 IP: 103.246.152.0/22 IP: 2401:f300::/32 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 17:12:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:d2:3e:62:24:3c:7e:27:ab:91:63:48:75:c1:f7:3b:7d:fd:ae:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Validity Not Before: Apr 15 03:24:14 2026 GMT Not After : Apr 14 03:29:14 2027 GMT Subject: CN=A885AC793FB5E02C3AF1358C8DD23412EA28CC0B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:b4:0b:78:e5:86:a8:4f:b0:22:4b:3c:8b:38: 2b:af:51:1d:ff:09:3c:64:66:2c:11:f4:89:57:3f: 0a:ca:5a:38:14:f3:8e:d1:d4:81:95:95:98:55:78: a8:a3:17:3f:13:ba:fb:2a:d5:ce:ab:d6:3a:81:28: b2:04:51:e5:f6:c9:1e:6c:59:9e:b8:29:be:2e:e5: 2e:57:67:2a:1f:a1:cf:6f:da:44:f6:05:96:4f:bd: 5a:f4:9b:58:ec:23:08:6b:c6:07:f7:17:f4:6c:9d: 0a:53:9d:e3:e6:f6:be:34:c2:de:66:33:bf:bf:e4: f3:11:3d:85:4f:e7:02:f7:64:7a:e9:79:00:07:a1: ab:c4:91:52:7d:67:5f:7e:a7:7a:4d:50:1e:35:8d: f9:b0:62:73:76:76:87:48:76:6a:a1:74:e6:81:00: f5:20:17:b1:cb:53:fe:b5:8c:37:e2:11:8e:74:10: a4:8c:2e:50:9c:3d:46:7e:3f:9a:ab:26:88:da:75: 89:1a:8c:31:29:a0:a2:6c:5f:0d:d9:2d:6e:34:a1: dc:65:11:30:a3:f6:a4:57:02:70:20:fb:64:29:33: ba:5e:c7:3b:3a:7d:61:09:b8:37:09:8c:73:6f:a0: fe:f7:40:9a:93:1d:33:39:8f:83:75:55:fb:ff:0b: ba:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: A8:85:AC:79:3F:B5:E0:2C:3A:F1:35:8C:8D:D2:34:12:EA:28:CC:0B X509v3 Authority Key Identifier: keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1096638331497742338/0/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1096638331497742338/0/A885AC793FB5E02C3AF1358C8DD23412EA28CC0B.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.120.140.0/22 103.5.36.0/22 103.246.8.0/22 103.246.124.0/22 103.246.152.0/22 IPv6: 2401:f300::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 146804 Signature Algorithm: sha256WithRSAEncryption 3a:52:4e:01:9a:09:01:ee:34:3e:fd:9e:11:56:dd:58:25:1b: db:f9:81:56:82:d3:75:d6:53:43:23:30:88:e8:aa:2d:7a:07: 17:c2:41:35:ef:c3:85:87:2c:7e:33:bd:3b:ac:c5:84:e0:f4: c6:ad:74:cd:c6:0f:6b:2e:58:73:e5:d2:ea:ca:63:96:01:d0: e4:e0:01:82:cb:81:2e:a4:30:1e:0c:d8:cf:b5:4d:e0:13:de: f4:4e:92:83:07:04:17:c7:67:6d:d8:cd:d2:27:26:14:ca:b0: 85:08:c7:9e:87:a6:5d:86:3f:e9:89:05:59:e2:e1:9f:e0:70: 0c:a2:65:fb:ab:74:80:97:88:01:57:3f:13:51:cf:27:4e:f5: ec:e1:25:a6:e8:7a:89:37:84:61:dd:28:d3:b4:c2:dc:85:f6: 39:bd:1c:48:22:8a:2a:b2:f4:16:86:9e:14:a8:4d:c5:d5:09: 9e:bd:f4:ba:57:ab:48:ba:a1:5f:c3:5b:46:ad:20:9b:8f:4d: cd:b9:d4:3e:37:69:9e:3f:61:31:a1:d6:ea:85:35:d1:85:91: f8:ea:59:db:4c:e9:9c:7d:e9:85:fd:08:f3:02:8b:9d:4e:8d: 22:bc:36:b7:01:14:52:14:ef:4f:4e:79:f6:85:62:c0:d7:4f: 61:2c:29:0e -----BEGIN CERTIFICATE----- MIIF6jCCBNKgAwIBAgIULtI+YiQ8fierkWNIdcH3O339rh8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDQxNTAzMjQxNFoX DTI3MDQxNDAzMjkxNFowMzExMC8GA1UEAxMoQTg4NUFDNzkzRkI1RTAyQzNBRjEz NThDOEREMjM0MTJFQTI4Q0MwQjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAN+0C3jlhqhPsCJLPIs4K69RHf8JPGRmLBH0iVc/CspaOBTzjtHUgZWVmFV4 qKMXPxO6+yrVzqvWOoEosgRR5fbJHmxZnrgpvi7lLldnKh+hz2/aRPYFlk+9WvSb WOwjCGvGB/cX9GydClOd4+b2vjTC3mYzv7/k8xE9hU/nAvdkeul5AAehq8SRUn1n X36nek1QHjWN+bBic3Z2h0h2aqF05oEA9SAXsctT/rWMN+IRjnQQpIwuUJw9Rn4/ mqsmiNp1iRqMMSmgomxfDdktbjSh3GURMKP2pFcCcCD7ZCkzul7HOzp9YQm4NwmM c2+g/vdAmpMdMzmPg3VV+/8Lup0CAwEAAaOCAt0wggLZMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFKiFrHk/teAsOvE1jI3SNBLqKMwLMB8GA1UdIwQYMBaAFKVu hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTA5NjYzODMzMTQ5Nzc0MjMzOC8wLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDk2NjM4MzMxNDk3NzQyMzM4 LzAvQTg4NUFDNzkzRkI1RTAyQzNBRjEzNThDOEREMjM0MTJFQTI4Q0MwQi5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwRgYIKwYBBQUH AQcBAf8ENzA1MCQEAgABMB4DBAIteIwDBAJnBSQDBAJn9ggDBAJn9nwDBAJn9pgw DQQCAAIwBwMFACQB8wAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDAj10MA0GCSqG SIb3DQEBCwUAA4IBAQA6Uk4BmgkB7jQ+/Z4RVt1YJRvb+YFWgtN11lNDIzCI6Kot egcXwkE178OFhyx+M707rMWE4PTGrXTNxg9rLlhz5dLqymOWAdDk4AGCy4EupDAe DNjPtU3gE970TpKDBwQXx2dt2M3SJyYUyrCFCMeeh6Zdhj/piQVZ4uGf4HAMomX7 q3SAl4gBVz8TUc8nTvXs4SWm6HqJN4Rh3SjTtMLchfY5vRxIIooqsvQWhp4UqE3F 1QmevfS6V6tIuqFfw1tGrSCbj03NudQ+N2meP2ExodbqhTXRhZH46lnbTOmcfemF /QjzAoudTo0ivDa3ARRSFO9PTnn2hWLA109hLCkO -----END CERTIFICATE-----Generated at Fri Apr 17 19:43:23 2026 by rpki-client