$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BC0038FB81B8F669133DF399272C7BEEBC78A04E.cer File: BC0038FB81B8F669133DF399272C7BEEBC78A04E.cer (raw, json) Hash identifier: 1WklAgGHypytzTo+WnBoaoJV2iI5HoDSOmfw+pwKIMU= Subject key identifier: BC:00:38:FB:81:B8:F6:69:13:3D:F3:99:27:2C:7B:EE:BC:78:A0:4E Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Certificate serial: 0A340F5FB1A75C926DF15E9902DDEB01CD4C8EA2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1097368392639184898/0/BC0038FB81B8F669133DF399272C7BEEBC78A04E.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1097368392639184898/0/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Fri 17 Apr 2026 03:45:14 +0000 Certificate not after: Fri 16 Apr 2027 03:50:14 +0000 Subordinate resources: AS: 137711 IP: 45.112.236.0/22 IP: 103.52.104.0/22 IP: 103.116.76.0/22 IP: 2405:e040::/32 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 17:12:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:34:0f:5f:b1:a7:5c:92:6d:f1:5e:99:02:dd:eb:01:cd:4c:8e:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Validity Not Before: Apr 17 03:45:14 2026 GMT Not After : Apr 16 03:50:14 2027 GMT Subject: CN=BC0038FB81B8F669133DF399272C7BEEBC78A04E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:21:db:30:f7:4e:df:f1:20:2f:d3:fa:5a:42: c4:a0:ef:c6:bb:97:7b:13:fa:20:db:3f:4a:5f:97: 45:3f:b2:e6:8b:f5:36:83:a6:61:a9:3a:88:57:34: b9:d9:e2:e2:9d:22:90:62:d6:54:c7:26:10:bc:08: 5e:f3:2f:2f:d7:2d:b4:6a:c8:7e:8f:ad:75:a6:f7: 2c:b8:14:05:e5:e7:db:a4:06:6c:61:bf:91:b9:d0: 37:20:eb:71:bc:03:d5:5d:d4:da:b5:7d:8b:ed:05: 07:e0:77:49:cd:05:f0:d1:55:00:96:41:55:81:ad: a4:e9:dd:6d:f9:f6:6d:ff:4a:a0:45:db:e1:54:23: 1c:a0:44:60:5a:73:06:de:95:52:d1:71:c3:06:55: 5d:11:ad:f1:1b:3d:1b:9a:c5:be:79:2a:3e:00:0c: ae:8d:db:6d:ca:44:3f:ff:a6:26:20:1b:36:54:41: 27:f3:df:d7:77:b1:93:78:16:11:4a:de:20:ee:c3: e1:36:02:1a:77:7d:a1:3a:76:e9:1b:77:e2:ec:b0: 82:94:02:3c:7c:1d:79:05:85:e3:0b:98:7b:6d:b0: d4:d8:0b:69:df:1f:51:83:8c:a3:a8:61:c0:32:a7: 83:e9:10:ee:d5:23:89:1b:2d:a0:91:91:86:54:2e: 55:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: BC:00:38:FB:81:B8:F6:69:13:3D:F3:99:27:2C:7B:EE:BC:78:A0:4E X509v3 Authority Key Identifier: keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1097368392639184898/0/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1097368392639184898/0/BC0038FB81B8F669133DF399272C7BEEBC78A04E.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.112.236.0/22 103.52.104.0/22 103.116.76.0/22 IPv6: 2405:e040::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 137711 Signature Algorithm: sha256WithRSAEncryption 14:7c:44:c7:59:60:6c:79:f9:55:9a:02:e3:38:59:89:72:88: 3b:77:27:16:fd:9c:c7:cc:d9:40:b0:98:dc:38:fb:34:d8:31: 06:0d:0b:79:1f:23:f2:29:0c:87:fe:31:dd:e7:e8:a6:1b:7e: 65:d6:78:29:d9:58:cf:5d:c1:74:7d:65:e2:fa:5b:4c:47:b3: 79:58:4b:54:40:8c:a6:21:5d:0e:00:dc:fe:11:e0:09:e3:b6: 4e:7c:99:b6:c2:ce:6d:12:cc:07:90:21:50:4a:06:dc:34:54: 44:dc:c1:80:b4:d0:5f:ee:7b:fd:52:9f:5f:be:a4:94:53:eb: 2f:e6:02:99:69:3a:ca:94:f5:84:9f:b4:1c:a7:66:43:2b:72: 05:35:19:58:2b:6e:bf:59:57:b7:63:87:34:a5:06:4c:87:48: 92:97:dc:fc:d8:7c:b1:80:c6:3c:93:d9:8e:78:c6:c1:ca:89: 85:c3:43:8d:f6:40:ba:85:ef:d5:22:97:95:39:52:9f:b0:e0: 87:e6:b3:ca:2b:8a:99:d9:72:80:33:d7:b0:39:e7:93:4b:cc: fb:7f:e4:2d:00:0c:f9:94:9e:67:cc:6c:fd:16:b6:ae:41:c3: 7d:de:a6:6e:d1:51:cd:c0:8f:df:0d:44:1c:99:45:21:37:12: 61:e2:65:ca -----BEGIN CERTIFICATE----- MIIF3jCCBMagAwIBAgIUCjQPX7GnXJJt8V6ZAt3rAc1MjqIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDQxNzAzNDUxNFoX DTI3MDQxNjAzNTAxNFowMzExMC8GA1UEAxMoQkMwMDM4RkI4MUI4RjY2OTEzM0RG Mzk5MjcyQzdCRUVCQzc4QTA0RTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOMh2zD3Tt/xIC/T+lpCxKDvxruXexP6INs/Sl+XRT+y5ov1NoOmYak6iFc0 udni4p0ikGLWVMcmELwIXvMvL9cttGrIfo+tdab3LLgUBeXn26QGbGG/kbnQNyDr cbwD1V3U2rV9i+0FB+B3Sc0F8NFVAJZBVYGtpOndbfn2bf9KoEXb4VQjHKBEYFpz Bt6VUtFxwwZVXRGt8Rs9G5rFvnkqPgAMro3bbcpEP/+mJiAbNlRBJ/Pf13exk3gW EUreIO7D4TYCGnd9oTp26Rt34uywgpQCPHwdeQWF4wuYe22w1NgLad8fUYOMo6hh wDKng+kQ7tUjiRstoJGRhlQuVfUCAwEAAaOCAtEwggLNMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFLwAOPuBuPZpEz3zmScse+68eKBOMB8GA1UdIwQYMBaAFKVu hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTA5NzM2ODM5MjYzOTE4NDg5OC8wLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDk3MzY4MzkyNjM5MTg0ODk4 LzAvQkMwMDM4RkI4MUI4RjY2OTEzM0RGMzk5MjcyQzdCRUVCQzc4QTA0RS5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwOgYIKwYBBQUH AQcBAf8EKzApMBgEAgABMBIDBAItcOwDBAJnNGgDBAJndEwwDQQCAAIwBwMFACQF 4EAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDAhnvMA0GCSqGSIb3DQEBCwUAA4IB AQAUfETHWWBseflVmgLjOFmJcog7dycW/ZzHzNlAsJjcOPs02DEGDQt5HyPyKQyH /jHd5+imG35l1ngp2VjPXcF0fWXi+ltMR7N5WEtUQIymIV0OANz+EeAJ47ZOfJm2 ws5tEswHkCFQSgbcNFRE3MGAtNBf7nv9Up9fvqSUU+sv5gKZaTrKlPWEn7Qcp2ZD K3IFNRlYK26/WVe3Y4c0pQZMh0iSl9z82HyxgMY8k9mOeMbByomFw0ON9kC6he/V IpeVOVKfsOCH5rPKK4qZ2XKAM9ewOeeTS8z7f+QtAAz5lJ5nzGz9FrauQcN93qZu 0VHNwI/fDUQcmUUhNxJh4mXK -----END CERTIFICATE-----Generated at Fri Apr 17 22:46:02 2026 by rpki-client