$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CD2AB13A444BFE19493186434EE872CEC8A1952E.cer File: CD2AB13A444BFE19493186434EE872CEC8A1952E.cer (raw, json) Hash identifier: pS4p3tQVEKySOeM49ZjOWsP951cn3peVL2MHzoson2w= Subject key identifier: CD:2A:B1:3A:44:4B:FE:19:49:31:86:43:4E:E8:72:CE:C8:A1:95:2E Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Certificate serial: 299B8CD399A132F69B681203AF5E7CADF35AA2E9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1097041815845994499/0/CD2AB13A444BFE19493186434EE872CEC8A1952E.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1097041815845994499/0/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Thu 16 Apr 2026 06:07:31 +0000 Certificate not after: Thu 15 Apr 2027 06:12:31 +0000 Subordinate resources: AS: 63654 IP: 103.78.124.0/22 IP: 2407:ecc0::/32 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 17:12:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:9b:8c:d3:99:a1:32:f6:9b:68:12:03:af:5e:7c:ad:f3:5a:a2:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Validity Not Before: Apr 16 06:07:31 2026 GMT Not After : Apr 15 06:12:31 2027 GMT Subject: CN=CD2AB13A444BFE19493186434EE872CEC8A1952E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:98:47:d7:ed:1b:11:92:04:f8:a4:58:c5:a0: 58:d4:21:b8:80:05:a9:38:8a:f7:4e:2d:a6:29:c2: 38:b8:eb:c4:f3:ff:bd:d6:59:48:12:0d:74:ee:8d: b9:35:11:bf:f8:d6:b8:42:5c:40:f4:fe:c0:e8:cf: b1:33:59:1e:a4:7a:6a:81:03:10:b1:b4:93:a9:9b: 08:ee:e5:c2:17:1a:23:41:91:56:7e:82:7f:6b:2b: 9e:d5:21:dc:6d:e3:ea:0a:b4:45:3e:e5:9b:d0:60: 2b:23:ab:86:08:68:a0:ec:ee:c0:bf:6a:73:32:48: 54:df:8f:de:77:71:76:24:18:a5:48:98:52:e0:a3: 4e:31:52:20:c4:93:54:02:57:14:ca:a9:4a:ad:dd: f2:fb:f0:0b:ac:b6:94:9b:82:50:d8:70:df:c7:6c: 83:f2:c9:0e:24:f5:a7:4e:ab:5e:75:0a:37:70:d5: f0:bd:9b:89:d5:59:10:63:6d:1d:e7:bc:4d:a2:9d: b7:22:01:16:3e:9f:68:29:ac:46:b3:f7:a3:41:57: 2f:18:0f:79:42:53:96:82:c2:91:59:5d:55:c2:00: e2:0f:04:ca:99:bd:57:a2:5a:ce:56:ad:87:c5:5b: 2e:f5:f2:8f:37:74:5b:16:c0:3e:5b:65:bb:02:7d: bb:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: CD:2A:B1:3A:44:4B:FE:19:49:31:86:43:4E:E8:72:CE:C8:A1:95:2E X509v3 Authority Key Identifier: keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1097041815845994499/0/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1097041815845994499/0/CD2AB13A444BFE19493186434EE872CEC8A1952E.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.78.124.0/22 IPv6: 2407:ecc0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 63654 Signature Algorithm: sha256WithRSAEncryption 55:94:da:19:fa:1e:2b:9f:6e:d9:4b:0d:00:28:ef:7f:ab:19: b9:c6:40:83:78:2d:5f:4b:e1:ea:5d:ba:16:9d:c2:98:21:3f: 63:c0:64:25:7d:99:6b:7d:44:bb:fa:7e:0b:c7:a7:31:e4:36: 11:56:57:2a:f0:bc:67:c8:37:52:80:29:15:3e:07:ed:da:a7: dd:50:a6:b9:43:9e:f0:ed:99:48:2b:7e:9a:b7:5e:7f:22:02: 0e:46:1a:4f:31:0b:dc:d8:32:af:34:22:50:03:70:db:5d:f6: 77:43:09:0a:2d:f6:9f:8a:a6:d1:08:70:83:ce:58:80:f1:90: 2c:31:32:61:d5:5a:c0:e7:8f:a3:94:58:dc:9e:2f:3f:ca:89: 1b:86:7d:5c:16:7f:8b:60:13:b6:37:4d:66:7b:2b:f5:12:55: 42:4d:45:63:28:9f:0c:fc:35:bd:c7:50:34:fd:03:fa:84:62: 32:6b:44:d0:e1:3a:e3:36:a2:63:10:a1:3d:4a:97:7d:6a:3e: 3d:5c:84:c6:19:0c:6b:21:b2:57:e4:ee:7d:fc:95:03:83:1a: 40:3a:06:d9:b9:fb:89:65:ad:17:c8:e5:b2:04:2c:48:9d:d0: e5:d6:0d:c3:c5:fe:d2:15:83:0a:52:20:5c:46:84:cc:9e:ab: de:70:5d:24 -----BEGIN CERTIFICATE----- MIIF0jCCBLqgAwIBAgIUKZuM05mhMvabaBIDr158rfNaoukwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDQxNjA2MDczMVoX DTI3MDQxNTA2MTIzMVowMzExMC8GA1UEAxMoQ0QyQUIxM0E0NDRCRkUxOTQ5MzE4 NjQzNEVFODcyQ0VDOEExOTUyRTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALWYR9ftGxGSBPikWMWgWNQhuIAFqTiK904tpinCOLjrxPP/vdZZSBINdO6N uTURv/jWuEJcQPT+wOjPsTNZHqR6aoEDELG0k6mbCO7lwhcaI0GRVn6Cf2srntUh 3G3j6gq0RT7lm9BgKyOrhghooOzuwL9qczJIVN+P3ndxdiQYpUiYUuCjTjFSIMST VAJXFMqpSq3d8vvwC6y2lJuCUNhw38dsg/LJDiT1p06rXnUKN3DV8L2bidVZEGNt Hee8TaKdtyIBFj6faCmsRrP3o0FXLxgPeUJTloLCkVldVcIA4g8Eypm9V6Jazlat h8VbLvXyjzd0WxbAPltluwJ9u6kCAwEAAaOCAsUwggLBMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFM0qsTpES/4ZSTGGQ07ocs7IoZUuMB8GA1UdIwQYMBaAFKVu hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTA5NzA0MTgxNTg0NTk5NDQ5OS8wLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDk3MDQxODE1ODQ1OTk0NDk5 LzAvQ0QyQUIxM0E0NDRCRkUxOTQ5MzE4NjQzNEVFODcyQ0VDOEExOTUyRS5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUH AQcBAf8EHzAdMAwEAgABMAYDBAJnTnwwDQQCAAIwBwMFACQH7MAwGgYIKwYBBQUH AQgBAf8ECzAJoAcwBQIDAPimMA0GCSqGSIb3DQEBCwUAA4IBAQBVlNoZ+h4rn27Z Sw0AKO9/qxm5xkCDeC1fS+HqXboWncKYIT9jwGQlfZlrfUS7+n4Lx6cx5DYRVlcq 8LxnyDdSgCkVPgft2qfdUKa5Q57w7ZlIK36at15/IgIORhpPMQvc2DKvNCJQA3Db XfZ3QwkKLfafiqbRCHCDzliA8ZAsMTJh1VrA54+jlFjcni8/yokbhn1cFn+LYBO2 N01meyv1ElVCTUVjKJ8M/DW9x1A0/QP6hGIya0TQ4TrjNqJjEKE9Spd9aj49XITG GQxrIbJX5O59/JUDgxpAOgbZufuJZa0XyOWyBCxIndDl1g3Dxf7SFYMKUiBcRoTM nqvecF0k -----END CERTIFICATE-----Generated at Fri Apr 17 17:51:28 2026 by rpki-client