$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E15D0A4DD3C3FB3813EBF7DE2AFC0E0EE9BC00F7.cer File: E15D0A4DD3C3FB3813EBF7DE2AFC0E0EE9BC00F7.cer (raw, json) Hash identifier: vhqJmL1NBZOAR59s+5Qx3xFlhBo5FH3uf+kWbNgKBAI= Subject key identifier: E1:5D:0A:4D:D3:C3:FB:38:13:EB:F7:DE:2A:FC:0E:0E:E9:BC:00:F7 Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Certificate serial: 53766C4AF7176A9A48220D2B7E3F40ECA98AB59D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1097077346453749761/0/E15D0A4DD3C3FB3813EBF7DE2AFC0E0EE9BC00F7.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1097077346453749761/0/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Thu 16 Apr 2026 08:35:59 +0000 Certificate not after: Thu 15 Apr 2027 08:40:59 +0000 Subordinate resources: IP: 103.171.166.0/23 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 17:12:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:76:6c:4a:f7:17:6a:9a:48:22:0d:2b:7e:3f:40:ec:a9:8a:b5:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Validity Not Before: Apr 16 08:35:59 2026 GMT Not After : Apr 15 08:40:59 2027 GMT Subject: CN=E15D0A4DD3C3FB3813EBF7DE2AFC0E0EE9BC00F7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:8b:89:e5:1d:51:57:8a:09:e7:f2:2e:7f:43: f7:1f:3c:71:d6:0a:26:70:84:d9:1c:9d:56:36:20: 32:41:6b:27:e2:08:01:39:ea:52:c7:35:72:8c:ff: 1b:b7:8a:bb:cb:cb:ce:ff:0d:e1:ba:c1:cc:ca:a0: 09:7a:b5:42:16:f7:06:1a:9d:c1:76:88:fc:13:a9: 7a:01:4e:71:c2:aa:68:ea:ba:f8:d9:6c:d2:9e:ea: f6:f9:42:69:61:b8:52:2c:e0:86:10:81:23:79:63: 26:36:33:da:d7:e4:5d:e2:f8:37:92:bb:cc:11:25: 7f:1f:e1:6b:96:e4:e3:de:20:aa:fb:d4:4d:3d:49: 1a:05:b8:7a:7d:cf:ab:84:05:40:62:12:48:0d:26: 9b:2d:a8:81:5c:0a:69:5b:6a:fc:d2:30:b9:4e:4b: fb:1d:71:c0:e8:4e:d4:ab:03:9f:7c:65:42:40:dc: 91:10:65:98:53:2e:c6:16:fb:3d:e4:aa:62:0b:97: e0:08:38:95:91:1e:79:47:b3:28:58:87:cb:db:24: 7d:24:f8:f2:36:02:54:49:d8:8a:c4:8d:96:7c:28: 1d:de:89:a3:2b:61:b2:fa:0c:85:fa:f3:21:4d:1e: ad:c8:ce:55:a8:d4:0c:bc:20:a0:fe:da:72:d7:65: f3:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: E1:5D:0A:4D:D3:C3:FB:38:13:EB:F7:DE:2A:FC:0E:0E:E9:BC:00:F7 X509v3 Authority Key Identifier: keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1097077346453749761/0/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1097077346453749761/0/E15D0A4DD3C3FB3813EBF7DE2AFC0E0EE9BC00F7.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.171.166.0/23 Signature Algorithm: sha256WithRSAEncryption 67:d8:f1:8b:cf:d7:84:42:07:74:de:d2:91:ab:17:95:6f:bd: 85:87:aa:67:cd:69:f3:c8:3d:d8:89:e3:14:87:6b:0c:5e:26: f2:2f:9c:a8:0d:ea:63:c0:01:ef:ae:9d:81:cc:0b:58:71:ba: f4:59:e2:2f:00:82:d0:8f:55:31:00:4d:60:f4:fc:91:3e:f9: 46:bc:20:8e:d7:be:c0:f9:0b:17:60:52:c1:e6:73:7d:c0:81: 45:37:21:13:bc:28:b9:08:e5:ab:77:b0:db:c6:f1:6b:58:de: 47:6f:91:26:c9:c1:6f:44:e3:25:01:7e:47:8e:2d:5b:9f:df: 1b:74:06:e4:b5:c8:d9:f9:e7:88:20:c8:90:8b:2d:da:42:27: 59:b0:a0:18:ae:da:72:b0:3f:30:e9:6e:ae:2e:ed:78:89:fe: 60:db:b1:15:77:5b:7b:f7:77:fb:15:b8:a9:39:23:e4:ef:d8: 09:f8:71:96:32:3e:8f:9d:77:67:2c:be:7a:f2:c5:82:ba:ff: d6:c1:9e:07:2e:40:6b:2d:a0:2a:e3:10:10:7d:16:45:92:14: 09:4a:da:63:d6:96:82:23:52:38:d1:3b:f1:38:98:44:78:26: 23:68:4d:ac:2c:d8:8f:e5:0f:00:b9:28:ba:16:5d:76:f3:d6: 67:23:8a:74 -----BEGIN CERTIFICATE----- MIIFpzCCBI+gAwIBAgIUU3ZsSvcXappIIg0rfj9A7KmKtZ0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDQxNjA4MzU1OVoX DTI3MDQxNTA4NDA1OVowMzExMC8GA1UEAxMoRTE1RDBBNEREM0MzRkIzODEzRUJG N0RFMkFGQzBFMEVFOUJDMDBGNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAN6LieUdUVeKCefyLn9D9x88cdYKJnCE2RydVjYgMkFrJ+IIATnqUsc1coz/ G7eKu8vLzv8N4brBzMqgCXq1Qhb3BhqdwXaI/BOpegFOccKqaOq6+Nls0p7q9vlC aWG4UizghhCBI3ljJjYz2tfkXeL4N5K7zBElfx/ha5bk494gqvvUTT1JGgW4en3P q4QFQGISSA0mmy2ogVwKaVtq/NIwuU5L+x1xwOhO1KsDn3xlQkDckRBlmFMuxhb7 PeSqYguX4Ag4lZEeeUezKFiHy9skfST48jYCVEnYisSNlnwoHd6JoythsvoMhfrz IU0ercjOVajUDLwgoP7actdl85sCAwEAAaOCApowggKWMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFOFdCk3Tw/s4E+v33ir8Dg7pvAD3MB8GA1UdIwQYMBaAFKVu hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTA5NzA3NzM0NjQ1Mzc0OTc2MS8wLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDk3MDc3MzQ2NDUzNzQ5NzYx LzAvRTE1RDBBNEREM0MzRkIzODEzRUJGN0RFMkFGQzBFMEVFOUJDMDBGNy5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAFnq6YwDQYJKoZIhvcNAQELBQADggEBAGfY8YvP 14RCB3Te0pGrF5VvvYWHqmfNafPIPdiJ4xSHawxeJvIvnKgN6mPAAe+unYHMC1hx uvRZ4i8AgtCPVTEATWD0/JE++Ua8II7XvsD5CxdgUsHmc33AgUU3IRO8KLkI5at3 sNvG8WtY3kdvkSbJwW9E4yUBfkeOLVuf3xt0BuS1yNn554ggyJCLLdpCJ1mwoBiu 2nKwPzDpbq4u7XiJ/mDbsRV3W3v3d/sVuKk5I+Tv2An4cZYyPo+dd2csvnryxYK6 /9bBngcuQGstoCrjEBB9FkWSFAlK2mPWloIjUjjRO/E4mER4JiNoTaws2I/lDwC5 KLoWXXbz1mcjinQ= -----END CERTIFICATE-----Generated at Sat Apr 18 06:06:37 2026 by rpki-client