$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0D429776CCC3D4CCC09E03C68188C3DFA9B1CF94.cer File: 0D429776CCC3D4CCC09E03C68188C3DFA9B1CF94.cer (raw, json) Hash identifier: dYwmKQzkyu81LCiLycIgvwYirxNjazOMiDfNdrKc6+c= Subject key identifier: 0D:42:97:76:CC:C3:D4:CC:C0:9E:03:C6:81:88:C3:DF:A9:B1:CF:94 Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Certificate serial: 719FF7D5ADD354155BBA359C7D7107156C86FD00 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1094781107506774017/0/0D429776CCC3D4CCC09E03C68188C3DFA9B1CF94.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1094781107506774017/0/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Fri 10 Apr 2026 00:26:45 +0000 Certificate not after: Fri 09 Apr 2027 00:31:45 +0000 Subordinate resources: IP: 210.74.176.0/22 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 12:10:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:9f:f7:d5:ad:d3:54:15:5b:ba:35:9c:7d:71:07:15:6c:86:fd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Validity Not Before: Apr 10 00:26:45 2026 GMT Not After : Apr 9 00:31:45 2027 GMT Subject: CN=0D429776CCC3D4CCC09E03C68188C3DFA9B1CF94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:15:5b:b8:73:35:8a:be:c6:d1:51:fe:61:5d: b3:98:d6:7f:9b:b7:75:9a:91:24:2c:76:c1:e8:dd: c0:6d:c7:0d:9c:e5:ba:71:d0:6b:c6:21:db:c2:df: fe:94:60:07:39:63:e5:30:b3:77:5f:aa:15:9d:1c: 27:d0:43:50:77:bb:c6:fd:cf:86:56:56:07:c8:98: 8d:e6:09:5c:95:7f:5a:55:b8:f2:26:1e:3d:1d:26: 6f:fb:b3:d0:d2:19:04:9d:22:78:8b:02:9b:0c:1e: a9:42:16:44:a8:41:2a:42:41:96:49:67:7c:81:b0: 62:98:92:4e:13:c3:a7:80:bb:9e:00:ca:46:1b:a4: 3c:6c:ef:8a:ed:54:96:ed:98:be:83:ad:ec:16:ca: 80:b9:ef:32:ae:eb:eb:7b:a2:2a:3e:c7:60:bd:24: 2b:b1:e1:68:40:85:04:49:ae:09:55:f5:b0:ff:90: ca:ce:cb:e1:6b:d5:3b:08:a4:cf:d0:e9:9b:fa:ba: 11:dc:a2:66:a6:55:57:94:74:a9:72:9b:59:83:77: 25:6b:71:81:7a:51:4a:11:10:77:e1:ce:f7:13:76: 0c:7e:4e:49:f7:4a:f7:ba:1e:6c:48:47:84:d4:a4: 7b:80:2e:20:fa:c3:ad:b3:15:83:a7:c5:a7:94:bb: 64:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 0D:42:97:76:CC:C3:D4:CC:C0:9E:03:C6:81:88:C3:DF:A9:B1:CF:94 X509v3 Authority Key Identifier: keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1094781107506774017/0/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1094781107506774017/0/0D429776CCC3D4CCC09E03C68188C3DFA9B1CF94.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 210.74.176.0/22 Signature Algorithm: sha256WithRSAEncryption 36:99:6a:38:5b:5d:e9:35:c4:c6:fb:e0:4c:4c:09:56:2f:80: 96:b8:97:cc:0a:39:7d:79:dc:8a:aa:2f:e8:45:f6:c5:a1:1c: 5a:09:5f:42:93:46:79:d6:f6:fd:c7:08:c8:15:10:77:b0:94: 72:e0:b3:14:a2:1c:52:5a:63:2f:b9:99:80:5d:fd:33:e2:73: cd:ad:3a:19:dc:e4:d8:1e:ea:ea:4c:d8:ac:b4:d2:6f:6f:5d: e6:a3:1b:84:fc:7b:b7:e1:b9:6a:1b:f4:74:80:e1:f3:70:72: 8e:10:4e:3d:7d:66:53:0a:d4:85:7f:d7:f0:e1:fc:cc:28:6a: 16:92:21:b5:01:dc:21:e7:63:97:fe:0b:4c:ca:0c:4a:18:fe: db:cf:81:55:28:eb:03:84:77:5f:25:c5:04:c2:23:b1:14:5f: 68:54:fb:06:3c:a3:aa:5a:a4:ea:8c:ad:ff:cc:ac:ca:b3:d6: 41:9c:62:d7:2c:aa:aa:00:4d:12:d4:82:da:da:b2:21:06:48: e4:e4:af:29:a1:5d:6b:50:99:d4:08:08:d9:b6:1b:55:27:d2: 1f:80:5d:bb:ed:3d:35:5f:fc:3d:74:9f:53:ce:f9:c5:a1:3f: eb:06:5c:e7:2e:59:2e:b3:37:34:fd:86:4f:d2:93:e1:ef:64: b6:44:b9:69 -----BEGIN CERTIFICATE----- MIIFpzCCBI+gAwIBAgIUcZ/31a3TVBVbujWcfXEHFWyG/QAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDQxMDAwMjY0NVoX DTI3MDQwOTAwMzE0NVowMzExMC8GA1UEAxMoMEQ0Mjk3NzZDQ0MzRDRDQ0MwOUUw M0M2ODE4OEMzREZBOUIxQ0Y5NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMoVW7hzNYq+xtFR/mFds5jWf5u3dZqRJCx2wejdwG3HDZzlunHQa8Yh28Lf /pRgBzlj5TCzd1+qFZ0cJ9BDUHe7xv3PhlZWB8iYjeYJXJV/WlW48iYePR0mb/uz 0NIZBJ0ieIsCmwweqUIWRKhBKkJBlklnfIGwYpiSThPDp4C7ngDKRhukPGzviu1U lu2YvoOt7BbKgLnvMq7r63uiKj7HYL0kK7HhaECFBEmuCVX1sP+Qys7L4WvVOwik z9Dpm/q6EdyiZqZVV5R0qXKbWYN3JWtxgXpRShEQd+HO9xN2DH5OSfdK97oebEhH hNSke4AuIPrDrbMVg6fFp5S7ZDUCAwEAAaOCApowggKWMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFA1Cl3bMw9TMwJ4DxoGIw9+psc+UMB8GA1UdIwQYMBaAFKVu hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTA5NDc4MTEwNzUwNjc3NDAxNy8wLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDk0NzgxMTA3NTA2Nzc0MDE3 LzAvMEQ0Mjk3NzZDQ0MzRDRDQ0MwOUUwM0M2ODE4OEMzREZBOUIxQ0Y5NC5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBALSSrAwDQYJKoZIhvcNAQELBQADggEBADaZajhb Xek1xMb74ExMCVYvgJa4l8wKOX153IqqL+hF9sWhHFoJX0KTRnnW9v3HCMgVEHew lHLgsxSiHFJaYy+5mYBd/TPic82tOhnc5Nge6upM2Ky00m9vXeajG4T8e7fhuWob 9HSA4fNwco4QTj19ZlMK1IV/1/Dh/MwoahaSIbUB3CHnY5f+C0zKDEoY/tvPgVUo 6wOEd18lxQTCI7EUX2hU+wY8o6papOqMrf/MrMqz1kGcYtcsqqoATRLUgtrasiEG SOTkrymhXWtQmdQICNm2G1Un0h+AXbvtPTVf/D10n1PO+cWhP+sGXOcuWS6zNzT9 hk/Sk+HvZLZEuWk= -----END CERTIFICATE-----Generated at Mon Apr 13 09:29:12 2026 by rpki-client