$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/22102F7EAB37C81E87BB5EB21560BFA6243553CC.cer File: 22102F7EAB37C81E87BB5EB21560BFA6243553CC.cer (raw, json) Hash identifier: TUH63eis7Wc15YzK8kK7f0u31dsirCqC5ycgOAqPLa0= Subject key identifier: 22:10:2F:7E:AB:37:C8:1E:87:BB:5E:B2:15:60:BF:A6:24:35:53:CC Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Certificate serial: 423C8AE0CECBA941D47308FF4F854D5653C619E6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1095920006954221569/1/22102F7EAB37C81E87BB5EB21560BFA6243553CC.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1095920006954221569/1/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Mon 13 Apr 2026 03:49:52 +0000 Certificate not after: Mon 12 Apr 2027 03:54:52 +0000 Subordinate resources: IP: 103.73.208.0/22 IP: 119.61.0.0/17 IP: 210.78.128.0/22 IP: 211.99.224.0/19 IP: 211.100.64.0/19 IP: 211.150.0.0 -- 211.150.191.255 IP: 211.157.128.0 -- 211.157.207.255 IP: 211.157.224.0/19 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 12:10:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:3c:8a:e0:ce:cb:a9:41:d4:73:08:ff:4f:85:4d:56:53:c6:19:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Validity Not Before: Apr 13 03:49:52 2026 GMT Not After : Apr 12 03:54:52 2027 GMT Subject: CN=22102F7EAB37C81E87BB5EB21560BFA6243553CC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:88:cd:aa:7a:7e:c2:2a:0e:93:f7:ee:67:ed: 24:ac:65:0b:8f:2a:c4:28:56:80:cd:7e:8b:9d:2a: 2b:5e:01:0f:a6:3d:18:43:93:bf:68:fc:bb:69:02: 75:c5:49:be:98:16:ba:76:e7:86:5d:4f:40:26:28: 2a:0e:14:6c:7d:ff:28:00:e3:15:93:5d:c7:cc:2a: 95:d2:b8:50:be:13:c0:75:59:7e:0b:ac:61:f8:7f: 50:23:57:70:ec:de:0a:6c:ce:62:a3:5d:b7:4c:ec: 1a:19:dd:cb:17:ee:09:75:d1:25:e9:0d:7e:6c:2b: 6d:77:67:f8:65:55:84:09:03:04:78:9e:e0:41:9c: fa:90:2b:22:5c:44:5b:b5:6d:f7:cc:e2:12:35:3a: ea:1e:85:11:94:46:e4:b1:f5:8f:72:2b:ef:4a:17: 32:24:23:15:fc:33:46:c6:71:b7:6f:b0:af:9f:4b: ef:79:4a:02:93:24:27:fa:6d:4f:0e:68:a2:73:ea: 71:31:ec:38:ba:6f:b9:cc:3a:79:5f:dc:09:e8:63: c1:36:13:55:e8:44:29:02:6f:b0:2e:55:33:45:a4: 0e:38:b8:fd:87:0d:ee:1c:f7:5a:84:49:76:91:9f: 1f:02:92:ff:7f:d3:32:c5:81:41:db:61:91:df:be: 06:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 22:10:2F:7E:AB:37:C8:1E:87:BB:5E:B2:15:60:BF:A6:24:35:53:CC X509v3 Authority Key Identifier: keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1095920006954221569/1/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1095920006954221569/1/22102F7EAB37C81E87BB5EB21560BFA6243553CC.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.73.208.0/22 119.61.0.0/17 210.78.128.0/22 211.99.224.0/19 211.100.64.0/19 211.150.0.0-211.150.191.255 211.157.128.0-211.157.207.255 211.157.224.0/19 Signature Algorithm: sha256WithRSAEncryption 4a:20:c0:c6:b0:45:83:79:69:4f:95:83:27:63:d0:f3:7a:16: 7d:0b:9e:2c:fd:a9:6c:fb:34:c5:85:d7:0b:82:4a:93:35:34: dd:e1:34:da:7d:03:16:6d:1c:73:29:e2:14:4c:98:c5:4a:b3: 89:e6:79:97:b9:4d:fa:50:6c:b2:ed:15:5f:eb:ec:e6:a8:3f: 9b:62:46:1b:fc:48:7e:f3:27:bd:70:0d:c9:2c:cf:7f:ad:ec: b5:e4:5a:17:32:2e:de:a6:bc:0d:be:94:30:d0:34:0c:3c:fb: 7d:ee:16:7b:7a:66:7b:f3:24:0a:b2:64:a5:a9:6a:5a:a8:66: 05:b6:ac:6b:f8:f5:e8:f5:bf:7c:fb:0d:99:81:f4:87:5d:25: 91:41:c4:a7:e7:6a:f9:28:7a:82:cf:e5:30:d8:9e:08:2e:a3: f2:b4:5d:12:69:0a:e1:e3:56:d7:3e:1f:1c:b9:8e:fa:e5:37: 03:76:86:f3:c5:54:44:22:a5:e5:fc:a2:6f:de:63:39:57:b0: 24:02:8d:1e:61:ff:31:be:d3:5f:d3:88:98:fd:2e:ad:35:d7: 2c:98:a1:33:48:49:0f:92:40:f6:dc:f9:9d:d6:19:bf:2f:57: d9:6f:c5:bf:a5:e1:11:21:90:4b:a6:0d:17:23:b5:78:1a:3c: d4:2d:f6:ae -----BEGIN CERTIFICATE----- MIIF4DCCBMigAwIBAgIUQjyK4M7LqUHUcwj/T4VNVlPGGeYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDQxMzAzNDk1MloX DTI3MDQxMjAzNTQ1MlowMzExMC8GA1UEAxMoMjIxMDJGN0VBQjM3QzgxRTg3QkI1 RUIyMTU2MEJGQTYyNDM1NTNDQzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANyIzap6fsIqDpP37mftJKxlC48qxChWgM1+i50qK14BD6Y9GEOTv2j8u2kC dcVJvpgWunbnhl1PQCYoKg4UbH3/KADjFZNdx8wqldK4UL4TwHVZfgusYfh/UCNX cOzeCmzOYqNdt0zsGhndyxfuCXXRJekNfmwrbXdn+GVVhAkDBHie4EGc+pArIlxE W7Vt98ziEjU66h6FEZRG5LH1j3Ir70oXMiQjFfwzRsZxt2+wr59L73lKApMkJ/pt Tw5oonPqcTHsOLpvucw6eV/cCehjwTYTVehEKQJvsC5VM0WkDji4/YcN7hz3WoRJ dpGfHwKS/3/TMsWBQdthkd++BuUCAwEAAaOCAtMwggLPMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFCIQL36rN8geh7teshVgv6YkNVPMMB8GA1UdIwQYMBaAFKVu hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTA5NTkyMDAwNjk1NDIyMTU2OS8xLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDk1OTIwMDA2OTU0MjIxNTY5 LzEvMjIxMDJGN0VBQjM3QzgxRTg3QkI1RUIyMTU2MEJGQTYyNDM1NTNDQy5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwWAYIKwYBBQUH AQcBAf8ESTBHMEUEAgABMD8DBAJnSdADBAd3PQADBALSToADBAXTY+ADBAXTZEAw CwMDAdOWAwQG05aAMAwDBAfTnYADBATTncADBAXTneAwDQYJKoZIhvcNAQELBQAD ggEBAEogwMawRYN5aU+Vgydj0PN6Fn0Lniz9qWz7NMWF1wuCSpM1NN3hNNp9AxZt HHMp4hRMmMVKs4nmeZe5TfpQbLLtFV/r7OaoP5tiRhv8SH7zJ71wDcksz3+t7LXk WhcyLt6mvA2+lDDQNAw8+33uFnt6ZnvzJAqyZKWpalqoZgW2rGv49ej1v3z7DZmB 9IddJZFBxKfnavkoeoLP5TDYngguo/K0XRJpCuHjVtc+Hxy5jvrlNwN2hvPFVEQi peX8om/eYzlXsCQCjR5h/zG+01/TiJj9Lq011yyYoTNISQ+SQPbc+Z3WGb8vV9lv xb+l4REhkEumDRcjtXgaPNQt9q4= -----END CERTIFICATE-----Generated at Mon Apr 13 09:29:27 2026 by rpki-client