$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/29BAE90B795BA6BB50390EB31964E6F823BAB331.cer File: 29BAE90B795BA6BB50390EB31964E6F823BAB331.cer (raw, json) Hash identifier: G0HqlGpgqHtxupzQgdtfBfbhtSYelGhJwKneIOECQTE= Subject key identifier: 29:BA:E9:0B:79:5B:A6:BB:50:39:0E:B3:19:64:E6:F8:23:BA:B3:31 Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Certificate serial: 1405465C60BCAD0008724C9D9804909FCEC6FEDB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1094871149650640897/0/29BAE90B795BA6BB50390EB31964E6F823BAB331.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1094871149650640897/0/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Fri 10 Apr 2026 06:22:05 +0000 Certificate not after: Fri 09 Apr 2027 06:27:05 +0000 Subordinate resources: AS: 37962 AS: 38364 IP: 114.66.81.0/24 IP: 122.200.64.0/19 IP: 2403:7580::/32 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 12:10:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:05:46:5c:60:bc:ad:00:08:72:4c:9d:98:04:90:9f:ce:c6:fe:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Validity Not Before: Apr 10 06:22:05 2026 GMT Not After : Apr 9 06:27:05 2027 GMT Subject: CN=29BAE90B795BA6BB50390EB31964E6F823BAB331 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:ed:f5:8b:b0:14:61:df:81:e7:71:60:19:d1: 8e:0d:8e:72:41:8f:fc:41:9a:af:cb:1b:c3:cb:af: 42:99:60:f1:a7:57:ee:92:f9:69:f2:6c:80:f4:80: 5d:bd:a6:51:8b:c3:1f:9f:03:fd:42:04:2d:fc:5e: 18:4a:29:30:35:2e:0b:80:2a:30:38:8e:c9:f6:c0: 89:68:8a:b1:3e:4e:df:c3:fd:cf:e0:fe:8d:3a:b1: d6:4c:2f:f6:93:40:f2:fa:ae:29:92:13:e3:d2:72: aa:bf:00:a5:69:cf:d8:66:93:94:bd:64:de:62:7a: 7a:51:89:12:bd:d7:2e:6d:da:49:91:1f:a1:a6:ac: 0c:4c:54:6b:08:d0:db:7b:02:df:a9:ae:0a:cc:73: e8:cf:b8:c3:08:10:d4:aa:c4:4c:94:f4:54:4d:ac: 3d:80:84:8c:d7:18:81:ab:d6:41:e1:3a:5e:2a:bb: b1:7c:42:2f:81:06:24:c4:47:59:0f:58:e7:00:63: f6:00:8e:ed:51:a0:dc:45:56:31:65:7d:12:24:68: 1f:7e:e2:02:f7:e3:1e:bf:4b:c6:38:fc:ec:70:9d: 3c:2a:ea:c6:fb:8f:bc:ec:5f:7e:dd:84:f9:34:8b: 8b:e1:a9:8e:72:a4:9e:12:e1:3f:e0:37:d6:cd:1b: b6:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 29:BA:E9:0B:79:5B:A6:BB:50:39:0E:B3:19:64:E6:F8:23:BA:B3:31 X509v3 Authority Key Identifier: keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1094871149650640897/0/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1094871149650640897/0/29BAE90B795BA6BB50390EB31964E6F823BAB331.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 114.66.81.0/24 122.200.64.0/19 IPv6: 2403:7580::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 37962 38364 Signature Algorithm: sha256WithRSAEncryption 7b:d5:bd:2d:c6:fc:a8:4b:fa:01:3c:8a:ab:08:d6:a6:c4:de: cc:f0:fa:9d:2a:cd:8b:95:03:dc:e3:9a:71:1a:cc:b0:80:f2: c6:1e:df:dd:5f:99:d4:14:48:6b:97:d2:de:42:ab:d9:f5:e9: 1c:84:4e:1c:d9:d0:b3:4d:7d:13:73:fa:89:06:6c:f8:9b:de: 0d:1b:ba:41:5f:1a:b3:35:ed:92:ff:56:44:ad:9e:cf:19:4a: bc:03:80:29:f6:73:ce:d8:f0:39:6f:f3:8d:a4:af:24:d9:c0: 9a:e7:2e:04:89:5f:74:98:7e:ee:6d:06:c5:0b:b1:c0:e4:75: e4:a3:bd:93:3b:47:d5:93:c2:9d:1f:df:61:f7:ee:09:6e:13: ea:31:7f:7e:be:05:4a:9d:89:98:9f:ce:5c:f8:d0:e4:c6:64: 1f:33:94:ca:9c:9f:fd:ec:6a:29:c4:92:a8:69:04:d0:13:8c: be:9b:fe:9d:46:5e:5c:c2:41:9f:a8:84:e1:c1:89:ca:ea:7d: 15:95:90:b2:49:48:ee:ba:22:e2:ee:0e:1a:1b:88:46:fe:79: c5:09:e4:6d:e8:a5:b6:17:a4:46:b7:41:17:68:fa:c0:4e:af: e7:d7:e0:15:c9:64:16:21:07:8b:d0:06:76:26:8f:a1:56:eb: 20:f6:e5:35 -----BEGIN CERTIFICATE----- MIIF3TCCBMWgAwIBAgIUFAVGXGC8rQAIckydmASQn87G/tswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDQxMDA2MjIwNVoX DTI3MDQwOTA2MjcwNVowMzExMC8GA1UEAxMoMjlCQUU5MEI3OTVCQTZCQjUwMzkw RUIzMTk2NEU2RjgyM0JBQjMzMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAN/t9YuwFGHfgedxYBnRjg2OckGP/EGar8sbw8uvQplg8adX7pL5afJsgPSA Xb2mUYvDH58D/UIELfxeGEopMDUuC4AqMDiOyfbAiWiKsT5O38P9z+D+jTqx1kwv 9pNA8vquKZIT49Jyqr8ApWnP2GaTlL1k3mJ6elGJEr3XLm3aSZEfoaasDExUawjQ 23sC36muCsxz6M+4wwgQ1KrETJT0VE2sPYCEjNcYgavWQeE6Xiq7sXxCL4EGJMRH WQ9Y5wBj9gCO7VGg3EVWMWV9EiRoH37iAvfjHr9Lxjj87HCdPCrqxvuPvOxfft2E +TSLi+GpjnKknhLhP+A31s0btnUCAwEAAaOCAtAwggLMMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFCm66Qt5W6a7UDkOsxlk5vgjurMxMB8GA1UdIwQYMBaAFKVu hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTA5NDg3MTE0OTY1MDY0MDg5Ny8wLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDk0ODcxMTQ5NjUwNjQwODk3 LzAvMjlCQUU5MEI3OTVCQTZCQjUwMzkwRUIzMTk2NEU2RjgyM0JBQjMzMS5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwNAYIKwYBBQUH AQcBAf8EJTAjMBIEAgABMAwDBAByQlEDBAV6yEAwDQQCAAIwBwMFACQDdYAwHwYI KwYBBQUHAQgBAf8EEDAOoAwwCgIDAJRKAgMAldwwDQYJKoZIhvcNAQELBQADggEB AHvVvS3G/KhL+gE8iqsI1qbE3szw+p0qzYuVA9zjmnEazLCA8sYe391fmdQUSGuX 0t5Cq9n16RyEThzZ0LNNfRNz+okGbPib3g0bukFfGrM17ZL/VkStns8ZSrwDgCn2 c87Y8Dlv842kryTZwJrnLgSJX3SYfu5tBsULscDkdeSjvZM7R9WTwp0f32H37glu E+oxf36+BUqdiZifzlz40OTGZB8zlMqcn/3sainEkqhpBNATjL6b/p1GXlzCQZ+o hOHBicrqfRWVkLJJSO66IuLuDhobiEb+ecUJ5G3opbYXpEa3QRdo+sBOr+fX4BXJ ZBYhB4vQBnYmj6FW6yD25TU= -----END CERTIFICATE-----Generated at Mon Apr 13 09:29:08 2026 by rpki-client