$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2D55A041FCB7F9FF7365E90A7DDA8542D8F31756.cer File: 2D55A041FCB7F9FF7365E90A7DDA8542D8F31756.cer (raw, json) Hash identifier: y9tp6/ayNWJLjkfQavrhDvZ2JTErxTP50rzrcw6TSWo= Subject key identifier: 2D:55:A0:41:FC:B7:F9:FF:73:65:E9:0A:7D:DA:85:42:D8:F3:17:56 Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Certificate serial: 6B9A9DA9A3F86257AA36FBF5DF5353F67C53E3EE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1094791290421248001/0/2D55A041FCB7F9FF7365E90A7DDA8542D8F31756.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1094791290421248001/0/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Fri 10 Apr 2026 01:04:45 +0000 Certificate not after: Fri 09 Apr 2027 01:09:45 +0000 Subordinate resources: AS: 37943 IP: 103.31.160.0/22 IP: 122.114.0.0/16 IP: 182.236.128.0/17 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 12:10:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:9a:9d:a9:a3:f8:62:57:aa:36:fb:f5:df:53:53:f6:7c:53:e3:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Validity Not Before: Apr 10 01:04:45 2026 GMT Not After : Apr 9 01:09:45 2027 GMT Subject: CN=2D55A041FCB7F9FF7365E90A7DDA8542D8F31756 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:50:8f:c2:34:9d:a8:d0:49:c0:f5:32:9b:dc: fe:ad:dd:aa:40:6a:95:ca:b6:33:3f:1a:41:12:e9: 9a:50:93:eb:f9:b8:97:41:0e:b6:8c:8f:02:6c:00: 81:42:35:96:f5:94:ad:73:40:a6:c1:6a:ac:a5:44: a9:34:2b:4f:de:65:f3:16:cc:5d:c8:9e:3f:60:ad: e3:e9:e3:0a:c4:a2:47:a1:e9:c6:29:ee:ac:86:a1: 84:a3:16:96:28:dd:2b:f6:f2:22:c7:35:54:5e:13: 7e:eb:64:40:68:46:e4:3d:e0:90:d2:47:b4:da:f6: bf:68:15:9a:a0:21:cc:d9:f2:0e:dd:8c:ca:04:90: 19:61:79:da:1d:28:27:77:06:a5:2a:44:51:fd:ff: 0e:cb:8f:b3:1a:65:fd:5f:0b:62:f4:21:a6:7e:a0: a6:79:ef:fc:d9:27:7a:c3:e3:f7:0a:95:06:50:c7: a1:dd:1a:03:a9:85:70:7c:81:4e:86:f3:e7:ec:10: 1e:21:32:f1:2d:e8:87:af:1a:c3:13:a1:9a:88:56: 58:6a:9d:63:ae:e7:43:74:c2:56:dd:95:2a:76:4d: 6d:f0:1f:87:ea:2e:17:e7:76:f5:87:4b:40:a9:8b: ed:40:d7:22:0b:fc:49:3c:42:26:40:77:74:b4:7a: b8:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 2D:55:A0:41:FC:B7:F9:FF:73:65:E9:0A:7D:DA:85:42:D8:F3:17:56 X509v3 Authority Key Identifier: keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1094791290421248001/0/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1094791290421248001/0/2D55A041FCB7F9FF7365E90A7DDA8542D8F31756.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.31.160.0/22 122.114.0.0/16 182.236.128.0/17 sbgp-autonomousSysNum: critical Autonomous System Numbers: 37943 Signature Algorithm: sha256WithRSAEncryption 3f:5a:af:8c:0e:bf:e6:06:6a:85:d0:bd:c3:1d:3e:d6:31:63: 76:bb:84:8b:2e:e5:f1:70:21:8a:59:40:16:f8:78:51:1a:24: 0f:a5:cf:00:00:e7:ac:5a:a3:a8:59:51:2c:f2:e9:c0:da:36: f5:1b:0c:6e:79:81:b1:c5:3e:6d:93:62:c5:9d:a1:e2:74:f8: 54:31:2b:7b:30:76:0c:f5:95:e6:27:a1:de:2c:38:04:c1:a5: af:2e:93:59:e5:75:11:e1:9c:73:e3:a2:e4:43:db:58:44:aa: b5:5d:5e:4c:17:c4:c3:9c:6e:ce:94:73:6f:b9:43:92:da:00: 95:06:90:1e:71:a6:e6:8b:98:eb:13:a2:98:4c:56:f5:fb:fa: d9:7a:f8:c7:8c:a4:ee:7f:e4:a0:1e:2d:0d:e1:33:73:93:fe: 2f:f7:91:f4:10:73:95:ae:75:09:cd:9c:e3:17:a1:35:ba:6e: 2a:08:1a:6a:42:83:93:7e:b9:66:9e:41:11:3f:19:69:30:3c: 82:8e:3f:a3:b7:df:e4:da:b2:05:d6:6e:58:c9:4f:96:df:cd: 83:6c:e0:b1:6b:6f:d4:6c:50:0f:0f:e6:4d:62:e0:a3:5e:e9: 5f:cf:34:b4:1b:70:91:af:11:cf:a9:6d:74:24:15:c8:cf:fc: 17:39:77:e1 -----BEGIN CERTIFICATE----- MIIFzjCCBLagAwIBAgIUa5qdqaP4YleqNvv131NT9nxT4+4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDQxMDAxMDQ0NVoX DTI3MDQwOTAxMDk0NVowMzExMC8GA1UEAxMoMkQ1NUEwNDFGQ0I3RjlGRjczNjVF OTBBN0REQTg1NDJEOEYzMTc1NjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAM1Qj8I0najQScD1Mpvc/q3dqkBqlcq2Mz8aQRLpmlCT6/m4l0EOtoyPAmwA gUI1lvWUrXNApsFqrKVEqTQrT95l8xbMXcieP2Ct4+njCsSiR6HpxinurIahhKMW lijdK/byIsc1VF4TfutkQGhG5D3gkNJHtNr2v2gVmqAhzNnyDt2MygSQGWF52h0o J3cGpSpEUf3/DsuPsxpl/V8LYvQhpn6gpnnv/NknesPj9wqVBlDHod0aA6mFcHyB Tobz5+wQHiEy8S3oh68awxOhmohWWGqdY67nQ3TCVt2VKnZNbfAfh+ouF+d29YdL QKmL7UDXIgv8STxCJkB3dLR6uGECAwEAAaOCAsEwggK9MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFC1VoEH8t/n/c2XpCn3ahULY8xdWMB8GA1UdIwQYMBaAFKVu hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTA5NDc5MTI5MDQyMTI0ODAwMS8wLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDk0NzkxMjkwNDIxMjQ4MDAx LzAvMkQ1NUEwNDFGQ0I3RjlGRjczNjVFOTBBN0REQTg1NDJEOEYzMTc1Ni5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwKgYIKwYBBQUH AQcBAf8EGzAZMBcEAgABMBEDBAJnH6ADAwB6cgMEB7bsgDAaBggrBgEFBQcBCAEB /wQLMAmgBzAFAgMAlDcwDQYJKoZIhvcNAQELBQADggEBAD9ar4wOv+YGaoXQvcMd PtYxY3a7hIsu5fFwIYpZQBb4eFEaJA+lzwAA56xao6hZUSzy6cDaNvUbDG55gbHF Pm2TYsWdoeJ0+FQxK3swdgz1leYnod4sOATBpa8uk1nldRHhnHPjouRD21hEqrVd XkwXxMOcbs6Uc2+5Q5LaAJUGkB5xpuaLmOsTophMVvX7+tl6+MeMpO5/5KAeLQ3h M3OT/i/3kfQQc5WudQnNnOMXoTW6bioIGmpCg5N+uWaeQRE/GWkwPIKOP6O33+Ta sgXWbljJT5bfzYNs4LFrb9RsUA8P5k1i4KNe6V/PNLQbcJGvEc+pbXQkFcjP/Bc5 d+E= -----END CERTIFICATE-----Generated at Mon Apr 13 09:28:28 2026 by rpki-client