$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2F863C823D698CAFEC32C2822E4894974B574DD1.cer File: 2F863C823D698CAFEC32C2822E4894974B574DD1.cer (raw, json) Hash identifier: c2mt2xCOqqeGe9xwuM4FGvNDE60pEPm+BCJhpcjU4Ug= Subject key identifier: 2F:86:3C:82:3D:69:8C:AF:EC:32:C2:82:2E:48:94:97:4B:57:4D:D1 Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Certificate serial: 69EC52446C7B4AB73476A7CF374718F5EC2F4154 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1094892088912248835/0/2F863C823D698CAFEC32C2822E4894974B574DD1.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1094892088912248835/0/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Fri 10 Apr 2026 07:45:18 +0000 Certificate not after: Fri 09 Apr 2027 07:50:18 +0000 Subordinate resources: IP: 202.143.16.0/23 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 12:10:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:ec:52:44:6c:7b:4a:b7:34:76:a7:cf:37:47:18:f5:ec:2f:41:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Validity Not Before: Apr 10 07:45:18 2026 GMT Not After : Apr 9 07:50:18 2027 GMT Subject: CN=2F863C823D698CAFEC32C2822E4894974B574DD1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:5b:21:41:8b:b0:f0:cf:23:90:e6:9c:aa:fa: 9d:a7:10:57:c6:6a:be:37:f4:02:40:84:24:42:c2: 96:fd:17:b9:bd:34:75:f0:03:f0:c8:79:7f:7c:e3: 46:e0:b8:5b:70:85:05:32:1b:a3:ea:8a:4b:a7:95: 13:21:57:e6:24:40:4f:d3:5f:22:d6:4e:fb:97:b4: 78:09:db:a5:bb:ac:e1:74:d4:2b:8e:58:35:87:63: bd:57:4a:b7:ff:e2:40:9a:a9:35:73:b9:66:c7:f4: 72:44:8a:54:6d:63:83:38:85:34:80:3e:93:fb:f8: 12:23:11:0c:a0:d4:05:de:7d:32:6b:1d:e7:b2:23: 78:22:5f:ca:07:41:c1:51:e3:99:2a:a0:67:24:19: 09:b3:c2:b3:15:6b:54:86:ea:16:84:09:99:81:bd: a1:36:7e:27:ba:be:f7:8f:9a:ca:64:dc:43:eb:d5: 76:07:40:df:ca:49:66:98:c1:db:16:4b:ea:3d:53: 15:eb:b3:79:ef:bf:25:82:01:f0:a0:e1:cf:ac:43: 48:d3:0a:3b:79:76:7f:24:0f:d9:d5:72:72:14:2c: 67:32:b0:7c:01:14:71:a2:af:3e:47:71:2e:5e:3a: e2:e1:9b:84:c0:fe:86:4c:36:17:72:99:84:15:97: 71:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 2F:86:3C:82:3D:69:8C:AF:EC:32:C2:82:2E:48:94:97:4B:57:4D:D1 X509v3 Authority Key Identifier: keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1094892088912248835/0/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1094892088912248835/0/2F863C823D698CAFEC32C2822E4894974B574DD1.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.143.16.0/23 Signature Algorithm: sha256WithRSAEncryption 26:79:6b:8e:b7:ed:d1:79:a1:3b:d8:36:8e:fc:7f:54:94:a4: 61:59:12:ba:86:1d:a6:4e:57:90:09:99:f7:43:64:3a:d5:50: 89:95:4e:5a:2f:d4:e5:0c:8c:09:09:fd:07:0a:0c:a7:01:73: eb:61:bd:45:ad:f6:e4:52:4f:cf:12:d2:2c:30:fe:22:50:25: 2d:a7:65:60:6a:5f:33:39:b1:f8:30:81:c0:a9:7a:b9:e4:a9: 3f:c4:c3:97:ca:17:d6:fa:3c:fd:e2:0f:18:ef:b1:84:bf:ad: a3:04:77:5a:bf:bb:a8:8f:6d:fd:66:49:3d:e3:95:36:44:ac: f2:00:60:6a:a8:5e:cd:e8:c1:7d:ad:b8:00:95:52:bc:a9:e7: 03:3b:05:bc:85:52:3a:5c:9c:11:2c:51:e0:de:b4:41:08:9d: 30:16:c6:1f:f5:97:9c:7a:70:59:28:b0:da:be:aa:53:69:5e: 48:32:fd:ff:6c:84:10:1a:fd:05:3a:ab:27:9e:b4:86:48:6b: 13:aa:07:0d:f8:88:ec:8b:bf:33:08:a3:8e:cc:ad:b4:73:3c: 6e:89:e0:63:94:66:09:01:da:13:79:dd:89:42:60:64:64:3b: 2d:ad:8e:cb:28:7f:69:ce:36:fa:f6:c7:55:e7:a2:c1:e7:f9: 76:ca:55:12 -----BEGIN CERTIFICATE----- MIIFpzCCBI+gAwIBAgIUaexSRGx7Src0dqfPN0cY9ewvQVQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDQxMDA3NDUxOFoX DTI3MDQwOTA3NTAxOFowMzExMC8GA1UEAxMoMkY4NjNDODIzRDY5OENBRkVDMzJD MjgyMkU0ODk0OTc0QjU3NEREMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMVbIUGLsPDPI5DmnKr6nacQV8Zqvjf0AkCEJELClv0Xub00dfAD8Mh5f3zj RuC4W3CFBTIbo+qKS6eVEyFX5iRAT9NfItZO+5e0eAnbpbus4XTUK45YNYdjvVdK t//iQJqpNXO5Zsf0ckSKVG1jgziFNIA+k/v4EiMRDKDUBd59Mmsd57IjeCJfygdB wVHjmSqgZyQZCbPCsxVrVIbqFoQJmYG9oTZ+J7q+94+aymTcQ+vVdgdA38pJZpjB 2xZL6j1TFeuzee+/JYIB8KDhz6xDSNMKO3l2fyQP2dVychQsZzKwfAEUcaKvPkdx Ll464uGbhMD+hkw2F3KZhBWXceMCAwEAAaOCApowggKWMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFC+GPII9aYyv7DLCgi5IlJdLV03RMB8GA1UdIwQYMBaAFKVu hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTA5NDg5MjA4ODkxMjI0ODgzNS8wLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDk0ODkyMDg4OTEyMjQ4ODM1 LzAvMkY4NjNDODIzRDY5OENBRkVDMzJDMjgyMkU0ODk0OTc0QjU3NEREMS5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAHKjxAwDQYJKoZIhvcNAQELBQADggEBACZ5a463 7dF5oTvYNo78f1SUpGFZErqGHaZOV5AJmfdDZDrVUImVTlov1OUMjAkJ/QcKDKcB c+thvUWt9uRST88S0iww/iJQJS2nZWBqXzM5sfgwgcCpernkqT/Ew5fKF9b6PP3i DxjvsYS/raMEd1q/u6iPbf1mST3jlTZErPIAYGqoXs3owX2tuACVUryp5wM7BbyF UjpcnBEsUeDetEEInTAWxh/1l5x6cFkosNq+qlNpXkgy/f9shBAa/QU6qyeetIZI axOqBw34iOyLvzMIo47MrbRzPG6J4GOUZgkB2hN53YlCYGRkOy2tjssof2nONvr2 x1XnosHn+XbKVRI= -----END CERTIFICATE-----Generated at Mon Apr 13 09:29:14 2026 by rpki-client