$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3D426BEA44C56109707602923668D40F4458FBEF.cer File: 3D426BEA44C56109707602923668D40F4458FBEF.cer (raw, json) Hash identifier: baCD9A7k7WlQolosVf8cUF6HXxfxk757j7vzkQF7wBo= Subject key identifier: 3D:42:6B:EA:44:C5:61:09:70:76:02:92:36:68:D4:0F:44:58:FB:EF Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Certificate serial: 3635613A8CDD64D95E702144172E179D186B57FA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1094808409447858179/0/3D426BEA44C56109707602923668D40F4458FBEF.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1094808409447858179/0/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Fri 10 Apr 2026 02:12:46 +0000 Certificate not after: Fri 09 Apr 2027 02:17:46 +0000 Subordinate resources: AS: 151311 IP: 45.250.188.0 -- 45.250.195.255 IP: 103.95.252.0/22 IP: 103.219.92.0 -- 103.219.99.255 IP: 2401:71c0::/32 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 12:10:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:35:61:3a:8c:dd:64:d9:5e:70:21:44:17:2e:17:9d:18:6b:57:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Validity Not Before: Apr 10 02:12:46 2026 GMT Not After : Apr 9 02:17:46 2027 GMT Subject: CN=3D426BEA44C56109707602923668D40F4458FBEF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:fb:17:aa:b9:64:66:45:c9:02:6a:cf:8d:03: 75:ec:c6:7b:a9:7c:7c:e4:e4:ef:96:e0:11:8a:b7: cb:0e:eb:b4:9a:1d:82:09:00:78:77:58:9f:62:11: 07:10:d2:81:5b:91:85:67:65:b1:69:d6:78:e7:42: 3f:89:48:32:55:f6:4b:bc:38:ce:0b:66:06:24:d9: 2f:ad:40:48:19:ce:79:70:8a:57:5c:18:f9:86:3d: 0f:fe:fc:ad:10:e9:46:7e:07:c0:b5:b9:72:62:63: 83:30:ae:c8:46:35:b3:e2:47:da:7a:6c:7f:f0:10: b2:47:2e:ec:54:e4:87:c4:15:33:3d:64:cd:64:30: 8d:ae:cf:2d:3f:13:2d:51:76:39:94:f3:70:8b:7b: 7a:36:bd:72:79:88:c6:74:6c:80:91:02:ea:66:cc: b8:5a:75:c1:05:c8:cf:18:63:11:09:81:cc:90:c7: e6:9d:b4:51:bf:4e:c6:e3:89:eb:2b:db:10:d0:aa: 9f:83:c2:4d:b5:63:d5:18:6d:af:ab:e5:ee:06:b9: e4:f8:c8:0f:18:cc:bd:86:3b:51:99:52:f3:b6:c1: af:15:9e:49:6b:52:1a:50:79:71:a9:72:b0:e8:c7: 9d:55:95:e4:b4:3b:d1:ea:03:47:96:35:10:77:8e: 94:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 3D:42:6B:EA:44:C5:61:09:70:76:02:92:36:68:D4:0F:44:58:FB:EF X509v3 Authority Key Identifier: keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1094808409447858179/0/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1094808409447858179/0/3D426BEA44C56109707602923668D40F4458FBEF.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.250.188.0-45.250.195.255 103.95.252.0/22 103.219.92.0-103.219.99.255 IPv6: 2401:71c0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 151311 Signature Algorithm: sha256WithRSAEncryption 00:e0:c8:a5:32:3c:78:d0:c3:87:8f:ce:15:34:48:17:0d:fc: 97:9d:82:f6:b0:46:29:cf:6e:47:91:92:35:f0:71:d2:44:e5: 6f:a3:b5:65:87:1c:cd:ac:45:78:c0:79:3b:a7:9e:46:bb:0f: 12:ef:7f:ad:b4:91:65:5d:10:f2:c0:13:6b:bc:d9:6c:75:98: 47:17:aa:a9:b7:96:00:07:0c:99:6a:09:18:34:58:4b:84:9e: 05:4c:af:ab:a4:05:93:7b:58:a7:87:1a:c7:84:e0:0e:cc:03: e1:f3:a0:28:98:e3:53:06:8c:69:c7:18:38:74:14:f5:76:91: 51:b2:54:20:43:7f:b4:b9:3c:19:fc:ed:fb:7e:1c:a7:4d:f1: 1a:53:58:95:05:50:a8:41:9a:79:9e:0f:6b:a1:23:4d:c6:91: 1f:3c:9f:9a:66:cf:bb:fa:da:c2:f4:86:5f:71:ad:6a:4c:31: 0b:8c:14:20:cb:05:cb:a1:4c:d3:fd:d9:ab:61:8f:64:f5:ed: 50:3e:f5:07:c6:65:37:28:64:c8:b3:9e:52:25:80:7d:e8:04: 5d:ef:79:77:1e:ec:8e:25:08:90:41:f1:0d:1f:b4:b5:28:7f: 7a:54:80:a7:e3:10:d4:b4:08:cc:40:93:12:23:0e:57:c3:7f: 8d:fa:ef:6e -----BEGIN CERTIFICATE----- MIIF7jCCBNagAwIBAgIUNjVhOozdZNlecCFEFy4XnRhrV/owDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDQxMDAyMTI0NloX DTI3MDQwOTAyMTc0NlowMzExMC8GA1UEAxMoM0Q0MjZCRUE0NEM1NjEwOTcwNzYw MjkyMzY2OEQ0MEY0NDU4RkJFRjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANL7F6q5ZGZFyQJqz40DdezGe6l8fOTk75bgEYq3yw7rtJodggkAeHdYn2IR BxDSgVuRhWdlsWnWeOdCP4lIMlX2S7w4zgtmBiTZL61ASBnOeXCKV1wY+YY9D/78 rRDpRn4HwLW5cmJjgzCuyEY1s+JH2npsf/AQskcu7FTkh8QVMz1kzWQwja7PLT8T LVF2OZTzcIt7eja9cnmIxnRsgJEC6mbMuFp1wQXIzxhjEQmBzJDH5p20Ub9OxuOJ 6yvbENCqn4PCTbVj1Rhtr6vl7ga55PjIDxjMvYY7UZlS87bBrxWeSWtSGlB5caly sOjHnVWV5LQ70eoDR5Y1EHeOlB0CAwEAAaOCAuEwggLdMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFD1Ca+pExWEJcHYCkjZo1A9EWPvvMB8GA1UdIwQYMBaAFKVu hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTA5NDgwODQwOTQ0Nzg1ODE3OS8wLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDk0ODA4NDA5NDQ3ODU4MTc5 LzAvM0Q0MjZCRUE0NEM1NjEwOTcwNzYwMjkyMzY2OEQ0MEY0NDU4RkJFRi5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwSgYIKwYBBQUH AQcBAf8EOzA5MCgEAgABMCIwDAMEAi36vAMEAi36wAMEAmdf/DAMAwQCZ9tcAwQC Z9tgMA0EAgACMAcDBQAkAXHAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwJPDzAN BgkqhkiG9w0BAQsFAAOCAQEAAODIpTI8eNDDh4/OFTRIFw38l52C9rBGKc9uR5GS NfBx0kTlb6O1ZYcczaxFeMB5O6eeRrsPEu9/rbSRZV0Q8sATa7zZbHWYRxeqqbeW AAcMmWoJGDRYS4SeBUyvq6QFk3tYp4cax4TgDswD4fOgKJjjUwaMaccYOHQU9XaR UbJUIEN/tLk8Gfzt+34cp03xGlNYlQVQqEGaeZ4Pa6EjTcaRHzyfmmbPu/rawvSG X3GtakwxC4wUIMsFy6FM0/3Zq2GPZPXtUD71B8ZlNyhkyLOeUiWAfegEXe95dx7s jiUIkEHxDR+0tSh/elSAp+MQ1LQIzECTEiMOV8N/jfrvbg== -----END CERTIFICATE-----Generated at Mon Apr 13 09:29:06 2026 by rpki-client