$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/56F83115BDB2EC8491CB95EE1BC68BE786A3615A.cer File: 56F83115BDB2EC8491CB95EE1BC68BE786A3615A.cer (raw, json) Hash identifier: 3V8seIJAF8VvvfA4laTi2EawQpZ7oA8gddE71KwRuwg= Subject key identifier: 56:F8:31:15:BD:B2:EC:84:91:CB:95:EE:1B:C6:8B:E7:86:A3:61:5A Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Certificate serial: 2C37E5E95D302A9EB3C5DDEC6D285CF21AF9B7EC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1094488874987552769/1/56F83115BDB2EC8491CB95EE1BC68BE786A3615A.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1094488874987552769/1/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Thu 09 Apr 2026 05:03:03 +0000 Certificate not after: Thu 08 Apr 2027 05:08:03 +0000 Subordinate resources: AS: 151253 IP: 45.119.104.0/23 IP: 103.59.148.0/22 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 12:10:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:37:e5:e9:5d:30:2a:9e:b3:c5:dd:ec:6d:28:5c:f2:1a:f9:b7:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Validity Not Before: Apr 9 05:03:03 2026 GMT Not After : Apr 8 05:08:03 2027 GMT Subject: CN=56F83115BDB2EC8491CB95EE1BC68BE786A3615A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:d7:24:be:ce:29:d1:ba:0b:36:32:42:44:96: f2:73:2b:bd:4a:6c:0f:3c:76:d1:06:73:d6:08:f4: 46:56:85:1d:81:03:2f:30:1b:07:8d:fd:59:29:59: 68:fd:e3:c2:67:79:cf:76:e7:09:d4:ad:7b:2e:22: 3d:f9:98:43:4c:4a:97:13:5d:11:12:cb:ae:a8:2b: 6a:72:2b:bf:de:4e:11:7f:1b:f2:d2:e2:d5:ba:a0: 1e:f6:ca:54:2c:74:ae:8d:0e:94:44:3c:34:33:7e: 4d:0e:37:d2:af:a1:2d:ce:17:f0:69:4c:2d:65:dd: 89:8e:f5:ca:b8:d2:be:24:1b:0a:2e:29:a8:0e:0d: 9f:0b:88:cf:04:fa:16:a0:30:49:8b:15:e6:64:17: 87:e4:e7:0b:16:7b:2e:19:19:48:73:4c:a5:07:b4: 4b:14:1e:1d:cf:25:c8:67:32:64:f0:5c:ad:7d:ac: 9f:77:1f:7e:08:ee:07:38:65:70:3d:8b:fd:ad:72: bc:f7:e3:a4:bb:19:40:20:da:52:95:c5:84:b2:e9: 95:52:b8:27:34:1b:10:7d:51:0c:3c:3d:b8:0f:e1: bb:57:b9:3d:ac:db:b3:2c:94:71:72:05:67:cb:dd: 91:f9:99:05:44:43:cd:0f:34:cc:69:6d:63:59:71: 55:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 56:F8:31:15:BD:B2:EC:84:91:CB:95:EE:1B:C6:8B:E7:86:A3:61:5A X509v3 Authority Key Identifier: keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1094488874987552769/1/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1094488874987552769/1/56F83115BDB2EC8491CB95EE1BC68BE786A3615A.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.119.104.0/23 103.59.148.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 151253 Signature Algorithm: sha256WithRSAEncryption 59:c7:49:85:9c:d9:cb:db:ec:48:d2:48:35:32:13:98:54:52: 3e:83:f6:c6:36:f4:f1:91:8b:97:90:0e:5a:71:ba:62:de:c2: 8c:52:5f:54:27:44:07:5c:a3:3a:08:00:dc:d5:a4:bb:80:95: d1:e6:2c:2f:6f:7c:42:f3:1b:7c:5f:e7:48:e6:3c:e4:32:7b: 7c:9a:02:bf:d1:33:92:ae:a5:87:ed:8d:80:a1:5b:c9:f5:c1: 58:64:93:90:b8:56:2f:e6:03:a5:e4:45:ff:59:f5:2a:b7:89: 92:eb:c6:95:4e:21:ff:60:6f:14:ae:c7:71:b3:a9:ad:b6:25: 80:01:ea:d8:15:bc:a5:00:75:4e:35:74:2a:7a:d0:d6:cf:fb: b7:b9:68:36:cb:c8:2d:47:d6:8b:78:0c:71:8f:18:d8:63:4c: 78:57:16:83:68:6f:cc:4a:d9:95:d8:1f:99:3b:67:73:e7:23: 61:b7:61:29:90:fe:7f:33:c2:ec:bc:03:b0:45:04:39:d6:4a: 97:ee:e6:bd:d7:08:70:f4:1b:18:00:af:3f:d7:6c:d2:a2:c5: fe:f4:90:fe:33:52:0e:39:e0:4e:64:af:76:a2:60:39:8a:0a: 42:4c:2e:e7:1f:b1:49:fe:7b:87:23:28:34:84:e8:63:fb:a6: 8f:ff:ad:08 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIULDfl6V0wKp6zxd3sbShc8hr5t+wwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDQwOTA1MDMwM1oX DTI3MDQwODA1MDgwM1owMzExMC8GA1UEAxMoNTZGODMxMTVCREIyRUM4NDkxQ0I5 NUVFMUJDNjhCRTc4NkEzNjE1QTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALTXJL7OKdG6CzYyQkSW8nMrvUpsDzx20QZz1gj0RlaFHYEDLzAbB439WSlZ aP3jwmd5z3bnCdStey4iPfmYQ0xKlxNdERLLrqgranIrv95OEX8b8tLi1bqgHvbK VCx0ro0OlEQ8NDN+TQ430q+hLc4X8GlMLWXdiY71yrjSviQbCi4pqA4NnwuIzwT6 FqAwSYsV5mQXh+TnCxZ7LhkZSHNMpQe0SxQeHc8lyGcyZPBcrX2sn3cffgjuBzhl cD2L/a1yvPfjpLsZQCDaUpXFhLLplVK4JzQbEH1RDDw9uA/hu1e5PazbsyyUcXIF Z8vdkfmZBURDzQ80zGltY1lxVSUCAwEAAaOCArwwggK4MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFFb4MRW9suyEkcuV7hvGi+eGo2FaMB8GA1UdIwQYMBaAFKVu hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTA5NDQ4ODg3NDk4NzU1Mjc2OS8xLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDk0NDg4ODc0OTg3NTUyNzY5 LzEvNTZGODMxMTVCREIyRUM4NDkxQ0I5NUVFMUJDNjhCRTc4NkEzNjE1QS5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwJQYIKwYBBQUH AQcBAf8EFjAUMBIEAgABMAwDBAEtd2gDBAJnO5QwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDAk7VMA0GCSqGSIb3DQEBCwUAA4IBAQBZx0mFnNnL2+xI0kg1MhOYVFI+ g/bGNvTxkYuXkA5acbpi3sKMUl9UJ0QHXKM6CADc1aS7gJXR5iwvb3xC8xt8X+dI 5jzkMnt8mgK/0TOSrqWH7Y2AoVvJ9cFYZJOQuFYv5gOl5EX/WfUqt4mS68aVTiH/ YG8Ursdxs6mttiWAAerYFbylAHVONXQqetDWz/u3uWg2y8gtR9aLeAxxjxjYY0x4 VxaDaG/MStmV2B+ZO2dz5yNht2EpkP5/M8LsvAOwRQQ51kqX7ua91whw9BsYAK8/ 12zSosX+9JD+M1IOOeBOZK92omA5igpCTC7nH7FJ/nuHIyg0hOhj+6aP/60I -----END CERTIFICATE-----Generated at Mon Apr 13 09:29:12 2026 by rpki-client