$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/74280C847DD28C691A500655BD81B3F019C5FCF7.cer File: 74280C847DD28C691A500655BD81B3F019C5FCF7.cer (raw, json) Hash identifier: DFfNEnOEvniNV4PS0R8PL2NjO+ykWpv9GC681ILudQQ= Subject key identifier: 74:28:0C:84:7D:D2:8C:69:1A:50:06:55:BD:81:B3:F0:19:C5:FC:F7 Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Certificate serial: 062F68A7A2BD02D9051433A3DC6D9C11A7720A5F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1094559728064790531/0/74280C847DD28C691A500655BD81B3F019C5FCF7.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1094559728064790531/0/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Thu 09 Apr 2026 09:44:36 +0000 Certificate not after: Thu 08 Apr 2027 09:49:36 +0000 Subordinate resources: IP: 103.186.108.0/23 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 12:10:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:2f:68:a7:a2:bd:02:d9:05:14:33:a3:dc:6d:9c:11:a7:72:0a:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Validity Not Before: Apr 9 09:44:36 2026 GMT Not After : Apr 8 09:49:36 2027 GMT Subject: CN=74280C847DD28C691A500655BD81B3F019C5FCF7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:20:43:10:7a:1a:ee:d0:c5:c9:07:26:5e:2a: 4f:39:1e:ed:03:6a:7a:70:46:69:b6:c9:58:63:68: 29:45:73:ae:dc:86:a0:6b:94:b0:b1:ff:c4:b4:3b: 26:26:7f:bb:fe:0e:9f:b3:23:97:47:03:a3:9f:78: b0:48:25:72:6c:c7:5d:ef:7b:9b:d8:33:3a:25:0e: 18:86:90:b2:83:c5:4b:27:3c:7d:65:b8:db:1d:c0: 9f:dc:44:93:7f:10:19:cc:46:98:44:ea:3a:a9:71: 6e:31:28:0c:e4:c2:7d:2d:30:ab:94:99:3b:5b:3d: 71:94:86:d7:39:e4:2c:b9:39:26:50:c5:66:ee:11: 7c:84:c4:96:a2:06:67:85:59:43:18:0c:c0:af:f1: b4:d5:50:95:d1:09:c2:6c:8d:e5:25:10:da:c9:c7: 77:82:0d:32:52:5a:f5:43:91:54:6d:bb:1c:e8:00: 14:a0:a9:b1:a3:8e:1d:8d:b9:1f:e3:f4:8d:6b:30: 5a:53:39:e1:42:9d:c2:9f:3e:ad:a6:02:92:69:72: 42:5c:ee:63:85:5c:26:0b:bd:b7:d9:88:62:b3:f9: 9a:db:77:fd:49:33:56:b5:04:e9:e8:21:fe:ca:af: e8:69:a3:c6:dd:35:32:30:0e:92:d4:b2:57:34:4b: 5e:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 74:28:0C:84:7D:D2:8C:69:1A:50:06:55:BD:81:B3:F0:19:C5:FC:F7 X509v3 Authority Key Identifier: keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1094559728064790531/0/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1094559728064790531/0/74280C847DD28C691A500655BD81B3F019C5FCF7.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.186.108.0/23 Signature Algorithm: sha256WithRSAEncryption 04:07:56:29:7f:52:54:bd:7f:94:b5:ee:da:bd:87:6f:9b:92: 1c:fe:ca:a3:fe:05:76:75:41:80:6d:61:ba:0a:be:ae:55:ac: 21:bf:80:95:07:0e:4a:90:b2:fe:77:e9:ca:be:79:6f:59:55: 9d:48:89:d7:7f:6b:82:12:c2:fd:4c:6d:3c:ad:08:59:bb:14: 23:89:ac:31:7f:57:a9:2a:6c:9e:8f:ec:a9:5b:f6:1a:a3:f5: 5c:a7:63:13:3b:e2:82:5b:94:ef:e1:ca:f1:85:b4:84:1c:39: 05:8a:ee:a8:9e:87:eb:c2:77:00:00:d3:8a:5e:a7:2b:07:a3: a6:9a:66:10:2d:78:ab:95:30:f6:b4:44:13:3f:67:9e:2c:88: ed:c1:b3:6e:a7:53:e8:b3:6f:a1:b3:21:1f:3e:47:fb:34:98: 87:7e:40:d5:36:1c:68:68:d0:1b:d8:b0:d6:77:3c:1c:7a:7e: 60:3b:6b:1a:4f:6c:11:cb:ef:30:47:bc:10:c0:5b:40:44:1e: 32:01:c5:75:ac:14:53:47:b0:f5:f6:0d:ca:6b:44:62:61:60: 50:98:83:60:1c:65:e1:98:58:45:e8:59:d4:9f:3e:03:1a:e0: e5:d3:e2:ce:b6:86:91:00:e5:c1:d7:ec:a9:e7:4d:e3:93:35: 59:1f:53:e6 -----BEGIN CERTIFICATE----- MIIFpzCCBI+gAwIBAgIUBi9op6K9AtkFFDOj3G2cEadyCl8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDQwOTA5NDQzNloX DTI3MDQwODA5NDkzNlowMzExMC8GA1UEAxMoNzQyODBDODQ3REQyOEM2OTFBNTAw NjU1QkQ4MUIzRjAxOUM1RkNGNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAL4gQxB6Gu7QxckHJl4qTzke7QNqenBGabbJWGNoKUVzrtyGoGuUsLH/xLQ7 JiZ/u/4On7Mjl0cDo594sEglcmzHXe97m9gzOiUOGIaQsoPFSyc8fWW42x3An9xE k38QGcxGmETqOqlxbjEoDOTCfS0wq5SZO1s9cZSG1znkLLk5JlDFZu4RfITElqIG Z4VZQxgMwK/xtNVQldEJwmyN5SUQ2snHd4INMlJa9UORVG27HOgAFKCpsaOOHY25 H+P0jWswWlM54UKdwp8+raYCkmlyQlzuY4VcJgu9t9mIYrP5mtt3/UkzVrUE6egh /sqv6Gmjxt01MjAOktSyVzRLXs0CAwEAAaOCApowggKWMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFHQoDIR90oxpGlAGVb2Bs/AZxfz3MB8GA1UdIwQYMBaAFKVu hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTA5NDU1OTcyODA2NDc5MDUzMS8wLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDk0NTU5NzI4MDY0NzkwNTMx LzAvNzQyODBDODQ3REQyOEM2OTFBNTAwNjU1QkQ4MUIzRjAxOUM1RkNGNy5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAFnumwwDQYJKoZIhvcNAQELBQADggEBAAQHVil/ UlS9f5S17tq9h2+bkhz+yqP+BXZ1QYBtYboKvq5VrCG/gJUHDkqQsv536cq+eW9Z VZ1Iidd/a4ISwv1MbTytCFm7FCOJrDF/V6kqbJ6P7Klb9hqj9VynYxM74oJblO/h yvGFtIQcOQWK7qieh+vCdwAA04pepysHo6aaZhAteKuVMPa0RBM/Z54siO3Bs26n U+izb6GzIR8+R/s0mId+QNU2HGho0BvYsNZ3PBx6fmA7axpPbBHL7zBHvBDAW0BE HjIBxXWsFFNHsPX2DcprRGJhYFCYg2AcZeGYWEXoWdSfPgMa4OXT4s62hpEA5cHX 7KnnTeOTNVkfU+Y= -----END CERTIFICATE-----Generated at Mon Apr 13 09:29:05 2026 by rpki-client