$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A0156195ADCF332776D96A9CE2D7A36C4A1B42EC.cer File: A0156195ADCF332776D96A9CE2D7A36C4A1B42EC.cer (raw, json) Hash identifier: qGzNQvD2/wt6/yiRtRh5aLlclAGGTpL/DoG6Ex7ay8s= Subject key identifier: A0:15:61:95:AD:CF:33:27:76:D9:6A:9C:E2:D7:A3:6C:4A:1B:42:EC Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Certificate serial: 7CB837B6344BB6F4CC99CB87EF55E2728FAB0F94 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1094821744662806529/0/A0156195ADCF332776D96A9CE2D7A36C4A1B42EC.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1094821744662806529/0/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Fri 10 Apr 2026 03:05:45 +0000 Certificate not after: Fri 09 Apr 2027 03:10:45 +0000 Subordinate resources: IP: 103.170.4.0/23 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 12:10:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:b8:37:b6:34:4b:b6:f4:cc:99:cb:87:ef:55:e2:72:8f:ab:0f:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Validity Not Before: Apr 10 03:05:45 2026 GMT Not After : Apr 9 03:10:45 2027 GMT Subject: CN=A0156195ADCF332776D96A9CE2D7A36C4A1B42EC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:3b:9a:85:45:87:35:0f:ce:df:74:ac:07:2b: 0a:9f:73:c0:3c:bf:78:e2:1b:37:7d:c4:11:0a:0a: b6:46:c0:a9:c9:95:4a:32:86:72:6d:a2:1a:f7:30: 50:7c:18:f1:87:5f:12:29:5b:d3:5b:e5:ca:3a:24: 23:8e:d9:64:16:cd:12:5d:10:cf:c9:4c:0e:6b:3a: 57:d6:df:c1:09:4e:5c:c4:77:e2:cd:9d:71:0e:72: 80:fe:1f:43:b7:03:3e:72:52:91:5b:8d:35:df:0e: 26:74:e2:0a:7f:7e:9d:51:e7:1c:ee:f6:b9:94:6d: 30:e0:0c:87:22:e4:1c:88:88:27:28:35:51:17:4a: 94:4f:c1:1d:97:9c:91:ae:1b:2b:3d:e8:22:39:05: 93:6e:00:10:a8:88:ba:7e:44:d1:1f:4f:61:67:bb: 01:4e:aa:59:4a:0d:29:b2:a8:f6:48:20:cd:5b:24: 41:da:ad:85:d7:4a:0c:7d:91:f6:d1:02:b5:8d:0c: ff:b8:51:84:95:4a:94:94:13:93:97:f8:ec:e5:9e: 54:ef:1d:52:5a:c5:43:41:a0:37:10:56:18:fc:55: 3a:9b:2f:64:d7:e0:85:f0:86:ff:95:7b:b0:2b:e8: 3f:c8:5a:c2:ac:22:ef:4a:d6:cb:78:9d:5a:3d:b7: e1:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: A0:15:61:95:AD:CF:33:27:76:D9:6A:9C:E2:D7:A3:6C:4A:1B:42:EC X509v3 Authority Key Identifier: keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1094821744662806529/0/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1094821744662806529/0/A0156195ADCF332776D96A9CE2D7A36C4A1B42EC.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.170.4.0/23 Signature Algorithm: sha256WithRSAEncryption 9b:56:16:f3:3a:0e:4b:a1:97:33:8e:bf:e3:fb:c9:42:cd:1c: e4:f1:00:72:35:2c:38:3a:25:ee:f3:03:aa:f6:c9:bd:97:42: 53:ba:ce:bf:e8:96:1e:a1:6b:f3:68:08:d4:b1:ed:ae:21:d0: 8a:90:1b:86:de:cb:39:0f:88:04:05:22:3a:e7:30:08:c5:29: 7b:e0:87:03:34:52:fc:e4:57:36:ba:7a:ef:73:02:c4:74:ad: a7:de:6e:59:c4:f0:9f:08:54:51:21:15:68:15:02:a2:b5:55: b3:c4:ab:a2:b8:7e:df:b8:f3:0e:74:14:19:f2:75:4e:bd:bd: 38:17:6b:b6:ac:7b:ce:2d:06:62:00:5d:f2:30:5c:c2:d4:26: 0f:cd:a8:06:39:c7:47:d5:f4:fb:6a:28:4b:58:6c:06:5f:10: 49:68:f0:39:dd:91:b7:64:7f:fb:5d:05:e2:4b:88:f7:cc:35: f2:a2:37:bc:ac:8c:14:c2:03:ac:7b:bf:ca:1f:ef:fd:ed:c6: d3:5f:ed:3d:10:ea:11:d6:45:ce:65:3e:b4:c7:f3:c4:fc:da: df:80:57:8b:a4:ec:e6:cc:49:1d:e2:4a:f1:0c:0d:d9:07:e4: 55:1d:ad:c6:7f:2a:bd:c6:4c:d4:15:f8:63:9c:e1:f7:81:46: 24:1b:d6:71 -----BEGIN CERTIFICATE----- MIIFpzCCBI+gAwIBAgIUfLg3tjRLtvTMmcuH71Xico+rD5QwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDQxMDAzMDU0NVoX DTI3MDQwOTAzMTA0NVowMzExMC8GA1UEAxMoQTAxNTYxOTVBRENGMzMyNzc2RDk2 QTlDRTJEN0EzNkM0QTFCNDJFQzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMM7moVFhzUPzt90rAcrCp9zwDy/eOIbN33EEQoKtkbAqcmVSjKGcm2iGvcw UHwY8YdfEilb01vlyjokI47ZZBbNEl0Qz8lMDms6V9bfwQlOXMR34s2dcQ5ygP4f Q7cDPnJSkVuNNd8OJnTiCn9+nVHnHO72uZRtMOAMhyLkHIiIJyg1URdKlE/BHZec ka4bKz3oIjkFk24AEKiIun5E0R9PYWe7AU6qWUoNKbKo9kggzVskQdqthddKDH2R 9tECtY0M/7hRhJVKlJQTk5f47OWeVO8dUlrFQ0GgNxBWGPxVOpsvZNfghfCG/5V7 sCvoP8hawqwi70rWy3idWj234UMCAwEAAaOCApowggKWMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFKAVYZWtzzMndtlqnOLXo2xKG0LsMB8GA1UdIwQYMBaAFKVu hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTA5NDgyMTc0NDY2MjgwNjUyOS8wLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDk0ODIxNzQ0NjYyODA2NTI5 LzAvQTAxNTYxOTVBRENGMzMyNzc2RDk2QTlDRTJEN0EzNkM0QTFCNDJFQy5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAFnqgQwDQYJKoZIhvcNAQELBQADggEBAJtWFvM6 DkuhlzOOv+P7yULNHOTxAHI1LDg6Je7zA6r2yb2XQlO6zr/olh6ha/NoCNSx7a4h 0IqQG4beyzkPiAQFIjrnMAjFKXvghwM0UvzkVza6eu9zAsR0rafeblnE8J8IVFEh FWgVAqK1VbPEq6K4ft+48w50FBnydU69vTgXa7ase84tBmIAXfIwXMLUJg/NqAY5 x0fV9PtqKEtYbAZfEElo8Dndkbdkf/tdBeJLiPfMNfKiN7ysjBTCA6x7v8of7/3t xtNf7T0Q6hHWRc5lPrTH88T82t+AV4uk7ObMSR3iSvEMDdkH5FUdrcZ/Kr3GTNQV +GOc4feBRiQb1nE= -----END CERTIFICATE-----Generated at Mon Apr 13 09:29:11 2026 by rpki-client