$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A5A7A22B773557BAF9107F52071E43CB56973E0C.cer File: A5A7A22B773557BAF9107F52071E43CB56973E0C.cer (raw, json) Hash identifier: hqht5hVOlZeOj5sACY50GGhPZ+lPbvUNUWf5zUIHY8c= Subject key identifier: A5:A7:A2:2B:77:35:57:BA:F9:10:7F:52:07:1E:43:CB:56:97:3E:0C Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Certificate serial: 566A8E2D58005B3A40D6D1B223E6174FD3EF0142 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1094855333483905026/0/A5A7A22B773557BAF9107F52071E43CB56973E0C.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1094855333483905026/0/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Fri 10 Apr 2026 05:19:14 +0000 Certificate not after: Fri 09 Apr 2027 05:24:14 +0000 Subordinate resources: IP: 103.110.132.0/22 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 12:10:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:6a:8e:2d:58:00:5b:3a:40:d6:d1:b2:23:e6:17:4f:d3:ef:01:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Validity Not Before: Apr 10 05:19:14 2026 GMT Not After : Apr 9 05:24:14 2027 GMT Subject: CN=A5A7A22B773557BAF9107F52071E43CB56973E0C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:51:e4:88:79:74:81:fa:e2:bc:b6:b2:ea:40: f8:ea:83:b8:98:10:26:0a:41:87:16:7a:be:c0:da: 62:dd:9e:8b:ec:0e:10:da:aa:4c:82:79:ff:7d:49: 10:fa:9b:c6:98:f3:fc:f4:76:d1:a5:52:13:d7:17: c3:6a:a8:69:ac:4a:01:0b:51:1b:86:3f:11:d2:8b: d8:a5:e6:e1:f4:71:68:60:5b:55:ab:5a:60:83:34: 9a:0b:c1:1f:00:74:1b:47:ea:1c:0d:c6:f5:38:9d: 6f:0b:32:05:a9:7e:ee:af:9a:45:78:6d:07:11:e7: 7c:c4:f1:46:34:e9:65:eb:cb:13:85:18:b2:15:4d: 78:0f:8c:fb:70:68:e0:b9:2e:57:85:9a:f5:c6:52: 00:4e:7a:94:29:de:8a:94:32:62:f9:fb:29:6a:c2: 34:65:8a:d1:05:32:c5:e5:42:59:07:24:4b:75:1b: d6:62:dd:66:81:de:4e:04:53:e4:a0:75:2a:3e:1e: 03:60:f4:37:8d:27:75:47:ba:09:02:9b:49:43:83: f8:63:cc:5f:63:7b:ff:f2:a1:a0:29:35:a7:c7:b6: 83:f6:cd:17:d0:71:d8:45:5e:bf:68:8a:28:27:a0: f8:55:cc:a2:f2:04:ba:01:43:f7:1a:f6:ba:8b:a9: db:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: A5:A7:A2:2B:77:35:57:BA:F9:10:7F:52:07:1E:43:CB:56:97:3E:0C X509v3 Authority Key Identifier: keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1094855333483905026/0/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1094855333483905026/0/A5A7A22B773557BAF9107F52071E43CB56973E0C.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.110.132.0/22 Signature Algorithm: sha256WithRSAEncryption 3d:c7:27:6d:2d:e4:6b:1e:0c:c2:57:71:39:41:85:d1:73:13: 9c:0f:57:d1:e0:80:01:29:76:22:0c:d6:fc:ed:d6:38:fd:76: 20:a7:06:85:0c:07:24:7f:c8:17:a1:3b:f7:e8:bc:d6:4c:05: 5f:66:55:83:02:53:f3:4f:4e:0b:0e:d7:ac:d0:34:9b:ec:41: ea:b0:d8:6d:e7:b5:94:76:65:53:f5:6d:4c:5e:36:e7:9b:3b: 80:18:68:eb:7b:e0:c7:2b:73:ed:40:6b:33:88:4a:87:3d:23: cb:3e:20:f9:04:6e:13:d6:64:6b:0c:f1:69:e0:f6:7e:5e:36: d8:8e:81:e0:52:37:b8:93:81:08:68:07:e6:1a:00:55:17:f3: bc:b2:76:06:cd:02:2b:e2:dc:ed:13:64:93:57:f4:33:09:df: 21:2f:54:2e:ab:cb:fb:49:da:d8:fb:08:bf:e6:04:d5:48:e4: 6b:37:4d:a9:16:7f:19:19:18:82:1f:75:39:2f:f3:f3:24:03: 66:26:24:af:a7:29:45:e3:4b:1b:98:8a:8e:51:b4:ca:80:56: d5:46:64:1a:a4:ca:b2:42:21:dc:e1:1d:f3:7b:a8:ae:72:bc: a6:f1:1b:5c:3d:2b:02:27:97:6c:e3:81:27:4e:90:01:af:c5: 29:13:73:c3 -----BEGIN CERTIFICATE----- MIIFpzCCBI+gAwIBAgIUVmqOLVgAWzpA1tGyI+YXT9PvAUIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDQxMDA1MTkxNFoX DTI3MDQwOTA1MjQxNFowMzExMC8GA1UEAxMoQTVBN0EyMkI3NzM1NTdCQUY5MTA3 RjUyMDcxRTQzQ0I1Njk3M0UwQzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAL5R5Ih5dIH64ry2supA+OqDuJgQJgpBhxZ6vsDaYt2ei+wOENqqTIJ5/31J EPqbxpjz/PR20aVSE9cXw2qoaaxKAQtRG4Y/EdKL2KXm4fRxaGBbVataYIM0mgvB HwB0G0fqHA3G9TidbwsyBal+7q+aRXhtBxHnfMTxRjTpZevLE4UYshVNeA+M+3Bo 4LkuV4Wa9cZSAE56lCneipQyYvn7KWrCNGWK0QUyxeVCWQckS3Ub1mLdZoHeTgRT 5KB1Kj4eA2D0N40ndUe6CQKbSUOD+GPMX2N7//KhoCk1p8e2g/bNF9Bx2EVev2iK KCeg+FXMovIEugFD9xr2uoup2/0CAwEAAaOCApowggKWMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFKWnoit3NVe6+RB/UgceQ8tWlz4MMB8GA1UdIwQYMBaAFKVu hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTA5NDg1NTMzMzQ4MzkwNTAyNi8wLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDk0ODU1MzMzNDgzOTA1MDI2 LzAvQTVBN0EyMkI3NzM1NTdCQUY5MTA3RjUyMDcxRTQzQ0I1Njk3M0UwQy5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAJnboQwDQYJKoZIhvcNAQELBQADggEBAD3HJ20t 5GseDMJXcTlBhdFzE5wPV9HggAEpdiIM1vzt1jj9diCnBoUMByR/yBehO/fovNZM BV9mVYMCU/NPTgsO16zQNJvsQeqw2G3ntZR2ZVP1bUxeNuebO4AYaOt74Mcrc+1A azOISoc9I8s+IPkEbhPWZGsM8Wng9n5eNtiOgeBSN7iTgQhoB+YaAFUX87yydgbN Aivi3O0TZJNX9DMJ3yEvVC6ry/tJ2tj7CL/mBNVI5Gs3TakWfxkZGIIfdTkv8/Mk A2YmJK+nKUXjSxuYio5RtMqAVtVGZBqkyrJCIdzhHfN7qK5yvKbxG1w9KwInl2zj gSdOkAGvxSkTc8M= -----END CERTIFICATE-----Generated at Mon Apr 13 09:29:02 2026 by rpki-client