$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C452243FA1CFB4F973E2B38C955025BF01B5E1B2.cer File: C452243FA1CFB4F973E2B38C955025BF01B5E1B2.cer (raw, json) Hash identifier: mkYChJs9JlOWBfgkE+0RiG7NHi8yABVZiPtayLvYqFE= Subject key identifier: C4:52:24:3F:A1:CF:B4:F9:73:E2:B3:8C:95:50:25:BF:01:B5:E1:B2 Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Certificate serial: 5B4451CE498341D96428DA111646CA993E8D775A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1094890247017201665/0/C452243FA1CFB4F973E2B38C955025BF01B5E1B2.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1094890247017201665/0/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Fri 10 Apr 2026 07:37:58 +0000 Certificate not after: Fri 09 Apr 2027 07:42:58 +0000 Subordinate resources: AS: 137745 IP: 103.135.196.0/22 IP: 2404:b340::/32 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 12:10:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:44:51:ce:49:83:41:d9:64:28:da:11:16:46:ca:99:3e:8d:77:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Validity Not Before: Apr 10 07:37:58 2026 GMT Not After : Apr 9 07:42:58 2027 GMT Subject: CN=C452243FA1CFB4F973E2B38C955025BF01B5E1B2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:a8:1b:a1:e4:b1:43:fe:e3:ea:9e:e9:47:ae: 6d:4e:fe:1e:6e:f6:fd:c9:33:0e:df:b5:ed:d6:25: 88:6b:3c:c9:21:ca:6b:f1:fa:14:a8:3d:dd:b1:0e: af:24:a1:9b:6a:71:6d:c1:5c:9a:29:c7:7b:ea:2a: 08:1f:6d:47:52:7a:88:73:71:5d:42:0b:e6:c7:d5: 2f:b4:7f:0d:89:1f:c7:54:4c:6f:27:83:cd:9f:1d: 15:73:9f:d0:88:59:01:f0:49:9b:6f:34:b7:e1:aa: 5d:cf:15:ce:57:c7:a8:6f:a8:6a:e5:8b:34:5a:9e: ab:72:3f:f1:ad:3b:96:eb:bd:46:ea:9b:e0:7f:3e: a3:60:d9:4d:d1:2f:70:d7:49:b4:77:ba:7a:3c:0c: e0:2c:fb:f3:5d:83:e2:f7:68:8b:83:e1:7c:dc:6d: 90:a7:36:c4:55:d9:02:28:9d:bf:14:91:13:45:9e: 49:15:32:25:c0:df:51:f1:3f:26:99:8b:c8:f9:ea: 20:de:87:64:b9:3f:87:07:8f:af:45:94:a8:6a:b9: 7e:81:3b:44:94:55:48:b5:bc:06:2c:57:af:c8:79: cc:4d:fb:34:96:cf:22:c7:0b:e8:dd:fb:71:71:29: f2:12:c1:7b:0e:76:40:6d:53:b4:ee:34:06:94:69: 01:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: C4:52:24:3F:A1:CF:B4:F9:73:E2:B3:8C:95:50:25:BF:01:B5:E1:B2 X509v3 Authority Key Identifier: keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1094890247017201665/0/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1094890247017201665/0/C452243FA1CFB4F973E2B38C955025BF01B5E1B2.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.135.196.0/22 IPv6: 2404:b340::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 137745 Signature Algorithm: sha256WithRSAEncryption 3e:9f:23:93:67:1e:f8:b3:60:52:0b:f5:08:3b:9c:25:3c:5a: e6:c3:9b:13:e6:19:35:6d:8d:9a:7c:8c:ce:04:11:4a:12:dd: 88:5f:19:a6:6b:49:34:b3:2d:93:2e:97:b7:d2:cb:cb:38:3e: d3:58:7e:c2:f0:e0:96:57:27:eb:3f:eb:ee:56:7f:ee:be:46: b1:00:a4:cb:6c:79:86:dc:7f:c3:6e:a5:14:0c:2b:db:ae:6b: b5:f8:7d:bc:d3:e3:07:84:30:d2:74:0c:6b:f2:ee:34:1f:41: 8d:ba:79:12:88:c7:9d:1c:7a:7a:18:4d:96:ca:81:e4:21:4f: 04:6f:0e:2b:8c:37:3f:fe:be:2c:f9:09:f2:fc:41:8f:10:d9: bf:b0:9b:f3:99:48:00:96:a5:05:19:c1:fa:f9:b1:96:a5:7e: e7:15:cf:5a:53:91:a8:aa:84:ca:1d:9b:94:73:a5:90:8b:ab: 31:c5:da:53:74:eb:22:1e:e1:08:ad:89:35:4e:5c:1c:4d:87: 8e:65:bb:5e:65:82:ad:09:73:ed:13:06:aa:d9:5c:47:61:5b: 65:8f:fc:a6:32:b2:2d:89:72:dc:f7:25:a4:67:49:7d:68:10: e7:3c:a9:ba:28:0e:70:98:8f:6f:89:47:08:d9:c5:60:05:2a: ee:5b:cc:1e -----BEGIN CERTIFICATE----- MIIF0jCCBLqgAwIBAgIUW0RRzkmDQdlkKNoRFkbKmT6Nd1owDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDQxMDA3Mzc1OFoX DTI3MDQwOTA3NDI1OFowMzExMC8GA1UEAxMoQzQ1MjI0M0ZBMUNGQjRGOTczRTJC MzhDOTU1MDI1QkYwMUI1RTFCMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKmoG6HksUP+4+qe6UeubU7+Hm72/ckzDt+17dYliGs8ySHKa/H6FKg93bEO ryShm2pxbcFcminHe+oqCB9tR1J6iHNxXUIL5sfVL7R/DYkfx1RMbyeDzZ8dFXOf 0IhZAfBJm280t+GqXc8VzlfHqG+oauWLNFqeq3I/8a07luu9Ruqb4H8+o2DZTdEv cNdJtHe6ejwM4Cz7812D4vdoi4PhfNxtkKc2xFXZAiidvxSRE0WeSRUyJcDfUfE/ JpmLyPnqIN6HZLk/hwePr0WUqGq5foE7RJRVSLW8BixXr8h5zE37NJbPIscL6N37 cXEp8hLBew52QG1TtO40BpRpAU0CAwEAAaOCAsUwggLBMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFMRSJD+hz7T5c+KzjJVQJb8BteGyMB8GA1UdIwQYMBaAFKVu hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTA5NDg5MDI0NzAxNzIwMTY2NS8wLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDk0ODkwMjQ3MDE3MjAxNjY1 LzAvQzQ1MjI0M0ZBMUNGQjRGOTczRTJCMzhDOTU1MDI1QkYwMUI1RTFCMi5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUH AQcBAf8EHzAdMAwEAgABMAYDBAJnh8QwDQQCAAIwBwMFACQEs0AwGgYIKwYBBQUH AQgBAf8ECzAJoAcwBQIDAhoRMA0GCSqGSIb3DQEBCwUAA4IBAQA+nyOTZx74s2BS C/UIO5wlPFrmw5sT5hk1bY2afIzOBBFKEt2IXxmma0k0sy2TLpe30svLOD7TWH7C 8OCWVyfrP+vuVn/uvkaxAKTLbHmG3H/DbqUUDCvbrmu1+H280+MHhDDSdAxr8u40 H0GNunkSiMedHHp6GE2WyoHkIU8Ebw4rjDc//r4s+Qny/EGPENm/sJvzmUgAlqUF GcH6+bGWpX7nFc9aU5GoqoTKHZuUc6WQi6sxxdpTdOsiHuEIrYk1TlwcTYeOZbte ZYKtCXPtEwaq2VxHYVtlj/ymMrItiXLc9yWkZ0l9aBDnPKm6KA5wmI9viUcI2cVg BSruW8we -----END CERTIFICATE-----Generated at Mon Apr 13 09:29:03 2026 by rpki-client