$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EB221959BAB62CA0F2C1844E764159F081AE413B.cer File: EB221959BAB62CA0F2C1844E764159F081AE413B.cer (raw, json) Hash identifier: cqQl1oLxYdoQ6vulOn+sC7BheoXP+8PMfr0UTLqztQo= Subject key identifier: EB:22:19:59:BA:B6:2C:A0:F2:C1:84:4E:76:41:59:F0:81:AE:41:3B Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Certificate serial: 1DB187B87C42CC19232862975BEDE094F33D0AC7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1094823639288709122/0/EB221959BAB62CA0F2C1844E764159F081AE413B.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1094823639288709122/0/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Fri 10 Apr 2026 03:22:26 +0000 Certificate not after: Fri 09 Apr 2027 03:27:26 +0000 Subordinate resources: AS: 146795 IP: 45.248.100.0 -- 45.248.107.255 IP: 103.85.186.0/23 IP: 103.216.244.0 -- 103.216.251.255 IP: 2400:dee0::/32 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 12:10:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:b1:87:b8:7c:42:cc:19:23:28:62:97:5b:ed:e0:94:f3:3d:0a:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Validity Not Before: Apr 10 03:22:26 2026 GMT Not After : Apr 9 03:27:26 2027 GMT Subject: CN=EB221959BAB62CA0F2C1844E764159F081AE413B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:f2:0f:73:cb:98:ba:0e:17:c9:a3:b2:9e:c0: 77:b4:85:8b:12:88:7b:45:45:90:5d:74:4d:67:5b: 04:d2:10:61:0f:98:8b:9d:30:4d:83:45:02:d3:2b: ab:df:48:d8:54:7e:c2:97:39:de:46:81:5d:a7:09: 57:f5:26:56:96:2c:4c:69:fe:ad:5d:0e:8d:62:ce: 2b:d9:98:08:db:4a:9f:8a:b2:63:e8:0d:62:ab:3c: 47:2c:82:1d:2a:d4:4c:20:be:a2:90:e0:dd:30:31: 18:64:92:74:52:97:e4:36:3d:92:22:2b:fd:ff:f3: e3:07:6a:f2:ab:a0:fd:cb:ab:0b:63:3b:ae:75:ce: 0c:c4:49:4c:d2:35:22:67:4b:45:a3:e7:2e:23:e1: 1a:59:d3:c1:95:e7:97:a0:f1:2d:6b:f8:1b:1d:1e: 3a:83:76:e5:f8:cf:d3:da:0c:cd:f0:1e:a2:a5:10: 6b:1f:2e:ff:98:70:3c:0a:13:a7:13:d8:da:85:e0: 63:a4:b7:6f:85:07:43:c5:a1:f1:c3:53:ec:2c:b7: 23:16:40:9a:b6:67:53:80:4c:eb:a6:65:8c:5e:08: 4d:9f:f5:f1:2e:a0:e1:a2:84:19:86:e7:f2:ed:fe: f7:71:b0:c0:6c:83:30:d6:03:40:97:f2:d5:d2:58: 5b:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: EB:22:19:59:BA:B6:2C:A0:F2:C1:84:4E:76:41:59:F0:81:AE:41:3B X509v3 Authority Key Identifier: keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1094823639288709122/0/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1094823639288709122/0/EB221959BAB62CA0F2C1844E764159F081AE413B.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.248.100.0-45.248.107.255 103.85.186.0/23 103.216.244.0-103.216.251.255 IPv6: 2400:dee0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 146795 Signature Algorithm: sha256WithRSAEncryption 61:74:e3:ef:1f:64:ae:08:51:95:1b:e1:12:98:c6:9d:bc:c3: 7c:c0:29:3f:67:0d:33:f3:74:17:9c:a4:65:8e:06:cb:b3:4b: ca:a0:7b:7c:e9:b3:a0:fe:73:c8:91:9c:b9:a5:80:b2:64:cd: 2a:5a:a2:42:f1:16:a6:83:54:56:06:0b:d0:c6:b7:a1:98:c0: b2:9d:c8:fd:91:83:33:e6:06:5b:f8:73:df:ae:c7:1a:a4:eb: 55:93:c7:87:66:9d:ef:17:67:cb:b9:5b:b5:71:39:5b:53:fb: 9d:1e:09:f4:0e:34:81:fd:ad:de:c8:56:a3:43:11:df:50:82: 06:fd:2b:b2:5b:2d:a4:82:9d:2b:af:7a:49:2b:20:33:f6:4c: 2f:f5:75:0a:3f:f6:50:88:9e:b5:52:14:ed:6d:e6:42:b8:72: e5:db:a5:1a:b2:98:54:c3:9b:ca:d9:6c:ef:33:6d:1d:ac:7b: 8b:db:5e:b1:9d:7f:39:59:b4:15:31:7d:30:e8:44:fd:36:12: 8f:35:7e:84:13:49:f8:4d:f5:bd:1b:2d:40:2d:56:73:ce:7c: 2a:0a:a4:97:c6:fe:ad:5e:51:02:a4:79:d5:be:2b:36:3c:9e: 64:fa:82:63:b6:2c:82:91:0a:8b:71:48:3e:09:ab:6a:ee:8b: a3:3b:d9:a6 -----BEGIN CERTIFICATE----- MIIF7jCCBNagAwIBAgIUHbGHuHxCzBkjKGKXW+3glPM9CscwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDQxMDAzMjIyNloX DTI3MDQwOTAzMjcyNlowMzExMC8GA1UEAxMoRUIyMjE5NTlCQUI2MkNBMEYyQzE4 NDRFNzY0MTU5RjA4MUFFNDEzQjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMvyD3PLmLoOF8mjsp7Ad7SFixKIe0VFkF10TWdbBNIQYQ+Yi50wTYNFAtMr q99I2FR+wpc53kaBXacJV/UmVpYsTGn+rV0OjWLOK9mYCNtKn4qyY+gNYqs8RyyC HSrUTCC+opDg3TAxGGSSdFKX5DY9kiIr/f/z4wdq8qug/curC2M7rnXODMRJTNI1 ImdLRaPnLiPhGlnTwZXnl6DxLWv4Gx0eOoN25fjP09oMzfAeoqUQax8u/5hwPAoT pxPY2oXgY6S3b4UHQ8Wh8cNT7Cy3IxZAmrZnU4BM66ZljF4ITZ/18S6g4aKEGYbn 8u3+93GwwGyDMNYDQJfy1dJYWx8CAwEAAaOCAuEwggLdMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFOsiGVm6tiyg8sGETnZBWfCBrkE7MB8GA1UdIwQYMBaAFKVu hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTA5NDgyMzYzOTI4ODcwOTEyMi8wLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDk0ODIzNjM5Mjg4NzA5MTIy LzAvRUIyMjE5NTlCQUI2MkNBMEYyQzE4NDRFNzY0MTU5RjA4MUFFNDEzQi5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwSgYIKwYBBQUH AQcBAf8EOzA5MCgEAgABMCIwDAMEAi34ZAMEAi34aAMEAWdVujAMAwQCZ9j0AwQC Z9j4MA0EAgACMAcDBQAkAN7gMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwI9azAN BgkqhkiG9w0BAQsFAAOCAQEAYXTj7x9krghRlRvhEpjGnbzDfMApP2cNM/N0F5yk ZY4Gy7NLyqB7fOmzoP5zyJGcuaWAsmTNKlqiQvEWpoNUVgYL0Ma3oZjAsp3I/ZGD M+YGW/hz367HGqTrVZPHh2ad7xdny7lbtXE5W1P7nR4J9A40gf2t3shWo0MR31CC Bv0rslstpIKdK696SSsgM/ZML/V1Cj/2UIietVIU7W3mQrhy5dulGrKYVMObytls 7zNtHax7i9tesZ1/OVm0FTF9MOhE/TYSjzV+hBNJ+E31vRstQC1Wc858Kgqkl8b+ rV5RAqR51b4rNjyeZPqCY7YsgpEKi3FIPgmrau6LozvZpg== -----END CERTIFICATE-----Generated at Mon Apr 13 09:29:10 2026 by rpki-client