$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EEAF21F21F951DFFCE8EB9CF296F8F924D6D5163.cer File: EEAF21F21F951DFFCE8EB9CF296F8F924D6D5163.cer (raw, json) Hash identifier: 13oFZjTuYpsiTQnhkMGGar4oD6VsExB1JqlFKPv0ZVg= Subject key identifier: EE:AF:21:F2:1F:95:1D:FF:CE:8E:B9:CF:29:6F:8F:92:4D:6D:51:63 Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Certificate serial: 2D7A0F4868C6B41B0C5B3D4D4903F9AA58DC6B73 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1094436162547744770/0/EEAF21F21F951DFFCE8EB9CF296F8F924D6D5163.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1094436162547744770/0/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Thu 09 Apr 2026 01:33:36 +0000 Certificate not after: Thu 08 Apr 2027 01:38:36 +0000 Subordinate resources: AS: 131506 IP: 43.225.208.0/22 IP: 103.44.168.0/22 IP: 103.156.174.0/23 IP: 103.156.186.0/23 IP: 2401:d780::/32 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 12:10:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:7a:0f:48:68:c6:b4:1b:0c:5b:3d:4d:49:03:f9:aa:58:dc:6b:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Validity Not Before: Apr 9 01:33:36 2026 GMT Not After : Apr 8 01:38:36 2027 GMT Subject: CN=EEAF21F21F951DFFCE8EB9CF296F8F924D6D5163 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:5c:62:b2:4f:1a:e4:a5:fe:e7:16:ee:af:62: a0:2f:cb:3e:b4:82:95:24:32:de:18:21:32:b3:05: f4:b1:13:09:2b:70:34:4f:e3:89:b5:58:b8:d5:da: 36:28:91:89:ca:42:1a:99:33:4d:c8:8d:ea:50:18: b8:b4:44:81:0e:7b:c0:6d:5c:cd:dc:2e:27:91:68: 97:dc:c9:0f:a5:ec:ee:6d:be:41:bf:b1:9d:5f:d9: ce:f4:b2:25:cd:a3:cd:61:f6:fc:72:24:04:c0:ea: 62:23:c7:5e:bf:28:a2:cb:64:f0:7a:8e:a2:c7:25: 4f:4c:9f:da:96:07:80:67:16:b2:c1:58:b3:a7:e5: 1d:a2:4d:e1:57:82:bd:ee:8f:ef:c5:90:c4:70:c9: 64:68:0f:be:49:0f:8c:59:27:81:f5:1a:56:f7:0a: 32:ac:86:18:c0:98:c2:0b:84:8d:b6:70:78:2c:c7: 74:a9:63:33:ef:c5:bb:da:93:4f:66:0f:50:32:13: 5a:3f:3e:5e:a5:70:06:c4:8c:cc:bc:1a:d8:28:e4: 7c:fd:25:3b:cb:b2:de:08:1c:ed:d9:79:00:46:2f: 75:75:98:e2:e5:03:6b:11:76:99:77:8f:b7:d9:bc: 45:f6:d0:97:f7:0b:66:a7:4a:1b:2f:ac:9f:97:5e: df:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: EE:AF:21:F2:1F:95:1D:FF:CE:8E:B9:CF:29:6F:8F:92:4D:6D:51:63 X509v3 Authority Key Identifier: keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1094436162547744770/0/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1094436162547744770/0/EEAF21F21F951DFFCE8EB9CF296F8F924D6D5163.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.225.208.0/22 103.44.168.0/22 103.156.174.0/23 103.156.186.0/23 IPv6: 2401:d780::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 131506 Signature Algorithm: sha256WithRSAEncryption 57:c8:1c:ed:ad:08:81:ec:90:2f:fc:b0:a8:aa:e7:b2:4a:fe: 6b:38:36:ed:c7:f1:96:b9:ad:4a:9f:71:46:82:a2:2b:e5:02: b2:be:5b:8f:6a:13:b8:a6:68:ce:b1:00:f5:91:a8:0c:c2:37: a6:44:d2:fe:6c:25:89:3d:ed:50:dd:15:60:a5:88:3c:77:3c: fb:05:63:55:7f:d8:3f:02:11:5f:50:41:64:ec:d1:4c:d9:3e: 1a:41:a0:d8:9a:8f:01:0e:1d:c2:6b:af:74:01:59:97:d6:78: b9:15:9a:f1:65:ac:cb:da:be:b7:07:e7:cc:e8:89:cd:30:95: 30:de:be:c1:22:43:e2:d4:05:78:d0:16:03:5b:33:38:ea:38: bf:bb:0f:19:19:08:c1:58:47:fc:04:01:5c:f3:a3:de:20:c2: 00:e2:80:b9:6c:44:ca:23:31:14:1f:d0:d9:43:01:51:21:e3: b0:1d:4d:28:12:36:f6:08:99:66:49:0f:39:d9:43:05:33:9c: 2c:17:b2:81:65:61:fc:6d:23:58:33:f2:dd:11:08:9e:ee:1c: 85:b7:b2:1c:bf:22:59:28:5a:8c:cb:ec:a3:8d:25:c0:9c:df: eb:3b:37:8a:c2:2c:ff:e5:d8:cf:06:93:78:c7:87:8c:8c:70: 6c:6c:35:34 -----BEGIN CERTIFICATE----- MIIF5DCCBMygAwIBAgIULXoPSGjGtBsMWz1NSQP5qljca3MwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDQwOTAxMzMzNloX DTI3MDQwODAxMzgzNlowMzExMC8GA1UEAxMoRUVBRjIxRjIxRjk1MURGRkNFOEVC OUNGMjk2RjhGOTI0RDZENTE2MzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANRcYrJPGuSl/ucW7q9ioC/LPrSClSQy3hghMrMF9LETCStwNE/jibVYuNXa NiiRicpCGpkzTciN6lAYuLREgQ57wG1czdwuJ5Fol9zJD6Xs7m2+Qb+xnV/ZzvSy Jc2jzWH2/HIkBMDqYiPHXr8oostk8HqOosclT0yf2pYHgGcWssFYs6flHaJN4VeC ve6P78WQxHDJZGgPvkkPjFkngfUaVvcKMqyGGMCYwguEjbZweCzHdKljM+/Fu9qT T2YPUDITWj8+XqVwBsSMzLwa2CjkfP0lO8uy3ggc7dl5AEYvdXWY4uUDaxF2mXeP t9m8RfbQl/cLZqdKGy+sn5de3xMCAwEAAaOCAtcwggLTMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFO6vIfIflR3/zo65zylvj5JNbVFjMB8GA1UdIwQYMBaAFKVu hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTA5NDQzNjE2MjU0Nzc0NDc3MC8wLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDk0NDM2MTYyNTQ3NzQ0Nzcw LzAvRUVBRjIxRjIxRjk1MURGRkNFOEVCOUNGMjk2RjhGOTI0RDZENTE2My5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwQAYIKwYBBQUH AQcBAf8EMTAvMB4EAgABMBgDBAIr4dADBAJnLKgDBAFnnK4DBAFnnLowDQQCAAIw BwMFACQB14AwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDAgGyMA0GCSqGSIb3DQEB CwUAA4IBAQBXyBztrQiB7JAv/LCoqueySv5rODbtx/GWua1Kn3FGgqIr5QKyvluP ahO4pmjOsQD1kagMwjemRNL+bCWJPe1Q3RVgpYg8dzz7BWNVf9g/AhFfUEFk7NFM 2T4aQaDYmo8BDh3Ca690AVmX1ni5FZrxZazL2r63B+fM6InNMJUw3r7BIkPi1AV4 0BYDWzM46ji/uw8ZGQjBWEf8BAFc86PeIMIA4oC5bETKIzEUH9DZQwFRIeOwHU0o Ejb2CJlmSQ852UMFM5wsF7KBZWH8bSNYM/LdEQie7hyFt7IcvyJZKFqMy+yjjSXA nN/rOzeKwiz/5djPBpN4x4eMjHBsbDU0 -----END CERTIFICATE-----Generated at Mon Apr 13 09:28:34 2026 by rpki-client