$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F21B617F46E5DD760AE56A21B6890185B53C70E0.cer File: F21B617F46E5DD760AE56A21B6890185B53C70E0.cer (raw, json) Hash identifier: vCfIziU0IGqMvOsgnk2IgODcxCbJz75/DVj1+/ASckA= Subject key identifier: F2:1B:61:7F:46:E5:DD:76:0A:E5:6A:21:B6:89:01:85:B5:3C:70:E0 Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Certificate serial: 11DECE089D0C332EE1BEFEE25DBE6D1FABEF2C14 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1094526146340454402/0/F21B617F46E5DD760AE56A21B6890185B53C70E0.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1094526146340454402/0/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Thu 09 Apr 2026 07:31:10 +0000 Certificate not after: Thu 08 Apr 2027 07:36:10 +0000 Subordinate resources: AS: 146779 IP: 103.116.138.0/23 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 12:10:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:de:ce:08:9d:0c:33:2e:e1:be:fe:e2:5d:be:6d:1f:ab:ef:2c:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Validity Not Before: Apr 9 07:31:10 2026 GMT Not After : Apr 8 07:36:10 2027 GMT Subject: CN=F21B617F46E5DD760AE56A21B6890185B53C70E0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:01:c8:73:9a:05:c5:d6:72:15:8f:4d:cd:c1: 09:f4:69:7a:f5:88:5d:06:04:46:84:9f:d2:2f:44: b3:41:88:65:3c:5e:c2:78:07:d0:f3:a8:cb:e3:0d: 27:10:b1:9b:8b:62:b0:59:96:37:69:9b:cc:0c:96: e8:fb:b4:a4:0b:d6:e8:7a:4e:da:c0:9c:dd:2d:dd: 45:65:42:b3:16:e5:05:73:8d:f6:22:d3:53:25:e7: f7:ae:93:28:56:7f:b4:ab:c0:c8:a8:b9:01:b8:eb: f8:66:3d:06:30:ae:65:7c:24:76:c2:db:ab:5e:9a: f8:db:85:71:b1:bf:cd:02:c9:81:ba:25:72:a1:55: dc:7b:09:7a:13:90:c7:57:86:52:70:ef:fc:e0:ae: b9:79:00:9a:7d:34:ec:b6:1d:cd:98:38:6c:8b:3e: 36:43:1b:95:a7:75:1c:c1:d8:87:3e:58:3f:51:3b: 99:88:74:0e:87:a9:92:92:dc:0c:ce:85:a4:c1:a6: c7:e4:99:0f:1c:4d:73:00:8c:b0:4a:93:ce:47:2e: 0f:ab:57:c9:68:f9:3b:dd:ed:c1:4e:df:df:63:89: 02:b6:ae:82:c5:28:43:d8:61:a5:30:ae:9f:26:a4: fc:28:4b:78:f5:05:bd:53:ab:b0:20:2f:af:a1:d7: a1:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: F2:1B:61:7F:46:E5:DD:76:0A:E5:6A:21:B6:89:01:85:B5:3C:70:E0 X509v3 Authority Key Identifier: keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1094526146340454402/0/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1094526146340454402/0/F21B617F46E5DD760AE56A21B6890185B53C70E0.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.116.138.0/23 sbgp-autonomousSysNum: critical Autonomous System Numbers: 146779 Signature Algorithm: sha256WithRSAEncryption 11:3c:4c:d8:ee:d2:d2:77:fb:c2:3b:76:98:81:e8:a7:b2:d8: b2:1f:97:e2:02:8b:61:dc:0c:9d:f3:fa:b2:cb:40:e2:b5:0a: 15:5b:e8:14:ca:ae:4a:ae:09:9c:40:e3:82:d5:57:9c:50:8a: 1f:62:37:de:14:93:1a:38:40:46:dc:8c:96:3d:9f:ba:ec:c4: 23:90:4b:9a:51:b7:3f:82:90:fe:50:45:76:b5:5c:c9:e8:93: 64:21:a3:67:32:b6:10:7c:ae:14:18:c4:bb:16:1f:79:7e:27: 70:63:6c:02:fa:49:9b:e7:70:af:e1:06:f7:a2:80:78:14:d7: bf:a1:6d:4b:39:54:62:23:7c:21:c5:9f:96:99:7f:13:47:de: 41:4c:9b:09:9c:5a:58:cc:cc:83:68:75:8e:17:32:50:f6:38: fc:7c:df:9a:eb:ad:56:5b:3c:aa:29:32:7b:99:7b:9f:f4:e1: 8e:cd:0c:e5:57:b4:f6:b2:c1:ee:04:3b:dc:46:6d:0f:ed:a8: b2:a4:19:6d:16:95:95:0d:93:d0:7c:84:10:09:45:61:bf:ea: 41:20:fe:5b:ee:54:5e:6b:e9:3d:27:b3:ce:1b:fa:1c:1a:f9: 5a:e2:cb:15:88:d7:e4:53:87:58:21:b1:4c:51:7e:f2:d8:37: f1:64:43:a5 -----BEGIN CERTIFICATE----- MIIFwzCCBKugAwIBAgIUEd7OCJ0MMy7hvv7iXb5tH6vvLBQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDQwOTA3MzExMFoX DTI3MDQwODA3MzYxMFowMzExMC8GA1UEAxMoRjIxQjYxN0Y0NkU1REQ3NjBBRTU2 QTIxQjY4OTAxODVCNTNDNzBFMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMQByHOaBcXWchWPTc3BCfRpevWIXQYERoSf0i9Es0GIZTxewngH0POoy+MN JxCxm4tisFmWN2mbzAyW6Pu0pAvW6HpO2sCc3S3dRWVCsxblBXON9iLTUyXn966T KFZ/tKvAyKi5Abjr+GY9BjCuZXwkdsLbq16a+NuFcbG/zQLJgbolcqFV3HsJehOQ x1eGUnDv/OCuuXkAmn007LYdzZg4bIs+NkMblad1HMHYhz5YP1E7mYh0DoepkpLc DM6FpMGmx+SZDxxNcwCMsEqTzkcuD6tXyWj5O93twU7f32OJAraugsUoQ9hhpTCu nyak/ChLePUFvVOrsCAvr6HXoQECAwEAAaOCArYwggKyMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFPIbYX9G5d12CuVqIbaJAYW1PHDgMB8GA1UdIwQYMBaAFKVu hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTA5NDUyNjE0NjM0MDQ1NDQwMi8wLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDk0NTI2MTQ2MzQwNDU0NDAy LzAvRjIxQjYxN0Y0NkU1REQ3NjBBRTU2QTIxQjY4OTAxODVCNTNDNzBFMC5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAFndIowGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQID Aj1bMA0GCSqGSIb3DQEBCwUAA4IBAQARPEzY7tLSd/vCO3aYgeinstiyH5fiAoth 3Ayd8/qyy0DitQoVW+gUyq5KrgmcQOOC1VecUIofYjfeFJMaOEBG3IyWPZ+67MQj kEuaUbc/gpD+UEV2tVzJ6JNkIaNnMrYQfK4UGMS7Fh95fidwY2wC+kmb53Cv4Qb3 ooB4FNe/oW1LOVRiI3whxZ+WmX8TR95BTJsJnFpYzMyDaHWOFzJQ9jj8fN+a661W WzyqKTJ7mXuf9OGOzQzlV7T2ssHuBDvcRm0P7aiypBltFpWVDZPQfIQQCUVhv+pB IP5b7lRea+k9J7POG/ocGvla4ssViNfkU4dYIbFMUX7y2DfxZEOl -----END CERTIFICATE-----Generated at Mon Apr 13 09:29:27 2026 by rpki-client