$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F24654F9C42053F2D945BF872C0FAADA9A2BD645.cer File: F24654F9C42053F2D945BF872C0FAADA9A2BD645.cer (raw, json) Hash identifier: ySWeb6j++L26WBTXJdxI4Uuhjqs9htl9NAGyW/4qPUU= Subject key identifier: F2:46:54:F9:C4:20:53:F2:D9:45:BF:87:2C:0F:AA:DA:9A:2B:D6:45 Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Certificate serial: 03B366E868BB1B1F3CE15333222C268E3B94F698 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1099994663160381441/0/F24654F9C42053F2D945BF872C0FAADA9A2BD645.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1099994663160381441/0/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Fri 24 Apr 2026 09:41:06 +0000 Certificate not after: Fri 23 Apr 2027 09:46:06 +0000 Subordinate resources: AS: 131496 IP: 43.242.48.0/22 IP: 103.37.252.0/22 IP: 103.90.176.0/22 IP: 103.142.234.0/23 IP: 103.154.164.0/23 IP: 2400:fac0::/32 IP: 2405:44c0::/32 IP: 2406:5a40::/32 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Apr 2026 11:12:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:b3:66:e8:68:bb:1b:1f:3c:e1:53:33:22:2c:26:8e:3b:94:f6:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Validity Not Before: Apr 24 09:41:06 2026 GMT Not After : Apr 23 09:46:06 2027 GMT Subject: CN=F24654F9C42053F2D945BF872C0FAADA9A2BD645 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:77:8a:40:be:eb:f9:0b:42:27:c3:fa:e5:19: f2:12:f2:1a:9d:3e:02:68:9d:bd:e4:c0:e4:14:51: 99:55:04:90:95:7e:fb:6b:b0:1b:b1:28:f4:88:be: 05:67:a4:05:a1:25:d9:99:d9:07:08:4d:68:98:4d: e1:59:b0:c6:00:6e:e5:05:fe:a3:ec:78:61:d5:5d: ae:40:86:b9:18:5d:ad:29:94:4d:cb:8d:fe:d5:6f: 7e:92:97:36:a8:e0:1a:94:27:f0:af:c7:5c:74:a1: 57:4b:7b:d9:08:49:2a:30:ad:6c:f2:e8:56:2a:3d: 85:ac:ea:0c:50:2b:7a:a5:aa:33:6a:cf:ba:b9:17: 8e:21:e5:85:d7:8f:47:06:15:9c:95:b2:96:93:5d: cb:20:cd:35:e9:54:0a:44:27:ff:47:7c:16:d8:7d: 05:c8:da:db:f0:12:fd:91:70:6a:02:ba:d2:c0:04: e4:a0:aa:e2:3d:d0:0b:e4:b9:ea:e9:7e:c4:c6:55: 5e:54:67:ba:98:3d:ae:77:57:cf:28:b1:b3:7e:37: 3c:04:a4:a0:82:35:12:08:e4:fa:cf:de:d7:b4:d1: 0c:59:72:66:64:3c:28:1a:36:19:c1:8e:46:1e:26: 13:5d:2a:75:65:52:24:5e:de:df:23:e3:b1:3c:0f: 96:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: F2:46:54:F9:C4:20:53:F2:D9:45:BF:87:2C:0F:AA:DA:9A:2B:D6:45 X509v3 Authority Key Identifier: keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1099994663160381441/0/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1099994663160381441/0/F24654F9C42053F2D945BF872C0FAADA9A2BD645.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.242.48.0/22 103.37.252.0/22 103.90.176.0/22 103.142.234.0/23 103.154.164.0/23 IPv6: 2400:fac0::/32 2405:44c0::/32 2406:5a40::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 131496 Signature Algorithm: sha256WithRSAEncryption 7c:67:42:e6:c9:42:5f:55:43:7e:bc:10:8b:27:49:86:ee:aa: 72:3a:b9:ea:7b:d9:a7:43:76:67:e7:a4:d9:bc:00:e2:86:1d: 1d:99:b7:56:fe:75:0f:5d:9b:91:57:cf:8a:bf:c6:ca:45:94: 5f:99:e0:6c:23:f1:a1:12:bb:28:64:77:93:78:ea:58:6c:8f: 92:ee:be:be:26:e9:72:32:63:d2:31:89:64:23:df:2b:52:7e: 92:a5:78:8e:9a:66:e6:23:0c:24:c8:0c:11:88:f6:9b:2a:4e: ea:b4:69:a7:f7:b9:b4:cc:5c:cd:e4:bf:c7:6a:82:7d:d0:fa: 01:31:08:e6:8f:f5:b4:86:82:a9:bb:9d:23:fc:8f:dd:09:ed: e2:76:92:88:3e:4c:89:4a:37:a7:a7:f7:ae:e4:d3:0a:33:98: 9f:4c:9e:eb:3b:dc:18:51:26:11:40:35:b4:36:43:05:fa:fd: c8:b0:96:49:14:91:89:7d:c3:87:b0:f2:1b:43:df:a5:a4:e2: fe:6a:1e:d3:c0:64:42:17:99:5b:4e:29:b0:01:19:78:4e:7d: e9:5a:38:05:cc:a5:60:fc:53:54:30:d0:db:bb:c8:be:54:c1: 36:cc:66:32:29:90:53:23:65:b1:c7:0b:0e:5c:d4:5d:cd:f4: 0f:a1:c4:39 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUA7Nm6Gi7Gx884VMzIiwmjjuU9pgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDQyNDA5NDEwNloX DTI3MDQyMzA5NDYwNlowMzExMC8GA1UEAxMoRjI0NjU0RjlDNDIwNTNGMkQ5NDVC Rjg3MkMwRkFBREE5QTJCRDY0NTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAO13ikC+6/kLQifD+uUZ8hLyGp0+AmidveTA5BRRmVUEkJV++2uwG7Eo9Ii+ BWekBaEl2ZnZBwhNaJhN4VmwxgBu5QX+o+x4YdVdrkCGuRhdrSmUTcuN/tVvfpKX NqjgGpQn8K/HXHShV0t72QhJKjCtbPLoVio9hazqDFAreqWqM2rPurkXjiHlhdeP RwYVnJWylpNdyyDNNelUCkQn/0d8Fth9Bcja2/AS/ZFwagK60sAE5KCq4j3QC+S5 6ul+xMZVXlRnupg9rndXzyixs343PASkoII1Egjk+s/e17TRDFlyZmQ8KBo2GcGO Rh4mE10qdWVSJF7e3yPjsTwPlqMCAwEAAaOCAuswggLnMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFPJGVPnEIFPy2UW/hywPqtqaK9ZFMB8GA1UdIwQYMBaAFKVu hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTA5OTk5NDY2MzE2MDM4MTQ0MS8wLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDk5OTk0NjYzMTYwMzgxNDQx LzAvRjI0NjU0RjlDNDIwNTNGMkQ5NDVCRjg3MkMwRkFBREE5QTJCRDY0NS5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwVAYIKwYBBQUH AQcBAf8ERTBDMCQEAgABMB4DBAIr8jADBAJnJfwDBAJnWrADBAFnjuoDBAFnmqQw GwQCAAIwFQMFACQA+sADBQAkBUTAAwUAJAZaQDAaBggrBgEFBQcBCAEB/wQLMAmg BzAFAgMCAagwDQYJKoZIhvcNAQELBQADggEBAHxnQubJQl9VQ368EIsnSYbuqnI6 uep72adDdmfnpNm8AOKGHR2Zt1b+dQ9dm5FXz4q/xspFlF+Z4Gwj8aESuyhkd5N4 6lhsj5Luvr4m6XIyY9IxiWQj3ytSfpKleI6aZuYjDCTIDBGI9psqTuq0aaf3ubTM XM3kv8dqgn3Q+gExCOaP9bSGgqm7nSP8j90J7eJ2kog+TIlKN6en967k0wozmJ9M nus73BhRJhFANbQ2QwX6/ciwlkkUkYl9w4ew8htD36Wk4v5qHtPAZEIXmVtOKbAB GXhOfelaOAXMpWD8U1Qw0Nu7yL5UwTbMZjIpkFMjZbHHCw5c1F3N9A+hxDk= -----END CERTIFICATE-----Generated at Mon Apr 27 15:30:51 2026 by rpki-client