$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F318297F7E2B1C94849A4BB67A10F029D86E28A5.cer File: F318297F7E2B1C94849A4BB67A10F029D86E28A5.cer (raw, json) Hash identifier: q+ZwWNefQZ36NuOYbLPxbP9Y8RGm9vx9FgNTmLXTFPw= Subject key identifier: F3:18:29:7F:7E:2B:1C:94:84:9A:4B:B6:7A:10:F0:29:D8:6E:28:A5 Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Certificate serial: 1E5E1577DF72F551DBB0379519E8A2694C4B9166 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1091911004482174977/0/F318297F7E2B1C94849A4BB67A10F029D86E28A5.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1091911004482174977/0/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Thu 02 Apr 2026 02:21:08 +0000 Certificate not after: Thu 01 Apr 2027 02:26:08 +0000 Subordinate resources: AS: 151289 IP: 43.241.184.0/22 IP: 43.255.244.0/22 IP: 2401:96e0::/32 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 12:10:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:5e:15:77:df:72:f5:51:db:b0:37:95:19:e8:a2:69:4c:4b:91:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Validity Not Before: Apr 2 02:21:08 2026 GMT Not After : Apr 1 02:26:08 2027 GMT Subject: CN=F318297F7E2B1C94849A4BB67A10F029D86E28A5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:56:14:fd:8a:7c:42:6a:11:fb:00:24:1b:36: 5d:44:3f:a2:b4:72:b1:7b:9c:6a:c1:6d:e8:e1:67: 94:72:f5:a5:46:7e:89:c6:9a:8c:18:de:d2:ca:94: 4a:2b:4e:62:a6:67:81:d3:47:14:6c:19:14:9a:f9: 99:52:99:88:16:0f:68:d3:56:e4:c0:27:4b:a0:bc: 87:62:ef:f8:82:35:48:b6:b7:d2:b4:d8:b8:08:32: b6:f5:72:4f:81:e7:49:b1:10:e1:d7:89:07:7a:1f: 9b:65:88:fe:d1:da:68:89:de:58:06:41:e5:5f:a7: 4b:d8:a2:10:a0:12:ae:a8:1b:45:49:ef:d2:e7:a0: ab:72:c8:66:3a:30:ac:f2:9a:3a:82:b2:eb:8e:dd: d4:f1:02:60:73:de:bc:f4:bf:cf:1c:1d:36:eb:e3: e8:d2:57:59:ec:77:65:fc:ff:4d:90:f3:e8:ff:47: e5:94:76:e5:28:b0:63:09:b3:0c:0c:3e:f8:15:fe: cc:c9:42:ab:47:41:3e:23:5a:83:c3:94:55:f9:f4: 16:a8:8c:e8:c5:93:7a:fe:cf:d2:66:c1:45:ab:ff: 3f:12:8c:a5:18:1d:96:dc:49:b7:01:20:95:18:ff: 91:4a:8c:f2:58:85:27:fe:b2:eb:80:45:20:ce:ab: 10:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: F3:18:29:7F:7E:2B:1C:94:84:9A:4B:B6:7A:10:F0:29:D8:6E:28:A5 X509v3 Authority Key Identifier: keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1091911004482174977/0/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1091911004482174977/0/F318297F7E2B1C94849A4BB67A10F029D86E28A5.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.241.184.0/22 43.255.244.0/22 IPv6: 2401:96e0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 151289 Signature Algorithm: sha256WithRSAEncryption 88:3e:89:ae:cd:a2:de:18:26:7e:39:8c:4f:71:61:1e:40:78: 20:4e:fa:bd:8e:bb:11:3a:0d:c1:bf:93:15:67:9e:30:22:42: a6:5c:d2:8b:f1:63:a9:2a:3e:9f:3b:54:4b:8c:ec:cf:ea:e8: 1d:b6:9a:8a:b2:26:79:54:d8:9b:a3:2e:a4:91:5f:bb:ff:f5: 98:71:a4:12:14:f7:f2:4b:a9:64:37:a0:85:eb:4f:1c:8e:19: 29:f5:41:45:e1:4b:86:f9:3c:64:d5:06:13:32:ce:7b:33:bd: d4:e6:b1:f7:bc:c4:7f:b8:1f:ad:a1:84:99:3d:7b:7a:b6:fd: 1f:86:ac:fd:43:90:71:24:f1:52:3a:4b:85:c1:17:b6:5c:b4: d5:34:65:0a:9d:69:bf:74:c0:a3:bd:48:a5:90:40:13:c6:95: de:5c:c9:68:09:e0:be:05:e3:6c:a7:22:6e:87:49:7a:9d:3d: e0:da:5a:ea:ae:a2:15:6a:1c:c8:07:45:41:4f:8e:8f:87:43: 61:5e:a0:b6:2a:97:f9:81:39:79:b9:0e:0d:b3:27:16:cb:80: 01:3a:75:eb:2a:51:f9:11:8e:73:29:ee:ba:d5:59:3e:04:47: 49:87:5d:c0:39:bd:a0:2e:5d:fb:69:00:d7:8f:68:a0:6f:6d: 47:57:f0:a0 -----BEGIN CERTIFICATE----- MIIF2DCCBMCgAwIBAgIUHl4Vd99y9VHbsDeVGeiiaUxLkWYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDQwMjAyMjEwOFoX DTI3MDQwMTAyMjYwOFowMzExMC8GA1UEAxMoRjMxODI5N0Y3RTJCMUM5NDg0OUE0 QkI2N0ExMEYwMjlEODZFMjhBNTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANJWFP2KfEJqEfsAJBs2XUQ/orRysXucasFt6OFnlHL1pUZ+icaajBje0sqU SitOYqZngdNHFGwZFJr5mVKZiBYPaNNW5MAnS6C8h2Lv+II1SLa30rTYuAgytvVy T4HnSbEQ4deJB3ofm2WI/tHaaIneWAZB5V+nS9iiEKASrqgbRUnv0uegq3LIZjow rPKaOoKy647d1PECYHPevPS/zxwdNuvj6NJXWex3Zfz/TZDz6P9H5ZR25SiwYwmz DAw++BX+zMlCq0dBPiNag8OUVfn0FqiM6MWTev7P0mbBRav/PxKMpRgdltxJtwEg lRj/kUqM8liFJ/6y64BFIM6rEPcCAwEAAaOCAsswggLHMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFPMYKX9+KxyUhJpLtnoQ8CnYbiilMB8GA1UdIwQYMBaAFKVu hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTA5MTkxMTAwNDQ4MjE3NDk3Ny8wLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDkxOTExMDA0NDgyMTc0OTc3 LzAvRjMxODI5N0Y3RTJCMUM5NDg0OUE0QkI2N0ExMEYwMjlEODZFMjhBNS5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwNAYIKwYBBQUH AQcBAf8EJTAjMBIEAgABMAwDBAIr8bgDBAIr//QwDQQCAAIwBwMFACQBluAwGgYI KwYBBQUHAQgBAf8ECzAJoAcwBQIDAk75MA0GCSqGSIb3DQEBCwUAA4IBAQCIPomu zaLeGCZ+OYxPcWEeQHggTvq9jrsROg3Bv5MVZ54wIkKmXNKL8WOpKj6fO1RLjOzP 6ugdtpqKsiZ5VNiboy6kkV+7//WYcaQSFPfyS6lkN6CF608cjhkp9UFF4UuG+Txk 1QYTMs57M73U5rH3vMR/uB+toYSZPXt6tv0fhqz9Q5BxJPFSOkuFwRe2XLTVNGUK nWm/dMCjvUilkEATxpXeXMloCeC+BeNspyJuh0l6nT3g2lrqrqIVahzIB0VBT46P h0NhXqC2Kpf5gTl5uQ4NsycWy4ABOnXrKlH5EY5zKe661Vk+BEdJh13AOb2gLl37 aQDXj2igb21HV/Cg -----END CERTIFICATE-----Generated at Mon Apr 13 09:29:27 2026 by rpki-client