$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/0/7C559A00840D00325B45D7F6A7C10EDBD2ED69AF.cer File: 7C559A00840D00325B45D7F6A7C10EDBD2ED69AF.cer (raw, json) Hash identifier: UIoHpaFbH3UFUQARcKGGfjARq1SPD38PfQRpP0ZswGk= Subject key identifier: 7C:55:9A:00:84:0D:00:32:5B:45:D7:F6:A7:C1:0E:DB:D2:ED:69:AF Authority key identifier: CB:02:14:A5:C4:04:D6:F8:40:43:3B:12:0C:AC:BB:5B:8C:59:E6:13 Certificate issuer: /CN=A9162E3D0001/serialNumber=CB0214A5C404D6F840433B120CACBB5B8C59E613 Certificate serial: 3F3B748FE845CD13B13420B4F1596567437FC7B0 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1096265459348537346/0/7C559A00840D00325B45D7F6A7C10EDBD2ED69AF.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1096265459348537346/0/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Tue 14 Apr 2026 02:42:35 +0000 Certificate not after: Tue 13 Apr 2027 02:47:35 +0000 Subordinate resources: IP: 167.189.0.0/16 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 15:28:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:3b:74:8f:e8:45:cd:13:b1:34:20:b4:f1:59:65:67:43:7f:c7:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=CB0214A5C404D6F840433B120CACBB5B8C59E613 Validity Not Before: Apr 14 02:42:35 2026 GMT Not After : Apr 13 02:47:35 2027 GMT Subject: CN=7C559A00840D00325B45D7F6A7C10EDBD2ED69AF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:79:7b:64:48:fb:88:96:c8:e8:a2:5f:e8:3a: a8:7e:7c:2d:eb:c1:e9:b9:45:58:cd:23:1c:45:55: ee:69:c6:a9:b7:a4:e2:d4:8d:f0:fa:55:5b:73:4b: 6e:06:a4:ce:75:d9:47:b9:b3:a2:4d:67:a3:73:71: 07:2a:fb:d8:a1:c4:27:fc:cc:2b:74:76:7c:bc:a4: 49:89:20:9d:fa:52:59:60:a8:8f:4a:28:9a:49:6b: 0c:c4:83:af:a2:2e:b1:57:23:cb:11:14:25:af:f8: 37:7b:f6:9a:a2:dc:74:71:fa:37:24:64:37:84:21: 2f:51:1b:0a:8c:54:5a:8f:eb:87:d1:e6:92:e6:9f: 59:1b:77:05:4b:ec:47:6f:ec:b0:1b:44:d7:d1:a4: f7:76:c8:45:dc:60:2f:da:5c:c4:77:91:3d:77:af: e1:fa:5e:a0:b6:4f:77:4e:19:75:36:76:af:c1:7a: 4d:c3:c3:61:d3:0d:fa:4c:40:92:e1:33:69:0a:4d: 64:46:bd:06:e8:ca:17:93:26:d6:97:24:60:42:2d: 29:c9:32:3a:a4:07:40:f1:3f:28:55:d4:60:fb:0a: f8:f7:7e:b6:70:60:8b:bf:1a:a8:ef:f5:43:2a:18: f2:98:2e:e1:81:96:61:8b:05:bf:b5:fb:ab:d0:24: f8:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 7C:55:9A:00:84:0D:00:32:5B:45:D7:F6:A7:C1:0E:DB:D2:ED:69:AF X509v3 Authority Key Identifier: keyid:CB:02:14:A5:C4:04:D6:F8:40:43:3B:12:0C:AC:BB:5B:8C:59:E6:13 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1096265459348537346/0/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1096265459348537346/0/7C559A00840D00325B45D7F6A7C10EDBD2ED69AF.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 167.189.0.0/16 Signature Algorithm: sha256WithRSAEncryption 4d:c5:09:84:c1:61:a4:1a:b3:97:c9:57:18:34:b5:6b:ab:85: 6c:50:d2:6d:3e:aa:05:84:c5:3a:5f:12:f7:9b:78:3a:c4:93: 16:52:7f:13:18:a4:0f:06:e8:d6:c0:24:76:57:39:ee:50:79: 65:df:fe:cd:ab:90:d9:e3:06:cd:c8:89:1a:b1:ad:c7:18:ce: 0b:3d:ec:0e:a6:23:f9:2e:4f:0e:fa:26:f7:4b:62:fb:32:9d: 0f:bf:bc:b3:23:ca:96:46:08:19:5f:bc:17:2c:e3:ef:a0:66: 5d:fb:89:43:fd:87:43:e1:6b:ee:c5:19:8b:8f:5c:88:8d:d7: 1d:c0:fe:73:80:c7:88:95:0b:f3:77:42:a6:00:ee:a2:cf:d9: 26:32:bc:00:45:de:ae:22:1c:37:63:49:13:c2:96:a9:f2:1a: 2d:c2:5b:93:b7:b5:f1:ce:93:97:0e:fe:92:09:59:3a:91:16: b7:f3:98:d5:3e:af:d1:99:2c:d3:85:78:62:93:0e:9d:13:2f: 42:b3:6a:e3:4f:77:32:53:2e:15:68:6c:1e:4b:1c:24:27:38: 1b:13:c9:83:a7:70:cc:0e:55:f3:ad:fc:c5:54:2c:55:1e:f0: cb:e8:06:e3:77:aa:68:15:08:0a:22:f3:d8:2e:cf:4d:15:2d: 5e:93:e5:d1 -----BEGIN CERTIFICATE----- MIIFpjCCBI6gAwIBAgIUPzt0j+hFzROxNCC08VllZ0N/x7AwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhDQjAyMTRBNUM0 MDRENkY4NDA0MzNCMTIwQ0FDQkI1QjhDNTlFNjEzMB4XDTI2MDQxNDAyNDIzNVoX DTI3MDQxMzAyNDczNVowMzExMC8GA1UEAxMoN0M1NTlBMDA4NDBEMDAzMjVCNDVE N0Y2QTdDMTBFREJEMkVENjlBRjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMB5e2RI+4iWyOiiX+g6qH58LevB6blFWM0jHEVV7mnGqbek4tSN8PpVW3NL bgakznXZR7mzok1no3NxByr72KHEJ/zMK3R2fLykSYkgnfpSWWCoj0oomklrDMSD r6IusVcjyxEUJa/4N3v2mqLcdHH6NyRkN4QhL1EbCoxUWo/rh9HmkuafWRt3BUvs R2/ssBtE19Gk93bIRdxgL9pcxHeRPXev4fpeoLZPd04ZdTZ2r8F6TcPDYdMN+kxA kuEzaQpNZEa9BujKF5Mm1pckYEItKckyOqQHQPE/KFXUYPsK+Pd+tnBgi78aqO/1 QyoY8pgu4YGWYYsFv7X7q9Ak+IECAwEAAaOCApkwggKVMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFHxVmgCEDQAyW0XX9qfBDtvS7WmvMB8GA1UdIwQYMBaAFMsC FKXEBNb4QEM7Egysu1uMWeYTMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMC9DQjAyMTRBNUM0MDRENkY4NDA0MzNCMTIwQ0FDQkI1QjhDNTlF NjEzLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CM0EyNEYyMDFENjYxMUUyOEFDODgzN0M3 MkZEMUZGMi95d0lVcGNRRTF2aEFRenNTREt5N1c0eFo1aE0uY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTA5NjI2NTQ1OTM0ODUzNzM0Ni8wLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDk2MjY1NDU5MzQ4NTM3MzQ2 LzAvN0M1NTlBMDA4NDBEMDAzMjVCNDVEN0Y2QTdDMTBFREJEMkVENjlBRi5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUH AQcBAf8EDzANMAsEAgABMAUDAwCnvTANBgkqhkiG9w0BAQsFAAOCAQEATcUJhMFh pBqzl8lXGDS1a6uFbFDSbT6qBYTFOl8S95t4OsSTFlJ/ExikDwbo1sAkdlc57lB5 Zd/+zauQ2eMGzciJGrGtxxjOCz3sDqYj+S5PDvom90ti+zKdD7+8syPKlkYIGV+8 Fyzj76BmXfuJQ/2HQ+Fr7sUZi49ciI3XHcD+c4DHiJUL83dCpgDuos/ZJjK8AEXe riIcN2NJE8KWqfIaLcJbk7e18c6Tlw7+kglZOpEWt/OY1T6v0Zks04V4YpMOnRMv QrNq4093MlMuFWhsHkscJCc4GxPJg6dwzA5V8638xVQsVR7wy+gG43eqaBUICiLz 2C7PTRUtXpPl0Q== -----END CERTIFICATE-----Generated at Fri Apr 17 19:54:56 2026 by rpki-client