$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/0/D0789AD5AD54B84B9BAA37F7D964D5A8A2C287DF.cer File: D0789AD5AD54B84B9BAA37F7D964D5A8A2C287DF.cer (raw, json) Hash identifier: 6glGolNUrKnbShTBaWvlUKI2AIDxtBF8HMgmWGfR/3U= Subject key identifier: D0:78:9A:D5:AD:54:B8:4B:9B:AA:37:F7:D9:64:D5:A8:A2:C2:87:DF Authority key identifier: CB:02:14:A5:C4:04:D6:F8:40:43:3B:12:0C:AC:BB:5B:8C:59:E6:13 Certificate issuer: /CN=A9162E3D0001/serialNumber=CB0214A5C404D6F840433B120CACBB5B8C59E613 Certificate serial: 3BB673CFDB5DC67F882D6746D5E1357BF6AFC5A6 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1095966185683419139/0/D0789AD5AD54B84B9BAA37F7D964D5A8A2C287DF.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1095966185683419139/0/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Mon 13 Apr 2026 06:53:22 +0000 Certificate not after: Mon 12 Apr 2027 06:58:22 +0000 Subordinate resources: IP: 160.191.0.0/23 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 15:28:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:b6:73:cf:db:5d:c6:7f:88:2d:67:46:d5:e1:35:7b:f6:af:c5:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=CB0214A5C404D6F840433B120CACBB5B8C59E613 Validity Not Before: Apr 13 06:53:22 2026 GMT Not After : Apr 12 06:58:22 2027 GMT Subject: CN=D0789AD5AD54B84B9BAA37F7D964D5A8A2C287DF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:f4:ae:4b:5a:4b:29:f0:8e:35:ff:ab:8a:23: b1:1a:b1:51:ef:51:d6:e9:92:75:ce:07:09:44:8d: 07:ce:88:a9:0e:7a:40:62:06:bc:9b:2f:44:7d:d0: 1a:44:dd:94:5a:ba:b1:e1:6e:27:12:c4:a0:ee:6e: 14:ea:0e:63:9f:e4:e5:d3:87:ae:87:94:ca:d6:b7: 50:6f:e3:76:9f:d9:ea:5e:89:32:d4:04:74:be:b1: e0:0c:76:37:f3:44:28:ff:53:fb:59:e2:29:e6:68: a7:36:06:23:d2:2b:0b:c4:79:ce:bb:fb:2e:e7:5c: db:5c:37:05:7a:bc:0c:1e:05:98:f9:98:46:96:b9: 5c:71:fa:21:82:d8:71:9f:79:00:e4:6f:61:68:69: 78:44:59:13:85:59:44:04:6b:e2:6d:7e:61:cd:9c: 21:55:3c:13:b7:2d:11:2c:15:00:e8:d9:aa:e0:79: 1d:b9:6d:ff:32:59:b8:94:bc:96:42:b6:52:f6:9e: 2b:a7:dd:ec:75:36:fa:53:e9:f7:ce:47:c8:6c:c0: be:f8:dc:b2:5b:6f:f9:98:8d:e7:7c:d7:ca:df:63: 63:ab:c6:a3:e8:7e:14:f0:af:d3:59:e8:51:7c:24: d1:01:da:35:7b:11:b2:04:40:3b:b1:fe:1d:e5:c1: bb:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: D0:78:9A:D5:AD:54:B8:4B:9B:AA:37:F7:D9:64:D5:A8:A2:C2:87:DF X509v3 Authority Key Identifier: keyid:CB:02:14:A5:C4:04:D6:F8:40:43:3B:12:0C:AC:BB:5B:8C:59:E6:13 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1095966185683419139/0/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1095966185683419139/0/D0789AD5AD54B84B9BAA37F7D964D5A8A2C287DF.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.191.0.0/23 Signature Algorithm: sha256WithRSAEncryption 13:67:6d:e1:d9:f7:94:72:ab:b4:24:5a:4c:36:8c:c1:3a:b2: 39:5e:e6:81:30:8a:81:11:56:0d:bf:01:65:a0:39:0e:45:f1: ab:8a:a4:77:0d:b7:b2:1e:a4:bd:c8:07:f4:7a:c3:8c:b2:64: 91:30:99:6d:68:85:a3:dc:ec:91:ad:4d:7f:b1:c9:65:d4:83: 7b:03:dc:0b:20:38:1a:3b:0d:a3:44:ea:9e:f3:87:7e:d1:08: 2b:e9:97:15:f8:ae:46:23:fa:ee:a9:e6:49:51:9f:18:eb:1f: f1:c2:34:c5:65:6a:6d:24:3b:72:78:76:80:14:a1:8b:68:0c: 4f:02:5e:51:d9:29:10:4a:73:93:d1:7a:b4:b5:64:18:cb:cd: 43:49:08:d7:c7:15:0f:77:4b:63:69:5d:5c:27:20:d4:18:04: 79:ac:2c:16:fa:69:ac:1e:a0:56:2a:58:15:86:5e:be:75:2a: 78:1c:3a:7d:b2:fc:f1:71:e1:dc:9d:b5:09:86:4b:03:60:c4: ac:b2:2b:f5:37:01:10:fa:74:a8:0d:73:b0:4d:40:2e:7d:69: d3:85:20:35:89:c8:c4:49:48:34:41:a7:6a:9e:ba:9a:33:a0: a3:fd:82:27:38:61:00:f1:88:45:c9:87:cd:70:6d:7b:94:79: f9:7e:90:ac -----BEGIN CERTIFICATE----- MIIFpzCCBI+gAwIBAgIUO7Zzz9tdxn+ILWdG1eE1e/avxaYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhDQjAyMTRBNUM0 MDRENkY4NDA0MzNCMTIwQ0FDQkI1QjhDNTlFNjEzMB4XDTI2MDQxMzA2NTMyMloX DTI3MDQxMjA2NTgyMlowMzExMC8GA1UEAxMoRDA3ODlBRDVBRDU0Qjg0QjlCQUEz N0Y3RDk2NEQ1QThBMkMyODdERjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOj0rktaSynwjjX/q4ojsRqxUe9R1umSdc4HCUSNB86IqQ56QGIGvJsvRH3Q GkTdlFq6seFuJxLEoO5uFOoOY5/k5dOHroeUyta3UG/jdp/Z6l6JMtQEdL6x4Ax2 N/NEKP9T+1niKeZopzYGI9IrC8R5zrv7Ludc21w3BXq8DB4FmPmYRpa5XHH6IYLY cZ95AORvYWhpeERZE4VZRARr4m1+Yc2cIVU8E7ctESwVAOjZquB5Hblt/zJZuJS8 lkK2UvaeK6fd7HU2+lPp985HyGzAvvjcsltv+ZiN53zXyt9jY6vGo+h+FPCv01no UXwk0QHaNXsRsgRAO7H+HeXBu7kCAwEAAaOCApowggKWMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFNB4mtWtVLhLm6o399lk1aiiwoffMB8GA1UdIwQYMBaAFMsC FKXEBNb4QEM7Egysu1uMWeYTMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMC9DQjAyMTRBNUM0MDRENkY4NDA0MzNCMTIwQ0FDQkI1QjhDNTlF NjEzLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CM0EyNEYyMDFENjYxMUUyOEFDODgzN0M3 MkZEMUZGMi95d0lVcGNRRTF2aEFRenNTREt5N1c0eFo1aE0uY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTA5NTk2NjE4NTY4MzQxOTEzOS8wLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDk1OTY2MTg1NjgzNDE5MTM5 LzAvRDA3ODlBRDVBRDU0Qjg0QjlCQUEzN0Y3RDk2NEQ1QThBMkMyODdERi5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAGgvwAwDQYJKoZIhvcNAQELBQADggEBABNnbeHZ 95Ryq7QkWkw2jME6sjle5oEwioERVg2/AWWgOQ5F8auKpHcNt7IepL3IB/R6w4yy ZJEwmW1ohaPc7JGtTX+xyWXUg3sD3AsgOBo7DaNE6p7zh37RCCvplxX4rkYj+u6p 5klRnxjrH/HCNMVlam0kO3J4doAUoYtoDE8CXlHZKRBKc5PRerS1ZBjLzUNJCNfH FQ93S2NpXVwnINQYBHmsLBb6aaweoFYqWBWGXr51KngcOn2y/PFx4dydtQmGSwNg xKyyK/U3ARD6dKgNc7BNQC59adOFIDWJyMRJSDRBp2qeupozoKP9gic4YQDxiEXJ h81wbXuUefl+kKw= -----END CERTIFICATE-----Generated at Fri Apr 17 17:12:21 2026 by rpki-client