$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/0/EC7E476DD1FA65A1A13C74E8A547C9E1D27D8DF3.cer File: EC7E476DD1FA65A1A13C74E8A547C9E1D27D8DF3.cer (raw, json) Hash identifier: y+SOhv3qe3Ga6/R46WmoKoXkdjeyTpDSFBkVyqZ1XFE= Subject key identifier: EC:7E:47:6D:D1:FA:65:A1:A1:3C:74:E8:A5:47:C9:E1:D2:7D:8D:F3 Authority key identifier: CB:02:14:A5:C4:04:D6:F8:40:43:3B:12:0C:AC:BB:5B:8C:59:E6:13 Certificate issuer: /CN=A9162E3D0001/serialNumber=CB0214A5C404D6F840433B120CACBB5B8C59E613 Certificate serial: 700CB242AF2AF0A43F94EA9F7E31C75033CB2E23 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1095984486035816451/0/EC7E476DD1FA65A1A13C74E8A547C9E1D27D8DF3.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1095984486035816451/0/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Mon 13 Apr 2026 08:13:46 +0000 Certificate not after: Mon 12 Apr 2027 08:18:46 +0000 Subordinate resources: IP: 160.25.194.0/23 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 03:51:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:0c:b2:42:af:2a:f0:a4:3f:94:ea:9f:7e:31:c7:50:33:cb:2e:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=CB0214A5C404D6F840433B120CACBB5B8C59E613 Validity Not Before: Apr 13 08:13:46 2026 GMT Not After : Apr 12 08:18:46 2027 GMT Subject: CN=EC7E476DD1FA65A1A13C74E8A547C9E1D27D8DF3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:19:07:10:3d:1e:68:3d:3c:90:db:07:60:51: 83:81:c1:fc:69:1d:f5:90:a3:7d:c8:d9:c9:b0:41: 85:80:a0:cc:b0:a4:2c:1d:48:c6:26:92:a1:c9:59: 5a:79:59:61:b6:db:50:82:36:76:30:4c:20:c3:f5: c4:ea:40:45:19:b6:ed:66:d9:f0:c1:f0:21:8a:ce: 19:8c:ec:01:47:dc:fe:10:a6:f1:39:28:76:89:72: c8:4e:87:89:ec:55:f1:85:8d:a3:4b:da:00:65:1d: da:a6:2c:f1:ae:a6:22:e1:1f:af:87:a2:68:1d:cc: 50:71:93:83:d3:ae:31:1a:a6:07:e0:0d:01:24:ca: 2a:dc:30:cd:7f:18:40:98:58:3b:94:71:95:5d:44: 18:65:fa:56:54:88:ee:67:09:1e:a1:a7:88:17:5f: 36:2f:5b:9d:8d:a9:ef:ba:67:ee:f3:0a:38:6b:f9: 95:fa:85:d4:76:bf:f6:cc:47:10:90:ef:60:e5:6f: 0d:fb:f0:8a:23:0d:1e:6e:5f:99:1f:b0:44:e6:c5: 78:0b:19:4f:65:10:70:61:f7:ec:bd:10:03:d3:3f: a7:b3:7a:bf:55:b3:0d:2a:ad:06:05:80:98:9d:7c: 32:12:85:3d:6e:6f:2f:97:86:59:d7:37:99:d1:b9: 22:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: EC:7E:47:6D:D1:FA:65:A1:A1:3C:74:E8:A5:47:C9:E1:D2:7D:8D:F3 X509v3 Authority Key Identifier: keyid:CB:02:14:A5:C4:04:D6:F8:40:43:3B:12:0C:AC:BB:5B:8C:59:E6:13 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1095984486035816451/0/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1095984486035816451/0/EC7E476DD1FA65A1A13C74E8A547C9E1D27D8DF3.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.25.194.0/23 Signature Algorithm: sha256WithRSAEncryption 74:5a:8e:b5:b6:d0:ab:1c:e9:92:fa:73:6f:b7:35:7c:90:63: 02:fe:6f:8c:1a:59:98:df:b9:96:f3:4a:b0:ee:c7:be:fc:41: 4a:ab:98:61:4d:06:71:8b:dc:89:2a:55:d5:2a:a4:ef:f9:28: 55:27:23:fe:06:22:3a:2d:75:12:ad:da:d4:07:23:e3:00:a4: 20:fd:37:78:68:eb:3f:5f:dd:d9:11:d5:ce:b0:9d:03:96:45: e3:b8:51:c1:3f:73:ed:e5:64:e4:e5:5e:c0:be:2a:26:ff:c3: fa:b6:39:27:8e:e0:fd:ff:05:82:ea:cc:e3:11:ba:11:15:43: 84:67:50:af:87:91:0e:ba:d4:ac:43:22:c7:11:3e:3e:78:11: e1:43:31:d2:de:2c:ba:08:bd:a8:5f:ae:22:55:78:3a:c0:dd: ad:90:9f:14:0b:90:84:fa:9e:1b:16:0c:cb:da:43:a9:e6:7b: 83:45:87:82:a9:bc:ff:2e:03:02:c3:1c:77:34:64:d6:9e:c6: c0:fc:96:d6:07:af:2e:be:2a:96:e6:8a:4d:e3:b3:f7:17:22: 06:ac:ff:84:e6:5e:73:57:61:c7:bc:ff:b1:cd:b1:c0:87:e4: f1:02:82:d6:9e:6b:c4:b5:a1:74:79:84:c0:1a:33:e1:5b:12: 40:05:fb:e2 -----BEGIN CERTIFICATE----- MIIFpzCCBI+gAwIBAgIUcAyyQq8q8KQ/lOqffjHHUDPLLiMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhDQjAyMTRBNUM0 MDRENkY4NDA0MzNCMTIwQ0FDQkI1QjhDNTlFNjEzMB4XDTI2MDQxMzA4MTM0NloX DTI3MDQxMjA4MTg0NlowMzExMC8GA1UEAxMoRUM3RTQ3NkREMUZBNjVBMUExM0M3 NEU4QTU0N0M5RTFEMjdEOERGMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANUZBxA9Hmg9PJDbB2BRg4HB/Gkd9ZCjfcjZybBBhYCgzLCkLB1IxiaSoclZ WnlZYbbbUII2djBMIMP1xOpARRm27WbZ8MHwIYrOGYzsAUfc/hCm8TkodolyyE6H iexV8YWNo0vaAGUd2qYs8a6mIuEfr4eiaB3MUHGTg9OuMRqmB+ANASTKKtwwzX8Y QJhYO5RxlV1EGGX6VlSI7mcJHqGniBdfNi9bnY2p77pn7vMKOGv5lfqF1Ha/9sxH EJDvYOVvDfvwiiMNHm5fmR+wRObFeAsZT2UQcGH37L0QA9M/p7N6v1WzDSqtBgWA mJ18MhKFPW5vL5eGWdc3mdG5IkcCAwEAAaOCApowggKWMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFOx+R23R+mWhoTx06KVHyeHSfY3zMB8GA1UdIwQYMBaAFMsC FKXEBNb4QEM7Egysu1uMWeYTMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMC9DQjAyMTRBNUM0MDRENkY4NDA0MzNCMTIwQ0FDQkI1QjhDNTlF NjEzLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CM0EyNEYyMDFENjYxMUUyOEFDODgzN0M3 MkZEMUZGMi95d0lVcGNRRTF2aEFRenNTREt5N1c0eFo1aE0uY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTA5NTk4NDQ4NjAzNTgxNjQ1MS8wLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDk1OTg0NDg2MDM1ODE2NDUx LzAvRUM3RTQ3NkREMUZBNjVBMUExM0M3NEU4QTU0N0M5RTFEMjdEOERGMy5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAGgGcIwDQYJKoZIhvcNAQELBQADggEBAHRajrW2 0Ksc6ZL6c2+3NXyQYwL+b4waWZjfuZbzSrDux778QUqrmGFNBnGL3IkqVdUqpO/5 KFUnI/4GIjotdRKt2tQHI+MApCD9N3ho6z9f3dkR1c6wnQOWReO4UcE/c+3lZOTl XsC+Kib/w/q2OSeO4P3/BYLqzOMRuhEVQ4RnUK+HkQ661KxDIscRPj54EeFDMdLe LLoIvahfriJVeDrA3a2QnxQLkIT6nhsWDMvaQ6nme4NFh4KpvP8uAwLDHHc0ZNae xsD8ltYHry6+Kpbmik3js/cXIgas/4TmXnNXYce8/7HNscCH5PECgtaea8S1oXR5 hMAaM+FbEkAF++I= -----END CERTIFICATE-----Generated at Fri Apr 17 01:49:10 2026 by rpki-client