$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/0/EF79F532C05F0C25F39495E2C66C3EA4CDC9CCC4.cer File: EF79F532C05F0C25F39495E2C66C3EA4CDC9CCC4.cer (raw, json) Hash identifier: 8kxiwBA8sJfXtqJz46P4aSAciH0G183SDKZR3dMHdKI= Subject key identifier: EF:79:F5:32:C0:5F:0C:25:F3:94:95:E2:C6:6C:3E:A4:CD:C9:CC:C4 Authority key identifier: CB:02:14:A5:C4:04:D6:F8:40:43:3B:12:0C:AC:BB:5B:8C:59:E6:13 Certificate issuer: /CN=A9162E3D0001/serialNumber=CB0214A5C404D6F840433B120CACBB5B8C59E613 Certificate serial: 0311E2AAD0ABBEA9A0ED0216A844ED23B14CD464 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1116992151696179223/1/EF79F532C05F0C25F39495E2C66C3EA4CDC9CCC4.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1116992151696179223/1/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Wed 10 Jun 2026 07:24:42 +0000 Certificate not after: Wed 09 Jun 2027 07:29:42 +0000 Subordinate resources: IP: 162.4.230.0/23 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 17:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:11:e2:aa:d0:ab:be:a9:a0:ed:02:16:a8:44:ed:23:b1:4c:d4:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=CB0214A5C404D6F840433B120CACBB5B8C59E613 Validity Not Before: Jun 10 07:24:42 2026 GMT Not After : Jun 9 07:29:42 2027 GMT Subject: CN=EF79F532C05F0C25F39495E2C66C3EA4CDC9CCC4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:7e:f9:fe:64:06:1f:15:61:d2:c5:c5:35:57: bd:37:b1:7d:04:cb:b4:37:b3:b9:27:91:46:d1:24: 25:04:2c:c6:53:a9:00:f1:49:75:ae:eb:46:8b:b6: ce:ab:04:a8:c8:8a:30:d3:02:31:43:03:2d:26:ef: 35:4d:9c:be:48:45:df:8e:a4:18:c1:54:e9:79:17: db:17:b2:ca:76:c9:53:15:3f:dc:ff:2c:cc:59:7a: ff:33:4c:e0:4e:2e:85:b6:2b:ff:3f:7f:93:9f:36: a7:10:15:97:11:dc:af:4c:0c:f3:32:10:39:ec:6a: 57:ce:b7:21:33:69:d9:5d:28:01:97:eb:4e:57:b3: 00:04:e3:c0:fd:2a:fd:a2:94:fe:6b:70:c6:5b:04: 71:7e:d7:91:9d:91:95:a4:e4:66:b7:d6:bb:dc:6d: ac:2e:b4:fe:d2:ba:ce:f9:b9:e8:1e:0a:ce:0e:ea: 59:f5:f2:91:f2:86:6a:09:a0:8c:4a:82:26:d3:ce: c8:b4:4a:b5:52:90:93:54:af:9e:4f:7b:2e:88:42: 69:c3:1e:20:08:0b:2b:1f:2a:70:2e:fd:05:e6:ac: e5:74:21:0e:1e:ed:fc:5c:10:d2:eb:47:d5:18:e6: 05:4b:78:01:66:d4:35:c8:9e:eb:8a:cb:04:6e:fe: a7:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: EF:79:F5:32:C0:5F:0C:25:F3:94:95:E2:C6:6C:3E:A4:CD:C9:CC:C4 X509v3 Authority Key Identifier: keyid:CB:02:14:A5:C4:04:D6:F8:40:43:3B:12:0C:AC:BB:5B:8C:59:E6:13 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1116992151696179223/1/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1116992151696179223/1/EF79F532C05F0C25F39495E2C66C3EA4CDC9CCC4.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 162.4.230.0/23 Signature Algorithm: sha256WithRSAEncryption 87:6c:91:55:b2:ae:23:af:00:ae:5c:e6:87:ac:f9:00:67:2f: e2:d2:e5:3c:1d:8e:49:54:52:db:6f:69:c0:4a:5c:51:63:0e: b3:80:c3:5d:c7:5c:9f:c3:93:b1:72:d8:01:5e:25:1c:c8:ce: 45:1e:a9:8a:77:1e:9b:3b:aa:b4:61:0f:34:07:01:72:92:fa: 3c:06:23:e9:3b:f0:c6:be:29:ab:d8:ba:ce:ef:a0:0c:e4:fa: 28:29:b0:32:a4:8f:6b:cc:c8:f4:3e:38:66:ce:2e:ea:f1:34: 7d:7b:07:82:62:8c:7e:50:6f:1a:1d:0b:c8:d2:1b:13:57:35: 42:89:d3:e8:7d:67:8c:94:48:7a:60:02:47:91:d7:e8:b7:27: 64:26:ef:8f:7d:1b:60:cb:39:2c:52:fb:9a:1f:9a:19:1c:06: a7:c3:ec:3d:31:7c:e6:d5:8d:87:63:65:96:85:19:ca:c7:53: 35:ea:40:6c:cc:cd:a3:c1:1c:bd:87:06:05:7c:fd:c1:36:2b: 04:cd:6d:83:b0:86:2c:94:22:ad:c2:8a:9e:96:54:1a:19:f0: d3:da:86:5c:d2:04:6d:f0:1f:17:9c:67:45:a9:65:6d:f4:d7: 9e:60:87:66:5d:79:ca:f9:76:0e:36:c1:ba:f6:7b:ed:1f:cd: 67:b2:be:94 -----BEGIN CERTIFICATE----- MIIFpzCCBI+gAwIBAgIUAxHiqtCrvqmg7QIWqETtI7FM1GQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhDQjAyMTRBNUM0 MDRENkY4NDA0MzNCMTIwQ0FDQkI1QjhDNTlFNjEzMB4XDTI2MDYxMDA3MjQ0MloX DTI3MDYwOTA3Mjk0MlowMzExMC8GA1UEAxMoRUY3OUY1MzJDMDVGMEMyNUYzOTQ5 NUUyQzY2QzNFQTRDREM5Q0NDNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANl++f5kBh8VYdLFxTVXvTexfQTLtDezuSeRRtEkJQQsxlOpAPFJda7rRou2 zqsEqMiKMNMCMUMDLSbvNU2cvkhF346kGMFU6XkX2xeyynbJUxU/3P8szFl6/zNM 4E4uhbYr/z9/k582pxAVlxHcr0wM8zIQOexqV863ITNp2V0oAZfrTlezAATjwP0q /aKU/mtwxlsEcX7XkZ2RlaTkZrfWu9xtrC60/tK6zvm56B4Kzg7qWfXykfKGagmg jEqCJtPOyLRKtVKQk1Svnk97LohCacMeIAgLKx8qcC79Beas5XQhDh7t/FwQ0utH 1RjmBUt4AWbUNcie64rLBG7+p2kCAwEAAaOCApowggKWMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFO959TLAXwwl85SV4sZsPqTNyczEMB8GA1UdIwQYMBaAFMsC FKXEBNb4QEM7Egysu1uMWeYTMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMC9DQjAyMTRBNUM0MDRENkY4NDA0MzNCMTIwQ0FDQkI1QjhDNTlF NjEzLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CM0EyNEYyMDFENjYxMUUyOEFDODgzN0M3 MkZEMUZGMi95d0lVcGNRRTF2aEFRenNTREt5N1c0eFo1aE0uY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTExNjk5MjE1MTY5NjE3OTIyMy8xLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMTE2OTkyMTUxNjk2MTc5MjIz LzEvRUY3OUY1MzJDMDVGMEMyNUYzOTQ5NUUyQzY2QzNFQTRDREM5Q0NDNC5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAGiBOYwDQYJKoZIhvcNAQELBQADggEBAIdskVWy riOvAK5c5oes+QBnL+LS5TwdjklUUttvacBKXFFjDrOAw13HXJ/Dk7Fy2AFeJRzI zkUeqYp3Hps7qrRhDzQHAXKS+jwGI+k78Ma+KavYus7voAzk+igpsDKkj2vMyPQ+ OGbOLurxNH17B4JijH5QbxodC8jSGxNXNUKJ0+h9Z4yUSHpgAkeR1+i3J2Qm7499 G2DLOSxS+5ofmhkcBqfD7D0xfObVjYdjZZaFGcrHUzXqQGzMzaPBHL2HBgV8/cE2 KwTNbYOwhiyUIq3Cip6WVBoZ8NPahlzSBG3wHxecZ0WpZW30155gh2Zdecr5dg42 wbr2e+0fzWeyvpQ= -----END CERTIFICATE-----Generated at Sun Jun 14 04:00:12 2026 by rpki-client