$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/709E5125176627846677AF908E76CAE21FB95460.cer File: 709E5125176627846677AF908E76CAE21FB95460.cer (raw, json) Hash identifier: TvohveFk6/K6Yco9e72od8GXnkKlXEUHRr52URsqkQc= Subject key identifier: 70:9E:51:25:17:66:27:84:66:77:AF:90:8E:76:CA:E2:1F:B9:54:60 Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Certificate serial: 7FD11DEB477FC03B58E3FF7484348D1F8D7519EB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1096330859092377601/0/709E5125176627846677AF908E76CAE21FB95460.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1096330859092377601/0/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Tue 14 Apr 2026 07:02:26 +0000 Certificate not after: Tue 13 Apr 2027 07:07:26 +0000 Subordinate resources: AS: 139134 IP: 103.120.72.0/22 IP: 116.70.64.0/18 IP: 123.99.192.0/18 IP: 124.248.64.0/18 IP: 203.135.96.0/19 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 17:12:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:d1:1d:eb:47:7f:c0:3b:58:e3:ff:74:84:34:8d:1f:8d:75:19:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Validity Not Before: Apr 14 07:02:26 2026 GMT Not After : Apr 13 07:07:26 2027 GMT Subject: CN=709E5125176627846677AF908E76CAE21FB95460 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:8c:8e:99:89:39:1b:c4:3d:ca:91:1d:66:5b: f1:8b:50:59:fc:00:9f:57:5d:7b:4a:2f:45:f2:00: a8:21:c9:04:30:c3:d2:40:dd:39:7a:b7:64:77:ca: 94:cc:66:4f:05:90:42:a7:15:35:dc:24:86:76:84: 68:2b:54:23:68:b8:73:57:76:2e:cd:7c:44:5d:cc: 48:e8:95:c6:8c:be:fb:43:c2:d8:d5:86:fc:9a:0e: c7:5d:7d:87:23:c6:ee:06:4b:2d:b1:9f:38:77:fe: 61:4e:a8:90:36:aa:f8:38:27:9f:fb:86:8e:4f:ee: 4e:80:ec:9a:72:31:05:1d:1e:ee:59:01:bb:7d:75: d1:63:6a:15:44:80:a6:1a:5a:62:ae:85:c7:76:64: ce:8a:ba:ae:22:23:57:9e:21:81:fe:2a:2e:ff:62: f6:a5:d8:bd:72:07:49:32:2a:92:4c:e5:b4:cb:1e: 62:95:b2:22:61:b0:7e:fd:ac:f5:94:b8:3d:50:71: 70:39:4e:c2:7c:a4:93:8a:80:8a:03:ab:a0:4b:d2: b4:2a:04:c8:ca:7b:51:7e:6c:5b:15:c8:47:cc:9a: 4a:91:18:a5:26:1e:92:25:75:6e:a6:7f:2a:da:05: 88:94:cd:bb:21:f6:e4:1e:64:54:e0:14:36:a6:5e: b8:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 70:9E:51:25:17:66:27:84:66:77:AF:90:8E:76:CA:E2:1F:B9:54:60 X509v3 Authority Key Identifier: keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1096330859092377601/0/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1096330859092377601/0/709E5125176627846677AF908E76CAE21FB95460.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.120.72.0/22 116.70.64.0/18 123.99.192.0/18 124.248.64.0/18 203.135.96.0/19 sbgp-autonomousSysNum: critical Autonomous System Numbers: 139134 Signature Algorithm: sha256WithRSAEncryption 07:1c:b3:01:df:ea:79:39:5a:f0:39:65:90:40:33:27:2f:d2: 4f:33:a1:ab:98:7e:37:8b:30:e3:6d:f1:94:ba:c9:5a:1b:b4: 1b:d4:8f:31:9e:8d:f4:ee:ac:40:6d:58:3f:15:03:16:4f:ad: 63:ef:47:d7:9a:ee:d0:85:3a:48:50:3c:12:c3:a0:c3:02:4f: 4f:a2:e7:63:d1:f9:c7:4e:48:eb:80:a6:8b:57:78:69:d1:0f: b8:75:09:95:d9:ed:c6:34:10:9e:2f:e4:87:c8:5e:54:22:e6: 0b:0b:57:ae:3a:ea:8d:37:1c:09:65:3f:6e:59:74:38:28:25: 4d:01:af:fe:78:a1:8e:cb:94:81:97:4a:b7:6e:89:d1:e6:d7: a6:b1:34:bb:cf:5e:65:9b:73:42:45:b0:38:7d:5e:31:a9:b9: a8:dc:3c:91:1e:b0:5a:eb:82:20:eb:c9:09:fa:36:62:31:6f: 53:be:0c:84:86:14:14:9a:58:0a:d3:fc:6d:84:33:69:3e:84: f1:3e:0f:7e:b7:bf:70:18:8d:26:7f:09:87:d2:4b:c8:92:f3: 85:29:12:31:b2:e9:6e:a6:56:22:6f:d7:43:ac:90:3f:12:dc: 24:ba:29:3d:84:e6:9b:e8:ad:37:b3:35:43:77:53:fe:39:5c: 49:01:fe:80 -----BEGIN CERTIFICATE----- MIIF2zCCBMOgAwIBAgIUf9Ed60d/wDtY4/90hDSNH411GeswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDQxNDA3MDIyNloX DTI3MDQxMzA3MDcyNlowMzExMC8GA1UEAxMoNzA5RTUxMjUxNzY2Mjc4NDY2NzdB RjkwOEU3NkNBRTIxRkI5NTQ2MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALaMjpmJORvEPcqRHWZb8YtQWfwAn1dde0ovRfIAqCHJBDDD0kDdOXq3ZHfK lMxmTwWQQqcVNdwkhnaEaCtUI2i4c1d2Ls18RF3MSOiVxoy++0PC2NWG/JoOx119 hyPG7gZLLbGfOHf+YU6okDaq+Dgnn/uGjk/uToDsmnIxBR0e7lkBu3110WNqFUSA phpaYq6Fx3Zkzoq6riIjV54hgf4qLv9i9qXYvXIHSTIqkkzltMseYpWyImGwfv2s 9ZS4PVBxcDlOwnykk4qAigOroEvStCoEyMp7UX5sWxXIR8yaSpEYpSYekiV1bqZ/ KtoFiJTNuyH25B5kVOAUNqZeuMkCAwEAAaOCAs4wggLKMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFHCeUSUXZieEZnevkI52yuIfuVRgMB8GA1UdIwQYMBaAFKVu hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTA5NjMzMDg1OTA5MjM3NzYwMS8wLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDk2MzMwODU5MDkyMzc3NjAx LzAvNzA5RTUxMjUxNzY2Mjc4NDY2NzdBRjkwOEU3NkNBRTIxRkI5NTQ2MC5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwNwYIKwYBBQUH AQcBAf8EKDAmMCQEAgABMB4DBAJneEgDBAZ0RkADBAZ7Y8ADBAZ8+EADBAXLh2Aw GgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDAh9+MA0GCSqGSIb3DQEBCwUAA4IBAQAH HLMB3+p5OVrwOWWQQDMnL9JPM6GrmH43izDjbfGUuslaG7Qb1I8xno307qxAbVg/ FQMWT61j70fXmu7QhTpIUDwSw6DDAk9Poudj0fnHTkjrgKaLV3hp0Q+4dQmV2e3G NBCeL+SHyF5UIuYLC1euOuqNNxwJZT9uWXQ4KCVNAa/+eKGOy5SBl0q3bonR5tem sTS7z15lm3NCRbA4fV4xqbmo3DyRHrBa64Ig68kJ+jZiMW9TvgyEhhQUmlgK0/xt hDNpPoTxPg9+t79wGI0mfwmH0kvIkvOFKRIxsuluplYib9dDrJA/Etwkuik9hOab 6K03szVDd1P+OVxJAf6A -----END CERTIFICATE-----Generated at Sat Apr 18 01:01:37 2026 by rpki-client