$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7710F04D5A8895AC5900BFFEB1DA16970A339EEA.cer File: 7710F04D5A8895AC5900BFFEB1DA16970A339EEA.cer (raw, json) Hash identifier: UDQ8l6tP7ZGZ95/0Ce+36C1PNU1g7YbWhDfNj5TkRkw= Subject key identifier: 77:10:F0:4D:5A:88:95:AC:59:00:BF:FE:B1:DA:16:97:0A:33:9E:EA Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Certificate serial: 37D5F9C2783AEEBE006D72120947761C0451422D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1079239660892323843/0/7710F04D5A8895AC5900BFFEB1DA16970A339EEA.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1079239660892323843/0/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Thu 26 Feb 2026 03:08:08 +0000 Certificate not after: Thu 25 Feb 2027 03:13:08 +0000 Subordinate resources: IP: 2402:4be0::/32 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 04:07:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:d5:f9:c2:78:3a:ee:be:00:6d:72:12:09:47:76:1c:04:51:42:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Validity Not Before: Feb 26 03:08:08 2026 GMT Not After : Feb 25 03:13:08 2027 GMT Subject: CN=7710F04D5A8895AC5900BFFEB1DA16970A339EEA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:0f:62:95:38:f0:70:52:5a:8f:b0:a7:bd:07: c3:d5:5c:99:39:4c:26:b3:1b:c6:f6:dd:fa:7d:fe: 79:4c:82:66:63:c6:db:7d:21:f6:07:11:6e:5d:b6: bd:ec:5e:14:61:fd:c7:5d:eb:f8:f1:5e:6a:86:08: be:25:74:89:c9:1a:02:58:c0:09:a1:84:59:7d:e9: a6:12:64:5c:45:2a:e4:f5:c9:0f:d5:e6:5d:04:df: 09:2b:0e:41:43:65:56:8b:5a:2e:8c:2c:af:72:69: b1:e9:f5:43:c1:5b:ed:41:3c:11:0a:8e:0c:14:92: ba:b5:9b:eb:05:0b:36:78:34:7b:39:0b:5a:17:35: fc:80:44:5b:d2:ba:f8:34:4e:2f:fb:5f:b4:3f:db: bc:06:8b:9e:09:11:b6:50:f6:72:9d:de:79:f5:68: a3:87:65:cc:93:74:5b:8c:e1:82:31:d6:b1:ae:8c: 32:c4:d3:87:1b:35:20:24:a4:3e:c5:ea:cf:45:fd: d2:4b:d2:74:5f:ee:dd:6d:91:9f:0a:ec:2a:92:99: e2:f4:4f:b1:46:b1:7b:ac:d0:35:e1:4c:65:5d:ae: bc:3b:7d:f0:63:90:be:74:fc:56:29:3a:69:3e:0a: 46:f9:fb:f2:f5:df:b3:04:f5:19:6a:2b:ea:38:71: 2e:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 77:10:F0:4D:5A:88:95:AC:59:00:BF:FE:B1:DA:16:97:0A:33:9E:EA X509v3 Authority Key Identifier: keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1079239660892323843/0/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1079239660892323843/0/7710F04D5A8895AC5900BFFEB1DA16970A339EEA.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2402:4be0::/32 Signature Algorithm: sha256WithRSAEncryption 6b:8f:9b:98:ad:69:58:64:2f:e2:4d:94:e1:1b:05:99:bb:88: fa:1e:f6:b7:c5:17:a0:e9:05:ea:da:35:f5:16:7d:ff:fb:7a: 64:44:84:c5:e1:f0:27:80:a2:4e:25:4d:89:03:a8:cc:66:46: 37:b1:01:0c:15:9e:41:bf:9e:59:a4:ad:62:89:76:85:43:ec: 1b:b4:e3:8b:c4:e3:78:ec:b8:c6:ac:a9:0b:14:6f:8b:a7:16: cb:b3:13:52:c1:ab:45:50:9e:0a:55:2a:26:01:8c:94:72:1f: 15:e8:75:98:0c:14:6b:76:11:a0:4d:69:7d:31:b2:93:f7:5c: f0:40:1c:91:7f:ca:41:fd:e6:3b:70:e4:52:80:11:41:56:49: 9b:82:e2:97:93:9a:30:a2:69:41:e7:74:78:55:13:3c:28:d5: 0f:5a:ce:04:a7:dc:3b:c5:43:c6:5e:9a:87:3c:b3:2b:4d:41: b4:58:1c:4c:d8:df:34:09:c6:6a:96:54:53:5f:e3:09:8d:dd: 9b:50:04:11:98:5b:ec:64:25:22:fa:d2:9e:9c:bf:80:9f:d9: 34:fb:e0:29:78:99:4f:a8:2c:7d:5d:5c:bf:1a:ed:65:57:b7: 9a:ae:b4:85:2f:03:89:cc:3b:db:a9:60:55:2c:6b:d0:e3:6d: 85:95:5b:8c -----BEGIN CERTIFICATE----- MIIFqDCCBJCgAwIBAgIUN9X5wng67r4AbXISCUd2HARRQi0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDIyNjAzMDgwOFoX DTI3MDIyNTAzMTMwOFowMzExMC8GA1UEAxMoNzcxMEYwNEQ1QTg4OTVBQzU5MDBC RkZFQjFEQTE2OTcwQTMzOUVFQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKUPYpU48HBSWo+wp70Hw9VcmTlMJrMbxvbd+n3+eUyCZmPG230h9gcRbl22 vexeFGH9x13r+PFeaoYIviV0ickaAljACaGEWX3pphJkXEUq5PXJD9XmXQTfCSsO QUNlVotaLowsr3Jpsen1Q8Fb7UE8EQqODBSSurWb6wULNng0ezkLWhc1/IBEW9K6 +DROL/tftD/bvAaLngkRtlD2cp3eefVoo4dlzJN0W4zhgjHWsa6MMsTThxs1ICSk PsXqz0X90kvSdF/u3W2RnwrsKpKZ4vRPsUaxe6zQNeFMZV2uvDt98GOQvnT8Vik6 aT4KRvn78vXfswT1GWor6jhxLsECAwEAAaOCApswggKXMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFHcQ8E1aiJWsWQC//rHaFpcKM57qMB8GA1UdIwQYMBaAFKVu hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTA3OTIzOTY2MDg5MjMyMzg0My8wLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDc5MjM5NjYwODkyMzIzODQz LzAvNzcxMEYwNEQ1QTg4OTVBQzU5MDBCRkZFQjFEQTE2OTcwQTMzOUVFQS5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUH AQcBAf8EETAPMA0EAgACMAcDBQAkAkvgMA0GCSqGSIb3DQEBCwUAA4IBAQBrj5uY rWlYZC/iTZThGwWZu4j6Hva3xReg6QXq2jX1Fn3/+3pkRITF4fAngKJOJU2JA6jM ZkY3sQEMFZ5Bv55ZpK1iiXaFQ+wbtOOLxON47LjGrKkLFG+LpxbLsxNSwatFUJ4K VSomAYyUch8V6HWYDBRrdhGgTWl9MbKT91zwQByRf8pB/eY7cORSgBFBVkmbguKX k5owomlB53R4VRM8KNUPWs4Ep9w7xUPGXpqHPLMrTUG0WBxM2N80CcZqllRTX+MJ jd2bUAQRmFvsZCUi+tKenL+An9k0++ApeJlPqCx9XVy/Gu1lV7earrSFLwOJzDvb qWBVLGvQ422FlVuM -----END CERTIFICATE-----Generated at Mon Mar 2 15:41:07 2026 by rpki-client