$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7710F04D5A8895AC5900BFFEB1DA16970A339EEA.cer File: 7710F04D5A8895AC5900BFFEB1DA16970A339EEA.cer (raw, json) Hash identifier: QhW00EclReYaZN36Qi7zkH3rj+bRO6bVAOPa0Vh4ii4= Subject key identifier: 77:10:F0:4D:5A:88:95:AC:59:00:BF:FE:B1:DA:16:97:0A:33:9E:EA Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Certificate serial: 216130E1C5E62857BA022FE5BE222361B07CF36D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1079239660892323843/0/7710F04D5A8895AC5900BFFEB1DA16970A339EEA.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1079239660892323843/0/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Mon 01 Jun 2026 02:08:54 +0000 Certificate not after: Mon 31 May 2027 02:13:54 +0000 Subordinate resources: IP: 2402:4be0::/32 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 16:02:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:61:30:e1:c5:e6:28:57:ba:02:2f:e5:be:22:23:61:b0:7c:f3:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Validity Not Before: Jun 1 02:08:54 2026 GMT Not After : May 31 02:13:54 2027 GMT Subject: CN=7710F04D5A8895AC5900BFFEB1DA16970A339EEA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:0f:62:95:38:f0:70:52:5a:8f:b0:a7:bd:07: c3:d5:5c:99:39:4c:26:b3:1b:c6:f6:dd:fa:7d:fe: 79:4c:82:66:63:c6:db:7d:21:f6:07:11:6e:5d:b6: bd:ec:5e:14:61:fd:c7:5d:eb:f8:f1:5e:6a:86:08: be:25:74:89:c9:1a:02:58:c0:09:a1:84:59:7d:e9: a6:12:64:5c:45:2a:e4:f5:c9:0f:d5:e6:5d:04:df: 09:2b:0e:41:43:65:56:8b:5a:2e:8c:2c:af:72:69: b1:e9:f5:43:c1:5b:ed:41:3c:11:0a:8e:0c:14:92: ba:b5:9b:eb:05:0b:36:78:34:7b:39:0b:5a:17:35: fc:80:44:5b:d2:ba:f8:34:4e:2f:fb:5f:b4:3f:db: bc:06:8b:9e:09:11:b6:50:f6:72:9d:de:79:f5:68: a3:87:65:cc:93:74:5b:8c:e1:82:31:d6:b1:ae:8c: 32:c4:d3:87:1b:35:20:24:a4:3e:c5:ea:cf:45:fd: d2:4b:d2:74:5f:ee:dd:6d:91:9f:0a:ec:2a:92:99: e2:f4:4f:b1:46:b1:7b:ac:d0:35:e1:4c:65:5d:ae: bc:3b:7d:f0:63:90:be:74:fc:56:29:3a:69:3e:0a: 46:f9:fb:f2:f5:df:b3:04:f5:19:6a:2b:ea:38:71: 2e:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 77:10:F0:4D:5A:88:95:AC:59:00:BF:FE:B1:DA:16:97:0A:33:9E:EA X509v3 Authority Key Identifier: keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1079239660892323843/0/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1079239660892323843/0/7710F04D5A8895AC5900BFFEB1DA16970A339EEA.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2402:4be0::/32 Signature Algorithm: sha256WithRSAEncryption 4e:14:31:b6:59:fc:ce:fd:14:90:29:55:e3:f9:b3:19:cb:71: 9e:00:e1:00:07:39:6e:58:08:da:d4:f5:54:b0:4c:b0:67:ec: 4c:c7:e6:7b:de:c0:88:da:75:c1:ce:df:80:ca:80:58:34:28: 49:d3:45:a6:49:96:58:a1:05:1f:b2:fe:f8:90:13:49:ce:fc: 79:ad:57:15:9a:d3:95:9a:ce:0e:db:4d:c1:c4:75:60:fc:2b: 1c:7c:ba:8d:07:59:aa:4c:5c:e4:98:b1:32:7f:07:ae:fa:5e: bd:e3:57:17:f1:24:9c:cc:6c:d0:be:2c:dd:0a:16:bd:a9:86: 38:67:58:9c:b1:10:e3:42:e7:7c:96:0e:8d:ff:9b:ef:65:c2: 2e:0f:06:33:39:f2:f3:64:54:f6:c6:d1:f8:91:04:53:8e:bd: 1e:aa:d3:31:15:80:19:a8:02:b4:b1:f3:ff:b8:f6:62:4b:26: 50:db:56:11:67:ec:13:aa:0a:31:54:35:98:41:db:ce:20:d9: 82:ac:77:5f:3a:31:4c:90:fb:3e:91:6e:8e:ec:bf:6d:9c:a3: 00:33:33:16:dc:79:69:e5:77:99:aa:ec:20:68:30:06:38:a6: f8:eb:22:c8:cd:c0:25:60:19:69:01:0f:45:ab:0d:3f:1b:79: f2:79:54:ee -----BEGIN CERTIFICATE----- MIIFqDCCBJCgAwIBAgIUIWEw4cXmKFe6Ai/lviIjYbB8820wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDYwMTAyMDg1NFoX DTI3MDUzMTAyMTM1NFowMzExMC8GA1UEAxMoNzcxMEYwNEQ1QTg4OTVBQzU5MDBC RkZFQjFEQTE2OTcwQTMzOUVFQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKUPYpU48HBSWo+wp70Hw9VcmTlMJrMbxvbd+n3+eUyCZmPG230h9gcRbl22 vexeFGH9x13r+PFeaoYIviV0ickaAljACaGEWX3pphJkXEUq5PXJD9XmXQTfCSsO QUNlVotaLowsr3Jpsen1Q8Fb7UE8EQqODBSSurWb6wULNng0ezkLWhc1/IBEW9K6 +DROL/tftD/bvAaLngkRtlD2cp3eefVoo4dlzJN0W4zhgjHWsa6MMsTThxs1ICSk PsXqz0X90kvSdF/u3W2RnwrsKpKZ4vRPsUaxe6zQNeFMZV2uvDt98GOQvnT8Vik6 aT4KRvn78vXfswT1GWor6jhxLsECAwEAAaOCApswggKXMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFHcQ8E1aiJWsWQC//rHaFpcKM57qMB8GA1UdIwQYMBaAFKVu hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTA3OTIzOTY2MDg5MjMyMzg0My8wLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDc5MjM5NjYwODkyMzIzODQz LzAvNzcxMEYwNEQ1QTg4OTVBQzU5MDBCRkZFQjFEQTE2OTcwQTMzOUVFQS5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUH AQcBAf8EETAPMA0EAgACMAcDBQAkAkvgMA0GCSqGSIb3DQEBCwUAA4IBAQBOFDG2 WfzO/RSQKVXj+bMZy3GeAOEABzluWAja1PVUsEywZ+xMx+Z73sCI2nXBzt+AyoBY NChJ00WmSZZYoQUfsv74kBNJzvx5rVcVmtOVms4O203BxHVg/CscfLqNB1mqTFzk mLEyfweu+l6941cX8SSczGzQvizdCha9qYY4Z1icsRDjQud8lg6N/5vvZcIuDwYz OfLzZFT2xtH4kQRTjr0eqtMxFYAZqAK0sfP/uPZiSyZQ21YRZ+wTqgoxVDWYQdvO INmCrHdfOjFMkPs+kW6O7L9tnKMAMzMW3Hlp5XeZquwgaDAGOKb46yLIzcAlYBlp AQ9Fqw0/G3nyeVTu -----END CERTIFICATE-----Generated at Sun Jun 14 05:53:14 2026 by rpki-client