$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/78714AED87281E4F55A67C5D42E8FDF0FEB1FFB2.cer File: 78714AED87281E4F55A67C5D42E8FDF0FEB1FFB2.cer (raw, json) Hash identifier: oo6MO5FONWhWbzErmb+WwlD/sNhi2Hn1EFtlj0Odb4M= Subject key identifier: 78:71:4A:ED:87:28:1E:4F:55:A6:7C:5D:42:E8:FD:F0:FE:B1:FF:B2 Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Certificate serial: 05F373BED14E52412707C2437826F9832A3ECE05 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1096374162261278723/0/78714AED87281E4F55A67C5D42E8FDF0FEB1FFB2.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1096374162261278723/0/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Tue 14 Apr 2026 09:54:31 +0000 Certificate not after: Tue 13 Apr 2027 09:59:31 +0000 Subordinate resources: IP: 103.100.68.0/22 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 01:26:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:f3:73:be:d1:4e:52:41:27:07:c2:43:78:26:f9:83:2a:3e:ce:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Validity Not Before: Apr 14 09:54:31 2026 GMT Not After : Apr 13 09:59:31 2027 GMT Subject: CN=78714AED87281E4F55A67C5D42E8FDF0FEB1FFB2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:db:67:eb:b9:09:25:6b:95:c3:00:e7:02:11: 7f:ce:2e:19:42:e3:9f:36:7d:c0:a9:ec:90:1d:a3: 72:d6:85:c5:c9:86:97:4a:b4:43:96:b5:c7:2b:bd: 45:e1:d8:60:7d:3a:eb:d3:2e:ab:95:a6:d0:f9:04: 14:1c:a1:12:e7:36:98:0b:d5:99:9d:18:17:1f:2a: a8:58:19:77:09:7c:33:ca:d7:e2:ee:f7:bc:39:74: f5:07:8b:6a:6f:e9:52:55:36:94:ff:83:23:2c:2b: 02:e6:fd:08:be:2c:13:38:96:50:56:da:66:41:bf: 30:46:a1:54:b3:59:d2:8b:92:93:27:59:b3:da:a2: 18:65:c2:69:75:a3:a2:75:04:7c:3c:fa:8c:f9:65: 66:aa:31:fb:96:d6:32:17:ee:4e:c8:74:73:b7:7b: fd:71:24:8b:e4:a1:b6:5d:37:2d:07:a9:5c:5e:de: 7c:5d:59:b1:24:5e:4f:a2:bb:a8:78:fc:de:91:61: f2:c7:83:66:74:00:c5:aa:2a:44:5e:e8:e7:6a:e9: 9f:43:17:74:6d:1f:bb:23:27:2a:db:35:f8:26:4b: 83:81:2e:31:8a:4d:f6:85:c8:9d:64:64:dc:f2:a1: 67:7d:dc:ef:9e:0f:2d:04:c3:c8:79:1c:f5:30:78: 05:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 78:71:4A:ED:87:28:1E:4F:55:A6:7C:5D:42:E8:FD:F0:FE:B1:FF:B2 X509v3 Authority Key Identifier: keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1096374162261278723/0/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1096374162261278723/0/78714AED87281E4F55A67C5D42E8FDF0FEB1FFB2.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.100.68.0/22 Signature Algorithm: sha256WithRSAEncryption 89:b3:b2:b9:cc:18:fa:57:55:76:fd:a7:31:e4:9a:cd:f9:1b: c4:08:29:8c:ef:7b:bf:15:c7:1a:d9:e7:49:54:47:7f:49:70: ec:fc:c8:42:ba:44:be:77:09:42:82:02:b9:32:73:12:1c:46: 6a:84:c8:45:d5:49:57:e0:b9:23:4c:be:84:db:94:92:10:dc: 3a:5c:98:a6:ed:1b:6e:c4:c8:2d:38:0e:f6:c8:54:52:3c:c7: 24:b4:cb:f9:28:86:6c:b1:38:0e:ab:1c:2d:89:e6:86:cb:7e: 6c:b7:51:28:b7:0b:45:42:78:08:23:70:ec:41:cf:b3:e3:4f: 72:e4:ff:c6:50:6b:25:ea:a8:9e:fd:f9:be:44:c0:c0:d5:7b: 95:f3:db:a4:6e:00:09:36:31:fa:bd:6c:06:47:bc:b7:44:33: 4b:c8:14:fd:f0:d5:32:34:ef:c6:9e:d8:33:04:02:9e:fa:a4: 50:48:73:4a:24:ca:f6:46:eb:8f:13:be:6f:82:2d:7e:7e:df: c4:fe:ca:c9:54:ed:36:9c:2b:7f:25:30:61:49:59:af:40:51: 79:5f:35:fe:c6:a1:3d:8b:b8:6c:56:72:d2:76:1f:71:a1:b7: ea:32:ac:a8:55:16:61:23:ad:1b:f3:e4:9a:95:f2:3a:0b:01: 84:c6:c2:95 -----BEGIN CERTIFICATE----- MIIFpzCCBI+gAwIBAgIUBfNzvtFOUkEnB8JDeCb5gyo+zgUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDQxNDA5NTQzMVoX DTI3MDQxMzA5NTkzMVowMzExMC8GA1UEAxMoNzg3MTRBRUQ4NzI4MUU0RjU1QTY3 QzVENDJFOEZERjBGRUIxRkZCMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJzbZ+u5CSVrlcMA5wIRf84uGULjnzZ9wKnskB2jctaFxcmGl0q0Q5a1xyu9 ReHYYH0669Muq5Wm0PkEFByhEuc2mAvVmZ0YFx8qqFgZdwl8M8rX4u73vDl09QeL am/pUlU2lP+DIywrAub9CL4sEziWUFbaZkG/MEahVLNZ0ouSkydZs9qiGGXCaXWj onUEfDz6jPllZqox+5bWMhfuTsh0c7d7/XEki+Shtl03LQepXF7efF1ZsSReT6K7 qHj83pFh8seDZnQAxaoqRF7o52rpn0MXdG0fuyMnKts1+CZLg4EuMYpN9oXInWRk 3PKhZ33c754PLQTDyHkc9TB4Be0CAwEAAaOCApowggKWMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFHhxSu2HKB5PVaZ8XULo/fD+sf+yMB8GA1UdIwQYMBaAFKVu hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTA5NjM3NDE2MjI2MTI3ODcyMy8wLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDk2Mzc0MTYyMjYxMjc4NzIz LzAvNzg3MTRBRUQ4NzI4MUU0RjU1QTY3QzVENDJFOEZERjBGRUIxRkZCMi5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAJnZEQwDQYJKoZIhvcNAQELBQADggEBAImzsrnM GPpXVXb9pzHkms35G8QIKYzve78VxxrZ50lUR39JcOz8yEK6RL53CUKCArkycxIc RmqEyEXVSVfguSNMvoTblJIQ3DpcmKbtG27EyC04DvbIVFI8xyS0y/kohmyxOA6r HC2J5obLfmy3USi3C0VCeAgjcOxBz7PjT3Lk/8ZQayXqqJ79+b5EwMDVe5Xz26Ru AAk2Mfq9bAZHvLdEM0vIFP3w1TI078ae2DMEAp76pFBIc0okyvZG648Tvm+CLX5+ 38T+yslU7TacK38lMGFJWa9AUXlfNf7GoT2LuGxWctJ2H3Ght+oyrKhVFmEjrRvz 5JqV8joLAYTGwpU= -----END CERTIFICATE-----Generated at Fri Apr 17 01:48:53 2026 by rpki-client