$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7F04F6FCE22750607E54E558E039E0F551D3135D.cer File: 7F04F6FCE22750607E54E558E039E0F551D3135D.cer (raw, json) Hash identifier: IkGKmXUttQzSX2r9H9ZvMW0qybdQ1O1snE/tjEAr8Vk= Subject key identifier: 7F:04:F6:FC:E2:27:50:60:7E:54:E5:58:E0:39:E0:F5:51:D3:13:5D Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Certificate serial: 6589B5AA4516AD94CC5C3697E9FCF6626AE8EBD1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1096603204424105986/0/7F04F6FCE22750607E54E558E039E0F551D3135D.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1096603204424105986/0/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Wed 15 Apr 2026 01:08:52 +0000 Certificate not after: Wed 14 Apr 2027 01:13:52 +0000 Subordinate resources: AS: 23841 IP: 103.1.20.0/22 IP: 182.238.0.0/16 IP: 211.148.160.0/19 IP: 221.129.0.0/16 IP: 2401:ca00::/32 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 17:12:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:89:b5:aa:45:16:ad:94:cc:5c:36:97:e9:fc:f6:62:6a:e8:eb:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Validity Not Before: Apr 15 01:08:52 2026 GMT Not After : Apr 14 01:13:52 2027 GMT Subject: CN=7F04F6FCE22750607E54E558E039E0F551D3135D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:c5:c8:7a:23:ce:15:79:a1:72:bf:be:ac:bf: ad:3d:a3:d2:8f:ad:93:12:f3:15:a2:5a:ca:72:d3: ab:dd:dd:ee:12:3e:fe:69:1d:65:ba:6f:85:17:a2: 47:5b:4a:4e:69:7a:44:d9:1e:8d:b6:f4:71:02:d0: 9c:89:c5:84:f7:20:31:bd:aa:9a:a2:cd:cc:f0:e8: 93:ff:61:8b:34:e9:6a:e1:1f:e8:3d:92:cb:cd:57: 15:d2:44:62:00:13:f6:75:62:86:5b:87:77:a6:40: 98:e6:10:2b:dd:7b:ce:5f:0b:2d:63:5a:dd:18:9e: fb:9f:af:b2:19:d2:5c:5e:c2:a5:89:25:6f:32:a5: 7d:52:79:e9:08:be:8a:ad:3a:15:82:98:8e:3d:30: 9d:88:a4:19:7c:6b:d2:b6:f3:31:7a:fb:80:18:eb: d7:86:63:53:2a:f8:12:fc:79:56:c9:dc:92:84:33: a7:4f:35:15:f6:8b:e8:e2:1a:98:8d:ee:bf:32:70: cc:e7:d1:00:47:2a:24:21:cc:74:ed:c1:e0:0b:4c: b2:a6:7d:81:2d:b9:ca:a0:1e:f5:f3:97:c1:30:9a: b5:77:1a:92:37:ee:f3:d7:48:07:a8:c2:a6:88:95: 96:d7:f4:e3:2f:b8:2b:12:ba:5d:07:0e:27:3b:73: ed:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 7F:04:F6:FC:E2:27:50:60:7E:54:E5:58:E0:39:E0:F5:51:D3:13:5D X509v3 Authority Key Identifier: keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1096603204424105986/0/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1096603204424105986/0/7F04F6FCE22750607E54E558E039E0F551D3135D.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.1.20.0/22 182.238.0.0/16 211.148.160.0/19 221.129.0.0/16 IPv6: 2401:ca00::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 23841 Signature Algorithm: sha256WithRSAEncryption 13:25:1c:0e:8f:90:a0:3c:3f:b8:4a:4d:22:dc:ab:4b:45:3e: 70:cd:90:10:16:78:28:5a:2d:81:f6:3d:f0:7b:2b:31:07:3e: d1:49:62:0c:86:55:82:d0:a2:9e:5b:8b:89:16:e3:6f:c0:ef: df:e1:73:47:d1:b5:8c:61:c2:d3:43:ee:0d:39:93:bd:c0:c5: 38:c2:68:42:0b:40:45:f5:9f:19:bb:87:8e:7a:a5:4c:9f:64: ca:b9:21:6c:a0:6e:71:42:e4:e6:1f:da:ea:4a:44:a7:38:59: 5c:6c:f0:d9:1e:2b:2c:96:70:26:1e:29:df:7c:cd:45:d9:ed: d7:ca:b7:78:9b:a6:f5:48:74:69:95:d4:1c:69:de:1f:7b:ce: 71:e6:d1:1e:e7:b7:f9:b4:b8:6e:c5:28:50:84:10:38:79:0f: 97:76:0d:d7:20:10:3b:e8:a1:0e:a4:ab:3b:88:5a:ec:85:28: 5e:0e:fa:8d:9c:6a:c3:61:9b:5c:44:e9:95:f8:da:bc:c2:05: 78:04:a8:8a:10:e1:d2:45:92:d0:99:ea:99:6c:56:d1:86:a9: 57:b4:12:e8:f2:c6:54:13:d0:d7:10:a1:4b:c8:5d:99:2b:cc: 68:2e:d2:1d:50:3e:18:cd:68:78:09:f5:00:a6:68:be:60:b1: 9f:ab:e9:bd -----BEGIN CERTIFICATE----- MIIF4TCCBMmgAwIBAgIUZYm1qkUWrZTMXDaX6fz2Ymro69EwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDQxNTAxMDg1MloX DTI3MDQxNDAxMTM1MlowMzExMC8GA1UEAxMoN0YwNEY2RkNFMjI3NTA2MDdFNTRF NTU4RTAzOUUwRjU1MUQzMTM1RDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAL7FyHojzhV5oXK/vqy/rT2j0o+tkxLzFaJaynLTq93d7hI+/mkdZbpvhRei R1tKTml6RNkejbb0cQLQnInFhPcgMb2qmqLNzPDok/9hizTpauEf6D2Sy81XFdJE YgAT9nVihluHd6ZAmOYQK917zl8LLWNa3Rie+5+vshnSXF7CpYklbzKlfVJ56Qi+ iq06FYKYjj0wnYikGXxr0rbzMXr7gBjr14ZjUyr4Evx5VsnckoQzp081FfaL6OIa mI3uvzJwzOfRAEcqJCHMdO3B4AtMsqZ9gS25yqAe9fOXwTCatXcakjfu89dIB6jC poiVltf04y+4KxK6XQcOJztz7XcCAwEAAaOCAtQwggLQMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFH8E9vziJ1BgflTlWOA54PVR0xNdMB8GA1UdIwQYMBaAFKVu hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTA5NjYwMzIwNDQyNDEwNTk4Ni8wLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDk2NjAzMjA0NDI0MTA1OTg2 LzAvN0YwNEY2RkNFMjI3NTA2MDdFNTRFNTU4RTAzOUUwRjU1MUQzMTM1RC5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwPgYIKwYBBQUH AQcBAf8ELzAtMBwEAgABMBYDBAJnARQDAwC27gMEBdOUoAMDAN2BMA0EAgACMAcD BQAkAcoAMBkGCCsGAQUFBwEIAQH/BAowCKAGMAQCAl0hMA0GCSqGSIb3DQEBCwUA A4IBAQATJRwOj5CgPD+4Sk0i3KtLRT5wzZAQFngoWi2B9j3weysxBz7RSWIMhlWC 0KKeW4uJFuNvwO/f4XNH0bWMYcLTQ+4NOZO9wMU4wmhCC0BF9Z8Zu4eOeqVMn2TK uSFsoG5xQuTmH9rqSkSnOFlcbPDZHisslnAmHinffM1F2e3Xyrd4m6b1SHRpldQc ad4fe85x5tEe57f5tLhuxShQhBA4eQ+Xdg3XIBA76KEOpKs7iFrshSheDvqNnGrD YZtcROmV+Nq8wgV4BKiKEOHSRZLQmeqZbFbRhqlXtBLo8sZUE9DXEKFLyF2ZK8xo LtIdUD4YzWh4CfUApmi+YLGfq+m9 -----END CERTIFICATE-----Generated at Fri Apr 17 21:21:52 2026 by rpki-client