$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C7470BC41735EF04A8D35A523E87865C640FD17A.cer File: C7470BC41735EF04A8D35A523E87865C640FD17A.cer (raw, json) Hash identifier: lUXa4iBPy62m8Yko3p+whXpwL07rHQottc1g5Cn5F1g= Subject key identifier: C7:47:0B:C4:17:35:EF:04:A8:D3:5A:52:3E:87:86:5C:64:0F:D1:7A Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Certificate serial: 58E0D3145990E2649E6DD3E1BD18C0191A8A7E38 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1096329455162425347/0/C7470BC41735EF04A8D35A523E87865C640FD17A.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1096329455162425347/0/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Tue 14 Apr 2026 07:00:52 +0000 Certificate not after: Tue 13 Apr 2027 07:05:52 +0000 Subordinate resources: AS: 137807 IP: 103.114.100.0/22 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 17:12:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:e0:d3:14:59:90:e2:64:9e:6d:d3:e1:bd:18:c0:19:1a:8a:7e:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Validity Not Before: Apr 14 07:00:52 2026 GMT Not After : Apr 13 07:05:52 2027 GMT Subject: CN=C7470BC41735EF04A8D35A523E87865C640FD17A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:af:11:28:44:04:03:d9:7f:49:f0:0a:ec:bb: ca:34:fb:a3:4f:6c:e0:b6:a6:03:b6:3b:c3:b8:89: cf:e5:18:87:5d:f8:bb:92:a1:f8:68:77:17:cb:82: 2a:14:5a:0d:1c:80:8a:c7:41:d5:5f:df:b1:dd:4c: 2a:63:51:4e:db:84:d3:24:40:43:b3:16:38:9c:5e: 23:73:42:64:7d:2c:78:0c:f0:a6:06:e7:db:bf:77: 8e:68:6c:62:87:da:3a:5c:11:2a:73:94:f4:a9:17: b3:c7:d0:59:e1:b8:3d:89:24:d9:86:32:25:4e:17: 5a:96:81:fe:78:57:d6:b4:f9:36:9d:c0:9d:fd:a1: 33:0c:7e:7a:70:9d:a8:39:10:ac:68:43:ff:44:aa: 7c:06:6c:b8:08:45:c4:6f:f6:0b:81:0b:ef:ea:1a: ac:dd:90:55:e3:49:17:b6:24:88:32:67:63:8f:24: ad:ae:77:26:03:8c:e1:5b:48:24:2e:6f:4f:bd:f3: e4:84:d6:08:9d:f3:c0:ff:12:53:5d:5f:9a:c9:11: 6e:c2:5a:4a:fc:2c:9e:2b:d8:d8:3e:bd:ba:f9:76: 27:a1:15:32:fb:71:54:f2:ae:07:c1:f2:ba:9e:ca: de:f9:4c:7d:20:42:88:e6:12:bf:57:d9:01:f2:71: 8f:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: C7:47:0B:C4:17:35:EF:04:A8:D3:5A:52:3E:87:86:5C:64:0F:D1:7A X509v3 Authority Key Identifier: keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1096329455162425347/0/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1096329455162425347/0/C7470BC41735EF04A8D35A523E87865C640FD17A.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.114.100.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 137807 Signature Algorithm: sha256WithRSAEncryption 1e:ec:6a:26:73:af:b1:b7:45:63:a8:2c:0f:7c:cf:07:84:40: 43:67:e0:0f:f6:45:46:8c:65:b8:c8:7d:a0:19:f4:68:ca:31: 07:2c:7a:d3:db:72:9b:d2:fe:fa:d7:bf:9e:b2:66:9d:6d:ea: 48:90:25:bd:c5:7c:65:57:d6:98:59:62:9a:dc:8a:a7:17:4a: ca:9e:2c:cf:cb:e1:a2:fb:18:b3:8f:84:f3:8e:c5:b8:5d:9c: 3a:56:54:07:d5:be:f5:55:32:bf:07:71:c8:40:e3:59:89:07: 47:e1:04:01:9f:68:96:1a:5a:af:e7:7d:ba:d3:52:7e:92:58: 36:7a:ba:ed:d8:ab:75:53:41:ed:85:ae:bd:6b:ad:dd:cb:ec: bf:9d:36:f9:89:11:d9:47:11:f9:63:5e:02:16:96:d4:29:ff: b8:5f:4d:e4:8c:01:ce:74:fb:07:66:f5:32:34:a2:78:b1:67: f7:e3:97:6d:57:59:ae:62:c4:c6:30:b8:1f:70:38:1c:e8:ec: e4:f7:86:f5:ca:6a:f7:07:42:c8:7b:da:c7:14:85:bf:b8:94: b8:cb:10:49:da:85:bc:17:b2:4a:86:9e:af:ff:98:f8:62:db: 36:bd:3c:90:eb:d7:ad:93:7a:28:d0:23:30:1e:69:a7:81:aa: b5:75:41:30 -----BEGIN CERTIFICATE----- MIIFwzCCBKugAwIBAgIUWODTFFmQ4mSebdPhvRjAGRqKfjgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDQxNDA3MDA1MloX DTI3MDQxMzA3MDU1MlowMzExMC8GA1UEAxMoQzc0NzBCQzQxNzM1RUYwNEE4RDM1 QTUyM0U4Nzg2NUM2NDBGRDE3QTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALmvEShEBAPZf0nwCuy7yjT7o09s4LamA7Y7w7iJz+UYh134u5Kh+Gh3F8uC KhRaDRyAisdB1V/fsd1MKmNRTtuE0yRAQ7MWOJxeI3NCZH0seAzwpgbn2793jmhs YofaOlwRKnOU9KkXs8fQWeG4PYkk2YYyJU4XWpaB/nhX1rT5Np3Anf2hMwx+enCd qDkQrGhD/0SqfAZsuAhFxG/2C4EL7+oarN2QVeNJF7YkiDJnY48kra53JgOM4VtI JC5vT73z5ITWCJ3zwP8SU11fmskRbsJaSvwsnivY2D69uvl2J6EVMvtxVPKuB8Hy up7K3vlMfSBCiOYSv1fZAfJxj/UCAwEAAaOCArYwggKyMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFMdHC8QXNe8EqNNaUj6HhlxkD9F6MB8GA1UdIwQYMBaAFKVu hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTA5NjMyOTQ1NTE2MjQyNTM0Ny8wLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDk2MzI5NDU1MTYyNDI1MzQ3 LzAvQzc0NzBCQzQxNzM1RUYwNEE4RDM1QTUyM0U4Nzg2NUM2NDBGRDE3QS5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAJncmQwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQID AhpPMA0GCSqGSIb3DQEBCwUAA4IBAQAe7Gomc6+xt0VjqCwPfM8HhEBDZ+AP9kVG jGW4yH2gGfRoyjEHLHrT23Kb0v7617+esmadbepIkCW9xXxlV9aYWWKa3IqnF0rK nizPy+Gi+xizj4TzjsW4XZw6VlQH1b71VTK/B3HIQONZiQdH4QQBn2iWGlqv5326 01J+klg2errt2Kt1U0Htha69a63dy+y/nTb5iRHZRxH5Y14CFpbUKf+4X03kjAHO dPsHZvUyNKJ4sWf345dtV1muYsTGMLgfcDgc6Ozk94b1ymr3B0LIe9rHFIW/uJS4 yxBJ2oW8F7JKhp6v/5j4Yts2vTyQ69etk3oo0CMwHmmngaq1dUEw -----END CERTIFICATE-----Generated at Fri Apr 17 20:38:44 2026 by rpki-client