$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EC6FB1425B2ECD896A81D7A4E1CABBD8EE58BBD3.cer File: EC6FB1425B2ECD896A81D7A4E1CABBD8EE58BBD3.cer (raw, json) Hash identifier: hqChAg1xCNmZtwdYXtpiMu8Q9daqdbo/nv4dPkAOSBU= Subject key identifier: EC:6F:B1:42:5B:2E:CD:89:6A:81:D7:A4:E1:CA:BB:D8:EE:58:BB:D3 Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Certificate serial: 25FC56FEDFDEBB0C9779E0D9CA7EB9778BC0EC19 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1096626934726524930/0/EC6FB1425B2ECD896A81D7A4E1CABBD8EE58BBD3.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1096626934726524930/0/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Wed 15 Apr 2026 02:38:59 +0000 Certificate not after: Wed 14 Apr 2027 02:43:59 +0000 Subordinate resources: IP: 119.37.192.0 -- 119.38.127.255 IP: 202.75.208.0/20 IP: 202.91.224.0/19 IP: 211.155.224.0/20 IP: 2404:6000::/32 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 17:12:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:fc:56:fe:df:de:bb:0c:97:79:e0:d9:ca:7e:b9:77:8b:c0:ec:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Validity Not Before: Apr 15 02:38:59 2026 GMT Not After : Apr 14 02:43:59 2027 GMT Subject: CN=EC6FB1425B2ECD896A81D7A4E1CABBD8EE58BBD3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:85:15:1e:20:e7:5e:b4:37:6c:23:5a:e6:a7: 2c:1a:7e:04:63:0f:8f:97:70:94:fe:15:b5:34:96: 04:a9:94:ca:58:60:9a:ed:1a:ef:c3:df:44:a8:9c: 1a:98:b7:0a:60:34:81:ea:a7:d5:cf:36:2f:c9:1a: e2:7c:d1:90:cc:bd:93:1d:08:9d:b9:76:f0:60:2e: 85:d9:02:ea:92:fd:99:98:93:f2:d8:b2:7d:d2:df: 7e:08:1a:13:46:f6:ef:52:b8:bb:34:ea:cf:03:d9: 26:2f:e3:cf:b6:1f:17:10:3b:5b:b4:42:61:b3:94: 33:54:7e:f1:3b:85:77:3d:48:5c:db:f0:83:19:b5: 7b:00:29:06:4a:a8:56:89:fe:8a:a0:57:c0:56:96: b5:8d:43:57:c8:7d:d0:84:92:5a:46:f8:12:ec:ec: 3d:8c:91:7d:9b:ca:59:60:ce:37:a6:57:c6:3a:34: 9e:56:6c:13:41:37:5f:38:dd:29:2d:a7:95:06:42: 8e:d5:1a:8e:5b:3f:4c:e9:68:57:5b:55:11:6a:c0: 9e:84:8b:cc:4a:e4:18:72:f8:e3:6f:70:08:32:30: 82:4c:a3:91:51:ec:55:fb:bc:39:de:08:45:d6:4b: 7a:c9:e1:19:f8:57:89:66:e2:45:c1:64:46:27:47: 4d:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: EC:6F:B1:42:5B:2E:CD:89:6A:81:D7:A4:E1:CA:BB:D8:EE:58:BB:D3 X509v3 Authority Key Identifier: keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1096626934726524930/0/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1096626934726524930/0/EC6FB1425B2ECD896A81D7A4E1CABBD8EE58BBD3.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 119.37.192.0-119.38.127.255 202.75.208.0/20 202.91.224.0/19 211.155.224.0/20 IPv6: 2404:6000::/32 Signature Algorithm: sha256WithRSAEncryption 00:ce:37:cb:88:cd:db:16:26:bd:19:ec:ac:5e:46:b0:dc:87: 97:10:64:57:22:93:8a:94:81:20:e7:85:bf:5d:b4:35:e5:c2: aa:ef:be:14:d0:ed:6b:3c:5e:7a:b6:15:49:26:03:1f:f2:44: d5:22:4d:35:b9:65:79:a5:76:b1:77:a5:a6:b6:b5:d8:7e:5f: dc:f4:c4:58:59:64:fc:27:33:79:e5:94:08:27:ed:09:9a:47: bb:5d:1f:33:6f:2b:57:4c:2f:ca:75:47:31:3f:2e:f0:c0:57: 83:20:6e:61:f7:06:0f:aa:0b:32:3d:04:5c:aa:18:b3:ef:c5: 05:b3:85:a0:c0:d4:20:b6:8b:1d:8e:68:fd:13:b1:c5:bf:48: 11:5b:40:d3:4c:9d:53:8b:e3:a7:45:46:b5:6e:41:41:48:a6: 89:4f:e3:72:12:7c:b1:01:df:ec:74:74:36:13:69:fb:7f:4d: b6:f1:07:87:7d:a1:42:aa:fd:45:08:fd:d4:18:09:40:26:96: d0:c7:e2:99:2d:73:c5:e8:31:c6:85:64:da:f8:1f:9a:2d:b8: 21:51:2a:69:33:bc:64:1f:c0:bc:6a:3c:5f:08:5a:b9:e8:08: d2:62:aa:19:55:43:2f:4d:e3:3d:74:fc:00:b7:95:49:ec:0c: 9a:f7:bd:d7 -----BEGIN CERTIFICATE----- MIIF0DCCBLigAwIBAgIUJfxW/t/euwyXeeDZyn65d4vA7BkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDQxNTAyMzg1OVoX DTI3MDQxNDAyNDM1OVowMzExMC8GA1UEAxMoRUM2RkIxNDI1QjJFQ0Q4OTZBODFE N0E0RTFDQUJCRDhFRTU4QkJEMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKuFFR4g5160N2wjWuanLBp+BGMPj5dwlP4VtTSWBKmUylhgmu0a78PfRKic Gpi3CmA0geqn1c82L8ka4nzRkMy9kx0Inbl28GAuhdkC6pL9mZiT8tiyfdLffgga E0b271K4uzTqzwPZJi/jz7YfFxA7W7RCYbOUM1R+8TuFdz1IXNvwgxm1ewApBkqo Von+iqBXwFaWtY1DV8h90ISSWkb4EuzsPYyRfZvKWWDON6ZXxjo0nlZsE0E3Xzjd KS2nlQZCjtUajls/TOloV1tVEWrAnoSLzErkGHL4429wCDIwgkyjkVHsVfu8Od4I RdZLesnhGfhXiWbiRcFkRidHTbsCAwEAAaOCAsMwggK/MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFOxvsUJbLs2JaoHXpOHKu9juWLvTMB8GA1UdIwQYMBaAFKVu hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTA5NjYyNjkzNDcyNjUyNDkzMC8wLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDk2NjI2OTM0NzI2NTI0OTMw LzAvRUM2RkIxNDI1QjJFQ0Q4OTZBODFEN0E0RTFDQUJCRDhFRTU4QkJEMy5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwSAYIKwYBBQUH AQcBAf8EOTA3MCYEAgABMCAwDAMEBnclwAMEB3cmAAMEBMpL0AMEBcpb4AMEBNOb 4DANBAIAAjAHAwUAJARgADANBgkqhkiG9w0BAQsFAAOCAQEAAM43y4jN2xYmvRns rF5GsNyHlxBkVyKTipSBIOeFv120NeXCqu++FNDtazxeerYVSSYDH/JE1SJNNbll eaV2sXelpra12H5f3PTEWFlk/CczeeWUCCftCZpHu10fM28rV0wvynVHMT8u8MBX gyBuYfcGD6oLMj0EXKoYs+/FBbOFoMDUILaLHY5o/ROxxb9IEVtA00ydU4vjp0VG tW5BQUimiU/jchJ8sQHf7HR0NhNp+39NtvEHh32hQqr9RQj91BgJQCaW0MfimS1z xegxxoVk2vgfmi24IVEqaTO8ZB/AvGo8XwhauegI0mKqGVVDL03jPXT8ALeVSewM mve91w== -----END CERTIFICATE-----Generated at Fri Apr 17 23:55:55 2026 by rpki-client