$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/0/727CC49FFE2FAF9584C2E103AC6FD293020DD07D.cer File: 727CC49FFE2FAF9584C2E103AC6FD293020DD07D.cer (raw, json) Hash identifier: vTfhGpP4PS4SQoYvKCKL4HLBQBJ9300Fnk/MiXjuRIo= Subject key identifier: 72:7C:C4:9F:FE:2F:AF:95:84:C2:E1:03:AC:6F:D2:93:02:0D:D0:7D Authority key identifier: CB:02:14:A5:C4:04:D6:F8:40:43:3B:12:0C:AC:BB:5B:8C:59:E6:13 Certificate issuer: /CN=A9162E3D0001/serialNumber=CB0214A5C404D6F840433B120CACBB5B8C59E613 Certificate serial: 4E2D941D6354A08C294C51D3E21DA4C78194B070 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1095920006954221569/0/727CC49FFE2FAF9584C2E103AC6FD293020DD07D.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1095920006954221569/0/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Fri 29 May 2026 08:24:42 +0000 Certificate not after: Fri 28 May 2027 08:29:42 +0000 Subordinate resources: IP: 139.176.0.0/16 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 13:26:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:2d:94:1d:63:54:a0:8c:29:4c:51:d3:e2:1d:a4:c7:81:94:b0:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=CB0214A5C404D6F840433B120CACBB5B8C59E613 Validity Not Before: May 29 08:24:42 2026 GMT Not After : May 28 08:29:42 2027 GMT Subject: CN=727CC49FFE2FAF9584C2E103AC6FD293020DD07D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:a0:9e:ef:bc:ab:4d:ba:7b:de:e7:6e:b9:89: f6:50:55:c8:22:96:8f:5d:4b:c2:2e:0a:e6:6d:27: fc:9e:4a:dd:14:36:a3:67:fd:4c:d1:c0:85:71:e2: b7:ac:d9:d6:65:a5:3f:94:c9:e8:2b:1c:da:16:32: ea:5b:8c:c2:01:31:96:3a:4c:93:96:8f:31:e7:77: ce:69:22:ea:e5:6f:20:c9:23:9b:ec:1a:2d:c9:1f: f4:be:10:2d:de:9f:6c:48:92:eb:c8:d7:34:6d:24: a4:99:24:83:c4:59:22:15:e9:aa:a9:20:b9:6e:60: fb:2c:6b:84:48:52:22:10:e1:4e:4d:79:ec:88:27: 49:c8:bc:f3:76:cf:3a:73:3c:4b:3f:51:1a:c6:2f: f5:e3:0f:29:0d:d3:1f:8a:bf:34:5f:3b:fc:fd:49: d9:34:24:66:11:6c:a3:2b:ca:bf:fe:16:06:83:ca: b7:aa:a3:24:d5:8e:eb:93:a9:ea:e2:91:42:35:fb: c7:cb:ca:53:75:e4:7b:eb:37:2e:86:8f:6e:d8:21: 1a:7f:cc:7a:87:a6:c9:58:aa:c8:1f:30:75:86:10: 10:09:a0:db:9f:d3:40:bb:11:d4:d9:21:c6:01:4d: 8f:fd:25:52:32:a6:d8:f7:24:1a:15:09:ed:be:d4: 4c:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 72:7C:C4:9F:FE:2F:AF:95:84:C2:E1:03:AC:6F:D2:93:02:0D:D0:7D X509v3 Authority Key Identifier: keyid:CB:02:14:A5:C4:04:D6:F8:40:43:3B:12:0C:AC:BB:5B:8C:59:E6:13 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1095920006954221569/0/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1095920006954221569/0/727CC49FFE2FAF9584C2E103AC6FD293020DD07D.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 139.176.0.0/16 Signature Algorithm: sha256WithRSAEncryption 98:1b:da:00:04:c5:28:b2:2b:00:bf:67:c4:7b:fe:47:62:8b: 16:2a:5c:1c:50:39:1f:87:4c:7a:7d:52:8a:dd:43:76:d5:55: 45:5c:1e:34:b3:e5:92:ab:73:13:09:ab:ea:c0:ed:f3:40:47: 86:9f:5b:9a:20:0f:3f:96:84:64:f6:ec:49:b0:70:53:9c:11: fc:8f:8c:f6:3b:9b:2c:2e:69:a7:c9:a5:6e:ce:d6:95:0a:55: 35:22:10:ed:fd:e1:9f:6b:b7:79:39:70:b6:91:7b:bd:1a:8d: 4c:91:a8:b6:4e:26:09:89:6f:d5:25:b8:7f:0a:2f:e4:79:56: af:3f:0f:2d:2f:ae:2e:f9:04:2f:f5:f2:f5:ad:d1:5d:7e:f4: cf:c0:0e:e4:a2:99:12:84:e7:7e:bf:6b:82:1e:25:8e:ec:93: c9:6f:ad:37:66:e7:f9:6b:01:28:79:79:d4:ae:72:8a:5d:06: c5:13:90:e3:16:92:eb:20:cf:ca:a2:c8:db:2d:a5:bd:bb:bb: 2b:db:0f:a7:2d:81:72:16:6d:62:29:59:03:a0:35:7c:d4:3e: e8:a4:3b:58:50:4f:12:34:2f:a5:57:af:82:b2:4b:ed:a3:92: 7a:3f:a4:fc:28:1e:60:a7:79:1d:7a:c2:e1:b7:fd:d9:2b:76: e4:b3:55:4b -----BEGIN CERTIFICATE----- MIIFpjCCBI6gAwIBAgIUTi2UHWNUoIwpTFHT4h2kx4GUsHAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhDQjAyMTRBNUM0 MDRENkY4NDA0MzNCMTIwQ0FDQkI1QjhDNTlFNjEzMB4XDTI2MDUyOTA4MjQ0MloX DTI3MDUyODA4Mjk0MlowMzExMC8GA1UEAxMoNzI3Q0M0OUZGRTJGQUY5NTg0QzJF MTAzQUM2RkQyOTMwMjBERDA3RDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANGgnu+8q026e97nbrmJ9lBVyCKWj11Lwi4K5m0n/J5K3RQ2o2f9TNHAhXHi t6zZ1mWlP5TJ6Csc2hYy6luMwgExljpMk5aPMed3zmki6uVvIMkjm+waLckf9L4Q Ld6fbEiS68jXNG0kpJkkg8RZIhXpqqkguW5g+yxrhEhSIhDhTk157IgnSci883bP OnM8Sz9RGsYv9eMPKQ3TH4q/NF87/P1J2TQkZhFsoyvKv/4WBoPKt6qjJNWO65Op 6uKRQjX7x8vKU3Xke+s3LoaPbtghGn/MeoemyViqyB8wdYYQEAmg25/TQLsR1Nkh xgFNj/0lUjKm2PckGhUJ7b7UTFECAwEAAaOCApkwggKVMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFHJ8xJ/+L6+VhMLhA6xv0pMCDdB9MB8GA1UdIwQYMBaAFMsC FKXEBNb4QEM7Egysu1uMWeYTMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMC9DQjAyMTRBNUM0MDRENkY4NDA0MzNCMTIwQ0FDQkI1QjhDNTlF NjEzLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CM0EyNEYyMDFENjYxMUUyOEFDODgzN0M3 MkZEMUZGMi95d0lVcGNRRTF2aEFRenNTREt5N1c0eFo1aE0uY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTA5NTkyMDAwNjk1NDIyMTU2OS8wLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDk1OTIwMDA2OTU0MjIxNTY5 LzAvNzI3Q0M0OUZGRTJGQUY5NTg0QzJFMTAzQUM2RkQyOTMwMjBERDA3RC5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUH AQcBAf8EDzANMAsEAgABMAUDAwCLsDANBgkqhkiG9w0BAQsFAAOCAQEAmBvaAATF KLIrAL9nxHv+R2KLFipcHFA5H4dMen1Sit1DdtVVRVweNLPlkqtzEwmr6sDt80BH hp9bmiAPP5aEZPbsSbBwU5wR/I+M9jubLC5pp8mlbs7WlQpVNSIQ7f3hn2u3eTlw tpF7vRqNTJGotk4mCYlv1SW4fwov5HlWrz8PLS+uLvkEL/Xy9a3RXX70z8AO5KKZ EoTnfr9rgh4ljuyTyW+tN2bn+WsBKHl51K5yil0GxROQ4xaS6yDPyqLI2y2lvbu7 K9sPpy2BchZtYilZA6A1fNQ+6KQ7WFBPEjQvpVevgrJL7aOSej+k/CgeYKd5HXrC 4bf92St25LNVSw== -----END CERTIFICATE-----Generated at Sat May 30 01:38:10 2026 by rpki-client