$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/0/7EAC9E43C8FAE7ED5B6159423D60EA732848F05F.cer File: 7EAC9E43C8FAE7ED5B6159423D60EA732848F05F.cer (raw, json) Hash identifier: qrgoGoRqHwgciV+XS4m5sD2jTtiyRepv1pco8cbllK0= Subject key identifier: 7E:AC:9E:43:C8:FA:E7:ED:5B:61:59:42:3D:60:EA:73:28:48:F0:5F Authority key identifier: CB:02:14:A5:C4:04:D6:F8:40:43:3B:12:0C:AC:BB:5B:8C:59:E6:13 Certificate issuer: /CN=A9162E3D0001/serialNumber=CB0214A5C404D6F840433B120CACBB5B8C59E613 Certificate serial: 292E6D72067C8A0CBA5D64194D78EEB2A8339F75 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1065583221971877891/1/7EAC9E43C8FAE7ED5B6159423D60EA732848F05F.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1065583221971877891/1/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Mon 01 Jun 2026 01:14:00 +0000 Certificate not after: Mon 31 May 2027 01:19:00 +0000 Subordinate resources: IP: 40.72.0.0/15 IP: 40.125.128.0/17 IP: 40.126.64.0/18 IP: 40.162.0.0/16 IP: 52.130.0.0/15 IP: 139.217.0.0/16 IP: 139.219.0.0/16 IP: 143.64.0.0/16 IP: 159.27.0.0/16 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Jun 2026 13:43:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:2e:6d:72:06:7c:8a:0c:ba:5d:64:19:4d:78:ee:b2:a8:33:9f:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=CB0214A5C404D6F840433B120CACBB5B8C59E613 Validity Not Before: Jun 1 01:14:00 2026 GMT Not After : May 31 01:19:00 2027 GMT Subject: CN=7EAC9E43C8FAE7ED5B6159423D60EA732848F05F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:8d:e9:a4:55:97:c2:43:92:e8:6b:56:48:b9: bc:66:a0:6d:e2:5a:ad:9c:bb:84:de:7d:85:a3:6e: d9:41:7a:d8:d2:76:a6:e2:fb:82:2a:92:ca:98:e0: bf:6e:7e:a3:76:69:9d:89:f5:a6:e2:67:6f:d2:6e: 4f:59:b2:6e:2b:0a:ab:23:ca:bb:7f:8f:2b:6e:7c: df:06:81:3d:15:6f:9d:d5:f5:1a:c0:38:c0:4a:f4: b3:cd:a1:17:18:28:c9:2b:cc:ab:e7:ee:12:cb:27: 00:b3:f5:38:70:05:30:18:37:91:89:28:95:a9:e1: a1:17:cc:cf:2c:48:46:64:80:74:89:4d:3a:77:fd: 97:13:c3:5a:f0:32:6c:2d:28:b2:27:84:18:30:48: d3:7c:09:78:c1:be:94:0f:3b:02:0c:8f:f8:2e:7d: 41:f0:71:04:7a:61:c9:a4:92:5a:68:aa:46:e9:c1: 3d:4c:27:42:2c:a6:9c:b9:0c:41:77:7b:e7:ac:2a: 09:fe:17:dd:4c:7c:d9:e8:54:ee:0d:2d:90:bf:4c: 28:fc:74:c1:13:0d:cc:5f:b3:07:44:22:a8:95:2b: 47:0b:12:b4:1f:6a:64:b3:20:0d:2a:fe:a2:58:f8: 3d:a0:54:a2:3b:21:82:6c:5b:40:25:8b:84:af:14: d9:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 7E:AC:9E:43:C8:FA:E7:ED:5B:61:59:42:3D:60:EA:73:28:48:F0:5F X509v3 Authority Key Identifier: keyid:CB:02:14:A5:C4:04:D6:F8:40:43:3B:12:0C:AC:BB:5B:8C:59:E6:13 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1065583221971877891/1/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1065583221971877891/1/7EAC9E43C8FAE7ED5B6159423D60EA732848F05F.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 40.72.0.0/15 40.125.128.0/17 40.126.64.0/18 40.162.0.0/16 52.130.0.0/15 139.217.0.0/16 139.219.0.0/16 143.64.0.0/16 159.27.0.0/16 Signature Algorithm: sha256WithRSAEncryption 98:e9:48:77:ff:b9:19:10:45:a5:0b:a6:96:ad:29:ac:2e:86: 58:b1:55:97:87:50:4c:a9:76:f6:de:93:3a:7e:2e:46:41:89: ac:28:63:1b:5d:a4:fe:af:2f:eb:a8:e2:5e:76:bd:29:de:02: 7b:55:c4:11:ec:2b:91:8c:20:4b:4c:9f:fd:d1:c9:1a:15:f1: e6:91:37:72:12:3a:fe:69:69:78:51:06:fa:9c:0b:8f:cb:f3: 82:43:d5:68:12:66:80:52:e5:91:99:c1:55:18:4c:91:20:3b: a2:dd:bc:ca:98:2c:c0:29:88:ef:d2:98:c4:69:81:80:56:59: 99:2c:c5:88:40:db:33:82:41:56:4f:5c:b1:4c:5f:97:13:a3: b5:8e:80:ee:be:df:c4:ba:f2:5a:b3:ac:7b:d5:f1:e3:e3:db: 70:29:32:7f:75:e4:c5:4d:0f:79:b8:54:2a:df:3a:f2:e7:d0: c4:61:41:2e:00:4b:a4:c6:b8:26:c1:3f:08:bd:bd:63:c4:7d: 15:8f:c3:24:b5:8a:c1:62:99:d5:f7:e0:8c:e1:f0:ed:30:2f: c1:5f:73:e5:63:ab:3e:9c:20:a4:56:16:22:3f:83:64:90:af: a0:d2:6e:95:7b:da:73:27:a5:bb:87:96:7f:bf:1b:28:ed:11: bc:05:87:b0 -----BEGIN CERTIFICATE----- MIIF0DCCBLigAwIBAgIUKS5tcgZ8igy6XWQZTXjusqgzn3UwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhDQjAyMTRBNUM0 MDRENkY4NDA0MzNCMTIwQ0FDQkI1QjhDNTlFNjEzMB4XDTI2MDYwMTAxMTQwMFoX DTI3MDUzMTAxMTkwMFowMzExMC8GA1UEAxMoN0VBQzlFNDNDOEZBRTdFRDVCNjE1 OTQyM0Q2MEVBNzMyODQ4RjA1RjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAK6N6aRVl8JDkuhrVki5vGagbeJarZy7hN59haNu2UF62NJ2puL7giqSypjg v25+o3ZpnYn1puJnb9JuT1mybisKqyPKu3+PK2583waBPRVvndX1GsA4wEr0s82h FxgoySvMq+fuEssnALP1OHAFMBg3kYkolanhoRfMzyxIRmSAdIlNOnf9lxPDWvAy bC0osieEGDBI03wJeMG+lA87AgyP+C59QfBxBHphyaSSWmiqRunBPUwnQiymnLkM QXd756wqCf4X3Ux82ehU7g0tkL9MKPx0wRMNzF+zB0QiqJUrRwsStB9qZLMgDSr+ olj4PaBUojshgmxbQCWLhK8U2ecCAwEAAaOCAsMwggK/MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFH6snkPI+uftW2FZQj1g6nMoSPBfMB8GA1UdIwQYMBaAFMsC FKXEBNb4QEM7Egysu1uMWeYTMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMC9DQjAyMTRBNUM0MDRENkY4NDA0MzNCMTIwQ0FDQkI1QjhDNTlF NjEzLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CM0EyNEYyMDFENjYxMUUyOEFDODgzN0M3 MkZEMUZGMi95d0lVcGNRRTF2aEFRenNTREt5N1c0eFo1aE0uY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTA2NTU4MzIyMTk3MTg3Nzg5MS8xLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDY1NTgzMjIxOTcxODc3ODkx LzEvN0VBQzlFNDNDOEZBRTdFRDVCNjE1OTQyM0Q2MEVBNzMyODQ4RjA1Ri5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwSAYIKwYBBQUH AQcBAf8EOTA3MDUEAgABMC8DAwEoSAMEByh9gAMEBih+QAMDACiiAwMBNIIDAwCL 2QMDAIvbAwMAj0ADAwCfGzANBgkqhkiG9w0BAQsFAAOCAQEAmOlId/+5GRBFpQum lq0prC6GWLFVl4dQTKl29t6TOn4uRkGJrChjG12k/q8v66jiXna9Kd4Ce1XEEewr kYwgS0yf/dHJGhXx5pE3chI6/mlpeFEG+pwLj8vzgkPVaBJmgFLlkZnBVRhMkSA7 ot28ypgswCmI79KYxGmBgFZZmSzFiEDbM4JBVk9csUxflxOjtY6A7r7fxLryWrOs e9Xx4+PbcCkyf3XkxU0PebhUKt868ufQxGFBLgBLpMa4JsE/CL29Y8R9FY/DJLWK wWKZ1ffgjOHw7TAvwV9z5WOrPpwgpFYWIj+DZJCvoNJulXvacyelu4eWf78bKO0R vAWHsA== -----END CERTIFICATE-----Generated at Thu Jun 4 14:12:18 2026 by rpki-client