$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/0/EC7E476DD1FA65A1A13C74E8A547C9E1D27D8DF3.cer File: EC7E476DD1FA65A1A13C74E8A547C9E1D27D8DF3.cer (raw, json) Hash identifier: O1lOl6ksnBqi1J/GtgJJJLVpOFxtDLqHMIvs1Oc8gnM= Subject key identifier: EC:7E:47:6D:D1:FA:65:A1:A1:3C:74:E8:A5:47:C9:E1:D2:7D:8D:F3 Authority key identifier: CB:02:14:A5:C4:04:D6:F8:40:43:3B:12:0C:AC:BB:5B:8C:59:E6:13 Certificate issuer: /CN=A9162E3D0001/serialNumber=CB0214A5C404D6F840433B120CACBB5B8C59E613 Certificate serial: 145C25BEA7B8F958283E1629EAD1DF47B105E3B2 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1095984486035816451/0/EC7E476DD1FA65A1A13C74E8A547C9E1D27D8DF3.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1095984486035816451/0/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Fri 29 May 2026 08:29:04 +0000 Certificate not after: Fri 28 May 2027 08:34:04 +0000 Subordinate resources: IP: 160.25.194.0/23 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Jun 2026 13:43:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:5c:25:be:a7:b8:f9:58:28:3e:16:29:ea:d1:df:47:b1:05:e3:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=CB0214A5C404D6F840433B120CACBB5B8C59E613 Validity Not Before: May 29 08:29:04 2026 GMT Not After : May 28 08:34:04 2027 GMT Subject: CN=EC7E476DD1FA65A1A13C74E8A547C9E1D27D8DF3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:19:07:10:3d:1e:68:3d:3c:90:db:07:60:51: 83:81:c1:fc:69:1d:f5:90:a3:7d:c8:d9:c9:b0:41: 85:80:a0:cc:b0:a4:2c:1d:48:c6:26:92:a1:c9:59: 5a:79:59:61:b6:db:50:82:36:76:30:4c:20:c3:f5: c4:ea:40:45:19:b6:ed:66:d9:f0:c1:f0:21:8a:ce: 19:8c:ec:01:47:dc:fe:10:a6:f1:39:28:76:89:72: c8:4e:87:89:ec:55:f1:85:8d:a3:4b:da:00:65:1d: da:a6:2c:f1:ae:a6:22:e1:1f:af:87:a2:68:1d:cc: 50:71:93:83:d3:ae:31:1a:a6:07:e0:0d:01:24:ca: 2a:dc:30:cd:7f:18:40:98:58:3b:94:71:95:5d:44: 18:65:fa:56:54:88:ee:67:09:1e:a1:a7:88:17:5f: 36:2f:5b:9d:8d:a9:ef:ba:67:ee:f3:0a:38:6b:f9: 95:fa:85:d4:76:bf:f6:cc:47:10:90:ef:60:e5:6f: 0d:fb:f0:8a:23:0d:1e:6e:5f:99:1f:b0:44:e6:c5: 78:0b:19:4f:65:10:70:61:f7:ec:bd:10:03:d3:3f: a7:b3:7a:bf:55:b3:0d:2a:ad:06:05:80:98:9d:7c: 32:12:85:3d:6e:6f:2f:97:86:59:d7:37:99:d1:b9: 22:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: EC:7E:47:6D:D1:FA:65:A1:A1:3C:74:E8:A5:47:C9:E1:D2:7D:8D:F3 X509v3 Authority Key Identifier: keyid:CB:02:14:A5:C4:04:D6:F8:40:43:3B:12:0C:AC:BB:5B:8C:59:E6:13 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1095984486035816451/0/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1095984486035816451/0/EC7E476DD1FA65A1A13C74E8A547C9E1D27D8DF3.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.25.194.0/23 Signature Algorithm: sha256WithRSAEncryption 99:8c:31:f3:64:d3:10:03:21:6a:3d:25:cc:db:c1:e8:db:95: 2c:8d:e2:e3:61:c2:19:46:e5:af:ab:5c:d4:97:48:8d:0a:1c: d9:c7:f0:08:7a:d7:18:d3:65:06:7f:e1:8f:fe:01:91:eb:1a: a5:21:af:be:8a:77:ac:d6:de:1f:d4:e1:a4:b4:90:e8:fe:40: 83:6c:ea:e0:b4:fa:46:13:ca:63:3a:fe:43:c9:0f:7a:8d:ea: 0d:f3:2c:7a:9c:c7:eb:c9:19:4f:c1:90:8f:12:b5:60:70:fd: 99:c9:94:80:33:0c:14:c7:a9:76:19:10:c8:4a:63:af:90:ec: 07:96:45:ca:16:a6:68:e7:94:2d:0b:0d:2a:e0:43:b9:73:ba: 05:f6:5e:f0:ca:95:f4:cb:e7:60:f3:e7:3b:e9:8f:1c:08:54: dd:55:c2:40:6d:ec:3d:f6:b4:7a:15:b8:56:a7:48:ca:81:ac: a1:68:82:3e:51:4a:35:bc:fb:29:c3:78:8f:27:56:d2:8b:f3: 3d:8c:41:26:a6:c9:29:62:47:bc:92:66:78:41:64:7c:e3:3a: 4f:a3:80:67:e5:c4:6e:bf:98:ce:5b:24:5c:24:ad:8b:8d:eb: 0c:6c:35:08:4e:95:f5:5a:ef:01:8c:66:46:53:9d:c7:b7:3e: f6:30:ed:23 -----BEGIN CERTIFICATE----- MIIFpzCCBI+gAwIBAgIUFFwlvqe4+VgoPhYp6tHfR7EF47IwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhDQjAyMTRBNUM0 MDRENkY4NDA0MzNCMTIwQ0FDQkI1QjhDNTlFNjEzMB4XDTI2MDUyOTA4MjkwNFoX DTI3MDUyODA4MzQwNFowMzExMC8GA1UEAxMoRUM3RTQ3NkREMUZBNjVBMUExM0M3 NEU4QTU0N0M5RTFEMjdEOERGMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANUZBxA9Hmg9PJDbB2BRg4HB/Gkd9ZCjfcjZybBBhYCgzLCkLB1IxiaSoclZ WnlZYbbbUII2djBMIMP1xOpARRm27WbZ8MHwIYrOGYzsAUfc/hCm8TkodolyyE6H iexV8YWNo0vaAGUd2qYs8a6mIuEfr4eiaB3MUHGTg9OuMRqmB+ANASTKKtwwzX8Y QJhYO5RxlV1EGGX6VlSI7mcJHqGniBdfNi9bnY2p77pn7vMKOGv5lfqF1Ha/9sxH EJDvYOVvDfvwiiMNHm5fmR+wRObFeAsZT2UQcGH37L0QA9M/p7N6v1WzDSqtBgWA mJ18MhKFPW5vL5eGWdc3mdG5IkcCAwEAAaOCApowggKWMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFOx+R23R+mWhoTx06KVHyeHSfY3zMB8GA1UdIwQYMBaAFMsC FKXEBNb4QEM7Egysu1uMWeYTMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMC9DQjAyMTRBNUM0MDRENkY4NDA0MzNCMTIwQ0FDQkI1QjhDNTlF NjEzLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CM0EyNEYyMDFENjYxMUUyOEFDODgzN0M3 MkZEMUZGMi95d0lVcGNRRTF2aEFRenNTREt5N1c0eFo1aE0uY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTA5NTk4NDQ4NjAzNTgxNjQ1MS8wLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDk1OTg0NDg2MDM1ODE2NDUx LzAvRUM3RTQ3NkREMUZBNjVBMUExM0M3NEU4QTU0N0M5RTFEMjdEOERGMy5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAGgGcIwDQYJKoZIhvcNAQELBQADggEBAJmMMfNk 0xADIWo9JczbwejblSyN4uNhwhlG5a+rXNSXSI0KHNnH8Ah61xjTZQZ/4Y/+AZHr GqUhr76Kd6zW3h/U4aS0kOj+QINs6uC0+kYTymM6/kPJD3qN6g3zLHqcx+vJGU/B kI8StWBw/ZnJlIAzDBTHqXYZEMhKY6+Q7AeWRcoWpmjnlC0LDSrgQ7lzugX2XvDK lfTL52Dz5zvpjxwIVN1VwkBt7D32tHoVuFanSMqBrKFogj5RSjW8+ynDeI8nVtKL 8z2MQSamySliR7ySZnhBZHzjOk+jgGflxG6/mM5bJFwkrYuN6wxsNQhOlfVa7wGM ZkZTnce3PvYw7SM= -----END CERTIFICATE-----Generated at Thu Jun 4 14:12:00 2026 by rpki-client