$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2970708A1B73BC2BF2FF6CD7F397C536523226BE.cer File: 2970708A1B73BC2BF2FF6CD7F397C536523226BE.cer (raw, json) Hash identifier: WWS8x/oqI3rMHkpgTOCiPSoqCW3zXH4EMk/W+ncVSQU= Subject key identifier: 29:70:70:8A:1B:73:BC:2B:F2:FF:6C:D7:F3:97:C5:36:52:32:26:BE Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Certificate serial: 4B79B2F2DC3DFF82E1B7A6A542C78B43CF89BBE6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1091910320722542594/0/2970708A1B73BC2BF2FF6CD7F397C536523226BE.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1091910320722542594/0/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Thu 02 Apr 2026 02:16:48 +0000 Certificate not after: Thu 01 Apr 2027 02:21:48 +0000 Subordinate resources: IP: 43.255.96.0/22 IP: 103.151.142.0/23 IP: 103.239.68.0/22 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 12:10:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:79:b2:f2:dc:3d:ff:82:e1:b7:a6:a5:42:c7:8b:43:cf:89:bb:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Validity Not Before: Apr 2 02:16:48 2026 GMT Not After : Apr 1 02:21:48 2027 GMT Subject: CN=2970708A1B73BC2BF2FF6CD7F397C536523226BE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:6f:f5:b4:29:3f:92:9e:77:9d:6c:5b:0e:2d: d4:5c:4c:9e:03:3c:80:59:e6:e8:3b:4f:d2:65:ae: 52:a0:97:85:9b:a2:73:9a:b2:1b:25:c2:bd:a7:84: 49:1b:0a:70:a8:43:33:99:cb:06:1f:24:e6:7c:69: f7:0a:50:41:9b:35:8f:1c:66:17:75:e1:b0:0f:e8: ee:8e:48:70:f7:fc:d9:6b:6e:08:3e:94:8c:8e:3c: a9:68:ce:61:d9:76:8e:c9:3c:ac:1d:5c:8f:19:4d: 2a:ef:c7:66:2d:5d:c6:6d:4b:55:e7:55:d5:d3:5f: 05:26:ad:4b:d7:69:c9:f1:1e:4a:d9:57:c9:87:f8: 9f:c9:9e:73:22:ad:f1:a5:cb:c4:1a:83:e3:fd:e2: 29:59:9f:6f:63:6d:3c:06:c7:1c:fc:64:25:f4:ab: 13:35:04:ea:30:fc:84:08:e0:c4:fa:30:ee:ff:b9: ee:aa:9e:f6:03:3e:4b:d7:c0:75:a9:7c:3b:92:4b: 3f:f3:1e:9e:9e:52:ca:53:90:9a:f9:2e:be:63:02: 68:4c:9b:82:e9:e8:6b:64:49:dd:01:c8:93:fb:2b: ec:26:c6:3c:52:0a:77:63:4e:dd:d8:aa:3d:be:f7: 55:76:3b:d8:fb:5a:9b:a2:ed:05:d2:68:ae:75:29: 80:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 29:70:70:8A:1B:73:BC:2B:F2:FF:6C:D7:F3:97:C5:36:52:32:26:BE X509v3 Authority Key Identifier: keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1091910320722542594/0/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1091910320722542594/0/2970708A1B73BC2BF2FF6CD7F397C536523226BE.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.255.96.0/22 103.151.142.0/23 103.239.68.0/22 Signature Algorithm: sha256WithRSAEncryption 65:8b:a9:e2:b4:d8:5f:ec:7c:10:44:68:b6:bd:36:b6:24:e1: a6:0b:6e:87:82:af:ff:df:15:49:47:16:07:8b:59:6b:2d:e1: 04:bc:0d:32:1b:b7:af:8a:32:05:99:a1:c4:40:73:ef:87:47: 8e:81:35:f8:41:1b:a8:4e:0f:ae:f1:30:2b:ed:2f:18:d8:a2: f9:f2:8c:3d:65:a7:7a:91:75:bf:7e:ef:1c:0b:11:c3:00:8a: c1:cf:7c:54:1c:3e:44:b8:96:f8:b2:24:a4:f6:eb:cc:5d:27: 93:6f:93:56:a9:98:6b:6b:20:80:d7:0a:64:04:31:17:61:7b: 90:fa:23:d0:2f:8a:bb:d8:ff:7c:6d:58:b2:87:26:52:97:e2: f4:9d:17:0b:e7:5c:23:77:16:4c:b3:a2:d7:10:3d:05:6e:55: 69:d9:f9:20:cd:09:48:9d:eb:a7:4f:0a:f6:7f:15:8c:85:fc: ed:89:5d:5b:d3:6c:28:2e:91:da:05:af:4e:86:b7:f5:49:4b: 3a:74:c3:55:56:a8:2c:f8:0a:7f:e2:5d:d2:8a:7b:10:99:36: 7d:cd:fc:d3:7f:82:7f:21:e1:ed:a0:a1:dd:68:9f:d4:69:83: b3:f6:e7:81:74:b3:ca:03:c0:16:b4:0d:1c:bf:40:56:e4:d0: 10:37:57:ae -----BEGIN CERTIFICATE----- MIIFszCCBJugAwIBAgIUS3my8tw9/4Lht6alQseLQ8+Ju+YwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDQwMjAyMTY0OFoX DTI3MDQwMTAyMjE0OFowMzExMC8GA1UEAxMoMjk3MDcwOEExQjczQkMyQkYyRkY2 Q0Q3RjM5N0M1MzY1MjMyMjZCRTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMtv9bQpP5Ked51sWw4t1FxMngM8gFnm6DtP0mWuUqCXhZuic5qyGyXCvaeE SRsKcKhDM5nLBh8k5nxp9wpQQZs1jxxmF3XhsA/o7o5IcPf82WtuCD6UjI48qWjO Ydl2jsk8rB1cjxlNKu/HZi1dxm1LVedV1dNfBSatS9dpyfEeStlXyYf4n8mecyKt 8aXLxBqD4/3iKVmfb2NtPAbHHPxkJfSrEzUE6jD8hAjgxPow7v+57qqe9gM+S9fA dal8O5JLP/Menp5SylOQmvkuvmMCaEybgunoa2RJ3QHIk/sr7CbGPFIKd2NO3diq Pb73VXY72Ptam6LtBdJornUpgPUCAwEAAaOCAqYwggKiMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFClwcIobc7wr8v9s1/OXxTZSMia+MB8GA1UdIwQYMBaAFKVu hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTA5MTkxMDMyMDcyMjU0MjU5NC8wLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDkxOTEwMzIwNzIyNTQyNTk0 LzAvMjk3MDcwOEExQjczQkMyQkYyRkY2Q0Q3RjM5N0M1MzY1MjMyMjZCRS5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwKwYIKwYBBQUH AQcBAf8EHDAaMBgEAgABMBIDBAIr/2ADBAFnl44DBAJn70QwDQYJKoZIhvcNAQEL BQADggEBAGWLqeK02F/sfBBEaLa9NrYk4aYLboeCr//fFUlHFgeLWWst4QS8DTIb t6+KMgWZocRAc++HR46BNfhBG6hOD67xMCvtLxjYovnyjD1lp3qRdb9+7xwLEcMA isHPfFQcPkS4lviyJKT268xdJ5Nvk1apmGtrIIDXCmQEMRdhe5D6I9AvirvY/3xt WLKHJlKX4vSdFwvnXCN3FkyzotcQPQVuVWnZ+SDNCUid66dPCvZ/FYyF/O2JXVvT bCgukdoFr06Gt/VJSzp0w1VWqCz4Cn/iXdKKexCZNn3N/NN/gn8h4e2god1on9Rp g7P254F0s8oDwBa0DRy/QFbk0BA3V64= -----END CERTIFICATE-----Generated at Mon Apr 13 09:29:05 2026 by rpki-client