$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4D766E2BA41D99B155DD457741DB970EC3007E71.cer File: 4D766E2BA41D99B155DD457741DB970EC3007E71.cer (raw, json) Hash identifier: MojHbGCMGDMP0xpfIe6ncP7zVlFyYH3RE3o1ufMTVhw= Subject key identifier: 4D:76:6E:2B:A4:1D:99:B1:55:DD:45:77:41:DB:97:0E:C3:00:7E:71 Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Certificate serial: 5C90C3341383975A4B004B0350EF084A4EEDA24E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1118799271127154711/0/4D766E2BA41D99B155DD457741DB970EC3007E71.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1118799271127154711/0/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Mon 15 Jun 2026 07:03:55 +0000 Certificate not after: Mon 14 Jun 2027 07:08:55 +0000 Subordinate resources: AS: 59010 IP: 103.241.95.0/24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 Jul 2026 20:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:90:c3:34:13:83:97:5a:4b:00:4b:03:50:ef:08:4a:4e:ed:a2:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Validity Not Before: Jun 15 07:03:55 2026 GMT Not After : Jun 14 07:08:55 2027 GMT Subject: CN=4D766E2BA41D99B155DD457741DB970EC3007E71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:23:ba:30:36:e7:88:8e:70:db:2e:76:d2:90: e3:40:bc:5f:e1:eb:a1:00:a9:81:5c:f5:45:0e:8e: 19:d2:f3:a9:b7:a0:0a:61:d5:0b:ac:fe:92:4e:f1: e3:85:c7:c1:e5:bc:11:38:48:e3:cd:18:54:8b:83: 59:29:e4:1a:97:f7:2e:51:8d:fc:c1:06:c1:25:43: 4d:44:be:7e:c0:ae:5c:fe:67:92:03:8a:fd:eb:ed: 1e:cc:32:1c:68:a9:9a:45:94:1e:29:ef:9a:c0:83: 46:07:ec:8b:2e:ea:26:19:ea:b3:60:a1:b1:66:5d: 08:d9:00:5c:5c:a9:78:87:e6:4d:6d:3f:31:4e:bf: dd:4d:d0:19:d7:42:65:7f:43:d8:e6:0a:46:2c:10: 94:b1:09:b6:f6:29:cb:12:8a:63:f9:b7:5b:bb:54: 60:1a:e3:b1:40:25:cb:d0:84:59:35:bd:1b:66:de: d9:65:93:eb:a2:4d:1b:51:2e:e8:37:e5:9a:b2:e5: bc:79:92:51:b6:6b:e4:12:81:16:22:2e:dc:af:d5: 7b:0c:2d:4d:c2:2f:0c:ff:db:99:2b:34:58:8b:b7: 20:a3:fe:84:19:76:0c:32:8b:18:2e:1b:f1:6a:37: 4a:32:3d:84:8f:45:47:f5:ef:03:ef:68:68:00:ad: 83:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 4D:76:6E:2B:A4:1D:99:B1:55:DD:45:77:41:DB:97:0E:C3:00:7E:71 X509v3 Authority Key Identifier: keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1118799271127154711/0/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1118799271127154711/0/4D766E2BA41D99B155DD457741DB970EC3007E71.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.241.95.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 59010 Signature Algorithm: sha256WithRSAEncryption 49:75:b3:43:79:fe:d0:62:60:1a:db:2d:aa:ef:88:b6:57:95: f6:2b:91:28:5a:7c:e8:52:f7:71:7f:56:de:fe:92:3e:72:05: 22:db:ea:36:2e:d3:93:60:c5:ba:83:a8:39:36:a8:7d:96:c2: 75:7a:01:ea:5a:6a:f0:f6:43:ca:48:b3:74:9e:e9:34:63:77: 1c:b3:6b:2c:ac:a8:9e:65:95:4c:0f:3d:58:11:d1:52:e0:6e: a1:d7:98:12:ff:ac:1d:11:43:77:ef:f5:98:41:1b:0e:4f:d6: 93:9c:c5:e5:70:c7:51:d8:c2:e8:74:d6:33:82:fc:fb:a9:27: 72:10:6f:a1:19:09:5d:ec:a4:1f:39:4a:2d:84:34:e9:59:df: 60:bc:e7:83:37:6a:be:58:f8:8c:05:ff:bb:74:e6:99:f6:21: 52:82:a6:9a:b1:8a:e6:48:37:9b:80:35:c3:bc:95:cb:ff:39: b3:98:23:16:9d:cf:50:b8:c4:c3:9c:ac:06:55:8b:ee:8e:ce: a9:c9:93:ef:d2:d8:8e:08:b2:26:86:6c:6c:6c:eb:77:fa:25: 62:1d:42:15:97:65:64:0b:7d:3b:b3:47:a7:a9:5d:b7:20:a0: 89:e6:03:e4:17:3f:ef:7c:d0:3b:db:eb:79:d9:4f:0c:39:25: cb:49:ee:dc -----BEGIN CERTIFICATE----- MIIFwzCCBKugAwIBAgIUXJDDNBODl1pLAEsDUO8ISk7tok4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDYxNTA3MDM1NVoX DTI3MDYxNDA3MDg1NVowMzExMC8GA1UEAxMoNEQ3NjZFMkJBNDFEOTlCMTU1REQ0 NTc3NDFEQjk3MEVDMzAwN0U3MTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJwjujA254iOcNsudtKQ40C8X+HroQCpgVz1RQ6OGdLzqbegCmHVC6z+kk7x 44XHweW8EThI480YVIuDWSnkGpf3LlGN/MEGwSVDTUS+fsCuXP5nkgOK/evtHswy HGipmkWUHinvmsCDRgfsiy7qJhnqs2ChsWZdCNkAXFypeIfmTW0/MU6/3U3QGddC ZX9D2OYKRiwQlLEJtvYpyxKKY/m3W7tUYBrjsUAly9CEWTW9G2be2WWT66JNG1Eu 6DflmrLlvHmSUbZr5BKBFiIu3K/VewwtTcIvDP/bmSs0WIu3IKP+hBl2DDKLGC4b 8Wo3SjI9hI9FR/XvA+9oaACtg58CAwEAAaOCArYwggKyMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFE12biukHZmxVd1Fd0Hblw7DAH5xMB8GA1UdIwQYMBaAFKVu hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTExODc5OTI3MTEyNzE1NDcxMS8wLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMTE4Nzk5MjcxMTI3MTU0NzEx LzAvNEQ3NjZFMkJBNDFEOTlCMTU1REQ0NTc3NDFEQjk3MEVDMzAwN0U3MS5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBABn8V8wGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQID AOaCMA0GCSqGSIb3DQEBCwUAA4IBAQBJdbNDef7QYmAa2y2q74i2V5X2K5EoWnzo Uvdxf1be/pI+cgUi2+o2LtOTYMW6g6g5Nqh9lsJ1egHqWmrw9kPKSLN0nuk0Y3cc s2ssrKieZZVMDz1YEdFS4G6h15gS/6wdEUN37/WYQRsOT9aTnMXlcMdR2MLodNYz gvz7qSdyEG+hGQld7KQfOUothDTpWd9gvOeDN2q+WPiMBf+7dOaZ9iFSgqaasYrm SDebgDXDvJXL/zmzmCMWnc9QuMTDnKwGVYvujs6pyZPv0tiOCLImhmxsbOt3+iVi HUIVl2VkC307s0enqV23IKCJ5gPkFz/vfNA72+t52U8MOSXLSe7c -----END CERTIFICATE-----Generated at Tue Jul 14 19:08:53 2026 by rpki-client