$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/709A7310678AE2ADEED9D20DC8CD3E62C04F0EB6.cer File: 709A7310678AE2ADEED9D20DC8CD3E62C04F0EB6.cer (raw, json) Hash identifier: k6JXSqUR+yiZprvqXg2daK5qfwcy73nongCpVueaPMA= Subject key identifier: 70:9A:73:10:67:8A:E2:AD:EE:D9:D2:0D:C8:CD:3E:62:C0:4F:0E:B6 Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Certificate serial: 3B5D422F08D3FE9E9AD84D2E7960E7D5B9629EE9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1094894841243893761/0/709A7310678AE2ADEED9D20DC8CD3E62C04F0EB6.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1094894841243893761/0/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Fri 10 Apr 2026 07:56:13 +0000 Certificate not after: Fri 09 Apr 2027 08:01:13 +0000 Subordinate resources: IP: 103.160.32.0/23 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 12:10:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:5d:42:2f:08:d3:fe:9e:9a:d8:4d:2e:79:60:e7:d5:b9:62:9e:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Validity Not Before: Apr 10 07:56:13 2026 GMT Not After : Apr 9 08:01:13 2027 GMT Subject: CN=709A7310678AE2ADEED9D20DC8CD3E62C04F0EB6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:e0:9b:10:17:f1:11:0d:13:a3:9e:47:3f:9a: 16:71:47:60:61:e1:9b:3b:43:66:b6:84:f3:c6:6a: 4b:d6:be:c3:2f:1b:6e:11:44:53:a3:14:3b:53:cf: b0:be:1c:d4:39:5a:97:04:0c:fe:5c:ee:4c:0c:04: 07:95:33:17:85:d1:10:42:e7:66:5e:18:9a:88:4e: b1:a7:2b:da:35:c9:be:e6:aa:25:8f:28:3b:04:59: de:cc:1d:3f:66:d6:f4:2c:40:cd:6a:f3:97:ed:3c: a6:19:45:f8:ac:dc:71:95:25:66:33:b3:c0:4e:8e: 5c:91:2d:86:e4:59:8f:08:f2:f0:fa:4f:42:53:34: 75:bb:c1:a3:1e:46:e2:79:4a:8b:75:86:07:bd:1b: 7c:58:9c:01:9e:83:fe:94:b9:1d:c5:36:a1:07:b8: 8f:21:65:52:c9:4f:54:a9:5f:2a:6a:67:70:e2:8d: 8f:3a:e0:02:5c:b6:d2:ac:6a:1b:18:81:9e:40:d4: 3b:35:b7:17:53:1c:72:28:b9:88:30:e0:2b:d7:23: 02:a2:75:b3:1b:75:1b:48:fa:5f:55:16:82:0f:37: e2:f6:9a:dd:ef:70:75:2d:d3:c5:b3:7f:86:27:74: de:fe:4e:79:3c:78:b7:bc:1e:75:01:59:8e:97:46: f6:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 70:9A:73:10:67:8A:E2:AD:EE:D9:D2:0D:C8:CD:3E:62:C0:4F:0E:B6 X509v3 Authority Key Identifier: keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1094894841243893761/0/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1094894841243893761/0/709A7310678AE2ADEED9D20DC8CD3E62C04F0EB6.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.160.32.0/23 Signature Algorithm: sha256WithRSAEncryption 53:a8:25:ea:d6:34:cf:28:f8:48:e5:27:34:0e:b9:d8:80:fc: 4d:32:62:ac:6d:c0:18:15:4a:77:49:22:53:42:5c:f8:31:fe: 34:99:37:3e:b4:8e:a0:f0:23:e1:44:8c:93:8c:52:fc:c0:d3: 66:7a:c8:e8:e8:a0:40:c4:e3:bd:ae:e1:a4:85:e6:36:3a:1f: be:ad:86:32:27:58:cf:2b:80:74:59:9c:aa:41:e0:ee:37:6a: d9:bb:27:86:0a:48:bc:bd:c9:65:b9:e7:47:6e:ec:5c:c3:ad: 1b:21:e6:c6:5e:e7:12:72:af:3c:10:80:19:2c:f0:74:78:c8: e7:6c:33:c3:5e:04:ad:bb:33:35:15:7f:7c:52:4a:18:6a:c0: 2c:f7:67:d6:90:ae:01:5b:e0:56:e3:2d:91:57:0d:b8:f9:b3: 0d:5f:48:fc:2e:af:9e:52:82:50:3d:5d:dd:d4:44:60:e0:96: 35:66:2e:ab:43:0b:f9:1c:94:37:8e:ad:7b:00:d4:2b:eb:d8: 2a:5b:b9:7e:f5:dc:8c:a3:07:0e:02:42:e5:aa:9c:ca:32:7f: 97:71:8d:68:ef:c3:d5:b4:99:32:21:07:85:10:83:bc:8e:4d: 20:d1:52:20:94:4f:64:1b:ba:72:78:fc:15:d5:01:c1:5f:69: 6c:07:92:d7 -----BEGIN CERTIFICATE----- MIIFpzCCBI+gAwIBAgIUO11CLwjT/p6a2E0ueWDn1blinukwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDQxMDA3NTYxM1oX DTI3MDQwOTA4MDExM1owMzExMC8GA1UEAxMoNzA5QTczMTA2NzhBRTJBREVFRDlE MjBEQzhDRDNFNjJDMDRGMEVCNjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMngmxAX8RENE6OeRz+aFnFHYGHhmztDZraE88ZqS9a+wy8bbhFEU6MUO1PP sL4c1DlalwQM/lzuTAwEB5UzF4XREELnZl4YmohOsacr2jXJvuaqJY8oOwRZ3swd P2bW9CxAzWrzl+08phlF+KzccZUlZjOzwE6OXJEthuRZjwjy8PpPQlM0dbvBox5G 4nlKi3WGB70bfFicAZ6D/pS5HcU2oQe4jyFlUslPVKlfKmpncOKNjzrgAly20qxq GxiBnkDUOzW3F1Mccii5iDDgK9cjAqJ1sxt1G0j6X1UWgg834vaa3e9wdS3TxbN/ hid03v5OeTx4t7wedQFZjpdG9sUCAwEAAaOCApowggKWMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFHCacxBniuKt7tnSDcjNPmLATw62MB8GA1UdIwQYMBaAFKVu hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTA5NDg5NDg0MTI0Mzg5Mzc2MS8wLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDk0ODk0ODQxMjQzODkzNzYx LzAvNzA5QTczMTA2NzhBRTJBREVFRDlEMjBEQzhDRDNFNjJDMDRGMEVCNi5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAFnoCAwDQYJKoZIhvcNAQELBQADggEBAFOoJerW NM8o+EjlJzQOudiA/E0yYqxtwBgVSndJIlNCXPgx/jSZNz60jqDwI+FEjJOMUvzA 02Z6yOjooEDE472u4aSF5jY6H76thjInWM8rgHRZnKpB4O43atm7J4YKSLy9yWW5 50du7FzDrRsh5sZe5xJyrzwQgBks8HR4yOdsM8NeBK27MzUVf3xSShhqwCz3Z9aQ rgFb4FbjLZFXDbj5sw1fSPwur55SglA9Xd3URGDgljVmLqtDC/kclDeOrXsA1Cvr 2CpbuX713IyjBw4CQuWqnMoyf5dxjWjvw9W0mTIhB4UQg7yOTSDRUiCUT2QbunJ4 /BXVAcFfaWwHktc= -----END CERTIFICATE-----Generated at Mon Apr 13 09:28:25 2026 by rpki-client