$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/70B456FF624C0476CE9E190A89C23B97291210A4.cer File: 70B456FF624C0476CE9E190A89C23B97291210A4.cer (raw, json) Hash identifier: RcrpPwxr2SSb3Oy7d1L2s5gIiI6SmmRLMdWU9tIDbEY= Subject key identifier: 70:B4:56:FF:62:4C:04:76:CE:9E:19:0A:89:C2:3B:97:29:12:10:A4 Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Certificate serial: 66C6E391853C624D44E9EF8E1FC2ED6E8FB8A123 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1112582991609069589/0/70B456FF624C0476CE9E190A89C23B97291210A4.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1112582991609069589/0/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Fri 29 May 2026 03:22:37 +0000 Certificate not after: Fri 28 May 2027 03:27:37 +0000 Subordinate resources: IP: 103.138.12.0/23 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 15:28:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:c6:e3:91:85:3c:62:4d:44:e9:ef:8e:1f:c2:ed:6e:8f:b8:a1:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Validity Not Before: May 29 03:22:37 2026 GMT Not After : May 28 03:27:37 2027 GMT Subject: CN=70B456FF624C0476CE9E190A89C23B97291210A4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:38:92:99:d7:33:c9:0e:94:64:a9:8c:15:5c: 79:d6:e0:3a:73:fc:00:8d:19:47:ce:d6:5e:e6:47: 8e:39:b4:25:b1:5f:0e:bb:b9:98:f4:e2:8f:1e:ef: 50:94:13:ab:3c:b4:a7:ef:98:83:be:6b:aa:86:89: db:72:f9:0c:d1:89:68:3c:41:74:af:f4:13:91:d9: 40:26:30:02:ec:b7:ba:30:6e:84:79:15:89:ef:51: 83:4f:1f:1a:f5:78:0f:62:7f:60:f4:6c:c3:13:8d: b0:c9:02:27:1c:da:2d:80:b2:e8:2e:ae:0e:a3:fd: 93:41:42:63:08:13:8a:55:05:5e:cf:5b:31:d2:96: 32:f9:39:8b:46:14:c0:47:8f:73:01:b1:63:0d:93: 39:13:60:c1:18:dc:ac:e8:2b:99:c1:ea:e2:0a:a2: fd:33:03:0f:13:f6:e6:11:0b:cf:20:1b:c6:fd:46: aa:23:7e:01:7b:32:db:bc:17:4a:97:be:4d:3d:2f: 1c:a3:78:f6:6a:af:cd:78:46:13:77:8d:2c:78:fe: 56:9f:8d:fe:a1:4e:26:d9:33:c0:26:d5:39:32:25: 61:b7:a0:f4:9d:2d:bb:47:55:ab:8d:09:5f:34:01: 2b:40:61:ae:8f:ba:da:a6:b3:cf:1a:7f:ed:e5:8c: 19:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 70:B4:56:FF:62:4C:04:76:CE:9E:19:0A:89:C2:3B:97:29:12:10:A4 X509v3 Authority Key Identifier: keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1112582991609069589/0/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1112582991609069589/0/70B456FF624C0476CE9E190A89C23B97291210A4.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.138.12.0/23 Signature Algorithm: sha256WithRSAEncryption 13:ce:b3:ce:eb:18:70:49:08:0e:7c:aa:97:3d:e4:f5:d2:e5: 6f:c3:67:d0:28:c4:5c:ec:7e:64:87:bd:c0:8c:b7:ad:b4:d2: 8a:d1:84:98:50:9b:ae:d2:a0:b1:d7:a2:47:7b:a0:2a:3f:ad: 23:4c:c6:89:35:bb:44:d0:e8:d0:9e:45:3c:94:3e:cd:00:00: 55:f1:3f:cb:72:a8:67:32:92:16:28:49:77:4c:f1:e2:88:a5: 02:ae:83:6f:45:4c:63:93:39:8d:61:06:52:23:07:41:b5:c5: ca:43:8f:b8:1e:fa:a7:b9:b6:14:b9:35:40:cb:70:33:ac:f2: b8:70:bf:44:be:f2:40:5a:97:56:82:95:08:75:8e:c1:e8:c8: 81:92:48:a6:bb:f0:c8:0c:88:53:06:4d:b3:d6:b8:af:a6:e1: 0a:db:c7:22:f3:40:cb:45:62:b4:74:18:89:8e:1d:36:f4:aa: 91:20:8b:ae:80:46:3e:9e:a6:9d:75:4c:c2:a7:46:ee:84:11: a0:8e:69:7a:45:d1:4f:59:f7:6c:5d:02:50:2e:58:9e:2a:e5: be:8f:1d:ee:bd:cd:70:e6:c6:05:da:63:8a:fb:0a:05:e7:4f: 48:35:75:75:06:70:c6:18:6a:0b:7b:71:d7:ad:8c:82:04:71: ac:c1:68:5c -----BEGIN CERTIFICATE----- MIIFpzCCBI+gAwIBAgIUZsbjkYU8Yk1E6e+OH8Ltbo+4oSMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDUyOTAzMjIzN1oX DTI3MDUyODAzMjczN1owMzExMC8GA1UEAxMoNzBCNDU2RkY2MjRDMDQ3NkNFOUUx OTBBODlDMjNCOTcyOTEyMTBBNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAN44kpnXM8kOlGSpjBVcedbgOnP8AI0ZR87WXuZHjjm0JbFfDru5mPTijx7v UJQTqzy0p++Yg75rqoaJ23L5DNGJaDxBdK/0E5HZQCYwAuy3ujBuhHkVie9Rg08f GvV4D2J/YPRswxONsMkCJxzaLYCy6C6uDqP9k0FCYwgTilUFXs9bMdKWMvk5i0YU wEePcwGxYw2TORNgwRjcrOgrmcHq4gqi/TMDDxP25hELzyAbxv1GqiN+AXsy27wX Spe+TT0vHKN49mqvzXhGE3eNLHj+Vp+N/qFOJtkzwCbVOTIlYbeg9J0tu0dVq40J XzQBK0Bhro+62qazzxp/7eWMGc0CAwEAAaOCApowggKWMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFHC0Vv9iTAR2zp4ZConCO5cpEhCkMB8GA1UdIwQYMBaAFKVu hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTExMjU4Mjk5MTYwOTA2OTU4OS8wLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMTEyNTgyOTkxNjA5MDY5NTg5 LzAvNzBCNDU2RkY2MjRDMDQ3NkNFOUUxOTBBODlDMjNCOTcyOTEyMTBBNC5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAFnigwwDQYJKoZIhvcNAQELBQADggEBABPOs87r GHBJCA58qpc95PXS5W/DZ9AoxFzsfmSHvcCMt6200orRhJhQm67SoLHXokd7oCo/ rSNMxok1u0TQ6NCeRTyUPs0AAFXxP8tyqGcykhYoSXdM8eKIpQKug29FTGOTOY1h BlIjB0G1xcpDj7ge+qe5thS5NUDLcDOs8rhwv0S+8kBal1aClQh1jsHoyIGSSKa7 8MgMiFMGTbPWuK+m4QrbxyLzQMtFYrR0GImOHTb0qpEgi66ARj6epp11TMKnRu6E EaCOaXpF0U9Z92xdAlAuWJ4q5b6PHe69zXDmxgXaY4r7CgXnT0g1dXUGcMYYagt7 cdetjIIEcazBaFw= -----END CERTIFICATE-----Generated at Fri May 29 21:12:21 2026 by rpki-client