$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/744217D6F74E3338C4A4476276CE6CE8E5575DCF.cer File: 744217D6F74E3338C4A4476276CE6CE8E5575DCF.cer (raw, json) Hash identifier: MjRxl/LvoNmeLVefLk/YPrILMCPgmkWJTbumooRd7xQ= Subject key identifier: 74:42:17:D6:F7:4E:33:38:C4:A4:47:62:76:CE:6C:E8:E5:57:5D:CF Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Certificate serial: 1434C377A7DA9CEC45256EC2301BE935FD40573E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1065588335524904961/0/744217D6F74E3338C4A4476276CE6CE8E5575DCF.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1065588335524904961/0/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Fri 29 May 2026 03:12:37 +0000 Certificate not after: Fri 28 May 2027 03:17:37 +0000 Subordinate resources: IP: 60.247.128.0/17 IP: 211.149.128.0/17 IP: 2403:db00::/32 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Jun 2026 04:35:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:34:c3:77:a7:da:9c:ec:45:25:6e:c2:30:1b:e9:35:fd:40:57:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Validity Not Before: May 29 03:12:37 2026 GMT Not After : May 28 03:17:37 2027 GMT Subject: CN=744217D6F74E3338C4A4476276CE6CE8E5575DCF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:06:b0:05:ab:83:a0:c7:d4:a7:ba:ac:8e:28: 9c:a8:1c:17:dc:4a:17:4d:29:95:17:a7:79:f8:d1: b8:cc:a8:fc:f5:4d:db:1d:d8:84:81:77:6c:fc:1d: 61:ed:3d:5f:1e:11:93:98:f0:34:62:3e:13:60:f2: aa:3c:9a:c0:1c:90:68:f9:66:de:75:1f:6a:12:95: 16:55:65:79:f2:aa:54:9e:c2:86:73:5c:85:44:39: 81:64:f7:d8:21:3f:34:41:cf:80:22:12:2d:bf:39: 28:ca:be:cb:92:42:cc:a5:32:94:3e:dc:80:da:fe: a4:6c:1d:70:89:3d:99:1a:c4:87:26:4d:f3:a7:af: 27:03:27:a2:99:21:47:3b:f0:af:98:37:20:35:c9: 0b:91:98:6d:c5:b4:69:9a:4c:8c:aa:33:cd:4e:2e: 43:21:cc:d5:68:fa:db:a9:44:ec:74:72:9e:02:07: b6:32:8d:1b:1b:22:9c:45:be:e0:df:17:71:da:e7: 94:58:3f:e6:da:c5:06:a7:69:c4:68:38:0d:39:1d: a7:b0:49:18:d5:8b:00:b9:f9:dc:67:7f:9e:39:30: 3d:c6:cc:84:68:57:bb:fb:6b:cc:81:b4:e4:69:db: 33:11:c2:33:17:4a:14:87:80:c6:45:8b:41:05:94: 5a:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 74:42:17:D6:F7:4E:33:38:C4:A4:47:62:76:CE:6C:E8:E5:57:5D:CF X509v3 Authority Key Identifier: keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335524904961/0/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335524904961/0/744217D6F74E3338C4A4476276CE6CE8E5575DCF.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 60.247.128.0/17 211.149.128.0/17 IPv6: 2403:db00::/32 Signature Algorithm: sha256WithRSAEncryption 02:0d:8d:ef:64:6d:93:fb:0f:c6:05:f7:69:f9:3e:2a:c9:c0: 82:3a:2b:6d:da:5c:45:27:37:d5:f4:94:e5:43:d8:45:31:48: 3e:e1:3c:f2:15:6a:6c:29:ad:40:ee:9e:0d:33:47:7c:fb:5f: cc:b9:68:c8:c4:a6:1b:17:15:2f:6e:f1:b8:13:b5:34:e7:4c: fb:01:30:fb:73:01:8c:18:22:de:b9:c1:99:8b:38:2e:bd:38: 0f:f4:e3:4e:1a:71:45:22:f9:64:29:f3:e6:bc:6a:0f:7d:6e: 78:ce:63:f6:09:43:cc:ce:ec:82:6c:bd:08:24:c1:40:2b:e1: de:d6:ad:09:1e:40:25:6b:48:72:15:2c:e2:64:c7:55:7f:02: b7:f5:3a:23:85:74:75:c4:0f:51:88:61:b2:bc:8b:5c:7a:2a: 50:e4:91:f2:d3:db:51:64:98:8e:27:4b:76:fa:4b:f8:28:44: 14:56:4c:ee:d3:89:01:fa:56:5b:cf:f3:8f:74:bc:42:8f:98: bf:a1:1a:96:89:00:a2:23:68:11:e8:b5:50:3d:49:72:4b:4f: 07:48:9f:99:9f:de:dd:db:8f:59:82:6a:5d:03:4c:a8:54:e5: 14:75:8c:60:a5:47:7d:cc:d7:b1:e4:e5:93:b3:6b:e1:a1:44: 56:b2:e9:5b -----BEGIN CERTIFICATE----- MIIFvDCCBKSgAwIBAgIUFDTDd6fanOxFJW7CMBvpNf1AVz4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDUyOTAzMTIzN1oX DTI3MDUyODAzMTczN1owMzExMC8GA1UEAxMoNzQ0MjE3RDZGNzRFMzMzOEM0QTQ0 NzYyNzZDRTZDRThFNTU3NURDRjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJ0GsAWrg6DH1Ke6rI4onKgcF9xKF00plRenefjRuMyo/PVN2x3YhIF3bPwd Ye09Xx4Rk5jwNGI+E2DyqjyawByQaPlm3nUfahKVFlVlefKqVJ7ChnNchUQ5gWT3 2CE/NEHPgCISLb85KMq+y5JCzKUylD7cgNr+pGwdcIk9mRrEhyZN86evJwMnopkh Rzvwr5g3IDXJC5GYbcW0aZpMjKozzU4uQyHM1Wj626lE7HRyngIHtjKNGxsinEW+ 4N8XcdrnlFg/5trFBqdpxGg4DTkdp7BJGNWLALn53Gd/njkwPcbMhGhXu/trzIG0 5GnbMxHCMxdKFIeAxkWLQQWUWnUCAwEAAaOCAq8wggKrMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFHRCF9b3TjM4xKRHYnbObOjlV13PMB8GA1UdIwQYMBaAFKVu hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTA2NTU4ODMzNTUyNDkwNDk2MS8wLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDY1NTg4MzM1NTI0OTA0OTYx LzAvNzQ0MjE3RDZGNzRFMzMzOEM0QTQ0NzYyNzZDRTZDRThFNTU3NURDRi5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwNAYIKwYBBQUH AQcBAf8EJTAjMBIEAgABMAwDBAc894ADBAfTlYAwDQQCAAIwBwMFACQD2wAwDQYJ KoZIhvcNAQELBQADggEBAAINje9kbZP7D8YF92n5PirJwII6K23aXEUnN9X0lOVD 2EUxSD7hPPIVamwprUDung0zR3z7X8y5aMjEphsXFS9u8bgTtTTnTPsBMPtzAYwY It65wZmLOC69OA/0404acUUi+WQp8+a8ag99bnjOY/YJQ8zO7IJsvQgkwUAr4d7W rQkeQCVrSHIVLOJkx1V/Arf1OiOFdHXED1GIYbK8i1x6KlDkkfLT21FkmI4nS3b6 S/goRBRWTO7TiQH6VlvP8490vEKPmL+hGpaJAKIjaBHotVA9SXJLTwdIn5mf3t3b j1mCal0DTKhU5RR1jGClR33M17Hk5ZOza+GhRFay6Vs= -----END CERTIFICATE-----Generated at Fri Jun 12 03:55:57 2026 by rpki-client