$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/786588C287D0F949A379F4D51335F9423A0E03E3.cer File: 786588C287D0F949A379F4D51335F9423A0E03E3.cer (raw, json) Hash identifier: Sq/alm0VCbv3eu3JlImNV5iweSiafg2MbUz+9MqMXOo= Subject key identifier: 78:65:88:C2:87:D0:F9:49:A3:79:F4:D5:13:35:F9:42:3A:0E:03:E3 Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Certificate serial: 1459D769B8F1F8FD004CF285229EBD02D525299D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1094519876787109889/1/786588C287D0F949A379F4D51335F9423A0E03E3.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1094519876787109889/1/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Thu 09 Apr 2026 07:06:17 +0000 Certificate not after: Thu 08 Apr 2027 07:11:17 +0000 Subordinate resources: IP: 42.195.0.0/16 IP: 101.125.0.0/16 IP: 103.255.92.0/22 IP: 2403:2740::/32 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 12:10:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:59:d7:69:b8:f1:f8:fd:00:4c:f2:85:22:9e:bd:02:d5:25:29:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Validity Not Before: Apr 9 07:06:17 2026 GMT Not After : Apr 8 07:11:17 2027 GMT Subject: CN=786588C287D0F949A379F4D51335F9423A0E03E3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:55:15:df:af:83:f5:20:e1:ef:29:3a:a0:a8: d4:73:f8:bc:98:5e:94:49:34:3b:a4:25:38:72:71: c6:7f:98:7e:d2:0c:6a:86:d8:ce:e0:49:30:89:d5: 3f:11:fe:47:eb:ab:69:6f:c0:d6:8d:3f:79:e1:70: f1:4b:aa:4b:d0:ab:3b:87:8d:e4:24:3d:eb:0b:a2: 86:8e:cc:ba:0c:f0:fe:6c:1d:b3:80:b8:70:98:62: 27:91:db:d7:d5:76:04:0c:36:f1:a8:5a:24:67:0d: 76:a8:b9:de:e3:7d:23:7a:74:d2:ef:8d:ce:23:eb: 80:89:3b:ac:fd:bc:b3:15:db:93:c2:53:bd:05:9a: 14:6f:90:28:c8:60:8e:d8:43:0d:23:86:f0:60:6f: 60:4f:72:b3:54:b0:08:ae:5a:88:16:2f:c7:d4:bf: 5a:f1:d3:8c:0a:c8:d8:c6:40:ce:93:78:12:e5:6a: bf:60:00:34:22:69:95:8c:5a:8e:1d:bf:b4:a7:00: bd:56:f8:b6:6b:3b:ba:9c:6a:6d:51:92:cd:7c:ef: 36:c9:3c:ab:96:99:85:99:50:83:2a:ca:fe:c5:9e: 9c:29:fc:5e:88:11:bb:6a:8a:1c:03:18:7d:f1:ef: ca:e8:d8:02:53:50:0b:b3:e4:eb:4e:be:76:31:a0: 40:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 78:65:88:C2:87:D0:F9:49:A3:79:F4:D5:13:35:F9:42:3A:0E:03:E3 X509v3 Authority Key Identifier: keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1094519876787109889/1/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1094519876787109889/1/786588C287D0F949A379F4D51335F9423A0E03E3.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 42.195.0.0/16 101.125.0.0/16 103.255.92.0/22 IPv6: 2403:2740::/32 Signature Algorithm: sha256WithRSAEncryption 23:de:36:8a:58:a2:9d:d7:d9:2d:fd:c5:d9:19:b5:4c:1d:e4: 0d:6b:b6:ca:d9:cd:41:d8:4f:09:b0:fd:00:cc:c4:49:ed:2d: 8c:cf:43:1d:2b:ab:64:37:f6:fe:f2:83:f0:01:89:e7:61:bb: e8:33:6f:38:d4:5d:d0:af:ba:49:24:18:b5:95:91:35:e3:44: 21:20:c9:11:ac:50:fe:c3:93:a8:61:0d:7e:7b:bc:78:ca:e7: ed:02:fa:3d:3d:3a:e1:a7:34:ad:9a:73:e0:6d:0a:29:37:d0: 95:17:24:e5:af:ff:7a:43:31:2b:3f:08:7b:82:6c:73:03:ca: 2e:fc:e2:f2:23:9a:54:d3:2f:78:98:0b:33:92:20:c6:b8:63: c2:00:89:29:4b:cd:5c:f0:ea:9b:80:61:ea:8e:bd:db:42:b5: 4a:50:1d:29:90:ad:7f:d9:2f:72:be:c9:2c:e2:4d:58:7b:78: 42:26:04:cb:94:f0:1d:40:c5:f0:b9:13:df:c1:5b:c7:0c:fe: 5b:0a:df:3d:67:40:4e:88:36:6f:2a:37:09:5e:dc:85:23:17: e7:b9:bb:b4:c5:65:e9:f5:61:29:0b:9b:bd:81:a7:07:75:f3: 74:70:52:f9:f3:ac:0f:ad:6d:03:7f:96:88:8e:b4:e0:74:ed: e2:6e:c3:61 -----BEGIN CERTIFICATE----- MIIFwDCCBKigAwIBAgIUFFnXabjx+P0ATPKFIp69AtUlKZ0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDQwOTA3MDYxN1oX DTI3MDQwODA3MTExN1owMzExMC8GA1UEAxMoNzg2NTg4QzI4N0QwRjk0OUEzNzlG NEQ1MTMzNUY5NDIzQTBFMDNFMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALNVFd+vg/Ug4e8pOqCo1HP4vJhelEk0O6QlOHJxxn+YftIMaobYzuBJMInV PxH+R+uraW/A1o0/eeFw8UuqS9CrO4eN5CQ96wuiho7Mugzw/mwds4C4cJhiJ5Hb 19V2BAw28ahaJGcNdqi53uN9I3p00u+NziPrgIk7rP28sxXbk8JTvQWaFG+QKMhg jthDDSOG8GBvYE9ys1SwCK5aiBYvx9S/WvHTjArI2MZAzpN4EuVqv2AANCJplYxa jh2/tKcAvVb4tms7upxqbVGSzXzvNsk8q5aZhZlQgyrK/sWenCn8XogRu2qKHAMY ffHvyujYAlNQC7Pk606+djGgQP8CAwEAAaOCArMwggKvMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFHhliMKH0PlJo3n01RM1+UI6DgPjMB8GA1UdIwQYMBaAFKVu hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTA5NDUxOTg3Njc4NzEwOTg4OS8xLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDk0NTE5ODc2Nzg3MTA5ODg5 LzEvNzg2NTg4QzI4N0QwRjk0OUEzNzlGNEQ1MTMzNUY5NDIzQTBFMDNFMy5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwOAYIKwYBBQUH AQcBAf8EKTAnMBYEAgABMBADAwAqwwMDAGV9AwQCZ/9cMA0EAgACMAcDBQAkAydA MA0GCSqGSIb3DQEBCwUAA4IBAQAj3jaKWKKd19kt/cXZGbVMHeQNa7bK2c1B2E8J sP0AzMRJ7S2Mz0MdK6tkN/b+8oPwAYnnYbvoM2841F3Qr7pJJBi1lZE140QhIMkR rFD+w5OoYQ1+e7x4yuftAvo9PTrhpzStmnPgbQopN9CVFyTlr/96QzErPwh7gmxz A8ou/OLyI5pU0y94mAszkiDGuGPCAIkpS81c8OqbgGHqjr3bQrVKUB0pkK1/2S9y vsks4k1Ye3hCJgTLlPAdQMXwuRPfwVvHDP5bCt89Z0BOiDZvKjcJXtyFIxfnubu0 xWXp9WEpC5u9gacHdfN0cFL586wPrW0Df5aIjrTgdO3ibsNh -----END CERTIFICATE-----Generated at Mon Apr 13 09:29:04 2026 by rpki-client