$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/78C8633B586EBF2867C6E406C7122B6F5618F20F.cer File: 78C8633B586EBF2867C6E406C7122B6F5618F20F.cer (raw, json) Hash identifier: 6WEhNyFsPTsnBMzv3UViUKRIz6kGgI9+GmzpyIk15GM= Subject key identifier: 78:C8:63:3B:58:6E:BF:28:67:C6:E4:06:C7:12:2B:6F:56:18:F2:0F Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Certificate serial: 6E1878E42FFF6C4C98D4AEE877574392C4A78856 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1065583221972205571/0/78C8633B586EBF2867C6E406C7122B6F5618F20F.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1065583221972205571/0/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Fri 29 May 2026 01:21:10 +0000 Certificate not after: Fri 28 May 2027 01:26:10 +0000 Subordinate resources: AS: 137806 IP: 103.114.236.0/22 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 15:28:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:18:78:e4:2f:ff:6c:4c:98:d4:ae:e8:77:57:43:92:c4:a7:88:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Validity Not Before: May 29 01:21:10 2026 GMT Not After : May 28 01:26:10 2027 GMT Subject: CN=78C8633B586EBF2867C6E406C7122B6F5618F20F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:7a:5b:5c:c5:ef:d2:4b:8f:14:25:1c:90:07: d6:db:10:46:fc:01:7c:22:cc:4c:02:7c:d7:37:a1: d6:5e:81:dc:b8:cb:01:19:6d:a9:dd:15:f9:a8:8e: f5:b7:b8:e5:30:d4:69:ee:85:05:c4:1f:01:bb:fc: 57:ba:4e:2b:cc:54:5d:f4:8e:7a:ae:cb:55:da:b5: 71:29:6e:19:6b:4b:ff:db:0c:0a:df:71:bd:69:73: 60:e4:f0:d9:2f:7d:5e:e1:47:29:94:0d:71:14:c0: e2:e5:b2:46:b1:ea:b8:b3:4b:1a:51:2c:b7:09:ba: 88:2f:2c:71:3d:2c:db:07:17:c1:af:b4:c6:a2:76: e4:be:94:62:00:00:03:07:f9:6f:ee:99:5f:1e:f7: 41:b4:5e:74:02:ff:2c:bc:1b:3c:a0:5f:0b:5e:af: 84:eb:29:ef:26:a6:54:13:45:df:5e:1e:a6:3a:e0: d3:74:bf:8e:33:49:12:5c:87:d0:ec:02:fd:90:24: b3:b7:cd:9c:fe:df:5d:b7:0c:98:4f:d9:16:d6:58: bf:50:33:ad:67:42:31:bc:18:75:d8:22:df:ff:52: 48:5a:7f:5c:b2:46:5f:bb:71:9a:97:7f:b5:af:a2: d4:05:14:52:55:73:9c:ee:d3:02:84:0d:84:0b:c3: 38:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 78:C8:63:3B:58:6E:BF:28:67:C6:E4:06:C7:12:2B:6F:56:18:F2:0F X509v3 Authority Key Identifier: keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1065583221972205571/0/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1065583221972205571/0/78C8633B586EBF2867C6E406C7122B6F5618F20F.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.114.236.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 137806 Signature Algorithm: sha256WithRSAEncryption 7a:54:97:21:cc:8f:86:b8:b3:3b:4a:5f:30:dd:47:6f:51:40: fe:44:7d:c0:ab:1f:60:30:1c:0d:d5:65:3a:5f:8b:ea:a9:37: d3:fd:d7:65:41:89:fb:51:35:19:9b:26:44:6e:30:a3:a3:66: ee:34:80:65:0e:0b:c7:d7:19:11:5b:54:d3:c9:b0:bb:3f:1e: b2:af:1b:a4:7f:55:6a:27:de:35:19:60:e7:53:b1:30:8f:7a: 5c:59:15:ed:d6:56:23:e7:d8:14:11:c4:f6:cb:68:7a:16:a0: df:50:28:70:52:50:62:c1:f4:fb:fe:b5:50:b9:97:64:3e:e7: 48:5f:70:07:c0:cf:68:91:6e:2d:c1:db:29:61:ab:f0:4f:69: 72:d2:81:c0:03:18:36:1f:e4:9c:70:81:a4:7b:07:d9:60:76: 56:66:92:91:e3:3c:22:b8:03:78:08:be:b7:05:7f:06:c4:b3: 59:c9:b1:87:a0:0d:02:11:ff:4f:1a:80:f4:cc:31:4d:27:9a: 03:ca:dd:5b:fd:27:7f:69:95:b2:cd:0e:63:56:f6:f2:27:3a: b0:3c:5a:b6:e5:e1:a1:e9:1f:fe:d0:88:3e:68:1e:48:9f:96: 4f:6a:75:72:0b:db:32:28:ff:57:33:d0:b1:bf:c7:32:79:31: 67:05:d6:80 -----BEGIN CERTIFICATE----- MIIFwzCCBKugAwIBAgIUbhh45C//bEyY1K7od1dDksSniFYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDUyOTAxMjExMFoX DTI3MDUyODAxMjYxMFowMzExMC8GA1UEAxMoNzhDODYzM0I1ODZFQkYyODY3QzZF NDA2QzcxMjJCNkY1NjE4RjIwRjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMN6W1zF79JLjxQlHJAH1tsQRvwBfCLMTAJ81zeh1l6B3LjLARltqd0V+aiO 9be45TDUae6FBcQfAbv8V7pOK8xUXfSOeq7LVdq1cSluGWtL/9sMCt9xvWlzYOTw 2S99XuFHKZQNcRTA4uWyRrHquLNLGlEstwm6iC8scT0s2wcXwa+0xqJ25L6UYgAA Awf5b+6ZXx73QbRedAL/LLwbPKBfC16vhOsp7yamVBNF314epjrg03S/jjNJElyH 0OwC/ZAks7fNnP7fXbcMmE/ZFtZYv1AzrWdCMbwYddgi3/9SSFp/XLJGX7txmpd/ ta+i1AUUUlVznO7TAoQNhAvDOOECAwEAAaOCArYwggKyMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFHjIYztYbr8oZ8bkBscSK29WGPIPMB8GA1UdIwQYMBaAFKVu hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTA2NTU4MzIyMTk3MjIwNTU3MS8wLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDY1NTgzMjIxOTcyMjA1NTcx LzAvNzhDODYzM0I1ODZFQkYyODY3QzZFNDA2QzcxMjJCNkY1NjE4RjIwRi5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAJncuwwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQID AhpOMA0GCSqGSIb3DQEBCwUAA4IBAQB6VJchzI+GuLM7Sl8w3UdvUUD+RH3Aqx9g MBwN1WU6X4vqqTfT/ddlQYn7UTUZmyZEbjCjo2buNIBlDgvH1xkRW1TTybC7Px6y rxukf1VqJ941GWDnU7Ewj3pcWRXt1lYj59gUEcT2y2h6FqDfUChwUlBiwfT7/rVQ uZdkPudIX3AHwM9okW4twdspYavwT2ly0oHAAxg2H+SccIGkewfZYHZWZpKR4zwi uAN4CL63BX8GxLNZybGHoA0CEf9PGoD0zDFNJ5oDyt1b/Sd/aZWyzQ5jVvbyJzqw PFq25eGh6R/+0Ig+aB5In5ZPanVyC9syKP9XM9Cxv8cyeTFnBdaA -----END CERTIFICATE-----Generated at Fri May 29 21:14:10 2026 by rpki-client