$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7C1507F087228AEDCBF33768752874E09F57729C.cer File: 7C1507F087228AEDCBF33768752874E09F57729C.cer (raw, json) Hash identifier: vIcNPI9BKncnqXZEsmn1TMXFoxmZNTKTQhATXz14lLE= Subject key identifier: 7C:15:07:F0:87:22:8A:ED:CB:F3:37:68:75:28:74:E0:9F:57:72:9C Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Certificate serial: 55701D8BADA6CD96008A63A26A9D8244190F5A8F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1066929963686428675/0/7C1507F087228AEDCBF33768752874E09F57729C.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1066929963686428675/0/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Fri 29 May 2026 06:54:03 +0000 Certificate not after: Fri 28 May 2027 06:59:03 +0000 Subordinate resources: IP: 43.247.4.0/24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 15:28:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:70:1d:8b:ad:a6:cd:96:00:8a:63:a2:6a:9d:82:44:19:0f:5a:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Validity Not Before: May 29 06:54:03 2026 GMT Not After : May 28 06:59:03 2027 GMT Subject: CN=7C1507F087228AEDCBF33768752874E09F57729C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:e5:67:61:b3:4d:9d:e6:12:9e:45:40:f8:77: 68:81:20:12:cf:5b:ee:63:4c:c2:f3:9e:0b:01:de: c8:c2:ba:f1:cb:72:b6:3d:35:5c:95:7e:56:a5:5f: ca:68:f0:a3:17:5c:cb:df:e9:6f:9d:30:ef:57:25: 28:65:d1:18:90:9d:44:f2:bc:9d:36:7e:d8:99:65: 04:78:6f:88:b1:ce:63:44:9e:81:a6:c7:73:6c:e5: 08:a9:e6:2d:b9:6c:20:32:ff:29:1c:23:bf:6c:0e: 69:f2:e3:49:2f:61:a1:1f:cf:e7:0c:0f:f3:bd:4a: 87:63:7d:f6:12:66:c8:b2:31:91:93:96:bd:32:30: 20:d3:db:71:58:37:c1:87:03:ed:7d:44:ee:d7:b8: 12:ca:07:a0:fe:dd:02:7e:d8:09:42:d5:16:36:17: f6:74:ee:6d:37:85:23:9c:1c:55:32:bc:48:3a:42: 28:4b:38:04:94:f0:2c:1d:79:8f:9b:6c:22:19:d7: 7b:22:75:26:21:6e:08:e5:17:6a:3c:51:4a:bb:08: cb:6b:d6:51:78:72:85:5a:73:44:2f:56:40:53:11: 5e:56:0b:b9:d6:d1:2d:81:64:47:3c:45:d1:39:96: 35:df:80:b1:d7:ba:2c:db:59:5b:41:fe:44:59:75: b0:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 7C:15:07:F0:87:22:8A:ED:CB:F3:37:68:75:28:74:E0:9F:57:72:9C X509v3 Authority Key Identifier: keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1066929963686428675/0/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1066929963686428675/0/7C1507F087228AEDCBF33768752874E09F57729C.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.247.4.0/24 Signature Algorithm: sha256WithRSAEncryption 3e:24:70:30:3d:70:59:fc:ee:cc:7d:22:73:5b:e4:02:42:d4: 4b:5c:56:77:1c:33:e4:67:50:06:73:b0:84:3b:d5:2a:64:ae: 48:9c:a1:b5:6a:01:b5:ae:74:76:ed:1f:b7:ef:c1:40:8c:de: 6e:28:fd:20:c4:b7:ed:ce:b7:fe:46:ec:bc:cc:1e:8e:04:f0: 97:cc:22:87:3f:cb:7a:11:8d:16:cd:b7:30:92:21:fc:c4:68: f0:61:33:7c:70:83:d0:23:4e:94:53:9c:94:5b:60:55:aa:67: 94:c7:73:f9:32:88:29:bd:e9:81:c0:01:f5:a9:f9:6b:f2:20: 8f:9f:c2:bd:fd:c6:3f:aa:4a:e7:70:ca:d7:cc:2c:dc:6c:e7: ef:43:cb:52:70:45:6d:de:86:2a:31:6e:db:7f:c1:43:52:51: 26:74:15:e1:b1:09:75:fe:a3:0b:60:53:ea:e0:ba:32:29:e8: 15:6d:e8:3a:9e:12:fa:95:bf:96:de:5f:9d:7b:2d:ef:d1:e5: 9b:ab:1c:df:97:fd:57:18:64:79:58:b3:ea:bc:9f:74:1c:de: 48:5c:96:c7:96:7d:81:8c:60:d8:05:8d:ee:cc:49:e2:5e:db: 66:07:89:77:14:b1:ff:a4:30:e7:d8:43:78:c9:8d:e8:69:bc: 56:5b:f0:80 -----BEGIN CERTIFICATE----- MIIFpzCCBI+gAwIBAgIUVXAdi62mzZYAimOiap2CRBkPWo8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDUyOTA2NTQwM1oX DTI3MDUyODA2NTkwM1owMzExMC8GA1UEAxMoN0MxNTA3RjA4NzIyOEFFRENCRjMz NzY4NzUyODc0RTA5RjU3NzI5QzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALTlZ2GzTZ3mEp5FQPh3aIEgEs9b7mNMwvOeCwHeyMK68ctytj01XJV+VqVf ymjwoxdcy9/pb50w71clKGXRGJCdRPK8nTZ+2JllBHhviLHOY0SegabHc2zlCKnm LblsIDL/KRwjv2wOafLjSS9hoR/P5wwP871Kh2N99hJmyLIxkZOWvTIwINPbcVg3 wYcD7X1E7te4EsoHoP7dAn7YCULVFjYX9nTubTeFI5wcVTK8SDpCKEs4BJTwLB15 j5tsIhnXeyJ1JiFuCOUXajxRSrsIy2vWUXhyhVpzRC9WQFMRXlYLudbRLYFkRzxF 0TmWNd+Asde6LNtZW0H+RFl1sD8CAwEAAaOCApowggKWMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFHwVB/CHIorty/M3aHUodOCfV3KcMB8GA1UdIwQYMBaAFKVu hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTA2NjkyOTk2MzY4NjQyODY3NS8wLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDY2OTI5OTYzNjg2NDI4Njc1 LzAvN0MxNTA3RjA4NzIyOEFFRENCRjMzNzY4NzUyODc0RTA5RjU3NzI5Qy5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAAr9wQwDQYJKoZIhvcNAQELBQADggEBAD4kcDA9 cFn87sx9InNb5AJC1EtcVnccM+RnUAZzsIQ71SpkrkicobVqAbWudHbtH7fvwUCM 3m4o/SDEt+3Ot/5G7LzMHo4E8JfMIoc/y3oRjRbNtzCSIfzEaPBhM3xwg9AjTpRT nJRbYFWqZ5THc/kyiCm96YHAAfWp+WvyII+fwr39xj+qSudwytfMLNxs5+9Dy1Jw RW3ehioxbtt/wUNSUSZ0FeGxCXX+owtgU+rgujIp6BVt6DqeEvqVv5beX517Le/R 5ZurHN+X/VcYZHlYs+q8n3Qc3khclseWfYGMYNgFje7MSeJe22YHiXcUsf+kMOfY Q3jJjehpvFZb8IA= -----END CERTIFICATE-----Generated at Fri May 29 21:13:02 2026 by rpki-client