$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7E8EBDDCE23312FAF91758581FB143F7AF35FA8F.cer File: 7E8EBDDCE23312FAF91758581FB143F7AF35FA8F.cer (raw, json) Hash identifier: GMTdCJjtohlW1FNoChSHmpZX/4PYjCaE/Zwu/OI7jps= Subject key identifier: 7E:8E:BD:DC:E2:33:12:FA:F9:17:58:58:1F:B1:43:F7:AF:35:FA:8F Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Certificate serial: 3A9507ED972CD9708AEE33E3DE1A45541D4126D2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1123880523131781155/0/7E8EBDDCE23312FAF91758581FB143F7AF35FA8F.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1123880523131781155/0/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Mon 29 Jun 2026 07:34:58 +0000 Certificate not after: Mon 28 Jun 2027 07:39:58 +0000 Subordinate resources: AS: 45106 AS: 137725 IP: 43.255.72.0/22 IP: 49.152.0.0/14 IP: 103.239.44.0/22 IP: 111.208.0.0/14 IP: 2404:eb80::/32 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 Jul 2026 20:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:95:07:ed:97:2c:d9:70:8a:ee:33:e3:de:1a:45:54:1d:41:26:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Validity Not Before: Jun 29 07:34:58 2026 GMT Not After : Jun 28 07:39:58 2027 GMT Subject: CN=7E8EBDDCE23312FAF91758581FB143F7AF35FA8F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:48:05:23:a4:99:7c:3a:90:69:d8:59:a8:89: 29:dc:f2:e2:ae:9f:71:3b:36:a4:f4:46:65:4e:7c: ac:a8:6c:31:fe:21:bb:94:e5:0f:be:ff:64:80:d3: 80:5d:5b:63:34:c9:b3:ef:e2:5e:2a:72:07:87:1d: dd:f8:a1:61:07:9b:71:44:a7:b3:e6:b3:21:1e:de: f8:40:e5:d3:4c:17:20:23:98:bb:92:ad:7c:7d:1d: dc:1b:8e:3e:43:04:55:ea:dc:3c:43:9a:9d:fd:da: 04:85:6f:b2:b0:a1:f5:c8:49:8c:47:22:23:cf:80: 46:23:98:38:df:f3:3e:67:27:0a:1b:f9:7e:00:6b: 36:34:2a:f2:9c:ad:50:88:65:ea:ef:46:87:20:e6: 8e:b5:64:a7:57:ed:32:bb:93:54:f5:ef:8f:f3:b0: 7f:f7:c0:8e:c5:79:f7:23:6c:cf:9a:e3:e0:4b:35: 51:44:c4:80:61:7d:99:e8:0d:b6:19:f7:3c:36:c8: d2:ae:79:19:f7:48:eb:be:87:06:61:1f:7c:8f:7e: 34:1c:15:b3:57:07:71:d6:09:f1:87:e0:eb:dd:8c: 56:ab:c8:72:0d:1f:df:6e:e3:22:78:53:b6:85:28: a0:62:07:f8:87:40:9f:08:2b:ee:84:9d:7e:e9:42: 72:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 7E:8E:BD:DC:E2:33:12:FA:F9:17:58:58:1F:B1:43:F7:AF:35:FA:8F X509v3 Authority Key Identifier: keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1123880523131781155/0/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1123880523131781155/0/7E8EBDDCE23312FAF91758581FB143F7AF35FA8F.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.255.72.0/22 49.152.0.0/14 103.239.44.0/22 111.208.0.0/14 IPv6: 2404:eb80::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 45106 137725 Signature Algorithm: sha256WithRSAEncryption 3c:3c:1c:6a:85:3a:9e:f0:c9:a6:7a:dc:6f:51:c4:74:6f:23: ff:f1:c0:93:55:53:2b:d2:6d:94:3a:8d:9b:22:43:d0:1c:bb: bb:61:5b:81:dc:28:52:91:c9:55:27:99:98:9d:45:04:fb:c2: 74:ab:1e:7f:68:b8:00:1d:9b:fa:9e:7c:18:62:e3:1f:a1:62: 4b:35:a5:05:b6:34:c8:5a:17:78:da:0e:b0:e8:82:48:e2:58: ec:18:73:e5:ee:14:ea:8d:bc:bb:5e:83:3f:fd:79:22:e5:9b: 82:6e:18:4c:49:3b:e3:50:be:ff:c2:b5:8e:43:91:87:8c:8f: 97:a9:d6:9e:48:5c:09:ac:e3:66:f4:64:9e:a0:70:df:80:1d: a1:61:41:96:06:5d:25:f8:22:cc:3a:3e:ab:f7:f9:09:18:55: e2:7e:d6:9b:60:b7:da:84:2a:6d:29:d4:03:48:e9:df:91:3e: 42:70:d6:97:3c:28:a6:2b:5b:c9:9c:2d:c7:38:2a:ca:fb:f6: fa:5f:72:ec:7e:13:6f:ea:cd:12:14:d4:4a:d7:81:88:a2:bf: ca:81:72:52:cc:a4:8a:11:88:dc:05:d2:b3:26:a4:ab:e4:ed: 0d:2a:fe:d6:3d:27:21:f4:c9:24:55:9b:ed:37:a9:47:6b:c1: 0e:47:8d:b0 -----BEGIN CERTIFICATE----- MIIF5zCCBM+gAwIBAgIUOpUH7Zcs2XCK7jPj3hpFVB1BJtIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDYyOTA3MzQ1OFoX DTI3MDYyODA3Mzk1OFowMzExMC8GA1UEAxMoN0U4RUJERENFMjMzMTJGQUY5MTc1 ODU4MUZCMTQzRjdBRjM1RkE4RjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKdIBSOkmXw6kGnYWaiJKdzy4q6fcTs2pPRGZU58rKhsMf4hu5TlD77/ZIDT gF1bYzTJs+/iXipyB4cd3fihYQebcUSns+azIR7e+EDl00wXICOYu5KtfH0d3BuO PkMEVercPEOanf3aBIVvsrCh9chJjEciI8+ARiOYON/zPmcnChv5fgBrNjQq8pyt UIhl6u9GhyDmjrVkp1ftMruTVPXvj/Owf/fAjsV59yNsz5rj4Es1UUTEgGF9megN thn3PDbI0q55GfdI676HBmEffI9+NBwVs1cHcdYJ8Yfg692MVqvIcg0f327jInhT toUooGIH+IdAnwgr7oSdfulCcpcCAwEAAaOCAtowggLWMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFH6OvdziMxL6+RdYWB+xQ/evNfqPMB8GA1UdIwQYMBaAFKVu hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTEyMzg4MDUyMzEzMTc4MTE1NS8wLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMTIzODgwNTIzMTMxNzgxMTU1 LzAvN0U4RUJERENFMjMzMTJGQUY5MTc1ODU4MUZCMTQzRjdBRjM1RkE4Ri5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwPgYIKwYBBQUH AQcBAf8ELzAtMBwEAgABMBYDBAIr/0gDAwIxmAMEAmfvLAMDAm/QMA0EAgACMAcD BQAkBOuAMB8GCCsGAQUFBwEIAQH/BBAwDqAMMAoCAwCwMgIDAhn9MA0GCSqGSIb3 DQEBCwUAA4IBAQA8PBxqhTqe8MmmetxvUcR0byP/8cCTVVMr0m2UOo2bIkPQHLu7 YVuB3ChSkclVJ5mYnUUE+8J0qx5/aLgAHZv6nnwYYuMfoWJLNaUFtjTIWhd42g6w 6IJI4ljsGHPl7hTqjby7XoM//Xki5ZuCbhhMSTvjUL7/wrWOQ5GHjI+XqdaeSFwJ rONm9GSeoHDfgB2hYUGWBl0l+CLMOj6r9/kJGFXiftabYLfahCptKdQDSOnfkT5C cNaXPCimK1vJnC3HOCrK+/b6X3LsfhNv6s0SFNRK14GIor/KgXJSzKSKEYjcBdKz JqSr5O0NKv7WPSch9MkkVZvtN6lHa8EOR42w -----END CERTIFICATE-----Generated at Tue Jul 14 19:08:51 2026 by rpki-client