$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A7133A09AC078B101CB7980FE646810280C0D64F.cer File: A7133A09AC078B101CB7980FE646810280C0D64F.cer (raw, json) Hash identifier: 4eiNk3yENJvKrA7A/wrwuJcaWj8CIAwtv2n9KJlKnj0= Subject key identifier: A7:13:3A:09:AC:07:8B:10:1C:B7:98:0F:E6:46:81:02:80:C0:D6:4F Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Certificate serial: 3198F87A07667543D5EDD1AD8BA2EA14B5186270 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1098988489464086530/0/A7133A09AC078B101CB7980FE646810280C0D64F.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1098988489464086530/0/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Tue 21 Apr 2026 15:02:56 +0000 Certificate not after: Tue 20 Apr 2027 15:07:56 +0000 Subordinate resources: AS: 38363 IP: 118.242.0.0/16 IP: 2401:b600::/32 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Apr 2026 07:23:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:98:f8:7a:07:66:75:43:d5:ed:d1:ad:8b:a2:ea:14:b5:18:62:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Validity Not Before: Apr 21 15:02:56 2026 GMT Not After : Apr 20 15:07:56 2027 GMT Subject: CN=A7133A09AC078B101CB7980FE646810280C0D64F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:6a:50:6a:a2:06:54:22:3c:f9:32:c9:b4:27: 9e:c4:0a:ea:d9:fe:cb:99:df:00:72:5b:a4:5d:3c: 19:c5:a7:df:50:ca:b6:5c:b0:1c:87:4a:93:97:df: 80:d9:f4:f3:f8:a2:95:a5:87:ba:40:72:f8:6a:62: 40:11:e0:cf:3c:cf:d4:11:c6:db:b7:97:77:a9:cf: f2:74:6f:c2:12:68:7b:1c:38:93:c0:e1:a7:a9:b2: ab:c9:17:8e:28:0d:fb:a9:fe:29:46:12:57:b9:1f: 79:4c:2f:ec:90:b0:01:5f:71:9d:09:bf:d9:bd:66: 54:8a:e3:7d:97:ec:8a:d7:e4:07:5d:b9:f1:00:8a: 87:62:06:cc:87:0a:cc:df:93:ff:76:51:a0:89:9e: 91:cb:42:e0:a8:ad:e8:1e:df:14:cb:2c:5b:26:22: 90:ca:21:c0:13:fb:db:8a:8d:5c:f1:22:0a:7b:6c: 5f:49:77:be:06:c6:6c:69:d3:56:16:15:5f:b2:e6: 3f:0c:ff:21:03:92:96:34:61:e9:83:9c:d1:17:ad: 44:40:ed:9a:c1:7e:71:30:c9:4b:b1:04:9a:e5:f0: a9:cf:dd:e4:73:23:18:fa:f0:da:b9:4c:53:2a:1b: 6f:e3:a8:67:e5:c2:a2:28:aa:b0:f9:ec:e6:a0:6a: b2:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: A7:13:3A:09:AC:07:8B:10:1C:B7:98:0F:E6:46:81:02:80:C0:D6:4F X509v3 Authority Key Identifier: keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1098988489464086530/0/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1098988489464086530/0/A7133A09AC078B101CB7980FE646810280C0D64F.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 118.242.0.0/16 IPv6: 2401:b600::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 38363 Signature Algorithm: sha256WithRSAEncryption 36:e6:be:2f:9e:fe:fd:53:17:4a:34:3d:0e:80:50:da:ea:a8: 65:ea:f1:11:72:9d:27:1f:b1:5c:53:fa:e2:0b:5a:49:7b:af: ab:23:59:90:fa:a1:71:34:8c:42:69:83:38:2e:d8:df:24:33: 48:ea:ec:04:c2:2a:c9:82:19:77:a0:4f:7d:38:b8:2d:f1:45: 88:2e:0a:67:df:07:65:38:9e:98:6c:50:a0:9e:ae:d7:82:ca: 98:7e:88:c8:e2:35:55:91:a3:b5:e2:8c:d2:c3:43:2e:53:3b: b2:e0:aa:24:40:a8:8f:d4:23:51:37:f8:ae:6c:5e:25:81:b1: 79:f0:de:31:77:3f:69:5b:56:67:ca:3c:cc:ae:8a:23:fa:f2: 9c:af:64:46:4f:49:3e:6f:0a:50:17:7d:b8:34:2b:56:ae:18: 14:96:1e:2b:ce:98:c8:28:f4:8b:b7:64:29:e3:07:70:1c:20: 56:f3:e1:17:3d:05:49:59:be:45:0d:7e:ab:cd:d2:f0:9d:e3: 60:5d:bc:db:b5:d6:d7:11:84:16:d3:6c:e1:70:55:eb:be:93: 6b:06:82:be:c0:77:66:b4:1e:83:d6:bd:4f:56:e7:b0:8f:43: 00:95:09:2f:7e:4f:d5:d8:92:11:77:8f:bf:2c:94:1d:78:ac: 7d:e7:d4:30 -----BEGIN CERTIFICATE----- MIIF0TCCBLmgAwIBAgIUMZj4egdmdUPV7dGti6LqFLUYYnAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDQyMTE1MDI1NloX DTI3MDQyMDE1MDc1NlowMzExMC8GA1UEAxMoQTcxMzNBMDlBQzA3OEIxMDFDQjc5 ODBGRTY0NjgxMDI4MEMwRDY0RjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOxqUGqiBlQiPPkyybQnnsQK6tn+y5nfAHJbpF08GcWn31DKtlywHIdKk5ff gNn08/iilaWHukBy+GpiQBHgzzzP1BHG27eXd6nP8nRvwhJoexw4k8Dhp6myq8kX jigN+6n+KUYSV7kfeUwv7JCwAV9xnQm/2b1mVIrjfZfsitfkB1258QCKh2IGzIcK zN+T/3ZRoImekctC4Kit6B7fFMssWyYikMohwBP724qNXPEiCntsX0l3vgbGbGnT VhYVX7LmPwz/IQOSljRh6YOc0RetREDtmsF+cTDJS7EEmuXwqc/d5HMjGPrw2rlM Uyobb+OoZ+XCoiiqsPns5qBqsmkCAwEAAaOCAsQwggLAMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFKcTOgmsB4sQHLeYD+ZGgQKAwNZPMB8GA1UdIwQYMBaAFKVu hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTA5ODk4ODQ4OTQ2NDA4NjUzMC8wLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDk4OTg4NDg5NDY0MDg2NTMw LzAvQTcxMzNBMDlBQzA3OEIxMDFDQjc5ODBGRTY0NjgxMDI4MEMwRDY0Ri5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwLQYIKwYBBQUH AQcBAf8EHjAcMAsEAgABMAUDAwB28jANBAIAAjAHAwUAJAG2ADAaBggrBgEFBQcB CAEB/wQLMAmgBzAFAgMAldswDQYJKoZIhvcNAQELBQADggEBADbmvi+e/v1TF0o0 PQ6AUNrqqGXq8RFynScfsVxT+uILWkl7r6sjWZD6oXE0jEJpgzgu2N8kM0jq7ATC KsmCGXegT304uC3xRYguCmffB2U4nphsUKCerteCyph+iMjiNVWRo7XijNLDQy5T O7LgqiRAqI/UI1E3+K5sXiWBsXnw3jF3P2lbVmfKPMyuiiP68pyvZEZPST5vClAX fbg0K1auGBSWHivOmMgo9Iu3ZCnjB3AcIFbz4Rc9BUlZvkUNfqvN0vCd42BdvNu1 1tcRhBbTbOFwVeu+k2sGgr7Ad2a0HoPWvU9W57CPQwCVCS9+T9XYkhF3j78slB14 rH3n1DA= -----END CERTIFICATE-----Generated at Mon Apr 27 09:38:10 2026 by rpki-client