$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71EA1C8B2E9DD939FDA693CF00BB78605B206B03.cer File: 71EA1C8B2E9DD939FDA693CF00BB78605B206B03.cer (raw, json) Hash identifier: gCa4UMq+CY9uBtdrNJmxM/ouF1ErIjjBXjJIVzbj6ls= Subject key identifier: 71:EA:1C:8B:2E:9D:D9:39:FD:A6:93:CF:00:BB:78:60:5B:20:6B:03 Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Certificate serial: 2FAE589C76FCC7A2EC23BDCC97A1A1379A0F0E87 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1101412082315689991/0/71EA1C8B2E9DD939FDA693CF00BB78605B206B03.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1101412082315689991/0/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Tue 28 Apr 2026 07:33:31 +0000 Certificate not after: Tue 27 Apr 2027 07:38:31 +0000 Subordinate resources: AS: 139112 IP: 49.239.62.0/23 IP: 103.147.124.0/23 IP: 2405:b7c0::/32 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 11:49:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:ae:58:9c:76:fc:c7:a2:ec:23:bd:cc:97:a1:a1:37:9a:0f:0e:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Validity Not Before: Apr 28 07:33:31 2026 GMT Not After : Apr 27 07:38:31 2027 GMT Subject: CN=71EA1C8B2E9DD939FDA693CF00BB78605B206B03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:7c:bb:ff:f3:46:b4:61:56:30:57:fa:c2:6c: bd:13:c8:eb:12:92:5f:64:11:89:64:30:9d:2c:66: 0a:ce:7f:c9:99:8a:b7:6e:ec:2a:81:3c:d4:c1:f3: 08:c6:5c:23:67:99:00:c5:a2:7c:e2:06:c3:78:9f: f4:8e:13:50:cd:68:1e:0e:b4:5e:54:ee:d4:7a:88: 0a:b1:6b:62:b4:72:c6:5f:13:6c:26:d4:05:09:ef: d2:9c:ee:ae:a9:d4:a1:b5:4a:39:ce:c9:9a:cc:86: 34:4b:87:90:d0:b2:aa:91:31:0d:72:ef:d2:5f:8c: da:a2:6d:76:1a:04:01:da:72:d3:94:94:20:f8:e2: 92:be:71:be:3b:85:8d:50:19:f7:d0:94:70:49:4e: 85:48:fd:39:47:e3:7a:0b:3a:f5:57:56:ad:fe:42: 9a:4e:09:3a:40:e3:de:ed:09:ea:98:b4:ea:e6:05: fd:78:53:1a:c9:dc:4d:21:84:86:bd:85:d4:41:8c: 15:2b:7d:e4:ce:b5:71:67:b0:17:be:85:e0:aa:5b: 26:89:c0:c3:60:27:cd:68:7e:b4:15:b3:2f:8d:d4: 74:5d:ea:87:18:07:12:14:c4:7a:95:34:96:e4:83: 01:1e:4d:0b:bb:a6:a7:48:95:f8:b6:8a:74:9d:c6: b8:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 71:EA:1C:8B:2E:9D:D9:39:FD:A6:93:CF:00:BB:78:60:5B:20:6B:03 X509v3 Authority Key Identifier: keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1101412082315689991/0/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1101412082315689991/0/71EA1C8B2E9DD939FDA693CF00BB78605B206B03.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 49.239.62.0/23 103.147.124.0/23 IPv6: 2405:b7c0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 139112 Signature Algorithm: sha256WithRSAEncryption 5a:86:49:2f:e6:cd:6c:fe:a8:f5:80:3e:0d:43:70:ae:82:3b: 96:91:9e:b9:dc:a1:e7:41:76:43:9d:0f:ac:22:2a:bd:77:37: cd:3f:4c:64:5a:8a:3e:71:96:6b:99:7d:a2:93:53:6b:52:f2: 2f:d0:e7:de:5a:60:b5:45:21:d8:38:d3:43:1d:63:af:e2:cd: d1:6d:2f:0a:bc:5e:63:81:81:5b:9d:cc:36:7d:13:f8:c6:e9: a6:fa:f3:b4:05:e7:fe:70:ea:b1:2d:59:83:b1:9b:70:11:96: 5e:1c:03:9e:17:b2:1e:b7:ca:ea:31:34:61:09:a8:b0:57:21: 1f:ae:aa:92:85:52:31:91:b8:42:79:08:f3:de:e6:c1:39:78: c9:af:21:b0:e8:b8:a6:7b:55:eb:b0:62:4e:12:7a:e3:1b:be: 72:01:4f:37:8e:75:d5:92:6a:f3:6a:22:52:e3:4c:0a:3a:46: 5c:01:e0:40:35:8c:73:56:a4:73:12:7b:ea:cd:84:ae:8f:b8: 7b:39:68:05:a1:f0:3f:17:94:0d:9d:f5:1c:4d:6c:40:32:81: 3c:73:23:b2:10:e6:25:0e:24:15:d3:3a:40:57:23:ad:c4:53: b1:81:4d:e9:fe:e3:ff:96:35:fd:ac:47:6a:d8:e5:4c:0c:79: d4:85:15:02 -----BEGIN CERTIFICATE----- MIIF2DCCBMCgAwIBAgIUL65YnHb8x6LsI73Ml6GhN5oPDocwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDQyODA3MzMzMVoX DTI3MDQyNzA3MzgzMVowMzExMC8GA1UEAxMoNzFFQTFDOEIyRTlERDkzOUZEQTY5 M0NGMDBCQjc4NjA1QjIwNkIwMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAL98u//zRrRhVjBX+sJsvRPI6xKSX2QRiWQwnSxmCs5/yZmKt27sKoE81MHz CMZcI2eZAMWifOIGw3if9I4TUM1oHg60XlTu1HqICrFrYrRyxl8TbCbUBQnv0pzu rqnUobVKOc7JmsyGNEuHkNCyqpExDXLv0l+M2qJtdhoEAdpy05SUIPjikr5xvjuF jVAZ99CUcElOhUj9OUfjegs69VdWrf5Cmk4JOkDj3u0J6pi06uYF/XhTGsncTSGE hr2F1EGMFSt95M61cWewF76F4KpbJonAw2AnzWh+tBWzL43UdF3qhxgHEhTEepU0 luSDAR5NC7ump0iV+LaKdJ3GuNECAwEAAaOCAsswggLHMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFHHqHIsundk5/aaTzwC7eGBbIGsDMB8GA1UdIwQYMBaAFKVu hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTEwMTQxMjA4MjMxNTY4OTk5MS8wLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMTAxNDEyMDgyMzE1Njg5OTkx LzAvNzFFQTFDOEIyRTlERDkzOUZEQTY5M0NGMDBCQjc4NjA1QjIwNkIwMy5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwNAYIKwYBBQUH AQcBAf8EJTAjMBIEAgABMAwDBAEx7z4DBAFnk3wwDQQCAAIwBwMFACQFt8AwGgYI KwYBBQUHAQgBAf8ECzAJoAcwBQIDAh9oMA0GCSqGSIb3DQEBCwUAA4IBAQBahkkv 5s1s/qj1gD4NQ3CugjuWkZ653KHnQXZDnQ+sIiq9dzfNP0xkWoo+cZZrmX2ik1Nr UvIv0OfeWmC1RSHYONNDHWOv4s3RbS8KvF5jgYFbncw2fRP4xumm+vO0Bef+cOqx LVmDsZtwEZZeHAOeF7Iet8rqMTRhCaiwVyEfrqqShVIxkbhCeQjz3ubBOXjJryGw 6Lime1XrsGJOEnrjG75yAU83jnXVkmrzaiJS40wKOkZcAeBANYxzVqRzEnvqzYSu j7h7OWgFofA/F5QNnfUcTWxAMoE8cyOyEOYlDiQV0zpAVyOtxFOxgU3p/uP/ljX9 rEdq2OVMDHnUhRUC -----END CERTIFICATE-----Generated at Wed May 13 15:44:06 2026 by rpki-client