$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7701FB8018A76AF302CEF7E0F329A58E9644BADC.cer File: 7701FB8018A76AF302CEF7E0F329A58E9644BADC.cer (raw, json) Hash identifier: nisptAKHvaBqAhaSNJXWMfJj2lLPU8+eKhJYBaaIAD4= Subject key identifier: 77:01:FB:80:18:A7:6A:F3:02:CE:F7:E0:F3:29:A5:8E:96:44:BA:DC Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Certificate serial: 62CBF03FA67452470080D48DDDF54CD8B6E15260 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1083211429210750977/0/7701FB8018A76AF302CEF7E0F329A58E9644BADC.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1083211429210750977/0/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Mon 09 Mar 2026 02:10:32 +0000 Certificate not after: Mon 08 Mar 2027 02:15:32 +0000 Subordinate resources: IP: 2402:50a0::/32 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 22:39:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:cb:f0:3f:a6:74:52:47:00:80:d4:8d:dd:f5:4c:d8:b6:e1:52:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Validity Not Before: Mar 9 02:10:32 2026 GMT Not After : Mar 8 02:15:32 2027 GMT Subject: CN=7701FB8018A76AF302CEF7E0F329A58E9644BADC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:7a:26:20:73:c2:92:ac:2f:4c:39:6b:fc:4f: f5:a9:21:83:b5:f2:7e:6a:f2:da:eb:01:28:cd:03: dd:50:93:d1:8d:26:b3:e4:0c:05:62:6c:b6:0f:5f: 0e:f3:51:e1:16:40:77:29:9e:6e:cb:15:a8:6f:f2: 8d:a8:ee:8e:17:09:9e:0b:b9:e3:4f:8f:89:3d:69: 49:b3:93:ba:fe:10:3f:26:eb:a0:cd:96:2d:34:f5: 16:a2:38:4c:df:57:ca:49:0a:78:2d:b7:11:c5:cc: da:8e:60:dc:5e:3b:27:65:09:9a:1e:f0:31:2e:6d: c0:ca:f6:c0:e4:8d:c8:2e:81:1e:94:2f:98:f8:09: 7e:04:1a:55:62:92:3f:e5:f3:9d:10:a2:25:22:15: 1c:e4:66:5b:c9:1e:48:1f:14:a9:47:b2:d2:f8:2f: 88:83:10:50:67:82:8b:dc:67:06:e9:f4:97:23:e7: 0c:cb:6a:67:19:dc:a2:22:a5:62:e8:bd:54:5f:85: 22:e1:52:29:62:a2:86:ff:a8:3f:91:a3:5f:c3:b8: 9d:98:ae:f2:4a:6a:2c:14:d7:0d:81:c7:8e:53:8d: d9:58:b5:c5:2a:ac:70:68:96:7b:68:87:9d:cf:d0: 70:8d:e3:db:ef:ce:81:a2:f0:7d:ab:20:34:bf:48: 51:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 77:01:FB:80:18:A7:6A:F3:02:CE:F7:E0:F3:29:A5:8E:96:44:BA:DC X509v3 Authority Key Identifier: keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1083211429210750977/0/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1083211429210750977/0/7701FB8018A76AF302CEF7E0F329A58E9644BADC.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2402:50a0::/32 Signature Algorithm: sha256WithRSAEncryption 77:2a:38:e8:62:82:87:dd:93:ab:b7:64:5d:3c:bb:c1:12:e4: 7c:5b:ee:e1:d5:92:f1:c9:54:ce:96:49:9e:93:03:04:50:65: be:94:71:ba:02:db:8e:23:ce:d6:b0:67:59:28:1e:67:d1:f2: c7:dc:82:aa:ef:98:ca:f5:b4:fc:b8:14:1b:24:fd:32:77:dc: 2b:b5:6e:fc:34:91:96:aa:93:0a:a8:df:97:62:3e:2f:67:55: f0:e4:33:62:b2:d7:27:15:42:3f:ad:0c:7c:8b:fc:f0:d2:9e: cd:2e:47:f4:a0:37:3f:f5:e2:2d:41:95:9a:bb:bd:71:4c:06: c9:3f:28:ad:00:63:00:ab:82:67:e0:d3:ef:fa:88:49:f8:58: 73:b2:97:5d:1f:4e:0b:d2:8d:a3:9f:a6:25:f6:c8:88:53:dd: 2c:1a:3e:44:6b:62:cd:05:f5:9f:8d:d5:38:5a:46:dc:bf:f9: 39:41:62:b5:0c:9d:c9:ad:ec:aa:6d:ba:9e:a5:db:41:49:94: 07:7e:e4:ac:67:f8:a1:9d:57:0e:ee:aa:6e:50:b3:23:75:c8: ef:d6:4f:85:1c:3a:69:90:00:ea:5a:6d:c0:5b:60:4f:0f:8f: 21:b9:eb:c6:04:c4:06:50:ee:e4:9d:25:77:6b:13:d3:79:b4: b9:b6:f9:a1 -----BEGIN CERTIFICATE----- MIIFqDCCBJCgAwIBAgIUYsvwP6Z0UkcAgNSN3fVM2LbhUmAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDMwOTAyMTAzMloX DTI3MDMwODAyMTUzMlowMzExMC8GA1UEAxMoNzcwMUZCODAxOEE3NkFGMzAyQ0VG N0UwRjMyOUE1OEU5NjQ0QkFEQzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALh6JiBzwpKsL0w5a/xP9akhg7Xyfmry2usBKM0D3VCT0Y0ms+QMBWJstg9f DvNR4RZAdymebssVqG/yjajujhcJngu540+PiT1pSbOTuv4QPybroM2WLTT1FqI4 TN9XykkKeC23EcXM2o5g3F47J2UJmh7wMS5twMr2wOSNyC6BHpQvmPgJfgQaVWKS P+XznRCiJSIVHORmW8keSB8UqUey0vgviIMQUGeCi9xnBun0lyPnDMtqZxncoiKl Yui9VF+FIuFSKWKihv+oP5GjX8O4nZiu8kpqLBTXDYHHjlON2Vi1xSqscGiWe2iH nc/QcI3j2+/OgaLwfasgNL9IUX8CAwEAAaOCApswggKXMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFHcB+4AYp2rzAs734PMppY6WRLrcMB8GA1UdIwQYMBaAFKVu hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTA4MzIxMTQyOTIxMDc1MDk3Ny8wLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDgzMjExNDI5MjEwNzUwOTc3 LzAvNzcwMUZCODAxOEE3NkFGMzAyQ0VGN0UwRjMyOUE1OEU5NjQ0QkFEQy5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUH AQcBAf8EETAPMA0EAgACMAcDBQAkAlCgMA0GCSqGSIb3DQEBCwUAA4IBAQB3Kjjo YoKH3ZOrt2RdPLvBEuR8W+7h1ZLxyVTOlkmekwMEUGW+lHG6AtuOI87WsGdZKB5n 0fLH3IKq75jK9bT8uBQbJP0yd9wrtW78NJGWqpMKqN+XYj4vZ1Xw5DNistcnFUI/ rQx8i/zw0p7NLkf0oDc/9eItQZWau71xTAbJPyitAGMAq4Jn4NPv+ohJ+Fhzspdd H04L0o2jn6Yl9siIU90sGj5Ea2LNBfWfjdU4Wkbcv/k5QWK1DJ3JreyqbbqepdtB SZQHfuSsZ/ihnVcO7qpuULMjdcjv1k+FHDppkADqWm3AW2BPD48huevGBMQGUO7k nSV3axPTebS5tvmh -----END CERTIFICATE-----Generated at Fri Mar 27 01:27:09 2026 by rpki-client