$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A4CF7F709E062849E6BF84E14474A0320EAB780E.cer File: A4CF7F709E062849E6BF84E14474A0320EAB780E.cer (raw, json) Hash identifier: CpgO2hZVU5yRHatlUHHnRlHau+P5MOf/8TSBUWkzzng= Subject key identifier: A4:CF:7F:70:9E:06:28:49:E6:BF:84:E1:44:74:A0:32:0E:AB:78:0E Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Certificate serial: 0F4F9ED804626FA6C18315BEA0ECE577C04F39AE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1102157690253082631/0/A4CF7F709E062849E6BF84E14474A0320EAB780E.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1102157690253082631/0/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Thu 30 Apr 2026 08:56:12 +0000 Certificate not after: Thu 29 Apr 2027 09:01:12 +0000 Subordinate resources: AS: 7640 IP: 210.73.96.0/19 IP: 2401:1000::/32 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 11:49:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:4f:9e:d8:04:62:6f:a6:c1:83:15:be:a0:ec:e5:77:c0:4f:39:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Validity Not Before: Apr 30 08:56:12 2026 GMT Not After : Apr 29 09:01:12 2027 GMT Subject: CN=A4CF7F709E062849E6BF84E14474A0320EAB780E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:ab:e3:b3:a7:4b:3d:03:66:ce:c0:42:f8:1a: 6e:32:bb:9b:83:ed:ff:c5:51:9a:de:73:f3:eb:ce: 27:4e:d3:2f:09:f5:8e:b1:5d:2c:ff:1f:72:6f:67: 9a:3e:19:8d:64:33:b1:eb:6c:d7:6e:b6:2d:78:60: 0e:58:04:49:8a:e3:38:1b:9b:cb:94:48:00:18:35: 6a:bf:62:e1:e1:5d:39:2e:ed:a7:5a:fa:f3:d2:57: 3c:14:b3:e4:34:6d:f2:f9:e0:ba:0a:7c:68:a3:cc: 4b:c0:54:fe:1b:7f:22:7d:31:34:be:5e:e8:13:6b: 22:61:01:ec:79:bb:f7:44:f1:82:98:b4:74:5d:41: 68:95:80:85:de:80:e3:f4:0c:7b:77:8e:e3:fc:ce: 3a:eb:3c:6c:2b:b6:56:9a:d7:ac:59:81:12:ea:0e: 4b:f6:89:a6:43:65:d2:ee:f5:2e:04:f4:da:e1:6b: 11:57:f3:7a:97:92:3d:0c:37:f2:0e:58:df:ed:57: c7:a5:df:33:81:20:6f:33:0a:94:5f:62:63:13:8a: fd:12:28:b0:22:1b:90:93:bb:fc:b4:73:77:de:c6: 9a:11:df:76:b2:74:bc:e9:cd:60:ca:cd:b4:8f:83: 9d:26:da:b1:a6:4a:44:61:f4:92:46:0c:c6:ce:c6: 26:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: A4:CF:7F:70:9E:06:28:49:E6:BF:84:E1:44:74:A0:32:0E:AB:78:0E X509v3 Authority Key Identifier: keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1102157690253082631/0/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1102157690253082631/0/A4CF7F709E062849E6BF84E14474A0320EAB780E.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 210.73.96.0/19 IPv6: 2401:1000::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 7640 Signature Algorithm: sha256WithRSAEncryption 51:68:89:af:43:3b:10:99:2e:9a:95:26:4c:13:aa:81:b9:01: 9b:2c:54:48:92:39:04:e1:36:e7:1e:5e:2c:3f:4e:6c:d4:b7: bc:9a:6d:93:cb:5b:5a:1f:73:5b:aa:8b:cf:e2:28:c1:40:29: 33:79:f8:2d:f1:e2:21:f3:98:32:6e:fa:ca:ab:7d:d2:61:4c: 7c:db:b1:b3:e3:af:6e:49:78:7b:28:bf:a9:b6:36:69:f3:13: d8:0e:86:32:9d:f4:bd:2e:41:44:3a:f3:d9:be:0e:e0:03:3a: 9d:d8:04:1e:15:4a:31:0f:87:b3:00:48:5e:fc:e7:83:e3:1d: 7f:12:db:fa:79:33:19:99:c0:bc:bd:65:f2:d5:c9:55:b6:e9: 5b:6c:b9:74:8d:77:9f:12:f9:a4:4b:86:bc:e1:9e:a2:66:10: 51:bf:d3:a4:b7:c3:3d:fc:ce:de:63:63:b5:f7:09:44:b4:a2: 2f:86:e1:ed:84:77:ac:b6:1a:98:dc:dd:c3:96:3a:25:e3:0b: 4c:ad:17:9e:f5:ac:c4:8e:a5:2b:fd:53:3f:0c:7a:a9:46:13: 25:ec:cd:4f:04:91:3e:6e:cd:52:38:19:b0:76:c0:a7:be:0d: ef:ff:54:ef:0f:48:6b:b9:cc:be:50:3a:b7:10:0c:fb:84:04: 87:99:d6:32 -----BEGIN CERTIFICATE----- MIIF0TCCBLmgAwIBAgIUD0+e2ARib6bBgxW+oOzld8BPOa4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDQzMDA4NTYxMloX DTI3MDQyOTA5MDExMlowMzExMC8GA1UEAxMoQTRDRjdGNzA5RTA2Mjg0OUU2QkY4 NEUxNDQ3NEEwMzIwRUFCNzgwRTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKCr47OnSz0DZs7AQvgabjK7m4Pt/8VRmt5z8+vOJ07TLwn1jrFdLP8fcm9n mj4ZjWQzsets1262LXhgDlgESYrjOBuby5RIABg1ar9i4eFdOS7tp1r689JXPBSz 5DRt8vngugp8aKPMS8BU/ht/In0xNL5e6BNrImEB7Hm790Txgpi0dF1BaJWAhd6A 4/QMe3eO4/zOOus8bCu2VprXrFmBEuoOS/aJpkNl0u71LgT02uFrEVfzepeSPQw3 8g5Y3+1Xx6XfM4EgbzMKlF9iYxOK/RIosCIbkJO7/LRzd97GmhHfdrJ0vOnNYMrN tI+DnSbasaZKRGH0kkYMxs7GJlcCAwEAAaOCAsQwggLAMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFKTPf3CeBihJ5r+E4UR0oDIOq3gOMB8GA1UdIwQYMBaAFKVu hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTEwMjE1NzY5MDI1MzA4MjYzMS8wLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMTAyMTU3NjkwMjUzMDgyNjMx LzAvQTRDRjdGNzA5RTA2Mjg0OUU2QkY4NEUxNDQ3NEEwMzIwRUFCNzgwRS5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUH AQcBAf8EHzAdMAwEAgABMAYDBAXSSWAwDQQCAAIwBwMFACQBEAAwGQYIKwYBBQUH AQgBAf8ECjAIoAYwBAICHdgwDQYJKoZIhvcNAQELBQADggEBAFFoia9DOxCZLpqV JkwTqoG5AZssVEiSOQThNuceXiw/TmzUt7yabZPLW1ofc1uqi8/iKMFAKTN5+C3x 4iHzmDJu+sqrfdJhTHzbsbPjr25JeHsov6m2NmnzE9gOhjKd9L0uQUQ689m+DuAD Op3YBB4VSjEPh7MASF7854PjHX8S2/p5MxmZwLy9ZfLVyVW26VtsuXSNd58S+aRL hrzhnqJmEFG/06S3wz38zt5jY7X3CUS0oi+G4e2Ed6y2Gpjc3cOWOiXjC0ytF571 rMSOpSv9Uz8MeqlGEyXszU8EkT5uzVI4GbB2wKe+De//VO8PSGu5zL5QOrcQDPuE BIeZ1jI= -----END CERTIFICATE-----Generated at Wed May 13 19:39:23 2026 by rpki-client