$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CF709CC85A3788918F778EC5F4257016F4294457.cer File: CF709CC85A3788918F778EC5F4257016F4294457.cer (raw, json) Hash identifier: riEy95TsHC8mDg+PCpfZj2KrgMMFhZDdAwxYq/FFFas= Subject key identifier: CF:70:9C:C8:5A:37:88:91:8F:77:8E:C5:F4:25:70:16:F4:29:44:57 Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Certificate serial: 232AD84C0EEC0032C11E231AAFD2BC181BA42D23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1105017083869003783/0/CF709CC85A3788918F778EC5F4257016F4294457.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1105017083869003783/0/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Fri 08 May 2026 06:18:24 +0000 Certificate not after: Fri 07 May 2027 06:23:24 +0000 Subordinate resources: IP: 43.242.156.0/22 IP: 103.38.40.0/22 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 09:37:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:2a:d8:4c:0e:ec:00:32:c1:1e:23:1a:af:d2:bc:18:1b:a4:2d:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Validity Not Before: May 8 06:18:24 2026 GMT Not After : May 7 06:23:24 2027 GMT Subject: CN=CF709CC85A3788918F778EC5F4257016F4294457 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:d8:df:9c:fc:cc:dc:a8:15:55:2d:a8:c5:bb: d3:c8:65:dc:a0:0c:f8:63:9e:3e:ae:1d:62:72:61: 85:ff:bf:45:11:d6:83:0b:dd:df:9c:11:ee:77:4b: 4e:c4:0b:5e:c3:4f:94:17:cd:9c:cf:9d:31:18:0d: ed:1f:0e:9f:70:49:30:3a:e8:e3:f2:80:a2:2f:f8: fd:98:58:06:14:23:90:8b:70:66:3a:6c:f4:b2:ef: 43:c2:0e:15:d1:13:ef:24:96:6b:8e:42:7a:11:47: c4:54:5a:73:10:2f:a4:df:5d:a9:da:e7:b2:67:8b: 07:12:b4:40:b8:ba:5f:71:f6:9a:0d:0f:9c:18:d6: 55:8b:a2:7a:2d:3d:0a:09:ba:2c:0e:46:82:1b:4a: e9:d1:cf:e3:15:e9:73:8a:d3:17:c4:5f:e3:e1:7d: b8:78:0a:1c:92:2c:42:ea:7e:77:38:9f:5b:40:89: 1a:a9:fd:aa:0e:c6:85:1f:98:7a:94:28:b5:75:de: 8f:21:c9:d4:9c:c6:da:35:9d:93:cb:cf:5e:18:38: 24:ae:b8:bd:04:37:fb:c0:8b:8a:87:0e:0d:aa:f1: 72:de:6a:41:8d:f1:b8:78:ea:ef:1b:af:76:c3:c9: a8:39:92:02:f5:85:77:fa:03:b8:66:a4:16:0a:d3: f5:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: CF:70:9C:C8:5A:37:88:91:8F:77:8E:C5:F4:25:70:16:F4:29:44:57 X509v3 Authority Key Identifier: keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1105017083869003783/0/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1105017083869003783/0/CF709CC85A3788918F778EC5F4257016F4294457.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.242.156.0/22 103.38.40.0/22 Signature Algorithm: sha256WithRSAEncryption 29:bb:e2:89:53:c2:62:06:c0:98:bb:8d:23:60:56:e0:7a:a9: a7:5a:0e:0b:f0:00:d5:77:fb:7f:2c:28:8f:89:77:33:27:1f: d0:3c:11:03:c1:5b:17:85:84:9d:04:8a:32:1d:1a:da:64:48: b4:43:d2:05:74:ff:69:14:46:3a:98:ae:cb:8b:07:e8:95:7c: 0a:30:2e:c2:bd:46:fe:b6:37:aa:c1:ed:b7:e6:4e:2e:bc:c2: 1d:37:e9:d1:36:da:04:f7:34:00:c8:33:5f:d3:31:6b:f4:d7: 0e:3e:4f:6b:e4:a6:78:75:f1:c3:ba:b6:62:78:e8:37:d6:fd: 74:6b:f2:01:c5:b3:4c:74:25:f9:f3:8e:7f:59:fa:43:57:8d: de:77:eb:ec:6f:22:33:90:dc:c8:85:34:d5:ba:1a:00:e1:14: db:d9:9c:8a:50:69:6d:bb:a0:84:35:6b:99:25:ad:c9:47:7e: 40:3c:b0:91:d7:eb:3b:27:c6:f3:c7:b6:fd:d6:fd:a1:62:7d: 66:4b:9d:33:f4:d8:5d:a2:b6:da:98:42:15:91:c7:9e:bd:e6: 31:94:99:45:b4:13:ef:cd:ac:d8:ca:e5:4f:62:d2:cd:89:d8: d4:6d:40:4b:db:34:f9:85:4f:a6:98:37:7b:fa:a1:12:0c:f5: d0:9d:11:f8 -----BEGIN CERTIFICATE----- MIIFrTCCBJWgAwIBAgIUIyrYTA7sADLBHiMar9K8GBukLSMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDUwODA2MTgyNFoX DTI3MDUwNzA2MjMyNFowMzExMC8GA1UEAxMoQ0Y3MDlDQzg1QTM3ODg5MThGNzc4 RUM1RjQyNTcwMTZGNDI5NDQ1NzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALzY35z8zNyoFVUtqMW708hl3KAM+GOePq4dYnJhhf+/RRHWgwvd35wR7ndL TsQLXsNPlBfNnM+dMRgN7R8On3BJMDro4/KAoi/4/ZhYBhQjkItwZjps9LLvQ8IO FdET7ySWa45CehFHxFRacxAvpN9dqdrnsmeLBxK0QLi6X3H2mg0PnBjWVYuiei09 Cgm6LA5GghtK6dHP4xXpc4rTF8Rf4+F9uHgKHJIsQup+dzifW0CJGqn9qg7GhR+Y epQotXXejyHJ1JzG2jWdk8vPXhg4JK64vQQ3+8CLiocODarxct5qQY3xuHjq7xuv dsPJqDmSAvWFd/oDuGakFgrT9cECAwEAAaOCAqAwggKcMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFM9wnMhaN4iRj3eOxfQlcBb0KURXMB8GA1UdIwQYMBaAFKVu hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTEwNTAxNzA4Mzg2OTAwMzc4My8wLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMTA1MDE3MDgzODY5MDAzNzgz LzAvQ0Y3MDlDQzg1QTM3ODg5MThGNzc4RUM1RjQyNTcwMTZGNDI5NDQ1Ny5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwJQYIKwYBBQUH AQcBAf8EFjAUMBIEAgABMAwDBAIr8pwDBAJnJigwDQYJKoZIhvcNAQELBQADggEB ACm74olTwmIGwJi7jSNgVuB6qadaDgvwANV3+38sKI+JdzMnH9A8EQPBWxeFhJ0E ijIdGtpkSLRD0gV0/2kURjqYrsuLB+iVfAowLsK9Rv62N6rB7bfmTi68wh036dE2 2gT3NADIM1/TMWv01w4+T2vkpnh18cO6tmJ46DfW/XRr8gHFs0x0Jfnzjn9Z+kNX jd536+xvIjOQ3MiFNNW6GgDhFNvZnIpQaW27oIQ1a5klrclHfkA8sJHX6zsnxvPH tv3W/aFifWZLnTP02F2ittqYQhWRx5695jGUmUW0E+/NrNjK5U9i0s2J2NRtQEvb NPmFT6aYN3v6oRIM9dCdEfg= -----END CERTIFICATE-----Generated at Wed May 13 10:00:51 2026 by rpki-client