$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E7EA938C86FDA24E24495F1950FD888F94B0B7E7.cer File: E7EA938C86FDA24E24495F1950FD888F94B0B7E7.cer (raw, json) Hash identifier: RgSreuinfNI6JdCOwuoTCFcElvz6QBJ4LTR9nba7Cjs= Subject key identifier: E7:EA:93:8C:86:FD:A2:4E:24:49:5F:19:50:FD:88:8F:94:B0:B7:E7 Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Certificate serial: 3F5D4DDA62E680AB71DE530DD496073CB15515D1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1098524737883078659/0/E7EA938C86FDA24E24495F1950FD888F94B0B7E7.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1098524737883078659/0/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Mon 20 Apr 2026 08:20:08 +0000 Certificate not after: Mon 19 Apr 2027 08:25:08 +0000 Subordinate resources: IP: 103.95.68.0/22 IP: 103.119.28.0/22 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 11:49:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:5d:4d:da:62:e6:80:ab:71:de:53:0d:d4:96:07:3c:b1:55:15:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Validity Not Before: Apr 20 08:20:08 2026 GMT Not After : Apr 19 08:25:08 2027 GMT Subject: CN=E7EA938C86FDA24E24495F1950FD888F94B0B7E7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:76:c3:63:ba:1c:ee:eb:9b:6c:40:2f:70:32: 73:91:49:c2:a0:73:65:61:97:c0:ba:93:dc:53:24: 6f:35:a0:3f:bb:17:ac:a5:40:6e:6a:f8:a1:ec:af: 6e:8d:59:1e:3d:b1:30:7b:c5:07:ad:00:ed:4e:58: 30:f6:c1:0a:6b:13:68:69:c7:02:6e:97:ce:3d:74: f9:aa:e2:19:3c:f7:6d:6d:7c:22:56:a4:bf:e4:0e: 79:14:1c:92:92:d2:c7:ad:e2:99:32:29:ea:c2:c8: 8e:80:ab:83:c9:72:47:10:1f:9c:93:ae:f0:9a:2a: ce:5b:87:e8:bf:e9:e4:1d:d9:ce:9f:76:e4:8a:99: 51:20:16:1a:9b:6e:2b:15:58:eb:f5:6a:d4:e7:06: 75:81:db:48:67:49:ad:cc:ed:2f:d5:60:3a:b1:d1: 87:29:29:4c:e1:de:56:71:73:1b:3f:ad:68:e9:7b: e5:2d:af:11:31:85:54:b4:7b:d7:c7:79:de:d8:59: ee:1e:22:89:59:e7:59:12:f5:a6:ac:9d:4a:a8:0b: 99:7b:37:65:28:8b:ee:31:14:85:c5:6a:7f:8a:e2: df:0a:30:95:79:52:5b:ab:75:ba:90:80:90:39:99: 1f:d4:26:ae:b4:74:72:a3:51:82:c0:bf:ae:fd:e4: 53:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: E7:EA:93:8C:86:FD:A2:4E:24:49:5F:19:50:FD:88:8F:94:B0:B7:E7 X509v3 Authority Key Identifier: keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1098524737883078659/0/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1098524737883078659/0/E7EA938C86FDA24E24495F1950FD888F94B0B7E7.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.95.68.0/22 103.119.28.0/22 Signature Algorithm: sha256WithRSAEncryption 82:01:09:05:23:b7:82:ae:85:e8:27:32:fe:b5:3e:a0:b0:53: d4:03:4e:fc:ca:1d:c6:15:bb:1d:c1:ae:94:5e:e5:1e:10:d6: 7c:d2:a7:d9:f6:99:cc:70:56:93:d1:1c:b1:29:2e:e8:13:69: b7:8d:31:22:ec:fe:99:ac:1c:89:6a:a8:24:c5:67:2f:a0:33: 2d:b4:6d:8f:53:91:bb:bb:91:cd:10:48:6e:17:55:85:e0:88: 27:f3:64:f9:a7:8a:8a:0e:a1:4f:8b:b4:43:56:b8:88:6f:de: d5:33:50:90:33:c1:a4:cd:09:aa:04:c1:7a:ba:fa:ef:d2:8a: ca:fc:98:c1:a8:b5:4f:a3:8a:0c:26:02:72:36:59:31:24:3f: c6:65:bf:4a:49:c9:b7:ec:99:15:5e:b8:04:c7:b3:bf:24:53: 57:ea:ca:b6:4f:7b:e2:82:68:86:d2:f3:56:6a:81:9e:4a:8f: 75:0d:99:c0:5a:0b:cf:08:12:50:bf:bb:9a:db:d3:37:13:13: 87:68:1c:16:f3:8c:18:23:ef:53:8d:9c:88:05:bf:87:03:16: 32:f2:4c:52:8a:ba:c3:a7:1d:ed:5b:74:fc:7d:e1:94:a8:13: 65:33:f6:f2:81:5f:5a:14:64:69:d7:ed:b2:04:e6:10:1a:2c: 03:80:6d:01 -----BEGIN CERTIFICATE----- MIIFrTCCBJWgAwIBAgIUP11N2mLmgKtx3lMN1JYHPLFVFdEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDQyMDA4MjAwOFoX DTI3MDQxOTA4MjUwOFowMzExMC8GA1UEAxMoRTdFQTkzOEM4NkZEQTI0RTI0NDk1 RjE5NTBGRDg4OEY5NEIwQjdFNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANV2w2O6HO7rm2xAL3Ayc5FJwqBzZWGXwLqT3FMkbzWgP7sXrKVAbmr4oeyv bo1ZHj2xMHvFB60A7U5YMPbBCmsTaGnHAm6Xzj10+ariGTz3bW18Ilakv+QOeRQc kpLSx63imTIp6sLIjoCrg8lyRxAfnJOu8JoqzluH6L/p5B3Zzp925IqZUSAWGptu KxVY6/Vq1OcGdYHbSGdJrcztL9VgOrHRhykpTOHeVnFzGz+taOl75S2vETGFVLR7 18d53thZ7h4iiVnnWRL1pqydSqgLmXs3ZSiL7jEUhcVqf4ri3wowlXlSW6t1upCA kDmZH9QmrrR0cqNRgsC/rv3kU68CAwEAAaOCAqAwggKcMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFOfqk4yG/aJOJElfGVD9iI+UsLfnMB8GA1UdIwQYMBaAFKVu hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTA5ODUyNDczNzg4MzA3ODY1OS8wLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDk4NTI0NzM3ODgzMDc4NjU5 LzAvRTdFQTkzOEM4NkZEQTI0RTI0NDk1RjE5NTBGRDg4OEY5NEIwQjdFNy5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwJQYIKwYBBQUH AQcBAf8EFjAUMBIEAgABMAwDBAJnX0QDBAJndxwwDQYJKoZIhvcNAQELBQADggEB AIIBCQUjt4KuhegnMv61PqCwU9QDTvzKHcYVux3BrpRe5R4Q1nzSp9n2mcxwVpPR HLEpLugTabeNMSLs/pmsHIlqqCTFZy+gMy20bY9Tkbu7kc0QSG4XVYXgiCfzZPmn iooOoU+LtENWuIhv3tUzUJAzwaTNCaoEwXq6+u/Sisr8mMGotU+jigwmAnI2WTEk P8Zlv0pJybfsmRVeuATHs78kU1fqyrZPe+KCaIbS81ZqgZ5Kj3UNmcBaC88IElC/ u5rb0zcTE4doHBbzjBgj71ONnIgFv4cDFjLyTFKKusOnHe1bdPx94ZSoE2Uz9vKB X1oUZGnX7bIE5hAaLAOAbQE= -----END CERTIFICATE-----Generated at Wed May 13 13:57:36 2026 by rpki-client