$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/0/4EF5FAB9594A1D46B9FCA2CEFAFD12EA0E114A1C.cer File: 4EF5FAB9594A1D46B9FCA2CEFAFD12EA0E114A1C.cer (raw, json) Hash identifier: hoYwEnrYtFzofquLJiXuT253U9E4YjYBgcMvgjnzrcs= Subject key identifier: 4E:F5:FA:B9:59:4A:1D:46:B9:FC:A2:CE:FA:FD:12:EA:0E:11:4A:1C Authority key identifier: CB:02:14:A5:C4:04:D6:F8:40:43:3B:12:0C:AC:BB:5B:8C:59:E6:13 Certificate issuer: /CN=A9162E3D0001/serialNumber=CB0214A5C404D6F840433B120CACBB5B8C59E613 Certificate serial: 04EEE9FC218B6945054708DFCAE6074F150B432A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1117016035443146775/0/4EF5FAB9594A1D46B9FCA2CEFAFD12EA0E114A1C.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1117016035443146775/0/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Wed 10 Jun 2026 09:05:51 +0000 Certificate not after: Wed 09 Jun 2027 09:10:51 +0000 Subordinate resources: IP: 162.4.136.0/23 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 17:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:ee:e9:fc:21:8b:69:45:05:47:08:df:ca:e6:07:4f:15:0b:43:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=CB0214A5C404D6F840433B120CACBB5B8C59E613 Validity Not Before: Jun 10 09:05:51 2026 GMT Not After : Jun 9 09:10:51 2027 GMT Subject: CN=4EF5FAB9594A1D46B9FCA2CEFAFD12EA0E114A1C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:40:5a:07:66:05:1a:b9:fb:87:63:63:ff:76: 0f:9b:a7:7c:9f:bc:ed:ce:7b:8f:28:27:79:83:91: a7:93:36:e7:0d:43:0f:c6:7b:d3:97:9b:a7:4d:27: 90:a5:a2:ca:11:dc:c6:e2:69:39:5a:fb:ec:4d:52: 58:9f:1d:9f:8d:68:72:eb:70:c1:80:89:1c:47:6e: 2d:3c:b5:25:f5:df:d6:ca:25:4f:a5:0c:d0:70:97: 7e:bd:64:6a:9d:7f:c6:6b:a9:eb:9b:52:22:b5:9a: ae:e6:cc:11:3e:f2:8c:7e:2b:a3:41:1c:3b:19:5a: 1f:12:30:ab:37:58:0b:5d:2e:8a:e6:11:58:f4:35: 33:12:b7:10:4a:70:16:06:e8:f2:30:f5:38:f2:8c: b8:97:67:75:9a:c4:af:5c:50:3b:ed:cd:85:4c:7a: 59:bc:b4:a7:ae:51:e7:96:4a:d8:24:97:2d:53:e4: 09:1e:ac:53:cf:45:f3:d4:8a:d8:40:a6:c6:2e:e2: e1:2c:f3:2c:f2:ac:3e:1e:42:78:d5:f5:bf:be:5d: ae:00:91:05:02:1d:42:bd:ae:17:6a:de:3b:73:f6: da:ab:bd:49:61:1f:e9:23:12:7b:08:2a:ce:b7:c8: 9d:6f:56:35:60:7b:10:bf:35:9b:bc:4e:ee:d4:fe: eb:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 4E:F5:FA:B9:59:4A:1D:46:B9:FC:A2:CE:FA:FD:12:EA:0E:11:4A:1C X509v3 Authority Key Identifier: keyid:CB:02:14:A5:C4:04:D6:F8:40:43:3B:12:0C:AC:BB:5B:8C:59:E6:13 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1117016035443146775/0/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1117016035443146775/0/4EF5FAB9594A1D46B9FCA2CEFAFD12EA0E114A1C.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 162.4.136.0/23 Signature Algorithm: sha256WithRSAEncryption 99:57:e5:2f:1b:2a:53:23:29:d2:13:35:41:d3:55:a5:8c:47: 6e:3d:aa:73:db:f8:f1:f4:d7:f6:18:bd:fb:8e:da:d7:e9:16: 3d:31:b0:7c:87:60:05:e9:89:d5:66:51:4d:aa:b0:8c:6a:7e: bb:89:42:f7:70:74:76:47:40:90:e6:4c:76:5d:2a:3f:80:00: f1:2c:15:0e:bc:18:63:04:bb:7a:49:2b:a3:37:6f:3a:d1:ff: de:f8:85:36:95:82:ab:d9:04:c2:a9:b6:f1:41:66:f9:be:c9: 5c:20:e4:bf:50:58:ad:b7:1e:f3:05:28:f3:08:05:ef:cd:ef: 7d:4a:44:a1:b8:2b:8b:99:50:a8:7f:91:5f:ab:92:7c:3e:9a: f6:99:5b:cc:05:60:dd:58:ed:72:36:84:8f:e7:93:77:ba:d3: f5:95:83:fa:92:8f:a4:7d:14:19:ba:00:74:42:32:a1:c4:1d: d4:2f:1c:2d:dc:23:ca:87:a2:69:c2:6a:df:2c:ca:c8:59:4b: 2b:ff:3c:d5:76:87:bf:9e:bf:9c:e5:9b:8e:16:58:d5:a7:3f: 1e:ed:39:d8:98:c1:f1:b9:ac:1f:f6:ee:4d:66:81:53:d4:d7: 71:38:e8:3a:18:bb:0b:d6:59:44:bf:03:27:ba:f7:0b:46:92: a4:3e:72:bd -----BEGIN CERTIFICATE----- MIIFpzCCBI+gAwIBAgIUBO7p/CGLaUUFRwjfyuYHTxULQyowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhDQjAyMTRBNUM0 MDRENkY4NDA0MzNCMTIwQ0FDQkI1QjhDNTlFNjEzMB4XDTI2MDYxMDA5MDU1MVoX DTI3MDYwOTA5MTA1MVowMzExMC8GA1UEAxMoNEVGNUZBQjk1OTRBMUQ0NkI5RkNB MkNFRkFGRDEyRUEwRTExNEExQzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKlAWgdmBRq5+4djY/92D5unfJ+87c57jygneYORp5M25w1DD8Z705ebp00n kKWiyhHcxuJpOVr77E1SWJ8dn41ocutwwYCJHEduLTy1JfXf1solT6UM0HCXfr1k ap1/xmup65tSIrWarubMET7yjH4ro0EcOxlaHxIwqzdYC10uiuYRWPQ1MxK3EEpw Fgbo8jD1OPKMuJdndZrEr1xQO+3NhUx6Wby0p65R55ZK2CSXLVPkCR6sU89F89SK 2ECmxi7i4SzzLPKsPh5CeNX1v75drgCRBQIdQr2uF2reO3P22qu9SWEf6SMSewgq zrfInW9WNWB7EL81m7xO7tT+69UCAwEAAaOCApowggKWMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFE71+rlZSh1Gufyizvr9EuoOEUocMB8GA1UdIwQYMBaAFMsC FKXEBNb4QEM7Egysu1uMWeYTMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMC9DQjAyMTRBNUM0MDRENkY4NDA0MzNCMTIwQ0FDQkI1QjhDNTlF NjEzLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CM0EyNEYyMDFENjYxMUUyOEFDODgzN0M3 MkZEMUZGMi95d0lVcGNRRTF2aEFRenNTREt5N1c0eFo1aE0uY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTExNzAxNjAzNTQ0MzE0Njc3NS8wLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMTE3MDE2MDM1NDQzMTQ2Nzc1 LzAvNEVGNUZBQjk1OTRBMUQ0NkI5RkNBMkNFRkFGRDEyRUEwRTExNEExQy5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAGiBIgwDQYJKoZIhvcNAQELBQADggEBAJlX5S8b KlMjKdITNUHTVaWMR249qnPb+PH01/YYvfuO2tfpFj0xsHyHYAXpidVmUU2qsIxq fruJQvdwdHZHQJDmTHZdKj+AAPEsFQ68GGMEu3pJK6M3bzrR/974hTaVgqvZBMKp tvFBZvm+yVwg5L9QWK23HvMFKPMIBe/N731KRKG4K4uZUKh/kV+rknw+mvaZW8wF YN1Y7XI2hI/nk3e60/WVg/qSj6R9FBm6AHRCMqHEHdQvHC3cI8qHomnCat8syshZ Syv/PNV2h7+ev5zlm44WWNWnPx7tOdiYwfG5rB/27k1mgVPU13E46DoYuwvWWUS/ Aye69wtGkqQ+cr0= -----END CERTIFICATE-----Generated at Sun Jun 14 04:00:19 2026 by rpki-client