$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/0/E9ED8A9BE8453128BCDA3FDA2A2F98843847BC2F.cer File: E9ED8A9BE8453128BCDA3FDA2A2F98843847BC2F.cer (raw, json) Hash identifier: esk9QJNLHPkVhvYP/YXQySBh8eKY7dUs8ckemn/nPGg= Subject key identifier: E9:ED:8A:9B:E8:45:31:28:BC:DA:3F:DA:2A:2F:98:84:38:47:BC:2F Authority key identifier: CB:02:14:A5:C4:04:D6:F8:40:43:3B:12:0C:AC:BB:5B:8C:59:E6:13 Certificate issuer: /CN=A9162E3D0001/serialNumber=CB0214A5C404D6F840433B120CACBB5B8C59E613 Certificate serial: 2224E8E8206C68FCF13DCB579BBCB1783372205F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1094488874987552769/0/E9ED8A9BE8453128BCDA3FDA2A2F98843847BC2F.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1094488874987552769/0/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Thu 09 Apr 2026 05:03:03 +0000 Certificate not after: Thu 08 Apr 2027 05:08:03 +0000 Subordinate resources: IP: 144.79.4.0/23 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 17 Apr 2026 14:37:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:24:e8:e8:20:6c:68:fc:f1:3d:cb:57:9b:bc:b1:78:33:72:20:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=CB0214A5C404D6F840433B120CACBB5B8C59E613 Validity Not Before: Apr 9 05:03:03 2026 GMT Not After : Apr 8 05:08:03 2027 GMT Subject: CN=E9ED8A9BE8453128BCDA3FDA2A2F98843847BC2F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:07:71:e4:59:2b:3d:4a:8b:d7:a0:7c:8e:6c: 9d:b5:12:b6:67:9a:f0:d5:0b:ba:2d:4f:2e:ee:c5: 82:fc:84:f2:84:e2:ab:b3:e1:b5:9a:41:5d:64:b8: 98:e4:10:9f:6b:b6:0b:0a:04:14:f2:1c:c2:00:aa: ed:08:e2:8b:eb:cd:b3:5e:d3:c0:97:d6:cb:f3:cd: ec:9b:70:e4:f9:eb:a0:5e:7c:79:b0:89:83:84:6f: 37:78:26:32:5b:a5:d8:35:03:47:e2:09:e4:15:11: fb:b4:71:33:28:8e:89:2c:ae:f3:90:ec:7d:76:1f: 4b:f3:d5:81:3f:dd:a2:a3:d7:a9:e2:d1:3d:f7:69: da:5d:f2:f5:dd:e6:bc:47:2f:08:bc:c0:36:67:6c: 32:41:d2:c8:21:7d:9a:72:6f:2d:17:6d:2e:a4:73: 89:82:80:20:76:83:8f:5b:20:5a:ef:8c:9c:24:74: 27:ac:07:36:66:72:2c:25:7f:64:5c:4f:0e:ad:8f: e5:4f:59:f5:40:b4:f0:fd:6b:3e:56:b6:9a:ee:01: 18:f4:d6:4c:08:03:3a:09:a3:3e:d4:57:19:34:2f: e6:8b:ea:22:73:0f:d2:61:86:fc:31:b1:a2:c5:8c: 37:71:7f:50:62:d9:80:48:6a:25:21:3c:60:7f:65: 66:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: E9:ED:8A:9B:E8:45:31:28:BC:DA:3F:DA:2A:2F:98:84:38:47:BC:2F X509v3 Authority Key Identifier: keyid:CB:02:14:A5:C4:04:D6:F8:40:43:3B:12:0C:AC:BB:5B:8C:59:E6:13 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1094488874987552769/0/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1094488874987552769/0/E9ED8A9BE8453128BCDA3FDA2A2F98843847BC2F.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 144.79.4.0/23 Signature Algorithm: sha256WithRSAEncryption bc:12:07:78:8e:8e:55:71:66:b5:84:8a:b9:7b:c4:cd:e8:af: 2d:4a:7a:f0:35:a4:7c:c7:0f:fa:c7:bf:7b:2d:f2:68:e9:02: ec:0f:95:d2:c6:37:c0:bb:f9:7a:0b:51:1b:4f:e4:1d:71:c9: b1:6a:92:6e:c9:81:d7:87:63:80:f7:27:a8:5d:a5:2a:20:ba: 3a:0c:c3:99:7b:c4:b4:5d:ab:79:cc:cf:a8:48:bc:99:f8:b7: aa:f1:2e:70:52:d3:db:ae:6d:ee:ba:75:32:e6:86:01:ba:aa: 9c:0c:c6:b4:07:69:c8:0b:49:01:68:19:2c:ba:02:88:bb:5c: 6f:27:2a:c3:88:13:38:3f:b3:aa:b0:2c:1e:43:26:7d:af:58: 0d:8d:21:08:92:64:48:d7:1a:31:98:64:a7:fc:a9:7c:c6:16: 57:ad:7b:d2:8b:86:1a:73:da:4b:4a:1a:15:cd:4a:9d:d7:16: b6:18:3d:19:e7:a1:d4:5e:b7:96:86:70:96:ce:d6:c3:d6:cd: 84:e5:25:89:d7:2b:18:dc:c5:f0:f5:13:4d:bd:ee:d0:41:e5: 36:6e:4c:1f:b5:87:f2:7c:24:4e:8e:e2:f6:0e:72:01:04:66: 02:6f:a3:5a:74:a0:52:af:0b:26:f1:4b:2c:9c:73:ad:fe:50: 17:da:27:e4 -----BEGIN CERTIFICATE----- MIIFpzCCBI+gAwIBAgIUIiTo6CBsaPzxPctXm7yxeDNyIF8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhDQjAyMTRBNUM0 MDRENkY4NDA0MzNCMTIwQ0FDQkI1QjhDNTlFNjEzMB4XDTI2MDQwOTA1MDMwM1oX DTI3MDQwODA1MDgwM1owMzExMC8GA1UEAxMoRTlFRDhBOUJFODQ1MzEyOEJDREEz RkRBMkEyRjk4ODQzODQ3QkMyRjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOUHceRZKz1Ki9egfI5snbUStmea8NULui1PLu7FgvyE8oTiq7PhtZpBXWS4 mOQQn2u2CwoEFPIcwgCq7Qjii+vNs17TwJfWy/PN7Jtw5PnroF58ebCJg4RvN3gm Mlul2DUDR+IJ5BUR+7RxMyiOiSyu85DsfXYfS/PVgT/doqPXqeLRPfdp2l3y9d3m vEcvCLzANmdsMkHSyCF9mnJvLRdtLqRziYKAIHaDj1sgWu+MnCR0J6wHNmZyLCV/ ZFxPDq2P5U9Z9UC08P1rPla2mu4BGPTWTAgDOgmjPtRXGTQv5ovqInMP0mGG/DGx osWMN3F/UGLZgEhqJSE8YH9lZlkCAwEAAaOCApowggKWMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFOntipvoRTEovNo/2iovmIQ4R7wvMB8GA1UdIwQYMBaAFMsC FKXEBNb4QEM7Egysu1uMWeYTMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMC9DQjAyMTRBNUM0MDRENkY4NDA0MzNCMTIwQ0FDQkI1QjhDNTlF NjEzLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CM0EyNEYyMDFENjYxMUUyOEFDODgzN0M3 MkZEMUZGMi95d0lVcGNRRTF2aEFRenNTREt5N1c0eFo1aE0uY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTA5NDQ4ODg3NDk4NzU1Mjc2OS8wLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDk0NDg4ODc0OTg3NTUyNzY5 LzAvRTlFRDhBOUJFODQ1MzEyOEJDREEzRkRBMkEyRjk4ODQzODQ3QkMyRi5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAGQTwQwDQYJKoZIhvcNAQELBQADggEBALwSB3iO jlVxZrWEirl7xM3ory1KevA1pHzHD/rHv3st8mjpAuwPldLGN8C7+XoLURtP5B1x ybFqkm7JgdeHY4D3J6hdpSogujoMw5l7xLRdq3nMz6hIvJn4t6rxLnBS09uube66 dTLmhgG6qpwMxrQHacgLSQFoGSy6Aoi7XG8nKsOIEzg/s6qwLB5DJn2vWA2NIQiS ZEjXGjGYZKf8qXzGFlete9KLhhpz2ktKGhXNSp3XFrYYPRnnodRet5aGcJbO1sPW zYTlJYnXKxjcxfD1E0297tBB5TZuTB+1h/J8JE6O4vYOcgEEZgJvo1p0oFKvCybx Syycc63+UBfaJ+Q= -----END CERTIFICATE-----Generated at Thu Apr 16 23:53:03 2026 by rpki-client