$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0491F42A3990BD60D32248583741F141AC61F0EE.cer File: 0491F42A3990BD60D32248583741F141AC61F0EE.cer (raw, json) Hash identifier: EwBkUKf1wfk80u/faRt39oqC/8gRx33Y43foYO/NlKo= Subject key identifier: 04:91:F4:2A:39:90:BD:60:D3:22:48:58:37:41:F1:41:AC:61:F0:EE Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Certificate serial: 08EBB5EDDF5793CD7A0078B707ACB7A1F2E23DF4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1096979629178093570/0/0491F42A3990BD60D32248583741F141AC61F0EE.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1096979629178093570/0/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Thu 16 Apr 2026 02:00:26 +0000 Certificate not after: Thu 15 Apr 2027 02:05:26 +0000 Subordinate resources: AS: 9809 AS: 63600 -- 63601 IP: 116.214.32.0/19 IP: 116.214.128.0/17 IP: 202.170.128.0/19 IP: 210.75.0.0/19 IP: 219.235.224.0/19 IP: 2401:9600::/32 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 17:12:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:eb:b5:ed:df:57:93:cd:7a:00:78:b7:07:ac:b7:a1:f2:e2:3d:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Validity Not Before: Apr 16 02:00:26 2026 GMT Not After : Apr 15 02:05:26 2027 GMT Subject: CN=0491F42A3990BD60D32248583741F141AC61F0EE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:ce:d3:34:1a:24:6a:68:48:51:05:f7:76:e3: 71:63:76:37:1e:b7:78:4f:71:14:af:00:ae:12:54: e3:93:77:3b:ab:68:f4:ce:8c:8a:41:50:5d:40:ef: bf:38:f2:cf:04:ee:d4:da:57:05:4b:ae:4d:b4:5c: c1:61:f1:74:87:e2:02:f4:f4:3a:7f:2b:ff:5a:94: 62:36:86:44:50:6e:ff:18:85:a9:51:11:67:22:9c: 79:69:d1:d5:2a:fa:70:af:c9:77:6e:a5:23:2e:39: 86:07:16:89:de:98:1a:a4:5c:0b:f7:76:21:f9:2d: 1c:b7:a3:4b:43:f8:6c:53:fb:42:d2:0d:7d:0a:96: b1:7f:7d:d0:10:75:28:14:f7:39:c4:f8:41:cf:de: ca:a7:c1:ba:ca:57:76:e3:38:ad:a9:5a:c9:b9:57: a6:b1:33:70:b9:45:32:60:50:e6:df:28:98:87:f6: 1f:1d:7e:0d:2f:d8:f4:55:94:ba:83:d4:83:92:f1: 38:b5:75:fd:5f:38:d1:df:8c:9f:9f:d3:f3:08:6f: 8e:cd:e0:03:b6:43:1f:ba:34:be:27:89:1f:98:ba: 74:ae:41:5b:6f:66:95:78:bc:14:60:b3:99:81:d9: e1:19:56:b3:81:19:6c:26:38:97:db:3a:31:7a:89: 05:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 04:91:F4:2A:39:90:BD:60:D3:22:48:58:37:41:F1:41:AC:61:F0:EE X509v3 Authority Key Identifier: keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1096979629178093570/0/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1096979629178093570/0/0491F42A3990BD60D32248583741F141AC61F0EE.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 116.214.32.0/19 116.214.128.0/17 202.170.128.0/19 210.75.0.0/19 219.235.224.0/19 IPv6: 2401:9600::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 9809 63600-63601 Signature Algorithm: sha256WithRSAEncryption 76:dc:da:9b:6f:11:64:05:08:f0:9d:5e:5f:c8:ad:d1:72:e6: 7b:51:25:e8:90:0a:62:8f:2f:4e:bc:3c:cf:5e:06:5e:18:3e: 55:0e:f2:d7:9a:18:56:a2:9a:e0:e8:6c:73:07:a9:45:f2:47: ba:07:cf:8f:8c:b9:23:02:1f:86:e9:22:b7:10:de:a2:40:a6: 78:76:00:63:1f:e4:f0:e1:a5:ab:b1:ed:de:36:c1:0f:97:42: 43:45:8c:bd:f1:c8:eb:fc:43:94:83:d6:7f:d7:07:e5:ae:36: f2:87:1a:4c:b1:ac:5f:0d:4d:fa:77:4e:61:da:eb:40:ee:2d: 6a:50:fd:23:21:5d:55:b3:cf:f8:4c:e2:15:56:09:d3:89:60: 78:af:67:f4:f8:12:ff:e7:02:38:a0:08:6b:22:47:c2:4e:15: f3:e8:5f:22:4e:91:e9:5c:c0:f5:91:01:6d:dc:47:b5:9c:60: b7:f6:46:58:31:f6:31:3b:1a:bc:e6:45:98:01:8f:61:39:ed: 01:5a:79:e4:32:45:cd:b5:16:71:b4:1c:f9:26:f5:2c:d7:26: 66:42:80:87:4c:ca:e3:b3:e9:f7:86:c4:58:14:b2:c1:75:ec: 35:e9:06:87:1d:6d:87:ac:b4:79:31:c1:d4:b5:bb:98:f0:1a: 4e:15:1c:cf -----BEGIN CERTIFICATE----- MIIF9TCCBN2gAwIBAgIUCOu17d9Xk816AHi3B6y3ofLiPfQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDQxNjAyMDAyNloX DTI3MDQxNTAyMDUyNlowMzExMC8GA1UEAxMoMDQ5MUY0MkEzOTkwQkQ2MEQzMjI0 ODU4Mzc0MUYxNDFBQzYxRjBFRTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOTO0zQaJGpoSFEF93bjcWN2Nx63eE9xFK8ArhJU45N3O6to9M6MikFQXUDv vzjyzwTu1NpXBUuuTbRcwWHxdIfiAvT0On8r/1qUYjaGRFBu/xiFqVERZyKceWnR 1Sr6cK/Jd26lIy45hgcWid6YGqRcC/d2IfktHLejS0P4bFP7QtINfQqWsX990BB1 KBT3OcT4Qc/eyqfBuspXduM4ralayblXprEzcLlFMmBQ5t8omIf2Hx1+DS/Y9FWU uoPUg5LxOLV1/V840d+Mn5/T8whvjs3gA7ZDH7o0vieJH5i6dK5BW29mlXi8FGCz mYHZ4RlWs4EZbCY4l9s6MXqJBRUCAwEAAaOCAugwggLkMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFASR9Co5kL1g0yJIWDdB8UGsYfDuMB8GA1UdIwQYMBaAFKVu hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTA5Njk3OTYyOTE3ODA5MzU3MC8wLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDk2OTc5NjI5MTc4MDkzNTcw LzAvMDQ5MUY0MkEzOTkwQkQ2MEQzMjI0ODU4Mzc0MUYxNDFBQzYxRjBFRS5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwRgYIKwYBBQUH AQcBAf8ENzA1MCQEAgABMB4DBAV01iADBAd01oADBAXKqoADBAXSSwADBAXb6+Aw DQQCAAIwBwMFACQBlgAwJQYIKwYBBQUHAQgBAf8EFjAUoBIwEAICJlEwCgIDAPhw AgMA+HEwDQYJKoZIhvcNAQELBQADggEBAHbc2ptvEWQFCPCdXl/IrdFy5ntRJeiQ CmKPL068PM9eBl4YPlUO8teaGFaimuDobHMHqUXyR7oHz4+MuSMCH4bpIrcQ3qJA pnh2AGMf5PDhpaux7d42wQ+XQkNFjL3xyOv8Q5SD1n/XB+WuNvKHGkyxrF8NTfp3 TmHa60DuLWpQ/SMhXVWzz/hM4hVWCdOJYHivZ/T4Ev/nAjigCGsiR8JOFfPoXyJO kelcwPWRAW3cR7WcYLf2Rlgx9jE7GrzmRZgBj2E57QFaeeQyRc21FnG0HPkm9SzX JmZCgIdMyuOz6feGxFgUssF17DXpBocdbYestHkxwdS1u5jwGk4VHM8= -----END CERTIFICATE-----Generated at Fri Apr 17 22:12:47 2026 by rpki-client