$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4853A1B317C47AA72B45FD086B1BD9E2F5AB6133.cer File: 4853A1B317C47AA72B45FD086B1BD9E2F5AB6133.cer (raw, json) Hash identifier: 9MnNS1x6dqWT/FVfVcgIIL5ePrO7atRe3Xp2jnHofOw= Subject key identifier: 48:53:A1:B3:17:C4:7A:A7:2B:45:FD:08:6B:1B:D9:E2:F5:AB:61:33 Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Certificate serial: 071AE7FC895AFEDC5A897B22264B40E0EFAE0097 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1097047430748241923/0/4853A1B317C47AA72B45FD086B1BD9E2F5AB6133.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1097047430748241923/0/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Thu 16 Apr 2026 06:35:16 +0000 Certificate not after: Thu 15 Apr 2027 06:40:16 +0000 Subordinate resources: AS: 63599 IP: 45.251.52.0/22 IP: 103.84.16.0/22 IP: 103.89.112.0/22 IP: 103.215.44.0/22 IP: 103.222.176.0/21 IP: 2404:d080::/32 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 17:12:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:1a:e7:fc:89:5a:fe:dc:5a:89:7b:22:26:4b:40:e0:ef:ae:00:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Validity Not Before: Apr 16 06:35:16 2026 GMT Not After : Apr 15 06:40:16 2027 GMT Subject: CN=4853A1B317C47AA72B45FD086B1BD9E2F5AB6133 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:18:4e:95:b5:d5:79:91:67:23:3c:84:74:90: 30:dc:ed:10:c2:19:4a:82:f8:4c:2a:4d:24:20:76: 1a:ce:32:d5:31:48:14:07:e4:f3:98:e0:5c:c5:a3: 9b:72:ae:ce:f2:a2:09:60:76:db:c0:65:60:f4:b3: 8d:e8:4d:2c:80:fa:fc:ba:7b:e1:20:95:34:67:a5: b3:d0:1c:71:4b:a7:b2:47:4c:19:ef:a4:5a:8c:15: 63:18:41:02:e4:54:77:71:71:36:ef:8e:81:79:40: de:60:7f:60:86:bc:86:09:f5:93:bb:d3:ce:b8:75: ad:52:f9:60:98:3b:a1:52:c7:bf:47:db:48:24:1f: ca:30:ad:6e:ee:93:c2:ca:38:ad:bb:d2:56:7a:8f: 70:ca:4a:84:56:cc:9f:ab:63:50:08:ea:7e:27:ab: 7e:fa:59:88:d3:0f:33:cc:ce:19:13:ef:73:d6:dc: 53:3b:3b:a7:bc:5c:7a:24:cc:db:3e:ea:55:a6:34: 59:02:e8:e2:77:6e:39:f6:4c:08:e0:e7:05:81:1b: 53:42:ac:4a:34:db:1f:f6:7d:02:fb:44:e9:8b:32: e4:ed:b4:f8:2d:49:eb:64:cb:c5:24:0f:e7:9d:fb: 29:48:84:83:4e:cd:9a:90:1f:c1:4a:4a:b9:b1:c9: ee:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 48:53:A1:B3:17:C4:7A:A7:2B:45:FD:08:6B:1B:D9:E2:F5:AB:61:33 X509v3 Authority Key Identifier: keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1097047430748241923/0/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1097047430748241923/0/4853A1B317C47AA72B45FD086B1BD9E2F5AB6133.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.251.52.0/22 103.84.16.0/22 103.89.112.0/22 103.215.44.0/22 103.222.176.0/21 IPv6: 2404:d080::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 63599 Signature Algorithm: sha256WithRSAEncryption 56:48:58:83:cb:6d:9f:e5:62:f6:15:6e:fb:94:b0:d2:83:f6: fd:9d:2d:9c:17:46:b2:41:0c:49:67:eb:cf:b3:7e:81:2d:f1: ac:e2:d9:4c:20:04:ae:ed:62:e7:e7:74:43:36:4f:0c:7d:e5: 2b:b5:c1:ec:5a:33:e1:d0:bc:37:91:8b:8f:c0:9c:be:7b:9e: 95:4e:43:3a:d3:d4:3e:db:6d:9d:e2:98:f8:5c:fc:2d:bd:ce: 60:4c:f9:85:58:ad:d3:bf:db:76:df:89:26:f7:80:89:6e:1c: ac:c0:fe:61:16:3d:ac:96:8f:48:58:0b:b9:a8:5a:3f:7a:fb: cd:7f:a9:fc:fe:81:88:b3:3d:55:db:71:cd:6c:dd:98:a4:ca: 02:74:1c:8c:bc:77:53:55:5d:03:c6:08:5f:73:ae:2f:96:7d: 98:cd:92:43:b0:9e:fa:50:80:86:9e:0e:ab:76:33:d5:1d:cf: dd:4d:0f:9d:ee:c5:31:af:1e:89:8c:8c:2e:95:24:e1:37:4e: ae:01:fd:f1:59:58:60:20:6d:25:1f:01:9c:11:77:e1:cf:b2: 73:d5:31:89:a3:28:b3:97:53:45:fb:47:7f:be:d3:ab:fb:49: 53:19:86:db:2e:18:90:1e:2c:f7:ad:aa:51:6b:f2:dd:a3:90: a1:9a:82:e3 -----BEGIN CERTIFICATE----- MIIF6jCCBNKgAwIBAgIUBxrn/Ila/txaiXsiJktA4O+uAJcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDQxNjA2MzUxNloX DTI3MDQxNTA2NDAxNlowMzExMC8GA1UEAxMoNDg1M0ExQjMxN0M0N0FBNzJCNDVG RDA4NkIxQkQ5RTJGNUFCNjEzMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALEYTpW11XmRZyM8hHSQMNztEMIZSoL4TCpNJCB2Gs4y1TFIFAfk85jgXMWj m3KuzvKiCWB228BlYPSzjehNLID6/Lp74SCVNGels9AccUunskdMGe+kWowVYxhB AuRUd3FxNu+OgXlA3mB/YIa8hgn1k7vTzrh1rVL5YJg7oVLHv0fbSCQfyjCtbu6T wso4rbvSVnqPcMpKhFbMn6tjUAjqfierfvpZiNMPM8zOGRPvc9bcUzs7p7xceiTM 2z7qVaY0WQLo4nduOfZMCODnBYEbU0KsSjTbH/Z9AvtE6Ysy5O20+C1J62TLxSQP 5537KUiEg07NmpAfwUpKubHJ7qUCAwEAAaOCAt0wggLZMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFEhTobMXxHqnK0X9CGsb2eL1q2EzMB8GA1UdIwQYMBaAFKVu hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTA5NzA0NzQzMDc0ODI0MTkyMy8wLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDk3MDQ3NDMwNzQ4MjQxOTIz LzAvNDg1M0ExQjMxN0M0N0FBNzJCNDVGRDA4NkIxQkQ5RTJGNUFCNjEzMy5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwRgYIKwYBBQUH AQcBAf8ENzA1MCQEAgABMB4DBAIt+zQDBAJnVBADBAJnWXADBAJn1ywDBANn3rAw DQQCAAIwBwMFACQE0IAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDAPhvMA0GCSqG SIb3DQEBCwUAA4IBAQBWSFiDy22f5WL2FW77lLDSg/b9nS2cF0ayQQxJZ+vPs36B LfGs4tlMIASu7WLn53RDNk8MfeUrtcHsWjPh0Lw3kYuPwJy+e56VTkM609Q+222d 4pj4XPwtvc5gTPmFWK3Tv9t234km94CJbhyswP5hFj2slo9IWAu5qFo/evvNf6n8 /oGIsz1V23HNbN2YpMoCdByMvHdTVV0Dxghfc64vln2YzZJDsJ76UICGng6rdjPV Hc/dTQ+d7sUxrx6JjIwulSThN06uAf3xWVhgIG0lHwGcEXfhz7Jz1TGJoyizl1NF +0d/vtOr+0lTGYbbLhiQHiz3rapRa/Ldo5ChmoLj -----END CERTIFICATE-----Generated at Fri Apr 17 20:33:13 2026 by rpki-client