$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4BD2BCAA35B0AE87654A70D7633583B2BC5C346A.cer File: 4BD2BCAA35B0AE87654A70D7633583B2BC5C346A.cer (raw, json) Hash identifier: jugE7FYGVpn8RBBLL4gG3TpqJxMR8CdanBadAeGPYb0= Subject key identifier: 4B:D2:BC:AA:35:B0:AE:87:65:4A:70:D7:63:35:83:B2:BC:5C:34:6A Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Certificate serial: 61617A6169A26D90A6E9DCD5821929042FCDCFE9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1065579534395047939/0/4BD2BCAA35B0AE87654A70D7633583B2BC5C346A.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1065579534395047939/0/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Thu 28 May 2026 07:46:14 +0000 Certificate not after: Thu 27 May 2027 07:51:14 +0000 Subordinate resources: AS: 59065 IP: 103.59.120.0/22 IP: 2402:7080::/32 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 16:02:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:61:7a:61:69:a2:6d:90:a6:e9:dc:d5:82:19:29:04:2f:cd:cf:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Validity Not Before: May 28 07:46:14 2026 GMT Not After : May 27 07:51:14 2027 GMT Subject: CN=4BD2BCAA35B0AE87654A70D7633583B2BC5C346A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:ce:2b:23:41:b2:56:3a:c2:a2:73:f5:b8:91: d7:f4:ef:19:f3:fa:82:72:8a:7d:c9:7a:c4:e5:d8: f3:63:d2:df:e4:98:f1:2d:e2:fd:05:09:bd:be:4c: ad:3c:5e:94:fe:a6:8b:e2:81:bb:fa:60:88:9c:b7: c0:3c:bf:bf:91:6a:3a:74:04:3c:db:47:8e:03:3f: 26:61:e0:1d:96:24:c1:bb:e8:ff:18:81:a0:1d:59: 62:9b:59:84:39:ee:cb:38:1e:12:0f:9b:ce:ba:75: 3b:f7:3b:e4:53:99:5f:2d:fe:19:b6:f4:bf:87:f7: 3f:01:9b:d0:39:37:d0:7c:19:b6:e1:b9:40:70:76: 5b:8d:29:28:41:db:6e:8f:3c:9a:bd:36:ab:73:b6: e1:a3:8c:d5:1e:97:e6:9c:19:47:d0:e4:75:32:9e: 1a:6e:d8:96:ca:3b:e3:47:89:3d:70:4e:62:38:ae: 25:d8:c1:b5:5f:3e:73:9e:9f:b5:b5:8d:69:bf:3c: 84:ef:22:9b:48:08:ac:19:c4:14:e5:72:60:85:45: d1:d2:e6:bd:af:ef:87:55:1e:19:d7:65:dd:66:1f: fc:d9:5d:23:da:51:8f:76:0c:92:2f:87:ac:ed:a2: 08:3c:7b:4e:34:be:d8:20:44:2c:67:e0:64:f7:60: 77:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 4B:D2:BC:AA:35:B0:AE:87:65:4A:70:D7:63:35:83:B2:BC:5C:34:6A X509v3 Authority Key Identifier: keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534395047939/0/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534395047939/0/4BD2BCAA35B0AE87654A70D7633583B2BC5C346A.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.59.120.0/22 IPv6: 2402:7080::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 59065 Signature Algorithm: sha256WithRSAEncryption 02:ad:de:60:02:f9:36:ac:e8:fc:6b:c3:49:a1:79:a3:8c:ba: dd:94:18:d7:30:15:85:4e:eb:f8:92:1b:d6:67:6d:e3:b9:65: f9:bd:50:e6:82:2e:8a:5b:44:5f:41:2b:96:0e:4e:6a:4b:ca: bf:b0:67:1b:07:a7:0d:47:3e:e5:f9:04:89:c3:9f:2e:cb:47: 54:c2:f4:08:62:a4:d6:dd:99:4f:9b:d9:fe:0b:14:de:99:1e: 0c:15:ec:ec:f7:01:f4:15:67:5d:7e:e1:f9:b0:b6:f9:1d:b2: 62:81:fb:55:6e:49:4a:ae:76:77:6b:3c:d9:4f:f8:67:50:5f: 44:a9:1f:87:d5:53:1d:5b:7d:74:67:3a:75:a8:17:c7:57:c7: f1:d6:0e:0e:93:3b:77:4a:a6:c9:98:b3:e6:31:e9:de:de:e8: 23:ec:01:a3:7a:26:8d:49:65:63:5c:1d:3c:4c:78:72:00:3e: 4f:d1:d1:7a:1b:f6:54:9b:57:25:48:c8:09:c2:db:1d:fd:69: cc:7c:38:6a:af:43:08:24:d1:7e:01:26:9e:79:65:19:96:4b: e1:3e:77:78:9f:a6:e2:56:78:85:2b:4b:ef:2d:a7:56:35:8e: 29:25:a6:59:fc:14:dd:8e:0a:ff:e3:52:e8:a5:5f:ef:20:7e: c4:3e:69:df -----BEGIN CERTIFICATE----- MIIF0jCCBLqgAwIBAgIUYWF6YWmibZCm6dzVghkpBC/Nz+kwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDUyODA3NDYxNFoX DTI3MDUyNzA3NTExNFowMzExMC8GA1UEAxMoNEJEMkJDQUEzNUIwQUU4NzY1NEE3 MEQ3NjMzNTgzQjJCQzVDMzQ2QTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMTOKyNBslY6wqJz9biR1/TvGfP6gnKKfcl6xOXY82PS3+SY8S3i/QUJvb5M rTxelP6mi+KBu/pgiJy3wDy/v5FqOnQEPNtHjgM/JmHgHZYkwbvo/xiBoB1ZYptZ hDnuyzgeEg+bzrp1O/c75FOZXy3+Gbb0v4f3PwGb0Dk30HwZtuG5QHB2W40pKEHb bo88mr02q3O24aOM1R6X5pwZR9DkdTKeGm7Ylso740eJPXBOYjiuJdjBtV8+c56f tbWNab88hO8im0gIrBnEFOVyYIVF0dLmva/vh1UeGddl3WYf/NldI9pRj3YMki+H rO2iCDx7TjS+2CBELGfgZPdgd5sCAwEAAaOCAsUwggLBMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFEvSvKo1sK6HZUpw12M1g7K8XDRqMB8GA1UdIwQYMBaAFKVu hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTA2NTU3OTUzNDM5NTA0NzkzOS8wLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDY1NTc5NTM0Mzk1MDQ3OTM5 LzAvNEJEMkJDQUEzNUIwQUU4NzY1NEE3MEQ3NjMzNTgzQjJCQzVDMzQ2QS5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUH AQcBAf8EHzAdMAwEAgABMAYDBAJnO3gwDQQCAAIwBwMFACQCcIAwGgYIKwYBBQUH AQgBAf8ECzAJoAcwBQIDAOa5MA0GCSqGSIb3DQEBCwUAA4IBAQACrd5gAvk2rOj8 a8NJoXmjjLrdlBjXMBWFTuv4khvWZ23juWX5vVDmgi6KW0RfQSuWDk5qS8q/sGcb B6cNRz7l+QSJw58uy0dUwvQIYqTW3ZlPm9n+CxTemR4MFezs9wH0FWddfuH5sLb5 HbJigftVbklKrnZ3azzZT/hnUF9EqR+H1VMdW310Zzp1qBfHV8fx1g4Okzt3SqbJ mLPmMene3ugj7AGjeiaNSWVjXB08THhyAD5P0dF6G/ZUm1clSMgJwtsd/WnMfDhq r0MIJNF+ASaeeWUZlkvhPnd4n6biVniFK0vvLadWNY4pJaZZ/BTdjgr/41LopV/v IH7EPmnf -----END CERTIFICATE-----Generated at Sun Jun 14 05:50:34 2026 by rpki-client