$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4F06ECB85C4F43A23E7B27632E953F7FAA477ED5.cer File: 4F06ECB85C4F43A23E7B27632E953F7FAA477ED5.cer (raw, json) Hash identifier: oLxiZR/4rZ04frOMLzHTpMJ4iLwmQQP6Ya/woQ4q8Hw= Subject key identifier: 4F:06:EC:B8:5C:4F:43:A2:3E:7B:27:63:2E:95:3F:7F:AA:47:7E:D5 Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Certificate serial: 4F49043BC10FFD8A474A7936E2D9B73ED3F4F3FA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1097313663875809283/0/4F06ECB85C4F43A23E7B27632E953F7FAA477ED5.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1097313663875809283/0/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Fri 17 Apr 2026 00:07:45 +0000 Certificate not after: Fri 16 Apr 2027 00:12:45 +0000 Subordinate resources: IP: 58.14.0.0/15 IP: 210.77.192.0/19 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 17:12:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:49:04:3b:c1:0f:fd:8a:47:4a:79:36:e2:d9:b7:3e:d3:f4:f3:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Validity Not Before: Apr 17 00:07:45 2026 GMT Not After : Apr 16 00:12:45 2027 GMT Subject: CN=4F06ECB85C4F43A23E7B27632E953F7FAA477ED5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:54:38:82:86:1c:5c:19:5c:5b:79:72:c0:ba: 54:c0:44:34:57:f8:13:05:52:2a:c8:b7:37:fc:98: 4e:30:ab:6e:c8:33:d4:aa:00:47:00:4e:3d:9e:b9: 51:a2:6c:1b:56:a9:53:df:9f:66:8b:e5:0e:8f:a6: d6:38:b2:c3:3f:ac:0b:56:dc:2b:d9:1f:7b:39:dc: c3:16:77:af:22:f3:fa:89:2b:c2:c0:9c:c1:b5:b6: 94:2e:5a:de:f4:1a:e0:1f:19:b7:c6:54:45:6e:45: cf:3b:d3:66:8b:1f:ab:e3:8e:ee:0d:3a:60:84:0a: 2e:bb:d4:85:c7:9b:56:f0:91:65:9e:20:8f:12:dc: 91:d9:a3:89:11:d7:5f:3e:4e:6b:a9:20:6b:cd:ed: 0c:e4:03:95:ad:de:27:64:c8:e6:c5:19:22:ab:cc: d9:eb:df:2c:8b:90:c8:8a:6c:c1:d4:98:09:08:23: 8d:44:ba:a7:84:2a:a5:b5:ba:54:c5:75:c2:5d:3f: 18:64:83:63:c6:46:5f:df:88:1f:9e:92:97:af:7d: e9:25:96:aa:a7:0a:5a:97:a8:a6:d6:e5:a5:9c:ff: 16:64:6c:49:3e:3d:b4:22:85:45:3e:85:69:da:d6: ca:ea:71:a3:6a:17:e0:a8:56:8f:7e:0f:d7:6a:b1: ff:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 4F:06:EC:B8:5C:4F:43:A2:3E:7B:27:63:2E:95:3F:7F:AA:47:7E:D5 X509v3 Authority Key Identifier: keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1097313663875809283/0/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1097313663875809283/0/4F06ECB85C4F43A23E7B27632E953F7FAA477ED5.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 58.14.0.0/15 210.77.192.0/19 Signature Algorithm: sha256WithRSAEncryption 30:fb:eb:36:29:89:0a:34:98:db:3a:74:ce:f8:1b:1f:f3:c1: 96:c8:88:d5:f9:43:1a:24:ac:a5:eb:64:ad:c9:9c:bd:18:e5: 1e:0f:f9:39:00:82:6f:74:24:10:ce:75:c9:e3:7e:4f:70:ee: 34:03:3f:14:31:05:ed:9e:14:98:ef:ff:78:00:e6:82:72:c4: f0:d7:4d:03:9a:40:48:42:29:dd:db:fe:86:87:0e:54:1b:0a: 66:ec:db:b6:04:e6:46:51:6d:da:93:ce:0e:3f:1b:d6:aa:4d: 97:ba:f1:e7:36:e0:68:bc:58:45:12:61:96:62:42:7f:42:45: 0d:4b:ec:c1:17:7c:ef:f8:62:b2:06:95:5e:55:1a:68:b6:42: fc:77:e0:d5:e6:a4:cf:71:8b:cb:d2:c8:7d:4c:5b:0d:82:28: 2f:9e:1f:55:06:58:f5:9c:17:1a:9d:26:07:9f:51:4a:2c:c6: 63:1b:78:ab:fc:c2:98:bb:f9:e6:80:3b:e2:7f:96:1b:bd:72: b9:96:20:64:a2:ec:50:a9:62:da:f5:1d:ee:9a:41:58:3e:8d: 3f:63:e2:f7:5e:f8:9e:d1:75:d5:11:61:1b:59:6e:0d:33:06: 96:6d:b4:80:98:b1:ed:dc:24:d4:7e:84:bd:51:bf:de:86:1f: 66:e8:0b:63 -----BEGIN CERTIFICATE----- MIIFrDCCBJSgAwIBAgIUT0kEO8EP/YpHSnk24tm3PtP08/owDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDQxNzAwMDc0NVoX DTI3MDQxNjAwMTI0NVowMzExMC8GA1UEAxMoNEYwNkVDQjg1QzRGNDNBMjNFN0Iy NzYzMkU5NTNGN0ZBQTQ3N0VENTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAK5UOIKGHFwZXFt5csC6VMBENFf4EwVSKsi3N/yYTjCrbsgz1KoARwBOPZ65 UaJsG1apU9+fZovlDo+m1jiywz+sC1bcK9kfezncwxZ3ryLz+okrwsCcwbW2lC5a 3vQa4B8Zt8ZURW5FzzvTZosfq+OO7g06YIQKLrvUhcebVvCRZZ4gjxLckdmjiRHX Xz5Oa6kga83tDOQDla3eJ2TI5sUZIqvM2evfLIuQyIpswdSYCQgjjUS6p4QqpbW6 VMV1wl0/GGSDY8ZGX9+IH56Sl6996SWWqqcKWpeoptblpZz/FmRsST49tCKFRT6F adrWyupxo2oX4KhWj34P12qx/8sCAwEAAaOCAp8wggKbMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFE8G7LhcT0OiPnsnYy6VP3+qR37VMB8GA1UdIwQYMBaAFKVu hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTA5NzMxMzY2Mzg3NTgwOTI4My8wLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDk3MzEzNjYzODc1ODA5Mjgz LzAvNEYwNkVDQjg1QzRGNDNBMjNFN0IyNzYzMkU5NTNGN0ZBQTQ3N0VENS5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwJAYIKwYBBQUH AQcBAf8EFTATMBEEAgABMAsDAwE6DgMEBdJNwDANBgkqhkiG9w0BAQsFAAOCAQEA MPvrNimJCjSY2zp0zvgbH/PBlsiI1flDGiSspetkrcmcvRjlHg/5OQCCb3QkEM51 yeN+T3DuNAM/FDEF7Z4UmO//eADmgnLE8NdNA5pASEIp3dv+hocOVBsKZuzbtgTm RlFt2pPODj8b1qpNl7rx5zbgaLxYRRJhlmJCf0JFDUvswRd87/hisgaVXlUaaLZC /Hfg1eakz3GLy9LIfUxbDYIoL54fVQZY9ZwXGp0mB59RSizGYxt4q/zCmLv55oA7 4n+WG71yuZYgZKLsUKli2vUd7ppBWD6NP2Pi9174ntF11RFhG1luDTMGlm20gJix 7dwk1H6EvVG/3oYfZugLYw== -----END CERTIFICATE-----Generated at Sat Apr 18 02:42:32 2026 by rpki-client