$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/0/4E7B315B0F1461798439074524DE185E057B324F.cer File: 4E7B315B0F1461798439074524DE185E057B324F.cer (raw, json) Hash identifier: ApQsrLzf5R/OMMDHKfEgSAfQkFzuTTX4jDbU0hwW6f0= Subject key identifier: 4E:7B:31:5B:0F:14:61:79:84:39:07:45:24:DE:18:5E:05:7B:32:4F Authority key identifier: CB:02:14:A5:C4:04:D6:F8:40:43:3B:12:0C:AC:BB:5B:8C:59:E6:13 Certificate issuer: /CN=A9162E3D0001/serialNumber=CB0214A5C404D6F840433B120CACBB5B8C59E613 Certificate serial: 6A6054782F2A8441F393290EC455C0D2556506B2 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1097412865305870337/0/4E7B315B0F1461798439074524DE185E057B324F.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1097412865305870337/0/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Fri 17 Apr 2026 06:41:58 +0000 Certificate not after: Fri 16 Apr 2027 06:46:58 +0000 Subordinate resources: IP: 160.250.14.0/23 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Apr 2026 10:07:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:60:54:78:2f:2a:84:41:f3:93:29:0e:c4:55:c0:d2:55:65:06:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=CB0214A5C404D6F840433B120CACBB5B8C59E613 Validity Not Before: Apr 17 06:41:58 2026 GMT Not After : Apr 16 06:46:58 2027 GMT Subject: CN=4E7B315B0F1461798439074524DE185E057B324F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:1d:f7:db:f0:aa:cc:d6:7d:37:1a:bb:34:42: 42:7a:5d:85:eb:f4:6a:6b:0d:47:08:77:9a:82:e5: 6f:b2:a6:3a:37:45:96:29:dd:41:82:8e:39:e5:98: 13:3e:68:83:d5:43:f9:60:98:4b:9d:83:78:f8:ae: 7f:b7:67:05:ed:b6:21:e1:b0:c1:22:34:e0:fe:6a: 92:cd:c6:dd:24:b8:75:68:e8:6c:40:4c:b2:c5:f9: e1:7f:d7:5e:1e:9d:c5:52:53:b7:e7:da:6d:f2:09: 37:dd:35:e3:ec:a1:03:15:10:23:36:53:32:26:61: b6:b7:e7:ec:9e:2c:6c:7d:1d:cf:51:48:dc:bc:43: a0:e9:56:b0:34:d7:1b:13:ec:51:8d:51:c9:a4:e4: 67:30:45:50:4e:d5:a1:cf:55:f5:17:82:ef:6e:52: b8:eb:28:4d:1a:47:15:d4:5a:cc:a6:4e:1b:07:52: ee:87:39:3b:eb:87:74:c1:34:a8:fe:e6:65:82:a7: 7e:9d:fb:f3:fc:be:5d:92:c3:82:b5:84:ea:f4:29: b2:89:bb:66:54:42:d1:ab:b2:b1:bc:00:1e:9d:c6: f8:d5:b7:95:aa:7c:07:31:fd:52:7a:46:b3:7e:6c: df:36:b3:cb:b3:11:3a:cd:49:f7:ed:3f:70:8f:df: bc:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 4E:7B:31:5B:0F:14:61:79:84:39:07:45:24:DE:18:5E:05:7B:32:4F X509v3 Authority Key Identifier: keyid:CB:02:14:A5:C4:04:D6:F8:40:43:3B:12:0C:AC:BB:5B:8C:59:E6:13 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1097412865305870337/0/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1097412865305870337/0/4E7B315B0F1461798439074524DE185E057B324F.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.250.14.0/23 Signature Algorithm: sha256WithRSAEncryption 1a:2b:8a:27:98:21:f5:e4:a7:e4:64:81:ba:1c:a4:34:2c:01: 77:c5:80:76:5e:97:b8:ca:9b:f8:48:39:fc:cb:ec:7c:18:7c: 08:c3:b4:a8:56:7a:cc:b8:62:34:74:a9:c7:ac:f0:ad:1b:f5: 2e:b8:70:4b:67:81:d1:cb:77:f2:d9:89:cc:c6:b2:4b:c6:f6: 6e:03:9b:76:4b:33:65:cc:24:ed:c7:af:25:91:64:29:d9:d9: ad:b5:1b:a8:7b:56:ff:f0:80:4e:3c:bb:d9:9d:a5:25:35:3f: da:d0:b4:1e:11:9a:9e:25:9d:77:14:fc:1a:09:67:c9:5b:01: 3b:9d:62:7d:a5:62:13:11:78:89:ab:56:73:38:0e:8e:6d:66: 93:45:20:b4:12:b7:c7:9e:3a:07:c3:8f:80:5a:1a:06:47:d5: 7f:b2:3f:00:45:14:c3:26:6d:c9:41:c1:a8:04:47:36:57:d3: cc:bc:22:c6:4c:ff:4a:39:29:0f:de:84:e2:1a:71:74:52:93: 34:6d:b1:af:da:7a:47:8c:8a:f4:9b:b2:d4:c9:61:90:53:54: 21:9f:f7:aa:db:c7:9c:7e:f0:d3:2a:cc:48:13:21:26:ea:7d: 18:75:f4:9e:37:26:19:29:46:17:39:89:8f:b0:bf:fe:90:fc: 6d:e3:e0:c1 -----BEGIN CERTIFICATE----- MIIFpzCCBI+gAwIBAgIUamBUeC8qhEHzkykOxFXA0lVlBrIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhDQjAyMTRBNUM0 MDRENkY4NDA0MzNCMTIwQ0FDQkI1QjhDNTlFNjEzMB4XDTI2MDQxNzA2NDE1OFoX DTI3MDQxNjA2NDY1OFowMzExMC8GA1UEAxMoNEU3QjMxNUIwRjE0NjE3OTg0Mzkw NzQ1MjRERTE4NUUwNTdCMzI0RjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOMd99vwqszWfTcauzRCQnpdhev0amsNRwh3moLlb7KmOjdFlindQYKOOeWY Ez5og9VD+WCYS52DePiuf7dnBe22IeGwwSI04P5qks3G3SS4dWjobEBMssX54X/X Xh6dxVJTt+fabfIJN9014+yhAxUQIzZTMiZhtrfn7J4sbH0dz1FI3LxDoOlWsDTX GxPsUY1RyaTkZzBFUE7Voc9V9ReC725SuOsoTRpHFdRazKZOGwdS7oc5O+uHdME0 qP7mZYKnfp378/y+XZLDgrWE6vQpsom7ZlRC0auysbwAHp3G+NW3lap8BzH9UnpG s35s3zazy7MROs1J9+0/cI/fvB0CAwEAAaOCApowggKWMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFE57MVsPFGF5hDkHRSTeGF4FezJPMB8GA1UdIwQYMBaAFMsC FKXEBNb4QEM7Egysu1uMWeYTMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMC9DQjAyMTRBNUM0MDRENkY4NDA0MzNCMTIwQ0FDQkI1QjhDNTlF NjEzLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CM0EyNEYyMDFENjYxMUUyOEFDODgzN0M3 MkZEMUZGMi95d0lVcGNRRTF2aEFRenNTREt5N1c0eFo1aE0uY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTA5NzQxMjg2NTMwNTg3MDMzNy8wLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDk3NDEyODY1MzA1ODcwMzM3 LzAvNEU3QjMxNUIwRjE0NjE3OTg0MzkwNzQ1MjRERTE4NUUwNTdCMzI0Ri5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAGg+g4wDQYJKoZIhvcNAQELBQADggEBABoriieY IfXkp+RkgbocpDQsAXfFgHZel7jKm/hIOfzL7HwYfAjDtKhWesy4YjR0qces8K0b 9S64cEtngdHLd/LZiczGskvG9m4Dm3ZLM2XMJO3HryWRZCnZ2a21G6h7Vv/wgE48 u9mdpSU1P9rQtB4Rmp4lnXcU/BoJZ8lbATudYn2lYhMReImrVnM4Do5tZpNFILQS t8eeOgfDj4BaGgZH1X+yPwBFFMMmbclBwagERzZX08y8IsZM/0o5KQ/ehOIacXRS kzRtsa/aekeMivSbstTJYZBTVCGf96rbx5x+8NMqzEgTISbqfRh19J43JhkpRhc5 iY+wv/6Q/G3j4ME= -----END CERTIFICATE-----Generated at Sat Apr 18 23:49:31 2026 by rpki-client