$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/0/4E7B315B0F1461798439074524DE185E057B324F.cer File: 4E7B315B0F1461798439074524DE185E057B324F.cer (raw, json) Hash identifier: 9hMhIAeI7Zumit+dxJYOIL5BUPBbjGZIhPoefJe9sZw= Subject key identifier: 4E:7B:31:5B:0F:14:61:79:84:39:07:45:24:DE:18:5E:05:7B:32:4F Authority key identifier: CB:02:14:A5:C4:04:D6:F8:40:43:3B:12:0C:AC:BB:5B:8C:59:E6:13 Certificate issuer: /CN=A9162E3D0001/serialNumber=CB0214A5C404D6F840433B120CACBB5B8C59E613 Certificate serial: 32AA7B438F3D586EAB6081C0E7B4E8BE93185519 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1097412865305870337/0/4E7B315B0F1461798439074524DE185E057B324F.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1097412865305870337/0/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Fri 29 May 2026 08:39:23 +0000 Certificate not after: Fri 28 May 2027 08:44:23 +0000 Subordinate resources: IP: 160.250.14.0/23 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Jun 2026 13:43:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:aa:7b:43:8f:3d:58:6e:ab:60:81:c0:e7:b4:e8:be:93:18:55:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=CB0214A5C404D6F840433B120CACBB5B8C59E613 Validity Not Before: May 29 08:39:23 2026 GMT Not After : May 28 08:44:23 2027 GMT Subject: CN=4E7B315B0F1461798439074524DE185E057B324F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:1d:f7:db:f0:aa:cc:d6:7d:37:1a:bb:34:42: 42:7a:5d:85:eb:f4:6a:6b:0d:47:08:77:9a:82:e5: 6f:b2:a6:3a:37:45:96:29:dd:41:82:8e:39:e5:98: 13:3e:68:83:d5:43:f9:60:98:4b:9d:83:78:f8:ae: 7f:b7:67:05:ed:b6:21:e1:b0:c1:22:34:e0:fe:6a: 92:cd:c6:dd:24:b8:75:68:e8:6c:40:4c:b2:c5:f9: e1:7f:d7:5e:1e:9d:c5:52:53:b7:e7:da:6d:f2:09: 37:dd:35:e3:ec:a1:03:15:10:23:36:53:32:26:61: b6:b7:e7:ec:9e:2c:6c:7d:1d:cf:51:48:dc:bc:43: a0:e9:56:b0:34:d7:1b:13:ec:51:8d:51:c9:a4:e4: 67:30:45:50:4e:d5:a1:cf:55:f5:17:82:ef:6e:52: b8:eb:28:4d:1a:47:15:d4:5a:cc:a6:4e:1b:07:52: ee:87:39:3b:eb:87:74:c1:34:a8:fe:e6:65:82:a7: 7e:9d:fb:f3:fc:be:5d:92:c3:82:b5:84:ea:f4:29: b2:89:bb:66:54:42:d1:ab:b2:b1:bc:00:1e:9d:c6: f8:d5:b7:95:aa:7c:07:31:fd:52:7a:46:b3:7e:6c: df:36:b3:cb:b3:11:3a:cd:49:f7:ed:3f:70:8f:df: bc:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 4E:7B:31:5B:0F:14:61:79:84:39:07:45:24:DE:18:5E:05:7B:32:4F X509v3 Authority Key Identifier: keyid:CB:02:14:A5:C4:04:D6:F8:40:43:3B:12:0C:AC:BB:5B:8C:59:E6:13 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1097412865305870337/0/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1097412865305870337/0/4E7B315B0F1461798439074524DE185E057B324F.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.250.14.0/23 Signature Algorithm: sha256WithRSAEncryption be:93:93:38:17:51:ec:3e:fd:d3:c9:70:63:95:fb:68:4d:ca: 3b:ca:f7:c1:79:0d:e8:dd:38:ba:e9:4d:9b:30:3a:7f:7f:03: 31:d6:07:f9:10:8e:4f:66:4e:60:a7:dd:be:1c:8d:cc:5e:df: 91:fd:9c:bd:b4:1a:82:96:51:34:ea:ee:6f:e3:9c:82:98:95: 96:7c:60:60:d8:93:22:43:5d:0a:f3:b0:e1:bb:81:5c:1f:22: 96:17:4b:27:c3:db:65:77:1f:bd:28:b5:c2:76:7e:bc:9f:2a: 74:6d:3f:b3:23:4b:7a:de:8d:4f:f2:b7:ce:1f:2e:28:0f:39: 07:2a:61:bf:31:4a:00:c2:5a:f9:fd:1e:47:a0:c8:cb:aa:df: ab:af:44:d2:17:ee:24:66:13:48:93:90:76:3d:c4:7e:41:5a: 7e:72:41:75:13:84:29:57:04:f1:8a:8d:3c:c8:46:d1:41:cd: 72:21:55:61:e3:9f:4a:27:14:8f:be:25:f7:18:2a:95:cb:4a: 11:6e:b5:b9:63:11:e8:36:27:c7:27:9f:7f:31:bd:1a:a5:19: 4f:6f:0b:f9:3e:55:ea:af:f8:fb:ae:6b:ed:6f:a0:a4:70:25: cb:2e:3d:1c:79:84:05:38:53:42:57:6f:37:40:7e:35:e7:54: 32:7d:5c:2b -----BEGIN CERTIFICATE----- MIIFpzCCBI+gAwIBAgIUMqp7Q489WG6rYIHA57TovpMYVRkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhDQjAyMTRBNUM0 MDRENkY4NDA0MzNCMTIwQ0FDQkI1QjhDNTlFNjEzMB4XDTI2MDUyOTA4MzkyM1oX DTI3MDUyODA4NDQyM1owMzExMC8GA1UEAxMoNEU3QjMxNUIwRjE0NjE3OTg0Mzkw NzQ1MjRERTE4NUUwNTdCMzI0RjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOMd99vwqszWfTcauzRCQnpdhev0amsNRwh3moLlb7KmOjdFlindQYKOOeWY Ez5og9VD+WCYS52DePiuf7dnBe22IeGwwSI04P5qks3G3SS4dWjobEBMssX54X/X Xh6dxVJTt+fabfIJN9014+yhAxUQIzZTMiZhtrfn7J4sbH0dz1FI3LxDoOlWsDTX GxPsUY1RyaTkZzBFUE7Voc9V9ReC725SuOsoTRpHFdRazKZOGwdS7oc5O+uHdME0 qP7mZYKnfp378/y+XZLDgrWE6vQpsom7ZlRC0auysbwAHp3G+NW3lap8BzH9UnpG s35s3zazy7MROs1J9+0/cI/fvB0CAwEAAaOCApowggKWMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFE57MVsPFGF5hDkHRSTeGF4FezJPMB8GA1UdIwQYMBaAFMsC FKXEBNb4QEM7Egysu1uMWeYTMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMC9DQjAyMTRBNUM0MDRENkY4NDA0MzNCMTIwQ0FDQkI1QjhDNTlF NjEzLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CM0EyNEYyMDFENjYxMUUyOEFDODgzN0M3 MkZEMUZGMi95d0lVcGNRRTF2aEFRenNTREt5N1c0eFo1aE0uY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTA5NzQxMjg2NTMwNTg3MDMzNy8wLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDk3NDEyODY1MzA1ODcwMzM3 LzAvNEU3QjMxNUIwRjE0NjE3OTg0MzkwNzQ1MjRERTE4NUUwNTdCMzI0Ri5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAGg+g4wDQYJKoZIhvcNAQELBQADggEBAL6TkzgX Uew+/dPJcGOV+2hNyjvK98F5DejdOLrpTZswOn9/AzHWB/kQjk9mTmCn3b4cjcxe 35H9nL20GoKWUTTq7m/jnIKYlZZ8YGDYkyJDXQrzsOG7gVwfIpYXSyfD22V3H70o tcJ2fryfKnRtP7MjS3rejU/yt84fLigPOQcqYb8xSgDCWvn9HkegyMuq36uvRNIX 7iRmE0iTkHY9xH5BWn5yQXUThClXBPGKjTzIRtFBzXIhVWHjn0onFI++JfcYKpXL ShFutbljEeg2J8cnn38xvRqlGU9vC/k+Veqv+Puua+1voKRwJcsuPRx5hAU4U0JX bzdAfjXnVDJ9XCs= -----END CERTIFICATE-----Generated at Thu Jun 4 14:12:15 2026 by rpki-client