$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/0/4FC053560F4D1C49194F692E10C37F5A5CF08392.cer File: 4FC053560F4D1C49194F692E10C37F5A5CF08392.cer (raw, json) Hash identifier: ZIc/9ygtKRy8xOi6zBOHucL0JJRj3xpZKtR3e7vi7iM= Subject key identifier: 4F:C0:53:56:0F:4D:1C:49:19:4F:69:2E:10:C3:7F:5A:5C:F0:83:92 Authority key identifier: CB:02:14:A5:C4:04:D6:F8:40:43:3B:12:0C:AC:BB:5B:8C:59:E6:13 Certificate issuer: /CN=A9162E3D0001/serialNumber=CB0214A5C404D6F840433B120CACBB5B8C59E613 Certificate serial: 706A0BF999514D0FCCF8F8EBAFB103D2D14044FB Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1111857844975566867/1/4FC053560F4D1C49194F692E10C37F5A5CF08392.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1111857844975566867/1/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Thu 25 Jun 2026 00:57:03 +0000 Certificate not after: Thu 24 Jun 2027 01:02:03 +0000 Subordinate resources: IP: 160.22.148.0/23 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 08 Jul 2026 04:28:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:6a:0b:f9:99:51:4d:0f:cc:f8:f8:eb:af:b1:03:d2:d1:40:44:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=CB0214A5C404D6F840433B120CACBB5B8C59E613 Validity Not Before: Jun 25 00:57:03 2026 GMT Not After : Jun 24 01:02:03 2027 GMT Subject: CN=4FC053560F4D1C49194F692E10C37F5A5CF08392 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:4b:6b:e5:ce:8b:c6:5e:85:c2:f2:81:4e:88: 86:00:c7:03:49:fc:48:df:97:91:8f:85:ba:5c:37: 4d:a9:98:ba:52:98:06:a4:50:23:c4:d6:cf:64:df: 2c:1f:b1:f8:16:fd:b9:21:77:1e:b5:fb:a0:87:a5: 3d:16:a4:04:e2:47:ed:d5:04:e0:d8:15:bd:ac:61: 55:0d:46:1d:86:b3:15:c8:84:5c:c4:8e:e9:95:45: b1:3d:ab:32:ba:de:49:e1:cf:6a:2e:c9:5e:69:72: c1:a1:49:4f:43:1d:16:dd:39:68:fe:13:cf:e2:28: f2:e8:46:27:55:57:47:82:5e:44:94:0f:60:09:34: 92:5a:df:98:f9:7f:c3:82:10:1b:62:fa:e4:62:4f: 22:e8:54:4a:0e:4f:a1:d9:a5:33:a9:26:0c:92:4e: 34:04:fb:53:56:48:e8:dd:a8:39:3f:97:e0:54:4c: 19:b6:8c:a9:7b:d2:1e:2e:b6:50:95:ca:19:e8:6c: dc:8e:65:52:f6:06:20:64:c5:58:84:71:bc:bd:7d: 33:4a:50:06:47:44:f3:e4:4e:00:a6:6d:bd:e5:3b: f1:2f:c1:ea:56:1d:4f:f6:5a:8e:1d:a7:11:43:17: d3:15:c5:3c:16:24:84:ef:8d:78:b6:e1:ea:3b:92: bb:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 4F:C0:53:56:0F:4D:1C:49:19:4F:69:2E:10:C3:7F:5A:5C:F0:83:92 X509v3 Authority Key Identifier: keyid:CB:02:14:A5:C4:04:D6:F8:40:43:3B:12:0C:AC:BB:5B:8C:59:E6:13 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1111857844975566867/1/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1111857844975566867/1/4FC053560F4D1C49194F692E10C37F5A5CF08392.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.22.148.0/23 Signature Algorithm: sha256WithRSAEncryption 58:1e:67:69:db:68:e0:6d:43:38:62:c4:a8:69:c2:2c:6c:bf: 2e:cb:25:96:5a:57:f2:32:a6:a0:27:7b:21:7a:b9:d3:e6:c2: db:2b:3e:c8:b2:55:7f:54:c2:db:71:2f:5d:97:3a:4d:2e:6c: 6f:0f:da:0f:66:70:db:34:f4:48:a5:5d:b9:1d:35:7c:be:57: 9d:8b:2c:23:f2:c5:ca:98:78:38:e6:69:ac:44:a8:89:60:eb: a0:cc:35:56:79:24:00:29:de:d9:1b:33:dc:c8:8e:3e:e1:6b: cc:d5:80:86:97:9a:0a:b9:ec:d9:f9:eb:6b:ca:94:9b:49:15: 66:fc:26:99:ec:15:ce:d5:11:99:d6:29:3a:df:1a:dc:58:0e: 76:a7:a4:ea:5f:10:81:af:cd:31:3b:1b:60:ef:dd:e6:1d:dd: 8f:cd:ec:14:bc:a3:d0:3a:55:19:ef:03:4b:e3:fb:dc:a7:23: ea:ee:9f:34:1e:91:57:37:ca:49:72:82:2b:02:f6:4f:95:a5: f4:14:f8:e7:2c:ce:9e:4f:dd:86:78:f0:2b:6f:12:79:d0:3f: a1:7f:d7:c1:28:19:9e:c9:fc:8f:49:36:1c:7b:a7:f0:ad:c0: fc:dc:27:c1:50:16:85:2d:be:2d:03:98:53:f0:1e:79:b7:37: a9:b4:db:1d -----BEGIN CERTIFICATE----- MIIFpzCCBI+gAwIBAgIUcGoL+ZlRTQ/M+Pjrr7ED0tFARPswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhDQjAyMTRBNUM0 MDRENkY4NDA0MzNCMTIwQ0FDQkI1QjhDNTlFNjEzMB4XDTI2MDYyNTAwNTcwM1oX DTI3MDYyNDAxMDIwM1owMzExMC8GA1UEAxMoNEZDMDUzNTYwRjREMUM0OTE5NEY2 OTJFMTBDMzdGNUE1Q0YwODM5MjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMFLa+XOi8ZehcLygU6IhgDHA0n8SN+XkY+Fulw3TamYulKYBqRQI8TWz2Tf LB+x+Bb9uSF3HrX7oIelPRakBOJH7dUE4NgVvaxhVQ1GHYazFciEXMSO6ZVFsT2r MrreSeHPai7JXmlywaFJT0MdFt05aP4Tz+Io8uhGJ1VXR4JeRJQPYAk0klrfmPl/ w4IQG2L65GJPIuhUSg5PodmlM6kmDJJONAT7U1ZI6N2oOT+X4FRMGbaMqXvSHi62 UJXKGehs3I5lUvYGIGTFWIRxvL19M0pQBkdE8+ROAKZtveU78S/B6lYdT/Zajh2n EUMX0xXFPBYkhO+NeLbh6juSu8cCAwEAAaOCApowggKWMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFE/AU1YPTRxJGU9pLhDDf1pc8IOSMB8GA1UdIwQYMBaAFMsC FKXEBNb4QEM7Egysu1uMWeYTMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMC9DQjAyMTRBNUM0MDRENkY4NDA0MzNCMTIwQ0FDQkI1QjhDNTlF NjEzLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CM0EyNEYyMDFENjYxMUUyOEFDODgzN0M3 MkZEMUZGMi95d0lVcGNRRTF2aEFRenNTREt5N1c0eFo1aE0uY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTExMTg1Nzg0NDk3NTU2Njg2Ny8xLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMTExODU3ODQ0OTc1NTY2ODY3 LzEvNEZDMDUzNTYwRjREMUM0OTE5NEY2OTJFMTBDMzdGNUE1Q0YwODM5Mi5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAGgFpQwDQYJKoZIhvcNAQELBQADggEBAFgeZ2nb aOBtQzhixKhpwixsvy7LJZZaV/IypqAneyF6udPmwtsrPsiyVX9UwttxL12XOk0u bG8P2g9mcNs09EilXbkdNXy+V52LLCPyxcqYeDjmaaxEqIlg66DMNVZ5JAAp3tkb M9zIjj7ha8zVgIaXmgq57Nn562vKlJtJFWb8JpnsFc7VEZnWKTrfGtxYDnanpOpf EIGvzTE7G2Dv3eYd3Y/N7BS8o9A6VRnvA0vj+9ynI+runzQekVc3yklygisC9k+V pfQU+Ocszp5P3YZ48CtvEnnQP6F/18EoGZ7J/I9JNhx7p/CtwPzcJ8FQFoUtvi0D mFPwHnm3N6m02x0= -----END CERTIFICATE-----Generated at Tue Jul 7 10:42:22 2026 by rpki-client