$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/44094948C6E3D32A1A59BE6795CD8A2A3A528098.cer File: 44094948C6E3D32A1A59BE6795CD8A2A3A528098.cer (raw, json) Hash identifier: kNPLcPAIU4AIgsJDd7qBHHRKe/U2SjsVq71SnRh1Ouw= Subject key identifier: 44:09:49:48:C6:E3:D3:2A:1A:59:BE:67:95:CD:8A:2A:3A:52:80:98 Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Certificate serial: 1FDB079A14FF35F297C54CD025203634E1CB8AD4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1099892075173773315/0/44094948C6E3D32A1A59BE6795CD8A2A3A528098.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1099892075173773315/0/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Fri 24 Apr 2026 02:53:27 +0000 Certificate not after: Fri 23 Apr 2027 02:58:27 +0000 Subordinate resources: IP: 223.27.184.0/22 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Apr 2026 11:12:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:db:07:9a:14:ff:35:f2:97:c5:4c:d0:25:20:36:34:e1:cb:8a:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Validity Not Before: Apr 24 02:53:27 2026 GMT Not After : Apr 23 02:58:27 2027 GMT Subject: CN=44094948C6E3D32A1A59BE6795CD8A2A3A528098 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:63:0f:4d:b8:b5:31:b1:db:59:d5:1a:e1:dc: 32:b0:1d:6f:c8:15:c1:73:5f:09:2c:c9:ac:88:17: a3:33:b8:fd:e8:97:25:41:7f:88:66:0a:a4:7e:1a: d7:2f:06:25:69:aa:b6:41:46:3a:5b:22:8d:5e:e4: 65:5f:d3:1b:a3:b1:9f:eb:8e:43:ee:a3:f6:7f:45: 8f:35:a7:d6:b0:a4:eb:ec:7f:89:82:ae:c4:31:d6: fd:2a:a4:95:58:e9:d5:df:8f:00:d8:50:47:ff:ea: 1c:40:1c:ab:e2:cc:cd:5c:a8:55:be:33:e7:60:6e: 24:e1:8d:7d:2a:65:47:38:4e:57:58:65:3c:73:0a: bf:d1:b4:83:6c:85:ac:9d:cf:c1:d4:03:39:cc:5e: 86:95:c7:50:9a:98:07:6e:71:85:13:c5:5d:a4:03: c9:07:63:9b:74:62:34:f2:2f:ab:c3:2c:ad:e9:22: ff:34:2d:f7:df:54:a3:e8:96:2c:82:28:a5:b5:02: fb:d6:62:78:9a:ba:8e:3a:5e:2a:f4:76:41:67:66: 11:1c:af:dc:6f:03:8e:c8:a7:94:b7:ee:db:59:f7: 3a:16:7e:73:51:92:a2:9a:d4:8f:55:d4:f1:51:fe: 7c:e8:ca:b0:0e:fd:57:14:bf:3e:21:6d:0d:aa:75: 33:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 44:09:49:48:C6:E3:D3:2A:1A:59:BE:67:95:CD:8A:2A:3A:52:80:98 X509v3 Authority Key Identifier: keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1099892075173773315/0/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1099892075173773315/0/44094948C6E3D32A1A59BE6795CD8A2A3A528098.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 223.27.184.0/22 Signature Algorithm: sha256WithRSAEncryption 3b:10:42:c0:bb:27:7b:dc:cf:0f:c0:05:03:01:27:13:4b:91: 80:a5:95:bb:58:7f:43:b0:ae:f5:a1:ec:fa:76:0a:4f:9d:bc: 4d:7c:f8:7f:89:1a:47:4f:99:84:c8:85:97:5c:38:dd:eb:29: 47:b1:52:e2:9a:a7:cd:41:63:3f:47:69:17:a5:35:24:08:0a: 11:26:55:08:dc:fa:c7:8f:c4:e5:8a:60:d8:a7:9c:be:c5:69: 25:11:3f:91:a8:ac:61:68:cc:b0:64:fa:a3:98:be:17:9f:67: 87:e8:27:28:ff:af:2c:d3:62:d3:47:fa:b5:c7:c9:2e:7b:dd: f9:09:22:2e:37:ea:f5:87:b2:8c:39:d1:bc:d9:a5:be:f5:d8: d2:da:71:03:58:6a:68:ad:46:e6:51:f3:c2:da:db:0e:ff:4c: 78:b4:4d:ea:cb:df:91:1e:4f:04:22:3c:3f:85:c7:fa:74:2f: 12:f4:d3:17:55:96:3a:1f:55:6c:fb:85:7f:f7:f8:fd:c0:33: bf:8e:44:37:4e:57:56:41:ab:04:b6:b9:9f:b6:b2:3b:c4:8b: 19:64:f2:e2:61:8d:97:67:45:7d:6a:cd:66:f3:52:fe:85:91: be:33:b1:26:a6:02:1b:ec:28:1f:1f:a5:bd:30:60:f3:7e:80: 39:a2:d4:7a -----BEGIN CERTIFICATE----- MIIFpzCCBI+gAwIBAgIUH9sHmhT/NfKXxUzQJSA2NOHLitQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDQyNDAyNTMyN1oX DTI3MDQyMzAyNTgyN1owMzExMC8GA1UEAxMoNDQwOTQ5NDhDNkUzRDMyQTFBNTlC RTY3OTVDRDhBMkEzQTUyODA5ODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOJjD024tTGx21nVGuHcMrAdb8gVwXNfCSzJrIgXozO4/eiXJUF/iGYKpH4a 1y8GJWmqtkFGOlsijV7kZV/TG6Oxn+uOQ+6j9n9FjzWn1rCk6+x/iYKuxDHW/Sqk lVjp1d+PANhQR//qHEAcq+LMzVyoVb4z52BuJOGNfSplRzhOV1hlPHMKv9G0g2yF rJ3PwdQDOcxehpXHUJqYB25xhRPFXaQDyQdjm3RiNPIvq8Msreki/zQt999Uo+iW LIIopbUC+9ZieJq6jjpeKvR2QWdmERyv3G8DjsinlLfu21n3OhZ+c1GSoprUj1XU 8VH+fOjKsA79VxS/PiFtDap1M2kCAwEAAaOCApowggKWMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFEQJSUjG49MqGlm+Z5XNiio6UoCYMB8GA1UdIwQYMBaAFKVu hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTA5OTg5MjA3NTE3Mzc3MzMxNS8wLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDk5ODkyMDc1MTczNzczMzE1 LzAvNDQwOTQ5NDhDNkUzRDMyQTFBNTlCRTY3OTVDRDhBMkEzQTUyODA5OC5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBALfG7gwDQYJKoZIhvcNAQELBQADggEBADsQQsC7 J3vczw/ABQMBJxNLkYCllbtYf0OwrvWh7Pp2Ck+dvE18+H+JGkdPmYTIhZdcON3r KUexUuKap81BYz9HaRelNSQIChEmVQjc+sePxOWKYNinnL7FaSURP5GorGFozLBk +qOYvhefZ4foJyj/ryzTYtNH+rXHyS573fkJIi436vWHsow50bzZpb712NLacQNY amitRuZR88La2w7/THi0TerL35EeTwQiPD+Fx/p0LxL00xdVljofVWz7hX/3+P3A M7+ORDdOV1ZBqwS2uZ+2sjvEixlk8uJhjZdnRX1qzWbzUv6Fkb4zsSamAhvsKB8f pb0wYPN+gDmi1Ho= -----END CERTIFICATE-----Generated at Mon Apr 27 15:09:36 2026 by rpki-client