$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/48DCC10A7E92444E80655999E7C33C876CF1C5A8.cer File: 48DCC10A7E92444E80655999E7C33C876CF1C5A8.cer (raw, json) Hash identifier: go1Y8xHfiznuUGmjYHK6yaBXdylD3pK5krjmRMPsCkM= Subject key identifier: 48:DC:C1:0A:7E:92:44:4E:80:65:59:99:E7:C3:3C:87:6C:F1:C5:A8 Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Certificate serial: 1B64F0AB7F7F897F27A21D8B063223BF1379FCD2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1112669904286253075/0/48DCC10A7E92444E80655999E7C33C876CF1C5A8.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1112669904286253075/0/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Fri 29 May 2026 09:07:59 +0000 Certificate not after: Fri 28 May 2027 09:12:59 +0000 Subordinate resources: AS: 9811 IP: 121.47.0.0/16 IP: 202.149.224.0/19 IP: 211.144.32.0/19 IP: 211.144.128.0/19 IP: 211.167.64.0/19 IP: 218.246.0.0/19 IP: 220.101.192.0/18 IP: 2402:ef40::/32 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 15:28:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:64:f0:ab:7f:7f:89:7f:27:a2:1d:8b:06:32:23:bf:13:79:fc:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Validity Not Before: May 29 09:07:59 2026 GMT Not After : May 28 09:12:59 2027 GMT Subject: CN=48DCC10A7E92444E80655999E7C33C876CF1C5A8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:a0:04:a9:92:0f:9d:ea:b5:d6:3b:ad:a0:83: b9:fa:5b:59:c0:4c:e4:5d:5b:06:a3:53:b3:10:d4: 9a:f6:b3:43:c1:e5:89:67:b2:b2:23:93:43:0c:d3: a1:95:e8:a5:4b:11:46:27:e4:1d:97:ed:29:83:b7: 3f:9e:cd:b3:6c:ec:ff:f9:15:01:72:31:25:d9:9c: fb:61:25:7d:47:af:ee:12:48:4a:53:c1:81:41:6e: f6:43:c8:b5:6c:95:d6:c3:44:24:99:e3:31:8f:ff: 94:c4:aa:70:f9:04:57:b6:3e:24:63:a7:ed:d8:1f: 96:44:0c:ef:70:66:cc:32:bb:a0:18:3b:59:89:a9: 5f:10:f0:52:18:ca:aa:8f:77:52:7d:36:16:db:23: 6f:e9:b3:9d:d0:c5:ad:1c:72:50:65:3c:a3:42:3b: e5:7e:4f:3c:33:29:cf:bb:6d:5d:f5:65:d4:67:fd: 2a:f1:d3:05:67:d0:c7:7a:6c:e9:3b:3c:5b:62:0e: 85:d6:5f:f7:f5:3c:2d:74:41:92:91:df:1c:ca:77: dd:b3:12:cb:36:5e:6f:1d:f3:57:23:cb:0f:6f:2a: 21:b6:99:c8:8b:20:0e:e4:39:bd:3d:7a:c5:71:34: ce:c3:5d:5a:fe:c3:1e:7b:6d:72:ca:aa:2c:f2:4c: 67:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 48:DC:C1:0A:7E:92:44:4E:80:65:59:99:E7:C3:3C:87:6C:F1:C5:A8 X509v3 Authority Key Identifier: keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1112669904286253075/0/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1112669904286253075/0/48DCC10A7E92444E80655999E7C33C876CF1C5A8.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 121.47.0.0/16 202.149.224.0/19 211.144.32.0/19 211.144.128.0/19 211.167.64.0/19 218.246.0.0/19 220.101.192.0/18 IPv6: 2402:ef40::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 9811 Signature Algorithm: sha256WithRSAEncryption 7c:a3:06:1a:25:c0:b9:88:29:13:01:15:14:59:6a:bc:05:ec: ad:5d:a5:e8:a4:7e:59:83:0c:d6:1e:c3:a8:f6:6b:01:c6:6a: d8:96:09:0a:33:2a:51:65:ca:70:f2:15:93:2d:26:35:a1:08: 0c:e8:50:00:38:b5:ae:58:02:01:0d:02:e8:4b:6b:4d:3e:3c: 46:4b:3d:f4:57:3f:f3:11:ad:e6:ef:55:c6:bb:3b:59:a4:c7: c6:79:8e:e8:b3:d4:30:c1:45:c6:e2:a5:fe:7a:15:11:90:8a: 1d:36:8b:11:5b:ec:68:b4:6c:29:18:d3:71:04:34:bd:d8:4f: 19:74:d6:36:d5:50:cb:82:47:20:11:10:08:5a:b2:5a:eb:8d: 5e:53:f5:31:31:c0:2c:6d:8f:ab:3e:50:6b:22:68:8a:fb:9f: 9b:60:a9:34:d2:4e:14:87:5b:1d:69:e4:5d:fc:06:b9:fd:f1: 6c:af:36:43:fa:dd:69:06:3c:09:47:d9:3b:69:2d:b9:1a:ce: f3:27:d1:ed:ee:a5:1c:21:68:b4:08:dc:d6:de:df:43:b7:35: 5c:8b:8c:b6:f9:d9:7d:06:c5:93:5e:a6:2c:9d:6d:24:c1:17: 35:28:cd:ef:13:73:80:6b:33:20:02:a3:2f:79:fa:15:70:b7: 87:4c:8c:e7 -----BEGIN CERTIFICATE----- MIIF9DCCBNygAwIBAgIUG2Twq39/iX8noh2LBjIjvxN5/NIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDUyOTA5MDc1OVoX DTI3MDUyODA5MTI1OVowMzExMC8GA1UEAxMoNDhEQ0MxMEE3RTkyNDQ0RTgwNjU1 OTk5RTdDMzNDODc2Q0YxQzVBODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAPWgBKmSD53qtdY7raCDufpbWcBM5F1bBqNTsxDUmvazQ8HliWeysiOTQwzT oZXopUsRRifkHZftKYO3P57Ns2zs//kVAXIxJdmc+2ElfUev7hJISlPBgUFu9kPI tWyV1sNEJJnjMY//lMSqcPkEV7Y+JGOn7dgflkQM73BmzDK7oBg7WYmpXxDwUhjK qo93Un02Ftsjb+mzndDFrRxyUGU8o0I75X5PPDMpz7ttXfVl1Gf9KvHTBWfQx3ps 6Ts8W2IOhdZf9/U8LXRBkpHfHMp33bMSyzZebx3zVyPLD28qIbaZyIsgDuQ5vT16 xXE0zsNdWv7DHnttcsqqLPJMZ30CAwEAAaOCAucwggLjMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFEjcwQp+kkROgGVZmefDPIds8cWoMB8GA1UdIwQYMBaAFKVu hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTExMjY2OTkwNDI4NjI1MzA3NS8wLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMTEyNjY5OTA0Mjg2MjUzMDc1 LzAvNDhEQ0MxMEE3RTkyNDQ0RTgwNjU1OTk5RTdDMzNDODc2Q0YxQzVBOC5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwUQYIKwYBBQUH AQcBAf8EQjBAMC8EAgABMCkDAwB5LwMEBcqV4AMEBdOQIAMEBdOQgAMEBdOnQAME Bdr2AAMEBtxlwDANBAIAAjAHAwUAJALvQDAZBggrBgEFBQcBCAEB/wQKMAigBjAE AgImUzANBgkqhkiG9w0BAQsFAAOCAQEAfKMGGiXAuYgpEwEVFFlqvAXsrV2l6KR+ WYMM1h7DqPZrAcZq2JYJCjMqUWXKcPIVky0mNaEIDOhQADi1rlgCAQ0C6EtrTT48 Rks99Fc/8xGt5u9Vxrs7WaTHxnmO6LPUMMFFxuKl/noVEZCKHTaLEVvsaLRsKRjT cQQ0vdhPGXTWNtVQy4JHIBEQCFqyWuuNXlP1MTHALG2Pqz5QayJoivufm2CpNNJO FIdbHWnkXfwGuf3xbK82Q/rdaQY8CUfZO2ktuRrO8yfR7e6lHCFotAjc1t7fQ7c1 XIuMtvnZfQbFk16mLJ1tJMEXNSjN7xNzgGszIAKjL3n6FXC3h0yM5w== -----END CERTIFICATE-----Generated at Fri May 29 21:11:57 2026 by rpki-client