$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/49ECF12F237C18CFE0DD3E1D3F99E290380A282E.cer File: 49ECF12F237C18CFE0DD3E1D3F99E290380A282E.cer (raw, json) Hash identifier: 37E+eeE6/eIklMid8prC5b8RArXINozd8SSuM3glgUs= Subject key identifier: 49:EC:F1:2F:23:7C:18:CF:E0:DD:3E:1D:3F:99:E2:90:38:0A:28:2E Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Certificate serial: 72257C03E47F6297A5D8BE85F8E893656D2D0175 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1094884727254417411/0/49ECF12F237C18CFE0DD3E1D3F99E290380A282E.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1094884727254417411/0/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Fri 10 Apr 2026 07:16:02 +0000 Certificate not after: Fri 09 Apr 2027 07:21:02 +0000 Subordinate resources: IP: 202.127.200.0/21 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 12:10:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:25:7c:03:e4:7f:62:97:a5:d8:be:85:f8:e8:93:65:6d:2d:01:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Validity Not Before: Apr 10 07:16:02 2026 GMT Not After : Apr 9 07:21:02 2027 GMT Subject: CN=49ECF12F237C18CFE0DD3E1D3F99E290380A282E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:f1:5a:2c:02:38:45:fc:65:3c:75:06:dc:f7: 36:41:5a:5b:65:0f:24:3e:0f:7a:fc:90:7b:a7:fc: 68:fa:73:43:a6:1a:6a:aa:ce:6d:79:ea:8d:99:eb: 97:da:fc:7d:42:1e:9b:14:00:47:36:0e:95:c9:53: 45:15:f8:10:a3:7a:a0:97:75:54:a6:ed:d4:e2:47: fa:43:ec:e8:27:ea:be:fc:54:9e:aa:d3:14:07:23: 16:46:66:b9:8d:fc:d5:68:af:22:56:c3:cb:35:cc: 4a:68:a5:5b:c1:3b:a4:33:c5:99:3a:b6:f0:46:e0: bb:ab:f4:88:a7:43:fd:0e:2c:47:d7:d8:21:9f:d0: b6:6f:19:7f:9e:6e:32:c2:9e:05:e9:d5:d2:e9:93: fa:ed:14:67:b1:24:81:4c:57:10:59:f9:f1:57:80: 4f:df:3f:82:16:38:21:b3:28:7c:e8:25:44:0c:98: 1a:a4:78:1a:fb:e5:62:d4:35:85:5c:fe:69:31:c7: f9:f7:9b:86:c4:b6:cf:92:fd:c9:d1:2c:7a:39:1b: e8:0a:54:c2:23:0b:77:c2:9a:42:9d:99:ad:8c:1e: 48:64:48:4f:58:e8:35:74:ae:13:ed:af:4e:58:19: 4c:19:22:d3:b2:54:f6:44:47:e9:db:04:16:58:76: 73:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 49:EC:F1:2F:23:7C:18:CF:E0:DD:3E:1D:3F:99:E2:90:38:0A:28:2E X509v3 Authority Key Identifier: keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1094884727254417411/0/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1094884727254417411/0/49ECF12F237C18CFE0DD3E1D3F99E290380A282E.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.127.200.0/21 Signature Algorithm: sha256WithRSAEncryption 14:d4:6a:96:f5:23:4d:ea:8f:e1:5a:da:3c:78:b0:03:39:c8: 38:a4:5b:76:26:80:97:ed:f5:9e:a4:34:b9:92:0d:fd:8b:7d: 81:88:9d:7e:66:74:c4:75:c8:4e:81:10:d0:53:74:52:5e:5a: 95:55:e2:84:53:6a:3f:72:05:d4:43:b7:89:10:a6:b5:7f:7b: 83:c1:98:f9:4a:7d:48:2b:95:dc:31:0c:f8:74:9d:bc:ac:19: 5a:ff:14:d9:81:94:f4:8e:86:e1:9f:04:fe:6b:f4:4f:47:7f: d4:df:62:e1:b9:ae:cf:90:4f:5e:c5:96:a9:6d:83:69:8e:14: 81:63:29:98:2d:cf:ee:f4:8a:c7:b4:66:a0:7f:19:f5:f7:22: 8e:28:f8:06:19:e1:45:23:78:df:38:5e:9c:99:d2:8f:2c:d9: 84:47:3f:c5:fa:b7:38:ed:70:50:37:a5:56:1d:1e:e2:de:cb: fe:7b:ed:17:e9:a9:84:de:49:95:47:db:8e:3c:71:0e:65:ce: fc:a2:ff:b8:65:f2:bc:b0:08:90:8e:a6:3a:77:35:11:c1:e4: 5b:6b:22:ad:76:5d:c0:c4:e1:5a:72:c8:b9:e7:b7:94:90:f0: b3:af:82:4d:cc:63:63:14:4f:0d:66:c0:ff:58:63:dc:40:e7: fb:ab:43:18 -----BEGIN CERTIFICATE----- MIIFpzCCBI+gAwIBAgIUciV8A+R/Ypel2L6F+OiTZW0tAXUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDQxMDA3MTYwMloX DTI3MDQwOTA3MjEwMlowMzExMC8GA1UEAxMoNDlFQ0YxMkYyMzdDMThDRkUwREQz RTFEM0Y5OUUyOTAzODBBMjgyRTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANvxWiwCOEX8ZTx1Btz3NkFaW2UPJD4PevyQe6f8aPpzQ6YaaqrObXnqjZnr l9r8fUIemxQARzYOlclTRRX4EKN6oJd1VKbt1OJH+kPs6CfqvvxUnqrTFAcjFkZm uY381WivIlbDyzXMSmilW8E7pDPFmTq28Ebgu6v0iKdD/Q4sR9fYIZ/Qtm8Zf55u MsKeBenV0umT+u0UZ7EkgUxXEFn58VeAT98/ghY4IbMofOglRAyYGqR4GvvlYtQ1 hVz+aTHH+febhsS2z5L9ydEsejkb6ApUwiMLd8KaQp2ZrYweSGRIT1joNXSuE+2v TlgZTBki07JU9kRH6dsEFlh2c5cCAwEAAaOCApowggKWMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFEns8S8jfBjP4N0+HT+Z4pA4CiguMB8GA1UdIwQYMBaAFKVu hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTA5NDg4NDcyNzI1NDQxNzQxMS8wLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDk0ODg0NzI3MjU0NDE3NDEx LzAvNDlFQ0YxMkYyMzdDMThDRkUwREQzRTFEM0Y5OUUyOTAzODBBMjgyRS5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAPKf8gwDQYJKoZIhvcNAQELBQADggEBABTUapb1 I03qj+Fa2jx4sAM5yDikW3YmgJft9Z6kNLmSDf2LfYGInX5mdMR1yE6BENBTdFJe WpVV4oRTaj9yBdRDt4kQprV/e4PBmPlKfUgrldwxDPh0nbysGVr/FNmBlPSOhuGf BP5r9E9Hf9TfYuG5rs+QT17Flqltg2mOFIFjKZgtz+70ise0ZqB/GfX3Io4o+AYZ 4UUjeN84XpyZ0o8s2YRHP8X6tzjtcFA3pVYdHuLey/577RfpqYTeSZVH2448cQ5l zvyi/7hl8rywCJCOpjp3NRHB5FtrIq12XcDE4VpyyLnnt5SQ8LOvgk3MY2MUTw1m wP9YY9xA5/urQxg= -----END CERTIFICATE-----Generated at Mon Apr 13 09:28:27 2026 by rpki-client