$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4A07CD19A1B070EE064707237E6CE29C315163F0.cer File: 4A07CD19A1B070EE064707237E6CE29C315163F0.cer (raw, json) Hash identifier: jS6hNSKZN1yAeWmPDu8CCXKqCoHuRS3hI5h3xy1DSa8= Subject key identifier: 4A:07:CD:19:A1:B0:70:EE:06:47:07:23:7E:6C:E2:9C:31:51:63:F0 Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Certificate serial: 3FB8BC16A8EFA1FB2615A2CA03702C8588437E41 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1065588335525101569/0/4A07CD19A1B070EE064707237E6CE29C315163F0.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1065588335525101569/0/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Fri 29 May 2026 03:16:27 +0000 Certificate not after: Fri 28 May 2027 03:21:27 +0000 Subordinate resources: IP: 42.201.32.0/19 IP: 103.81.200.0/22 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 15:28:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:b8:bc:16:a8:ef:a1:fb:26:15:a2:ca:03:70:2c:85:88:43:7e:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Validity Not Before: May 29 03:16:27 2026 GMT Not After : May 28 03:21:27 2027 GMT Subject: CN=4A07CD19A1B070EE064707237E6CE29C315163F0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:04:17:70:2a:f3:0b:ab:61:bf:8d:9b:b1:e7: 49:93:f0:bc:3c:52:92:3a:0d:6a:ac:5f:88:fe:ef: 6a:8e:10:c5:fb:09:34:ea:20:42:ed:fd:dc:64:fb: 58:af:e3:fe:93:ae:e9:a7:e9:2f:0b:e4:e3:6f:c7: 5a:83:ac:ba:bc:a2:9c:15:bd:cb:e8:65:8d:a7:cf: 31:2c:43:31:59:cf:41:58:46:72:a5:bf:14:ad:7a: fc:e1:ad:14:e0:6e:21:1f:58:f9:7b:d6:71:c9:07: 00:c6:2b:db:47:dd:32:15:12:28:79:8e:c0:5b:76: b8:d9:8e:5b:79:ad:5a:87:99:9f:d0:1b:de:c8:ce: 6b:88:13:b1:35:2c:e9:dd:8a:f1:29:af:8e:d9:37: 7f:ea:b9:f0:85:ed:57:a4:32:20:25:89:d7:de:63: c4:d2:d7:67:fe:0c:63:57:a1:41:ed:a5:2a:ee:32: 7d:0e:a4:5d:29:c8:35:5b:9f:d7:8c:a4:4f:42:54: f1:fd:4f:d8:8a:42:6b:69:18:b7:9f:57:e5:e9:9f: 31:b2:0a:b2:11:f5:cf:73:75:61:30:1f:89:92:15: 5b:94:71:df:42:3a:de:1b:84:a7:15:a1:78:d7:79: 9b:82:fc:e2:e8:06:50:74:7c:70:73:46:44:a1:68: 7a:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 4A:07:CD:19:A1:B0:70:EE:06:47:07:23:7E:6C:E2:9C:31:51:63:F0 X509v3 Authority Key Identifier: keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335525101569/0/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335525101569/0/4A07CD19A1B070EE064707237E6CE29C315163F0.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 42.201.32.0/19 103.81.200.0/22 Signature Algorithm: sha256WithRSAEncryption 25:cc:39:88:9c:ba:36:49:6d:94:20:38:4a:aa:69:b3:13:85: ef:ca:07:15:6e:8c:28:10:11:0b:36:cc:63:66:4a:b8:3d:e8: a4:bd:9a:88:e2:c4:82:5d:c4:ad:b3:c4:1f:ca:ca:1d:35:f6: d4:e2:d1:33:be:a0:1f:9f:22:46:9a:5e:f3:3a:4c:84:cc:69: 6d:c6:6e:f0:88:ca:f7:32:ae:19:16:0e:40:5e:6f:e9:ba:58: f6:bb:3d:16:78:6b:49:ef:b3:a4:69:b4:87:a0:8a:8d:dd:bc: 5b:15:5e:38:36:3d:da:17:94:46:0b:13:cb:25:4e:cc:53:2b: 98:57:c1:0e:8f:c7:fc:d1:f5:f1:54:b9:45:7e:94:0f:41:f7: 89:9c:3a:92:9e:2f:23:bb:c8:7d:4c:90:41:83:ff:c7:f4:f7: 8f:e8:e8:59:de:10:36:fc:ab:df:3d:4d:98:19:ec:3e:2b:0c: 89:19:be:46:52:29:25:44:a2:b1:68:98:71:10:22:37:30:cd: 4d:43:65:27:7e:ba:7f:b7:b1:3a:1d:ee:ae:6d:18:80:c1:c5: d1:8c:7d:b0:e8:f4:eb:29:2b:15:4b:3a:68:b0:7f:a4:4d:d9: a3:ea:d1:1e:d0:e0:cd:3e:5c:d5:3e:6c:d9:98:8f:c3:75:e3: fc:2b:3e:10 -----BEGIN CERTIFICATE----- MIIFrTCCBJWgAwIBAgIUP7i8FqjvofsmFaLKA3AshYhDfkEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDUyOTAzMTYyN1oX DTI3MDUyODAzMjEyN1owMzExMC8GA1UEAxMoNEEwN0NEMTlBMUIwNzBFRTA2NDcw NzIzN0U2Q0UyOUMzMTUxNjNGMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAN4EF3Aq8wurYb+Nm7HnSZPwvDxSkjoNaqxfiP7vao4QxfsJNOogQu393GT7 WK/j/pOu6afpLwvk42/HWoOsuryinBW9y+hljafPMSxDMVnPQVhGcqW/FK16/OGt FOBuIR9Y+XvWcckHAMYr20fdMhUSKHmOwFt2uNmOW3mtWoeZn9Ab3sjOa4gTsTUs 6d2K8Smvjtk3f+q58IXtV6QyICWJ195jxNLXZ/4MY1ehQe2lKu4yfQ6kXSnINVuf 14ykT0JU8f1P2IpCa2kYt59X5emfMbIKshH1z3N1YTAfiZIVW5Rx30I63huEpxWh eNd5m4L84ugGUHR8cHNGRKFoesUCAwEAAaOCAqAwggKcMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFEoHzRmhsHDuBkcHI35s4pwxUWPwMB8GA1UdIwQYMBaAFKVu hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTA2NTU4ODMzNTUyNTEwMTU2OS8wLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDY1NTg4MzM1NTI1MTAxNTY5 LzAvNEEwN0NEMTlBMUIwNzBFRTA2NDcwNzIzN0U2Q0UyOUMzMTUxNjNGMC5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwJQYIKwYBBQUH AQcBAf8EFjAUMBIEAgABMAwDBAUqySADBAJnUcgwDQYJKoZIhvcNAQELBQADggEB ACXMOYicujZJbZQgOEqqabMThe/KBxVujCgQEQs2zGNmSrg96KS9mojixIJdxK2z xB/Kyh019tTi0TO+oB+fIkaaXvM6TITMaW3GbvCIyvcyrhkWDkBeb+m6WPa7PRZ4 a0nvs6RptIegio3dvFsVXjg2PdoXlEYLE8slTsxTK5hXwQ6Px/zR9fFUuUV+lA9B 94mcOpKeLyO7yH1MkEGD/8f094/o6FneEDb8q989TZgZ7D4rDIkZvkZSKSVEorFo mHEQIjcwzU1DZSd+un+3sTod7q5tGIDBxdGMfbDo9OspKxVLOmiwf6RN2aPq0R7Q 4M0+XNU+bNmYj8N14/wrPhA= -----END CERTIFICATE-----Generated at Fri May 29 21:13:51 2026 by rpki-client