$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4B2BE50B2782B442ACB93E6F7CD100C44C4FF242.cer File: 4B2BE50B2782B442ACB93E6F7CD100C44C4FF242.cer (raw, json) Hash identifier: Qx1hzfBrYb9GEgA32fdcNk3Gvos893TVf3B2fEefZyI= Subject key identifier: 4B:2B:E5:0B:27:82:B4:42:AC:B9:3E:6F:7C:D1:00:C4:4C:4F:F2:42 Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Certificate serial: 7D6D26FF672EEDD2F055AA22D4798F267628BD91 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1065576723372244994/0/4B2BE50B2782B442ACB93E6F7CD100C44C4FF242.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1065576723372244994/0/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Thu 28 May 2026 06:39:38 +0000 Certificate not after: Thu 27 May 2027 06:44:38 +0000 Subordinate resources: AS: 17773 IP: 49.6.0.0/16 IP: 59.80.128.0/17 IP: 59.81.128.0/17 IP: 103.248.64.0/22 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 15:28:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:6d:26:ff:67:2e:ed:d2:f0:55:aa:22:d4:79:8f:26:76:28:bd:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Validity Not Before: May 28 06:39:38 2026 GMT Not After : May 27 06:44:38 2027 GMT Subject: CN=4B2BE50B2782B442ACB93E6F7CD100C44C4FF242 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:52:6a:50:67:50:a2:4d:62:f3:24:bb:21:ae: f8:26:06:43:47:b8:e3:ca:d7:74:8b:78:12:db:e6: 14:25:65:cf:1f:ee:b7:19:ec:67:ba:6e:31:99:71: ac:7a:ca:d3:9a:01:a8:1d:d2:0c:1d:5b:37:ad:10: ce:dd:fd:3b:3b:08:76:6f:78:3e:d7:e6:85:17:fc: d8:ee:3c:3b:6e:5f:37:54:89:45:b4:f8:1a:d3:cc: 0c:86:1f:72:ee:f7:02:11:5d:17:3a:74:f1:c9:d3: fd:86:0d:8d:e0:47:4f:38:3d:30:2e:1d:5b:3a:b3: 56:8a:70:3b:07:1d:71:59:a4:a3:fd:d4:32:34:2d: a4:fd:6c:d0:77:8f:72:99:34:a3:71:06:4a:ef:e0: ee:76:4f:fb:c1:4e:17:1a:4d:f7:f5:a8:b8:5e:4d: a8:5e:95:c5:d8:f6:35:65:fe:0f:66:fa:11:56:5b: 01:71:1a:bb:48:3f:ce:95:4d:64:03:a2:b7:bc:3c: ec:f5:d7:2c:86:d3:d7:29:bf:58:12:ce:4a:57:82: b7:e4:31:80:ad:e5:51:f9:2d:2f:30:e4:58:cd:dc: 4c:3f:e7:53:cd:88:e6:96:c2:ff:13:1e:8f:54:30: 21:dc:0d:52:08:21:4b:bf:a2:df:3d:f9:86:1d:32: de:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 4B:2B:E5:0B:27:82:B4:42:AC:B9:3E:6F:7C:D1:00:C4:4C:4F:F2:42 X509v3 Authority Key Identifier: keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372244994/0/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372244994/0/4B2BE50B2782B442ACB93E6F7CD100C44C4FF242.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 49.6.0.0/16 59.80.128.0/17 59.81.128.0/17 103.248.64.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 17773 Signature Algorithm: sha256WithRSAEncryption 72:93:18:cf:2d:f3:ee:a5:84:e8:7e:fa:58:a3:30:00:56:5b: d9:45:d5:f5:b6:33:6a:81:d7:7e:f3:48:9b:58:84:e5:c9:de: 34:69:6e:7f:25:57:5d:a9:55:cf:04:3c:f7:9c:be:30:58:cd: 13:28:60:de:21:18:6c:35:8b:f3:dd:44:a7:91:b7:c3:c2:f4: cf:86:c9:7e:a9:d8:4d:76:58:af:cb:a0:24:83:67:fd:93:b9: fc:73:83:6f:43:ce:3b:e0:d6:b3:e6:89:22:9d:60:3f:d5:61: f7:7b:78:f2:01:bc:02:9d:b1:61:f1:9d:ab:3a:d7:b5:74:52: 89:1d:69:51:c6:de:d7:82:5e:a6:3f:31:18:55:2b:c9:59:90: 63:55:34:80:c6:cf:87:f0:20:bc:90:62:e7:7d:26:1c:e1:77: 25:57:38:cd:25:b3:88:c7:e4:38:50:e9:28:18:6e:4e:49:52: 31:1a:e6:dd:af:a2:03:f1:b6:fd:3d:3e:07:25:64:d8:fd:29: 39:14:cc:03:6f:53:59:9f:94:13:3b:c7:6c:fe:75:b5:05:2e: c6:b2:b1:a9:43:77:66:fb:6d:0c:d3:ad:92:00:e9:1c:74:ec: ed:3d:db:de:0f:b8:4e:94:9f:c9:ac:16:04:e9:35:be:45:b4: 0a:02:73:e5 -----BEGIN CERTIFICATE----- MIIF0zCCBLugAwIBAgIUfW0m/2cu7dLwVaoi1HmPJnYovZEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDUyODA2MzkzOFoX DTI3MDUyNzA2NDQzOFowMzExMC8GA1UEAxMoNEIyQkU1MEIyNzgyQjQ0MkFDQjkz RTZGN0NEMTAwQzQ0QzRGRjI0MjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMNSalBnUKJNYvMkuyGu+CYGQ0e448rXdIt4EtvmFCVlzx/utxnsZ7puMZlx rHrK05oBqB3SDB1bN60Qzt39OzsIdm94PtfmhRf82O48O25fN1SJRbT4GtPMDIYf cu73AhFdFzp08cnT/YYNjeBHTzg9MC4dWzqzVopwOwcdcVmko/3UMjQtpP1s0HeP cpk0o3EGSu/g7nZP+8FOFxpN9/WouF5NqF6Vxdj2NWX+D2b6EVZbAXEau0g/zpVN ZAOit7w87PXXLIbT1ym/WBLOSleCt+QxgK3lUfktLzDkWM3cTD/nU82I5pbC/xMe j1QwIdwNUgghS7+i3z35hh0y3hsCAwEAAaOCAsYwggLCMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFEsr5QsngrRCrLk+b3zRAMRMT/JCMB8GA1UdIwQYMBaAFKVu hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTA2NTU3NjcyMzM3MjI0NDk5NC8wLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDY1NTc2NzIzMzcyMjQ0OTk0 LzAvNEIyQkU1MEIyNzgyQjQ0MkFDQjkzRTZGN0NEMTAwQzQ0QzRGRjI0Mi5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwMAYIKwYBBQUH AQcBAf8EITAfMB0EAgABMBcDAwAxBgMEBztQgAMEBztRgAMEAmf4QDAZBggrBgEF BQcBCAEB/wQKMAigBjAEAgJFbTANBgkqhkiG9w0BAQsFAAOCAQEAcpMYzy3z7qWE 6H76WKMwAFZb2UXV9bYzaoHXfvNIm1iE5cneNGlufyVXXalVzwQ895y+MFjNEyhg 3iEYbDWL891Ep5G3w8L0z4bJfqnYTXZYr8ugJINn/ZO5/HODb0POO+DWs+aJIp1g P9Vh93t48gG8Ap2xYfGdqzrXtXRSiR1pUcbe14Jepj8xGFUryVmQY1U0gMbPh/Ag vJBi530mHOF3JVc4zSWziMfkOFDpKBhuTklSMRrm3a+iA/G2/T0+ByVk2P0pORTM A29TWZ+UEzvHbP51tQUuxrKxqUN3ZvttDNOtkgDpHHTs7T3b3g+4TpSfyawWBOk1 vkW0CgJz5Q== -----END CERTIFICATE-----Generated at Fri May 29 21:13:24 2026 by rpki-client