$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A48290B7B4443542D0460FD49BDF1B444360AE86.cer File: A48290B7B4443542D0460FD49BDF1B444360AE86.cer (raw, json) Hash identifier: Phkp5jQ/CwDJtMRfa6OXFgYoFqCBlpNpbck1VaVNVzo= Subject key identifier: A4:82:90:B7:B4:44:35:42:D0:46:0F:D4:9B:DF:1B:44:43:60:AE:86 Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Certificate serial: 3AC4C289513FAF489C88849414A456CB1CB5C66E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1094884727254482947/0/A48290B7B4443542D0460FD49BDF1B444360AE86.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1094884727254482947/0/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Fri 10 Apr 2026 07:23:07 +0000 Certificate not after: Fri 09 Apr 2027 07:28:07 +0000 Subordinate resources: AS: 24149 AS: 38345 IP: 1.8.18.0/24 IP: 150.242.156.0/22 IP: 202.173.8.0/21 IP: 203.99.20.0 -- 203.99.31.255 IP: 203.119.80.0/22 IP: 219.83.192.0 -- 219.83.253.255 IP: 2401:8d00::/32 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 12:10:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:c4:c2:89:51:3f:af:48:9c:88:84:94:14:a4:56:cb:1c:b5:c6:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Validity Not Before: Apr 10 07:23:07 2026 GMT Not After : Apr 9 07:28:07 2027 GMT Subject: CN=A48290B7B4443542D0460FD49BDF1B444360AE86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:35:4d:38:41:d6:df:82:f9:3b:94:82:90:dc: fa:73:88:0d:af:0b:0f:d3:4b:1c:5a:d4:6b:4d:fb: 77:18:65:bb:95:07:c5:69:b9:2f:52:26:58:78:8c: 07:e4:90:1f:12:53:71:02:31:9a:93:55:8b:df:b5: b2:9b:8e:34:45:76:b8:e0:7f:9f:37:e5:bf:e1:84: 67:69:1d:17:61:1a:d2:05:46:bb:d9:96:54:9a:11: 3d:4a:0e:f7:3f:69:69:e5:3b:f5:2a:0b:90:9f:a6: 7a:d2:8e:c2:5a:2c:7d:eb:cf:23:cb:84:84:7c:c0: 24:20:1e:c2:f3:26:8f:80:b1:dd:03:82:6a:0d:44: b8:78:9c:81:b3:2a:d0:c3:ee:e7:c1:f3:17:f7:fc: 36:cd:6c:19:27:51:75:fc:9e:3e:58:18:23:e3:2f: af:cb:c9:3f:67:43:97:55:c8:94:39:42:b4:f3:e1: 6b:66:81:5d:31:79:6c:9b:25:f2:67:94:58:58:97: 2f:f1:ee:77:aa:2b:b3:a9:3d:d0:fa:9f:b0:c0:56: e4:7a:a9:07:26:7a:79:2a:37:62:40:4d:3e:4f:3a: 09:2d:b0:ac:e0:6f:c0:b0:2d:3a:48:a9:70:6f:04: 19:02:db:af:28:93:60:37:7d:b3:f4:ef:cb:7d:5e: 53:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: A4:82:90:B7:B4:44:35:42:D0:46:0F:D4:9B:DF:1B:44:43:60:AE:86 X509v3 Authority Key Identifier: keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1094884727254482947/0/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1094884727254482947/0/A48290B7B4443542D0460FD49BDF1B444360AE86.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 1.8.18.0/24 150.242.156.0/22 202.173.8.0/21 203.99.20.0-203.99.31.255 203.119.80.0/22 219.83.192.0-219.83.253.255 IPv6: 2401:8d00::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 24149 38345 Signature Algorithm: sha256WithRSAEncryption 5e:4f:7e:1e:e8:a4:14:e4:ce:e2:41:24:64:80:73:1e:e5:d3: 95:ef:74:82:58:f6:b0:7f:3d:9b:0a:8f:ed:84:67:7b:1d:4a: 3d:e2:af:20:fc:ae:8a:62:5a:eb:59:64:db:11:2b:5b:c5:c5: 17:99:3d:64:cc:4e:ef:52:b8:83:b2:64:bc:71:26:d4:c6:61: d6:6e:97:8e:ae:1a:8e:b3:b0:cc:10:3b:e5:4b:55:b2:e7:d2: ac:12:c8:7d:04:e3:fc:40:65:e7:c9:7c:94:e7:52:40:f8:83: 36:aa:30:52:36:cd:af:8c:6e:d7:27:41:25:53:6c:0c:f0:65: 93:e9:82:c9:7b:a5:ac:68:e7:54:f9:af:e4:08:2d:2a:ff:79: 39:21:7f:d4:1a:82:a0:57:12:25:77:78:07:a5:27:27:32:5b: 9b:65:b4:c0:b0:ed:1d:3d:64:9c:0c:0d:98:a4:be:96:3a:83: 97:bd:7d:9b:49:91:6b:b1:7c:fb:1b:6c:50:f5:13:5f:fd:32: b3:aa:fe:21:9a:a3:5c:9b:a1:40:e4:9d:55:ab:9d:cc:63:0d: bc:f1:b9:ab:ee:43:ec:1a:95:2a:32:d3:22:8a:2b:5d:e0:66: 83:81:91:5c:8c:41:b9:18:33:f2:1c:a6:a2:45:c5:0c:49:31: 89:54:3a:07 -----BEGIN CERTIFICATE----- MIIGBDCCBOygAwIBAgIUOsTCiVE/r0iciISUFKRWyxy1xm4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDQxMDA3MjMwN1oX DTI3MDQwOTA3MjgwN1owMzExMC8GA1UEAxMoQTQ4MjkwQjdCNDQ0MzU0MkQwNDYw RkQ0OUJERjFCNDQ0MzYwQUU4NjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALs1TThB1t+C+TuUgpDc+nOIDa8LD9NLHFrUa037dxhlu5UHxWm5L1ImWHiM B+SQHxJTcQIxmpNVi9+1spuONEV2uOB/nzflv+GEZ2kdF2Ea0gVGu9mWVJoRPUoO 9z9paeU79SoLkJ+metKOwlosfevPI8uEhHzAJCAewvMmj4Cx3QOCag1EuHicgbMq 0MPu58HzF/f8Ns1sGSdRdfyePlgYI+Mvr8vJP2dDl1XIlDlCtPPha2aBXTF5bJsl 8meUWFiXL/Hud6ors6k90PqfsMBW5HqpByZ6eSo3YkBNPk86CS2wrOBvwLAtOkip cG8EGQLbryiTYDd9s/Tvy31eU/cCAwEAAaOCAvcwggLzMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFKSCkLe0RDVC0EYP1JvfG0RDYK6GMB8GA1UdIwQYMBaAFKVu hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTA5NDg4NDcyNzI1NDQ4Mjk0Ny8wLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDk0ODg0NzI3MjU0NDgyOTQ3 LzAvQTQ4MjkwQjdCNDQ0MzU0MkQwNDYwRkQ0OUJERjFCNDQ0MzYwQUU4Ni5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwXAYIKwYBBQUH AQcBAf8ETTBLMDoEAgABMDQDBAABCBIDBAKW8pwDBAPKrQgwDAMEAstjFAMEBctj AAMEAst3UDAMAwQG21PAAwQB21P8MA0EAgACMAcDBQAkAY0AMB4GCCsGAQUFBwEI AQH/BA8wDaALMAkCAl5VAgMAlckwDQYJKoZIhvcNAQELBQADggEBAF5Pfh7opBTk zuJBJGSAcx7l05XvdIJY9rB/PZsKj+2EZ3sdSj3iryD8ropiWutZZNsRK1vFxReZ PWTMTu9SuIOyZLxxJtTGYdZul46uGo6zsMwQO+VLVbLn0qwSyH0E4/xAZefJfJTn UkD4gzaqMFI2za+MbtcnQSVTbAzwZZPpgsl7paxo51T5r+QILSr/eTkhf9QagqBX EiV3eAelJycyW5tltMCw7R09ZJwMDZikvpY6g5e9fZtJkWuxfPsbbFD1E1/9MrOq /iGao1yboUDknVWrncxjDbzxuavuQ+walSoy0yKKK13gZoOBkVyMQbkYM/IcpqJF xQxJMYlUOgc= -----END CERTIFICATE-----Generated at Mon Apr 13 09:29:05 2026 by rpki-client