$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B479B9B47F8AFC1062B8D469F62A6689067D35EA.cer File: B479B9B47F8AFC1062B8D469F62A6689067D35EA.cer (raw, json) Hash identifier: jdGHPirWHfb+8JJBDTnZRpN8IkwwhFpe+1YqYJYX39g= Subject key identifier: B4:79:B9:B4:7F:8A:FC:10:62:B8:D4:69:F6:2A:66:89:06:7D:35:EA Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Certificate serial: 5D5B0003C7A091BF9973BF6F69DF4B4F4CFAD77F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1098515682171092993/0/B479B9B47F8AFC1062B8D469F62A6689067D35EA.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1098515682171092993/0/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Mon 20 Apr 2026 07:52:14 +0000 Certificate not after: Mon 19 Apr 2027 07:57:14 +0000 Subordinate resources: AS: 58996 IP: 103.21.140.0/22 IP: 210.16.180.0/24 IP: 210.16.185.0 -- 210.16.191.255 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Apr 2026 07:23:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:5b:00:03:c7:a0:91:bf:99:73:bf:6f:69:df:4b:4f:4c:fa:d7:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Validity Not Before: Apr 20 07:52:14 2026 GMT Not After : Apr 19 07:57:14 2027 GMT Subject: CN=B479B9B47F8AFC1062B8D469F62A6689067D35EA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:40:06:57:13:f7:58:4a:4b:c5:39:ef:3c:f0: c0:47:83:7a:7e:ae:cc:a9:7d:3d:ea:79:8a:aa:8f: 2b:df:6a:84:59:1f:87:49:25:a8:78:9b:e4:22:de: 32:86:51:43:01:1b:fc:59:81:b8:82:89:98:bc:ee: e3:d4:f0:5f:04:cc:b6:09:3c:d7:de:b8:37:c2:4b: 94:7a:35:69:eb:ff:79:f1:9e:ee:32:5a:ca:cd:77: 73:9d:19:ab:3c:fc:a9:79:eb:ac:5c:75:39:71:91: 5b:7c:8f:ee:1e:f3:49:ce:c4:46:a7:17:07:f8:3e: 16:72:72:64:80:de:f9:9b:ee:7a:3f:0f:ee:25:11: ec:a0:ea:21:56:57:7d:9f:f8:e4:ae:1c:87:8e:da: 90:f3:7a:18:0f:d4:f9:ec:fa:2b:b2:10:e5:b3:24: 46:37:d3:0d:04:20:ea:87:79:1e:70:d6:9e:f4:59: b3:05:ac:01:a5:fe:0d:ee:3d:18:2e:24:eb:5f:11: 2e:76:32:e2:14:f6:f3:5b:2c:42:82:0c:0a:9a:88: c4:c2:56:75:59:34:73:52:6e:07:a8:c9:d8:02:c3: cf:d4:dd:dd:12:45:61:4a:fa:89:35:b8:d2:c1:c5: ab:f7:d3:e2:69:57:25:5c:11:77:0e:e4:7d:db:16: 35:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: B4:79:B9:B4:7F:8A:FC:10:62:B8:D4:69:F6:2A:66:89:06:7D:35:EA X509v3 Authority Key Identifier: keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1098515682171092993/0/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1098515682171092993/0/B479B9B47F8AFC1062B8D469F62A6689067D35EA.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.21.140.0/22 210.16.180.0/24 210.16.185.0-210.16.191.255 sbgp-autonomousSysNum: critical Autonomous System Numbers: 58996 Signature Algorithm: sha256WithRSAEncryption 7e:95:90:d8:41:72:38:49:ce:76:93:f5:07:17:1a:7a:aa:8e: 73:e3:37:20:1c:67:a1:cf:4e:62:36:71:10:c3:64:28:12:79: 4b:c6:e7:43:03:31:19:09:4d:03:25:cb:2e:13:4a:1f:15:80: d0:21:99:34:5a:c6:cd:7c:03:2b:e7:7e:3c:5e:14:0b:0f:04: 90:ea:01:2d:12:4c:01:a1:b3:d7:ce:69:e3:80:c8:ac:1d:b8: 90:80:09:81:a6:26:87:45:8d:44:8e:48:96:be:1d:eb:c1:50: d4:c2:68:82:42:44:b3:0d:28:93:2f:f7:d6:24:c2:6c:91:4e: 59:19:a6:28:3a:61:5f:de:0c:b4:11:09:25:ae:1b:31:24:9b: 70:6c:e0:19:b0:34:66:ee:80:48:a0:9b:78:f5:56:c8:c8:97: 4b:23:1e:af:e5:bb:52:49:e9:7e:15:cd:c3:01:31:ad:0a:86: 6d:af:36:6a:a6:40:68:7a:ea:83:b6:67:16:a8:74:32:dc:04: ce:ea:4a:6d:f1:f1:9b:95:e5:f7:d4:91:7e:04:61:4c:13:68: 18:5c:88:2e:56:72:b6:d7:26:eb:b0:02:af:97:51:42:df:5a: 5d:6a:c8:4f:f5:89:03:a1:ff:6d:06:92:c5:5f:2a:3f:8a:cc: 9e:d6:11:f2 -----BEGIN CERTIFICATE----- MIIF1zCCBL+gAwIBAgIUXVsAA8egkb+Zc79vad9LT0z6138wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDQyMDA3NTIxNFoX DTI3MDQxOTA3NTcxNFowMzExMC8GA1UEAxMoQjQ3OUI5QjQ3RjhBRkMxMDYyQjhE NDY5RjYyQTY2ODkwNjdEMzVFQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOtABlcT91hKS8U57zzwwEeDen6uzKl9Pep5iqqPK99qhFkfh0klqHib5CLe MoZRQwEb/FmBuIKJmLzu49TwXwTMtgk81964N8JLlHo1aev/efGe7jJays13c50Z qzz8qXnrrFx1OXGRW3yP7h7zSc7ERqcXB/g+FnJyZIDe+Zvuej8P7iUR7KDqIVZX fZ/45K4ch47akPN6GA/U+ez6K7IQ5bMkRjfTDQQg6od5HnDWnvRZswWsAaX+De49 GC4k618RLnYy4hT281ssQoIMCpqIxMJWdVk0c1JuB6jJ2ALDz9Td3RJFYUr6iTW4 0sHFq/fT4mlXJVwRdw7kfdsWNcUCAwEAAaOCAsowggLGMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFLR5ubR/ivwQYrjUafYqZokGfTXqMB8GA1UdIwQYMBaAFKVu hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTA5ODUxNTY4MjE3MTA5Mjk5My8wLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDk4NTE1NjgyMTcxMDkyOTkz LzAvQjQ3OUI5QjQ3RjhBRkMxMDYyQjhENDY5RjYyQTY2ODkwNjdEMzVFQS5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwMwYIKwYBBQUH AQcBAf8EJDAiMCAEAgABMBoDBAJnFYwDBADSELQwDAMEANIQuQMEBtIQgDAaBggr BgEFBQcBCAEB/wQLMAmgBzAFAgMA5nQwDQYJKoZIhvcNAQELBQADggEBAH6VkNhB cjhJznaT9QcXGnqqjnPjNyAcZ6HPTmI2cRDDZCgSeUvG50MDMRkJTQMlyy4TSh8V gNAhmTRaxs18AyvnfjxeFAsPBJDqAS0STAGhs9fOaeOAyKwduJCACYGmJodFjUSO SJa+HevBUNTCaIJCRLMNKJMv99YkwmyRTlkZpig6YV/eDLQRCSWuGzEkm3Bs4Bmw NGbugEigm3j1VsjIl0sjHq/lu1JJ6X4VzcMBMa0Khm2vNmqmQGh66oO2ZxaodDLc BM7qSm3x8ZuV5ffUkX4EYUwTaBhciC5WcrbXJuuwAq+XUULfWl1qyE/1iQOh/20G ksVfKj+KzJ7WEfI= -----END CERTIFICATE-----Generated at Mon Apr 27 09:41:56 2026 by rpki-client