$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/0/1E52A9C4B7583314611765C8F6A599F283954B3C.cer File: 1E52A9C4B7583314611765C8F6A599F283954B3C.cer (raw, json) Hash identifier: /QUAIu9KThqs5LbCULd3Hw2NP940q5WUtujW5+KHW2c= Subject key identifier: 1E:52:A9:C4:B7:58:33:14:61:17:65:C8:F6:A5:99:F2:83:95:4B:3C Authority key identifier: CB:02:14:A5:C4:04:D6:F8:40:43:3B:12:0C:AC:BB:5B:8C:59:E6:13 Certificate issuer: /CN=A9162E3D0001/serialNumber=CB0214A5C404D6F840433B120CACBB5B8C59E613 Certificate serial: 737FB23BB15F4D1CCE0E1AA1F27E2E677119903E Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1065576723372048386/1/1E52A9C4B7583314611765C8F6A599F283954B3C.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1065576723372048386/1/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Fri 29 May 2026 08:48:21 +0000 Certificate not after: Fri 28 May 2027 08:53:21 +0000 Subordinate resources: IP: 139.148.0.0/16 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Jun 2026 13:43:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:7f:b2:3b:b1:5f:4d:1c:ce:0e:1a:a1:f2:7e:2e:67:71:19:90:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=CB0214A5C404D6F840433B120CACBB5B8C59E613 Validity Not Before: May 29 08:48:21 2026 GMT Not After : May 28 08:53:21 2027 GMT Subject: CN=1E52A9C4B7583314611765C8F6A599F283954B3C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:2d:34:59:1a:0b:e5:60:6c:4d:cf:8b:25:9a: 72:ac:41:f1:13:84:d2:67:77:4a:6f:c2:1e:4d:78: b1:0c:95:d1:83:5d:30:83:36:c3:9b:09:c9:a2:45: 2c:b4:c4:59:59:2d:91:98:9a:08:f7:a9:ed:cf:1c: 7c:be:47:9c:ac:34:17:3c:e6:67:e7:d3:3c:21:89: 60:05:69:6b:62:75:dc:52:42:15:24:71:ee:48:ef: c4:b3:a9:1b:0d:f6:19:bd:d6:af:10:f6:f1:61:10: cb:8a:14:0e:41:2f:4b:39:e4:3f:1b:0c:a8:aa:28: 3a:90:4e:98:07:66:fe:79:58:7a:ae:5f:47:bd:7e: d5:a2:db:b4:df:49:20:46:30:9e:8c:45:d9:d8:01: ae:f3:6f:54:9d:82:d2:d0:16:68:55:80:e2:ac:32: b6:6d:a7:ae:44:84:c0:52:c8:30:ec:7f:e8:ad:b6: 71:fb:7f:9d:bf:e7:a2:77:a8:eb:dd:59:29:1f:f4: cc:c8:4f:20:11:03:3c:7e:1e:de:15:43:61:26:7c: 99:4a:a9:d8:49:41:32:55:e3:dd:92:d2:2a:77:84: ff:24:2a:68:cf:9b:68:99:a1:5e:de:52:be:14:07: 36:55:6b:88:7f:2d:54:50:75:9e:e4:2f:d5:64:47: 82:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 1E:52:A9:C4:B7:58:33:14:61:17:65:C8:F6:A5:99:F2:83:95:4B:3C X509v3 Authority Key Identifier: keyid:CB:02:14:A5:C4:04:D6:F8:40:43:3B:12:0C:AC:BB:5B:8C:59:E6:13 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372048386/1/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372048386/1/1E52A9C4B7583314611765C8F6A599F283954B3C.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 139.148.0.0/16 Signature Algorithm: sha256WithRSAEncryption 21:d5:a3:f2:ae:9c:b1:38:24:ff:1a:a5:69:55:01:ab:cb:59: 66:4c:f9:5e:31:7e:c7:d1:59:56:65:9b:29:06:ba:26:d5:58: 9d:b2:6c:eb:ab:f7:53:d5:82:fe:a5:68:f8:75:b7:92:95:18: 80:9a:23:2a:87:7b:99:86:eb:28:44:91:44:c1:ad:e2:03:a2: 8c:5c:f9:ab:f6:08:61:cd:40:1b:b0:30:d3:d2:7a:b6:7d:11: 4a:ef:70:3a:89:2e:c7:9c:7b:d0:ce:7f:95:42:42:e5:bb:b5: 3a:87:a8:9c:e8:f6:45:ed:d3:5f:95:a4:94:b2:a5:79:38:94: 54:a3:16:da:8f:54:c0:c3:e5:74:c2:b6:a5:a9:83:54:47:43: 4f:3c:5e:14:8e:a3:f3:7f:81:a3:45:fe:90:e0:f1:b1:2b:20: 1b:ce:16:06:30:10:80:6d:c3:0e:17:8c:02:08:d8:c7:cd:cf: 1e:2a:6c:f1:e4:4c:75:bd:99:5f:39:a4:93:86:c4:f6:2b:7c: 14:9f:83:f9:b9:87:9c:39:05:19:5e:4b:60:ce:d2:47:52:03: ae:41:c0:92:8a:d9:ce:55:4e:6c:e1:34:ce:d3:66:31:f7:3c: 5a:cf:e0:73:05:3e:70:e9:03:45:2c:3c:76:3d:c1:29:61:30: d3:00:60:96 -----BEGIN CERTIFICATE----- MIIFpjCCBI6gAwIBAgIUc3+yO7FfTRzODhqh8n4uZ3EZkD4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhDQjAyMTRBNUM0 MDRENkY4NDA0MzNCMTIwQ0FDQkI1QjhDNTlFNjEzMB4XDTI2MDUyOTA4NDgyMVoX DTI3MDUyODA4NTMyMVowMzExMC8GA1UEAxMoMUU1MkE5QzRCNzU4MzMxNDYxMTc2 NUM4RjZBNTk5RjI4Mzk1NEIzQzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKctNFkaC+VgbE3PiyWacqxB8ROE0md3Sm/CHk14sQyV0YNdMIM2w5sJyaJF LLTEWVktkZiaCPep7c8cfL5HnKw0FzzmZ+fTPCGJYAVpa2J13FJCFSRx7kjvxLOp Gw32Gb3WrxD28WEQy4oUDkEvSznkPxsMqKooOpBOmAdm/nlYeq5fR71+1aLbtN9J IEYwnoxF2dgBrvNvVJ2C0tAWaFWA4qwytm2nrkSEwFLIMOx/6K22cft/nb/noneo 691ZKR/0zMhPIBEDPH4e3hVDYSZ8mUqp2ElBMlXj3ZLSKneE/yQqaM+baJmhXt5S vhQHNlVriH8tVFB1nuQv1WRHgv0CAwEAAaOCApkwggKVMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFB5SqcS3WDMUYRdlyPalmfKDlUs8MB8GA1UdIwQYMBaAFMsC FKXEBNb4QEM7Egysu1uMWeYTMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMC9DQjAyMTRBNUM0MDRENkY4NDA0MzNCMTIwQ0FDQkI1QjhDNTlF NjEzLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CM0EyNEYyMDFENjYxMUUyOEFDODgzN0M3 MkZEMUZGMi95d0lVcGNRRTF2aEFRenNTREt5N1c0eFo1aE0uY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTA2NTU3NjcyMzM3MjA0ODM4Ni8xLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDY1NTc2NzIzMzcyMDQ4Mzg2 LzEvMUU1MkE5QzRCNzU4MzMxNDYxMTc2NUM4RjZBNTk5RjI4Mzk1NEIzQy5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUH AQcBAf8EDzANMAsEAgABMAUDAwCLlDANBgkqhkiG9w0BAQsFAAOCAQEAIdWj8q6c sTgk/xqlaVUBq8tZZkz5XjF+x9FZVmWbKQa6JtVYnbJs66v3U9WC/qVo+HW3kpUY gJojKod7mYbrKESRRMGt4gOijFz5q/YIYc1AG7Aw09J6tn0RSu9wOokux5x70M5/ lUJC5bu1OoeonOj2Re3TX5WklLKleTiUVKMW2o9UwMPldMK2pamDVEdDTzxeFI6j 83+Bo0X+kODxsSsgG84WBjAQgG3DDheMAgjYx83PHips8eRMdb2ZXzmkk4bE9it8 FJ+D+bmHnDkFGV5LYM7SR1IDrkHAkorZzlVObOE0ztNmMfc8Ws/gcwU+cOkDRSw8 dj3BKWEw0wBglg== -----END CERTIFICATE-----Generated at Thu Jun 4 14:12:16 2026 by rpki-client