$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/0/A26A131411EAF25D645F4C22903078A445B073F7.cer File: A26A131411EAF25D645F4C22903078A445B073F7.cer (raw, json) Hash identifier: ueVBTAvSe2CFu8JBij1gPbujZ8puBIDZJ9SdhIVpWpU= Subject key identifier: A2:6A:13:14:11:EA:F2:5D:64:5F:4C:22:90:30:78:A4:45:B0:73:F7 Authority key identifier: CB:02:14:A5:C4:04:D6:F8:40:43:3B:12:0C:AC:BB:5B:8C:59:E6:13 Certificate issuer: /CN=A9162E3D0001/serialNumber=CB0214A5C404D6F840433B120CACBB5B8C59E613 Certificate serial: 1BCFA1454D28F956BF7B645DA5D464655A4CBBF8 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1094808409447923715/0/A26A131411EAF25D645F4C22903078A445B073F7.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1094808409447923715/0/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Fri 29 May 2026 08:22:44 +0000 Certificate not after: Fri 28 May 2027 08:27:44 +0000 Subordinate resources: IP: 152.104.128.0/17 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 13:26:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:cf:a1:45:4d:28:f9:56:bf:7b:64:5d:a5:d4:64:65:5a:4c:bb:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=CB0214A5C404D6F840433B120CACBB5B8C59E613 Validity Not Before: May 29 08:22:44 2026 GMT Not After : May 28 08:27:44 2027 GMT Subject: CN=A26A131411EAF25D645F4C22903078A445B073F7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:61:9e:f9:ce:d6:4c:1d:38:de:db:e5:d7:a1: 54:ff:9e:07:d5:c6:84:94:72:5e:83:61:e7:a1:fb: c1:b5:b8:95:c8:2e:10:c0:ae:d9:2f:7e:86:b0:ce: 47:cc:10:82:1e:ea:cb:c6:60:02:d8:d0:78:83:d8: 9d:3e:d1:84:60:94:75:04:32:93:fa:05:d5:d9:ba: d6:aa:f0:3e:08:2f:be:67:7d:09:73:c8:39:87:ab: 22:c9:7e:52:d8:68:81:30:53:4d:78:a5:c0:9f:97: b1:80:1e:5a:57:a6:bd:75:07:ea:09:e9:c0:e3:78: 03:89:ea:4f:1a:47:65:91:1c:a2:81:96:84:c4:a2: e5:50:fa:a2:47:5a:f7:72:9b:ba:c1:24:b7:06:44: b8:f4:6b:aa:29:22:ad:62:ca:0c:e2:cd:a0:95:6e: 51:52:0e:65:69:ad:ea:f3:27:a4:4e:80:05:07:74: 41:e3:9d:39:26:7c:16:c0:af:46:0e:88:cd:ad:61: a2:50:e2:16:6a:c7:d8:7e:c8:87:59:5e:be:b5:8a: b6:75:03:11:65:25:b9:19:f5:07:ec:fb:ab:eb:45: a8:b7:a2:dc:fa:7e:a5:f4:9e:70:52:9b:4d:67:d1: 77:62:ba:79:9c:08:fa:f9:c1:77:cd:7b:a7:0a:88: 16:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: A2:6A:13:14:11:EA:F2:5D:64:5F:4C:22:90:30:78:A4:45:B0:73:F7 X509v3 Authority Key Identifier: keyid:CB:02:14:A5:C4:04:D6:F8:40:43:3B:12:0C:AC:BB:5B:8C:59:E6:13 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1094808409447923715/0/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1094808409447923715/0/A26A131411EAF25D645F4C22903078A445B073F7.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 152.104.128.0/17 Signature Algorithm: sha256WithRSAEncryption 23:14:a3:f9:d4:78:96:4b:50:a6:ec:44:b8:80:52:64:41:a6: 74:ce:25:93:17:5e:d1:52:e2:52:4d:8d:21:2e:f0:48:0d:94: 25:02:23:54:2b:0a:67:1c:9b:6d:2a:39:51:2c:7f:2e:1f:7d: 2c:01:1b:a1:06:2a:a7:d0:b0:0e:a1:a7:f1:4f:cb:a0:c2:f9: c7:ea:5b:78:8d:65:4b:84:a4:eb:17:0d:59:42:2b:22:4a:59: 47:bf:7d:68:c7:28:ab:86:4d:e4:65:f5:32:43:ee:b6:3c:9b: 61:1e:d9:02:9d:a1:f2:d5:20:c8:d3:2c:17:45:e9:9a:ad:07: 82:a0:ff:ad:9c:2c:14:98:96:8f:78:fc:9e:48:38:a0:9f:f9: f9:64:98:e5:82:8c:d4:a1:ea:a9:be:e9:24:fb:d2:c3:6a:3a: 3f:d5:4b:68:44:60:34:36:a3:1b:a5:20:a6:94:34:cd:03:4b: 69:94:ce:5f:06:07:94:e1:4f:c0:f0:ab:09:39:1b:a8:67:26: b1:eb:ca:c9:47:15:b0:02:a8:4b:45:ca:7f:b9:31:4e:55:93: 76:8e:a0:f0:35:f9:91:23:79:5a:1b:20:9c:46:23:42:44:66: 70:f0:68:f1:dd:4e:0f:d4:d7:42:a2:e6:f5:75:7f:38:1b:31: e7:31:e2:8b -----BEGIN CERTIFICATE----- MIIFpzCCBI+gAwIBAgIUG8+hRU0o+Va/e2RdpdRkZVpMu/gwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhDQjAyMTRBNUM0 MDRENkY4NDA0MzNCMTIwQ0FDQkI1QjhDNTlFNjEzMB4XDTI2MDUyOTA4MjI0NFoX DTI3MDUyODA4Mjc0NFowMzExMC8GA1UEAxMoQTI2QTEzMTQxMUVBRjI1RDY0NUY0 QzIyOTAzMDc4QTQ0NUIwNzNGNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMRhnvnO1kwdON7b5dehVP+eB9XGhJRyXoNh56H7wbW4lcguEMCu2S9+hrDO R8wQgh7qy8ZgAtjQeIPYnT7RhGCUdQQyk/oF1dm61qrwPggvvmd9CXPIOYerIsl+ UthogTBTTXilwJ+XsYAeWlemvXUH6gnpwON4A4nqTxpHZZEcooGWhMSi5VD6okda 93KbusEktwZEuPRrqikirWLKDOLNoJVuUVIOZWmt6vMnpE6ABQd0QeOdOSZ8FsCv Rg6Iza1holDiFmrH2H7Ih1levrWKtnUDEWUluRn1B+z7q+tFqLei3Pp+pfSecFKb TWfRd2K6eZwI+vnBd817pwqIFrMCAwEAAaOCApowggKWMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFKJqExQR6vJdZF9MIpAweKRFsHP3MB8GA1UdIwQYMBaAFMsC FKXEBNb4QEM7Egysu1uMWeYTMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMC9DQjAyMTRBNUM0MDRENkY4NDA0MzNCMTIwQ0FDQkI1QjhDNTlF NjEzLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CM0EyNEYyMDFENjYxMUUyOEFDODgzN0M3 MkZEMUZGMi95d0lVcGNRRTF2aEFRenNTREt5N1c0eFo1aE0uY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTA5NDgwODQwOTQ0NzkyMzcxNS8wLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDk0ODA4NDA5NDQ3OTIzNzE1 LzAvQTI2QTEzMTQxMUVBRjI1RDY0NUY0QzIyOTAzMDc4QTQ0NUIwNzNGNy5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAeYaIAwDQYJKoZIhvcNAQELBQADggEBACMUo/nU eJZLUKbsRLiAUmRBpnTOJZMXXtFS4lJNjSEu8EgNlCUCI1QrCmccm20qOVEsfy4f fSwBG6EGKqfQsA6hp/FPy6DC+cfqW3iNZUuEpOsXDVlCKyJKWUe/fWjHKKuGTeRl 9TJD7rY8m2Ee2QKdofLVIMjTLBdF6ZqtB4Kg/62cLBSYlo94/J5IOKCf+flkmOWC jNSh6qm+6ST70sNqOj/VS2hEYDQ2oxulIKaUNM0DS2mUzl8GB5ThT8Dwqwk5G6hn JrHryslHFbACqEtFyn+5MU5Vk3aOoPA1+ZEjeVobIJxGI0JEZnDwaPHdTg/U10Ki 5vV1fzgbMecx4os= -----END CERTIFICATE-----Generated at Sat May 30 01:38:20 2026 by rpki-client