$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/0/A5B2B14D97513B6C0C82B1E540703EB912DFD229.cer File: A5B2B14D97513B6C0C82B1E540703EB912DFD229.cer (raw, json) Hash identifier: 5HsuE7Pzv2P0k5ZVA6evdEush4xBZNKIOj6jbwRgCx8= Subject key identifier: A5:B2:B1:4D:97:51:3B:6C:0C:82:B1:E5:40:70:3E:B9:12:DF:D2:29 Authority key identifier: CB:02:14:A5:C4:04:D6:F8:40:43:3B:12:0C:AC:BB:5B:8C:59:E6:13 Certificate issuer: /CN=A9162E3D0001/serialNumber=CB0214A5C404D6F840433B120CACBB5B8C59E613 Certificate serial: 66DEEB354C1C37A36C5A0D828D4BA21A8259B14E Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1065887644090630145/1/A5B2B14D97513B6C0C82B1E540703EB912DFD229.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1065887644090630145/1/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Mon 01 Jun 2026 02:02:08 +0000 Certificate not after: Mon 31 May 2027 02:07:08 +0000 Subordinate resources: IP: 47.92.0.0 -- 47.127.255.255 IP: 139.129.0.0/16 IP: 139.196.0.0/16 IP: 139.224.0.0/16 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Jun 2026 03:36:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:de:eb:35:4c:1c:37:a3:6c:5a:0d:82:8d:4b:a2:1a:82:59:b1:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=CB0214A5C404D6F840433B120CACBB5B8C59E613 Validity Not Before: Jun 1 02:02:08 2026 GMT Not After : May 31 02:07:08 2027 GMT Subject: CN=A5B2B14D97513B6C0C82B1E540703EB912DFD229 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:c1:22:ef:8d:aa:41:5a:0e:c9:ec:26:e0:50: b0:79:cb:04:bd:5e:65:49:d7:e6:52:e0:56:b4:1b: 2b:e4:f9:a5:c1:df:7a:05:33:c7:38:96:0e:0d:97: 4a:dc:f9:c6:57:1b:9f:50:9b:03:5f:c1:ec:b7:a0: 7b:78:0a:98:36:20:ed:b9:e3:31:d5:b0:21:2d:f3: 35:a4:61:80:d4:55:1b:bc:20:fa:52:46:55:85:2e: 7d:55:6e:f2:46:c0:5d:3e:ab:74:8c:31:94:ba:d0: 26:c2:0c:2b:9a:b6:f3:8a:cf:f7:4c:7a:ea:62:bd: 6d:77:86:72:4e:aa:79:d8:42:bc:8f:63:b3:d3:3c: df:f9:61:24:6a:2a:f0:ce:fc:b2:0f:0d:d0:cd:d7: db:aa:b7:5a:dc:c6:55:ba:4e:23:0a:ef:9f:5d:02: 18:28:e1:ed:dc:bc:cb:89:1a:e5:f7:20:cd:50:e1: 47:ce:c6:38:4f:d9:ef:c2:8e:41:61:42:32:bf:c5: 57:99:43:73:0d:0c:fe:5f:ef:c7:4f:c6:b2:26:13: e1:f9:63:dd:03:39:9c:b5:5a:f3:35:c4:cf:ac:e1: fa:45:53:fd:55:d6:87:bd:55:86:78:48:c0:4a:a5: f1:9b:95:dd:ae:6a:76:51:65:6e:21:81:89:e5:98: 20:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: A5:B2:B1:4D:97:51:3B:6C:0C:82:B1:E5:40:70:3E:B9:12:DF:D2:29 X509v3 Authority Key Identifier: keyid:CB:02:14:A5:C4:04:D6:F8:40:43:3B:12:0C:AC:BB:5B:8C:59:E6:13 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1065887644090630145/1/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1065887644090630145/1/A5B2B14D97513B6C0C82B1E540703EB912DFD229.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 47.92.0.0-47.127.255.255 139.129.0.0/16 139.196.0.0/16 139.224.0.0/16 Signature Algorithm: sha256WithRSAEncryption c1:ab:8d:40:db:94:8b:fb:1d:78:f7:d3:b6:0f:f4:ee:6d:92: d0:76:e0:12:29:49:5e:08:af:52:cf:3c:4a:48:ef:60:58:4a: 11:e7:8b:ea:05:bf:2a:04:02:ff:95:fa:e2:64:80:ed:17:f1: e6:6e:38:40:b7:e1:e4:4e:26:7a:c3:b4:5f:01:a6:ba:d4:7e: d3:b2:c6:02:39:8d:e7:cd:03:86:ac:16:2b:95:09:8c:d0:17: 2c:21:e9:cc:a1:f5:d1:53:06:b0:17:c3:42:66:51:f1:af:5f: 74:95:39:b1:ed:de:98:99:a8:bb:bc:53:dd:89:58:34:12:73: 6b:19:3b:9c:8c:1b:5d:5a:eb:da:8f:97:11:74:ed:ab:fa:b0: 94:5b:22:1e:5e:22:af:4d:83:1d:fe:f0:b5:59:1e:58:54:95: 09:21:1a:0d:41:85:04:00:91:ad:3f:30:7f:90:bb:d6:61:37: 58:3b:44:0b:55:82:cd:2b:e3:0b:0e:ba:f5:4c:92:48:c0:ac: 2f:17:0c:1f:ec:a6:d9:b4:f7:c8:10:f9:72:02:8f:48:95:93: e7:0e:d8:3b:f1:b0:76:1d:e2:71:13:6c:16:0f:bc:1a:aa:30: 79:7f:05:59:6e:b8:be:6a:81:82:df:fb:9e:dd:18:4e:1d:fc: dc:3e:90:71 -----BEGIN CERTIFICATE----- MIIFvDCCBKSgAwIBAgIUZt7rNUwcN6NsWg2CjUuiGoJZsU4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhDQjAyMTRBNUM0 MDRENkY4NDA0MzNCMTIwQ0FDQkI1QjhDNTlFNjEzMB4XDTI2MDYwMTAyMDIwOFoX DTI3MDUzMTAyMDcwOFowMzExMC8GA1UEAxMoQTVCMkIxNEQ5NzUxM0I2QzBDODJC MUU1NDA3MDNFQjkxMkRGRDIyOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOTBIu+NqkFaDsnsJuBQsHnLBL1eZUnX5lLgVrQbK+T5pcHfegUzxziWDg2X Stz5xlcbn1CbA1/B7Lege3gKmDYg7bnjMdWwIS3zNaRhgNRVG7wg+lJGVYUufVVu 8kbAXT6rdIwxlLrQJsIMK5q284rP90x66mK9bXeGck6qedhCvI9js9M83/lhJGoq 8M78sg8N0M3X26q3WtzGVbpOIwrvn10CGCjh7dy8y4ka5fcgzVDhR87GOE/Z78KO QWFCMr/FV5lDcw0M/l/vx0/GsiYT4flj3QM5nLVa8zXEz6zh+kVT/VXWh71VhnhI wEql8ZuV3a5qdlFlbiGBieWYINUCAwEAAaOCAq8wggKrMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFKWysU2XUTtsDIKx5UBwPrkS39IpMB8GA1UdIwQYMBaAFMsC FKXEBNb4QEM7Egysu1uMWeYTMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMC9DQjAyMTRBNUM0MDRENkY4NDA0MzNCMTIwQ0FDQkI1QjhDNTlF NjEzLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CM0EyNEYyMDFENjYxMUUyOEFDODgzN0M3 MkZEMUZGMi95d0lVcGNRRTF2aEFRenNTREt5N1c0eFo1aE0uY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTA2NTg4NzY0NDA5MDYzMDE0NS8xLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDY1ODg3NjQ0MDkwNjMwMTQ1 LzEvQTVCMkIxNEQ5NzUxM0I2QzBDODJCMUU1NDA3MDNFQjkxMkRGRDIyOS5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwNAYIKwYBBQUH AQcBAf8EJTAjMCEEAgABMBswCgMDAi9cAwMHLwADAwCLgQMDAIvEAwMAi+AwDQYJ KoZIhvcNAQELBQADggEBAMGrjUDblIv7HXj307YP9O5tktB24BIpSV4Ir1LPPEpI 72BYShHni+oFvyoEAv+V+uJkgO0X8eZuOEC34eROJnrDtF8BprrUftOyxgI5jefN A4asFiuVCYzQFywh6cyh9dFTBrAXw0JmUfGvX3SVObHt3piZqLu8U92JWDQSc2sZ O5yMG11a69qPlxF07av6sJRbIh5eIq9Ngx3+8LVZHlhUlQkhGg1BhQQAka0/MH+Q u9ZhN1g7RAtVgs0r4wsOuvVMkkjArC8XDB/sptm098gQ+XICj0iVk+cO2DvxsHYd 4nETbBYPvBqqMHl/BVluuL5qgYLf+57dGE4d/Nw+kHE= -----END CERTIFICATE-----Generated at Fri Jun 12 13:28:20 2026 by rpki-client