$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1405209D8B1B0656C25CCB7CBE2728F5B974058A.cer File: 1405209D8B1B0656C25CCB7CBE2728F5B974058A.cer (raw, json) Hash identifier: vzpOyTGvqMwQ+HGXmXxL5/oC4PMwoomAvUgDOvSpbNw= Subject key identifier: 14:05:20:9D:8B:1B:06:56:C2:5C:CB:7C:BE:27:28:F5:B9:74:05:8A Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Certificate serial: 3C0570E0606AF64A8E139DD78902C16B1376F295 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1109324607057297425/0/1405209D8B1B0656C25CCB7CBE2728F5B974058A.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1109324607057297425/0/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Wed 20 May 2026 03:34:58 +0000 Certificate not after: Wed 19 May 2027 03:39:58 +0000 Subordinate resources: IP: 101.96.144.0/20 IP: 103.149.246.0/23 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 15:28:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:05:70:e0:60:6a:f6:4a:8e:13:9d:d7:89:02:c1:6b:13:76:f2:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Validity Not Before: May 20 03:34:58 2026 GMT Not After : May 19 03:39:58 2027 GMT Subject: CN=1405209D8B1B0656C25CCB7CBE2728F5B974058A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:0a:e3:9a:bd:a1:fe:b4:14:16:9d:f9:8a:54: d4:3b:cd:df:97:10:12:b4:07:64:f3:f5:f5:8a:86: 05:66:12:63:ba:3b:3b:f8:be:de:96:1a:21:81:98: 56:07:f5:af:82:94:f2:d5:6c:e2:da:92:0b:81:a1: c7:7b:63:68:e3:55:e7:08:b8:1b:bb:2d:a8:96:e8: d7:90:4d:56:69:2d:73:e3:12:b6:ba:c4:1e:46:bf: 75:b7:ca:2d:42:e4:6b:23:f0:b4:0c:ef:c6:fe:ac: 6b:10:4a:ba:98:41:95:58:90:6a:89:49:d4:8f:f4: 77:b2:32:11:2e:e5:29:13:53:cf:7e:e7:d3:dd:fc: 74:9d:ae:f6:17:c6:c9:3b:98:0c:11:4b:eb:ef:cd: e6:68:3d:cf:e1:6c:89:8a:91:5b:61:f8:23:59:73: 79:1f:56:82:92:ea:6f:b2:22:98:01:e5:68:51:6f: 54:da:71:ca:6d:d1:bd:f8:b9:04:76:f9:b4:a0:63: bd:6a:d6:d6:88:13:be:5b:ed:d0:af:5c:d5:8d:1f: 1f:a1:28:dd:89:8f:c4:f5:39:00:3e:dc:94:1d:bb: 12:0c:dc:b7:89:0b:e5:78:91:06:a0:48:a0:c8:fd: 81:22:f5:0b:c2:69:c9:1c:5f:72:09:6a:fa:c9:bc: 27:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 14:05:20:9D:8B:1B:06:56:C2:5C:CB:7C:BE:27:28:F5:B9:74:05:8A X509v3 Authority Key Identifier: keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1109324607057297425/0/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1109324607057297425/0/1405209D8B1B0656C25CCB7CBE2728F5B974058A.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 101.96.144.0/20 103.149.246.0/23 Signature Algorithm: sha256WithRSAEncryption 15:30:7d:eb:11:99:71:f7:b3:b0:45:49:9b:85:ce:a8:37:00: 3e:1d:26:a4:2d:e9:57:d0:61:10:a5:8b:58:37:37:c8:ce:05: 1c:4c:ca:f4:f0:66:40:8c:94:a5:27:81:33:2c:f1:a1:98:d6: 45:57:d2:d4:3c:d4:05:d6:30:3e:55:fb:6d:5d:79:54:a2:2d: b3:22:f0:46:31:dd:0d:9b:32:81:38:47:43:8f:fa:55:c2:af: 9b:ec:d3:24:ab:dc:cc:74:f9:e1:ca:1e:26:4f:bc:72:a1:e6: 02:29:99:04:db:98:50:01:8a:68:c3:78:db:3e:8f:d6:10:b9: a0:34:9e:49:1d:9f:b5:57:b0:67:3d:d9:6b:e4:44:f7:ee:91: 53:bb:a9:c9:83:a1:ba:a0:54:fa:82:bd:3c:ff:c1:16:86:3a: 56:ed:2a:e7:e7:da:4b:50:04:88:86:48:da:06:6d:4c:c0:a0: 16:b2:3a:64:19:a9:9b:41:28:0b:5a:02:19:fb:9a:31:77:e1: d1:86:af:79:a7:ec:6f:2f:af:7e:a1:65:4b:d7:f7:0a:20:d4: 76:1f:c7:fd:3a:e2:ab:84:b4:94:62:24:d7:a6:eb:3b:17:50: 72:90:4c:e2:9f:c9:2a:89:0f:91:98:ff:6a:51:ec:f7:c6:2d: 2e:81:f7:5c -----BEGIN CERTIFICATE----- MIIFrTCCBJWgAwIBAgIUPAVw4GBq9kqOE53XiQLBaxN28pUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDUyMDAzMzQ1OFoX DTI3MDUxOTAzMzk1OFowMzExMC8GA1UEAxMoMTQwNTIwOUQ4QjFCMDY1NkMyNUND QjdDQkUyNzI4RjVCOTc0MDU4QTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJwK45q9of60FBad+YpU1DvN35cQErQHZPP19YqGBWYSY7o7O/i+3pYaIYGY Vgf1r4KU8tVs4tqSC4Ghx3tjaONV5wi4G7stqJbo15BNVmktc+MStrrEHka/dbfK LULkayPwtAzvxv6saxBKuphBlViQaolJ1I/0d7IyES7lKRNTz37n0938dJ2u9hfG yTuYDBFL6+/N5mg9z+FsiYqRW2H4I1lzeR9WgpLqb7IimAHlaFFvVNpxym3Rvfi5 BHb5tKBjvWrW1ogTvlvt0K9c1Y0fH6Eo3YmPxPU5AD7clB27Egzct4kL5XiRBqBI oMj9gSL1C8JpyRxfcglq+sm8Jz8CAwEAAaOCAqAwggKcMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFBQFIJ2LGwZWwlzLfL4nKPW5dAWKMB8GA1UdIwQYMBaAFKVu hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTEwOTMyNDYwNzA1NzI5NzQyNS8wLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMTA5MzI0NjA3MDU3Mjk3NDI1 LzAvMTQwNTIwOUQ4QjFCMDY1NkMyNUNDQjdDQkUyNzI4RjVCOTc0MDU4QS5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwJQYIKwYBBQUH AQcBAf8EFjAUMBIEAgABMAwDBARlYJADBAFnlfYwDQYJKoZIhvcNAQELBQADggEB ABUwfesRmXH3s7BFSZuFzqg3AD4dJqQt6VfQYRCli1g3N8jOBRxMyvTwZkCMlKUn gTMs8aGY1kVX0tQ81AXWMD5V+21deVSiLbMi8EYx3Q2bMoE4R0OP+lXCr5vs0ySr 3Mx0+eHKHiZPvHKh5gIpmQTbmFABimjDeNs+j9YQuaA0nkkdn7VXsGc92WvkRPfu kVO7qcmDobqgVPqCvTz/wRaGOlbtKufn2ktQBIiGSNoGbUzAoBayOmQZqZtBKAta Ahn7mjF34dGGr3mn7G8vr36hZUvX9wog1HYfx/064quEtJRiJNem6zsXUHKQTOKf ySqJD5GY/2pR7PfGLS6B91w= -----END CERTIFICATE-----Generated at Fri May 29 21:11:57 2026 by rpki-client