$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/452E5EF14738FB7690CC3BDEA989AD085EA76E10.cer File: 452E5EF14738FB7690CC3BDEA989AD085EA76E10.cer (raw, json) Hash identifier: 5Hw1irAlt7BsKFa+Med0EJqd+XdvLKWZXyygoNj0XhU= Subject key identifier: 45:2E:5E:F1:47:38:FB:76:90:CC:3B:DE:A9:89:AD:08:5E:A7:6E:10 Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Certificate serial: 75B6FE4D8941688882659C4C8B38700351EFE4CB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1065591117757743107/0/452E5EF14738FB7690CC3BDEA989AD085EA76E10.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1065591117757743107/0/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Fri 29 May 2026 06:13:03 +0000 Certificate not after: Fri 28 May 2027 06:18:03 +0000 Subordinate resources: IP: 163.61.62.0/23 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Jun 2026 19:04:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:b6:fe:4d:89:41:68:88:82:65:9c:4c:8b:38:70:03:51:ef:e4:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Validity Not Before: May 29 06:13:03 2026 GMT Not After : May 28 06:18:03 2027 GMT Subject: CN=452E5EF14738FB7690CC3BDEA989AD085EA76E10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:3f:47:74:f3:4c:16:36:f2:d1:64:60:e7:10: a1:84:95:79:34:75:58:de:eb:dc:0b:50:cd:51:c6: fe:b7:bf:82:68:4f:fe:b1:a9:50:e2:c7:66:ba:6b: 3c:94:79:a4:99:55:b3:8f:a0:34:b1:ab:9e:48:5f: b7:4a:05:e5:07:5d:2c:f2:60:81:93:a7:15:d1:9c: fe:9a:e4:7c:8b:f5:0f:d8:f3:78:60:82:35:24:f2: 96:78:e2:40:0a:38:5a:66:2c:ce:3e:6b:f0:f6:1c: 06:b8:d9:46:65:c0:bf:d2:35:d3:b6:81:b7:b4:15: b7:47:25:88:bd:14:61:5e:8c:3d:d9:17:1a:1d:80: 8f:d7:82:45:10:42:5f:26:59:55:ff:48:b0:e0:2c: 86:7a:88:b7:ef:91:3f:db:1b:5c:74:45:68:a3:9b: a3:37:0e:ff:75:74:8a:9c:f7:cc:fe:2d:6a:87:d6: 27:4b:9f:56:f2:69:cd:11:c4:31:73:d1:20:b5:1b: 6b:49:dd:8f:4e:34:50:5f:dc:3e:aa:6d:97:f8:50: 69:2d:19:ef:1b:da:9b:0e:0c:0d:03:d9:6b:a4:5e: 47:67:9f:af:3d:88:5e:67:2e:b5:3d:32:56:53:de: e5:62:ed:4f:17:fd:d3:d5:58:1d:f6:87:f6:cc:8a: e5:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 45:2E:5E:F1:47:38:FB:76:90:CC:3B:DE:A9:89:AD:08:5E:A7:6E:10 X509v3 Authority Key Identifier: keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591117757743107/0/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591117757743107/0/452E5EF14738FB7690CC3BDEA989AD085EA76E10.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 163.61.62.0/23 Signature Algorithm: sha256WithRSAEncryption 32:f3:77:d4:67:03:b2:f3:00:65:62:f4:f6:99:d6:b6:56:d1: d6:b3:64:24:93:c9:6c:9c:3d:d6:bc:2d:7c:21:75:15:68:fe: a7:7d:61:64:61:db:f4:12:29:a1:ec:d9:ce:1f:6f:dd:68:11: d8:44:11:89:71:42:a1:3c:2b:63:9f:f7:a1:98:7b:52:2a:28: 68:c3:46:21:dd:11:64:48:a8:ef:19:03:9e:2c:d9:af:90:34: 1c:f0:f2:c6:f2:b1:e0:34:d6:87:6f:6d:8d:f4:80:52:ae:0f: 38:fa:f3:a9:65:3a:ad:08:4a:78:ae:47:80:f8:a0:bf:59:0a: ea:e4:92:b4:41:06:f5:c0:91:06:67:32:cd:d5:9b:d9:b2:b6: de:03:67:77:63:7a:87:00:cb:24:b7:24:30:76:56:1d:d0:5c: c1:ec:8a:ce:75:02:44:e3:97:00:d1:35:5d:17:fa:a2:68:4a: 9f:86:1f:c2:d4:71:21:cd:6a:83:57:80:b1:de:27:58:54:50: c9:cd:10:cc:5a:77:56:59:3a:b4:85:05:5c:09:5a:a8:bd:15: 55:3e:c7:f8:42:cf:88:d3:19:f0:61:55:62:3a:bd:64:fa:cc: 7d:72:a3:fd:f7:82:fb:69:41:cd:42:69:9f:7a:35:f2:14:4a: 20:52:b7:e5 -----BEGIN CERTIFICATE----- MIIFpzCCBI+gAwIBAgIUdbb+TYlBaIiCZZxMizhwA1Hv5MswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDUyOTA2MTMwM1oX DTI3MDUyODA2MTgwM1owMzExMC8GA1UEAxMoNDUyRTVFRjE0NzM4RkI3NjkwQ0Mz QkRFQTk4OUFEMDg1RUE3NkUxMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALk/R3TzTBY28tFkYOcQoYSVeTR1WN7r3AtQzVHG/re/gmhP/rGpUOLHZrpr PJR5pJlVs4+gNLGrnkhft0oF5QddLPJggZOnFdGc/prkfIv1D9jzeGCCNSTylnji QAo4WmYszj5r8PYcBrjZRmXAv9I107aBt7QVt0cliL0UYV6MPdkXGh2Aj9eCRRBC XyZZVf9IsOAshnqIt++RP9sbXHRFaKObozcO/3V0ipz3zP4taofWJ0ufVvJpzRHE MXPRILUba0ndj040UF/cPqptl/hQaS0Z7xvamw4MDQPZa6ReR2efrz2IXmcutT0y VlPe5WLtTxf909VYHfaH9syK5f0CAwEAAaOCApowggKWMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFEUuXvFHOPt2kMw73qmJrQhep24QMB8GA1UdIwQYMBaAFKVu hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTA2NTU5MTExNzc1Nzc0MzEwNy8wLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDY1NTkxMTE3NzU3NzQzMTA3 LzAvNDUyRTVFRjE0NzM4RkI3NjkwQ0MzQkRFQTk4OUFEMDg1RUE3NkUxMC5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAGjPT4wDQYJKoZIhvcNAQELBQADggEBADLzd9Rn A7LzAGVi9PaZ1rZW0dazZCSTyWycPda8LXwhdRVo/qd9YWRh2/QSKaHs2c4fb91o EdhEEYlxQqE8K2Of96GYe1IqKGjDRiHdEWRIqO8ZA54s2a+QNBzw8sbyseA01odv bY30gFKuDzj686llOq0ISniuR4D4oL9ZCurkkrRBBvXAkQZnMs3Vm9mytt4DZ3dj eocAyyS3JDB2Vh3QXMHsis51AkTjlwDRNV0X+qJoSp+GH8LUcSHNaoNXgLHeJ1hU UMnNEMxad1ZZOrSFBVwJWqi9FVU+x/hCz4jTGfBhVWI6vWT6zH1yo/33gvtpQc1C aZ96NfIUSiBSt+U= -----END CERTIFICATE-----Generated at Fri Jun 12 04:14:10 2026 by rpki-client