$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4A5A30DA744EA4A4206F85E77C2D6D8F0A229AE5.cer File: 4A5A30DA744EA4A4206F85E77C2D6D8F0A229AE5.cer (raw, json) Hash identifier: EvIqxdmDwyV7nd76vk5KcfVu3nSDs3bTa5/CITF8cCs= Subject key identifier: 4A:5A:30:DA:74:4E:A4:A4:20:6F:85:E7:7C:2D:6D:8F:0A:22:9A:E5 Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Certificate serial: 7BCC53481E8745011091627E56F32BD75E919031 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1065591195721465857/0/4A5A30DA744EA4A4206F85E77C2D6D8F0A229AE5.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1065591195721465857/0/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Fri 29 May 2026 06:20:13 +0000 Certificate not after: Fri 28 May 2027 06:25:13 +0000 Subordinate resources: IP: 103.150.130.0/23 IP: 2406:140::/32 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 15:28:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:cc:53:48:1e:87:45:01:10:91:62:7e:56:f3:2b:d7:5e:91:90:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Validity Not Before: May 29 06:20:13 2026 GMT Not After : May 28 06:25:13 2027 GMT Subject: CN=4A5A30DA744EA4A4206F85E77C2D6D8F0A229AE5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:7f:b1:aa:a7:99:03:1d:5b:65:07:ad:18:08: e5:22:86:a3:fd:0b:70:cc:55:ce:6b:5e:13:3d:d5: ae:e4:20:fd:c1:33:e6:f3:b5:ea:c5:20:54:a6:2a: fd:75:f4:c6:b4:d7:c9:d9:7e:6a:53:74:f1:e5:7a: 81:50:fb:2b:80:f7:12:68:07:07:90:29:a5:df:b7: ff:15:64:cd:6d:7d:24:b8:bf:04:5a:b5:55:91:55: d5:ea:b6:f3:73:55:eb:51:84:ae:02:bb:d0:26:12: bb:30:fd:25:c2:d7:94:ef:ce:57:7a:7e:1a:18:d5: 2e:36:e8:f7:e7:3f:8b:b4:07:08:d5:ec:14:4d:ca: ef:39:02:3c:51:d6:b4:06:41:09:8f:ab:3e:1d:d2: 77:f7:1e:a8:57:b4:d3:82:a6:3b:0a:7b:80:7c:eb: c1:bd:1f:7f:c9:84:6f:6c:a2:42:63:c5:0c:48:29: ea:e7:ec:b8:c9:33:91:7e:03:f6:c3:d3:d8:96:59: c0:78:5c:b2:9c:8c:35:b3:34:7a:6c:14:12:4c:bd: 10:15:6e:09:0d:30:ef:83:7a:c8:6f:72:66:21:d1: 8f:26:3c:a5:a1:5f:24:fb:00:34:e3:90:f9:7c:40: c5:39:0a:da:18:a6:a2:70:fd:69:de:9a:e8:2b:7a: 0e:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 4A:5A:30:DA:74:4E:A4:A4:20:6F:85:E7:7C:2D:6D:8F:0A:22:9A:E5 X509v3 Authority Key Identifier: keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721465857/0/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721465857/0/4A5A30DA744EA4A4206F85E77C2D6D8F0A229AE5.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.150.130.0/23 IPv6: 2406:140::/32 Signature Algorithm: sha256WithRSAEncryption 77:97:34:75:46:2b:75:55:96:5e:c3:dd:ff:7e:a8:99:1d:63: e9:9c:35:79:3d:c2:b8:74:d5:3f:b0:85:1a:28:65:87:f3:0a: 09:c7:88:d5:b0:9b:29:58:de:f9:d8:03:2e:c8:15:c9:00:b0: 6f:81:e9:bf:21:d6:e6:8b:b7:39:4c:67:10:85:7d:69:de:17: 54:04:d7:3c:90:58:cd:91:ea:ff:79:87:08:9d:0b:e6:76:c5: 22:c0:37:ca:f2:e7:a0:7a:80:62:c7:f5:15:72:6a:41:d4:ec: d4:b5:3b:b6:08:60:24:96:53:2c:0e:40:f2:fa:4a:d3:bb:e2: 12:4a:88:9b:c5:84:a6:f2:85:db:91:1d:1b:15:35:e8:55:f8: 71:db:41:78:a2:ef:4e:0f:0e:a5:54:ea:b2:3c:b0:5f:cc:c2: dd:52:05:04:3c:c6:f4:61:95:45:fe:2a:7b:ba:49:38:f1:c3: 5a:a9:97:20:29:68:31:23:47:9b:65:e8:c3:a6:36:04:34:74: 9f:9a:da:ed:72:48:31:24:32:5c:19:dc:75:0d:cf:02:57:d9: 38:6f:d5:8a:40:aa:31:90:78:2d:22:c1:35:b9:77:ed:0b:0d: ff:85:6b:71:33:40:1b:bb:39:eb:d4:62:11:ba:df:9b:96:ca: 12:6b:40:6c -----BEGIN CERTIFICATE----- MIIFtjCCBJ6gAwIBAgIUe8xTSB6HRQEQkWJ+VvMr116RkDEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDUyOTA2MjAxM1oX DTI3MDUyODA2MjUxM1owMzExMC8GA1UEAxMoNEE1QTMwREE3NDRFQTRBNDIwNkY4 NUU3N0MyRDZEOEYwQTIyOUFFNTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANx/saqnmQMdW2UHrRgI5SKGo/0LcMxVzmteEz3VruQg/cEz5vO16sUgVKYq /XX0xrTXydl+alN08eV6gVD7K4D3EmgHB5Appd+3/xVkzW19JLi/BFq1VZFV1eq2 83NV61GErgK70CYSuzD9JcLXlO/OV3p+GhjVLjbo9+c/i7QHCNXsFE3K7zkCPFHW tAZBCY+rPh3Sd/ceqFe004KmOwp7gHzrwb0ff8mEb2yiQmPFDEgp6ufsuMkzkX4D 9sPT2JZZwHhcspyMNbM0emwUEky9EBVuCQ0w74N6yG9yZiHRjyY8paFfJPsANOOQ +XxAxTkK2himonD9ad6a6Ct6DmkCAwEAAaOCAqkwggKlMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFEpaMNp0TqSkIG+F53wtbY8KIprlMB8GA1UdIwQYMBaAFKVu hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTA2NTU5MTE5NTcyMTQ2NTg1Ny8wLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDY1NTkxMTk1NzIxNDY1ODU3 LzAvNEE1QTMwREE3NDRFQTRBNDIwNkY4NUU3N0MyRDZEOEYwQTIyOUFFNS5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUH AQcBAf8EHzAdMAwEAgABMAYDBAFnloIwDQQCAAIwBwMFACQGAUAwDQYJKoZIhvcN AQELBQADggEBAHeXNHVGK3VVll7D3f9+qJkdY+mcNXk9wrh01T+whRooZYfzCgnH iNWwmylY3vnYAy7IFckAsG+B6b8h1uaLtzlMZxCFfWneF1QE1zyQWM2R6v95hwid C+Z2xSLAN8ry56B6gGLH9RVyakHU7NS1O7YIYCSWUywOQPL6StO74hJKiJvFhKby hduRHRsVNehV+HHbQXii704PDqVU6rI8sF/Mwt1SBQQ8xvRhlUX+Knu6STjxw1qp lyApaDEjR5tl6MOmNgQ0dJ+a2u1ySDEkMlwZ3HUNzwJX2Thv1YpAqjGQeC0iwTW5 d+0LDf+Fa3EzQBu7OevUYhG635uWyhJrQGw= -----END CERTIFICATE-----Generated at Fri May 29 21:13:19 2026 by rpki-client