$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5253565A27C06C800009631402F5A6EE85C46456.cer File: 5253565A27C06C800009631402F5A6EE85C46456.cer (raw, json) Hash identifier: 8GfeuTPMqZ9bnJH6AQsLMRJpkMMRElbWYlCSBNztBxM= Subject key identifier: 52:53:56:5A:27:C0:6C:80:00:09:63:14:02:F5:A6:EE:85:C4:64:56 Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Certificate serial: 0902472415F451F2B4DE55CB0509E90CF8794004 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1094865295295643651/0/5253565A27C06C800009631402F5A6EE85C46456.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1094865295295643651/0/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Fri 10 Apr 2026 05:58:50 +0000 Certificate not after: Fri 09 Apr 2027 06:03:50 +0000 Subordinate resources: AS: 17490 IP: 61.28.0.0/17 IP: 2401:9a00::/32 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 12:10:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:02:47:24:15:f4:51:f2:b4:de:55:cb:05:09:e9:0c:f8:79:40:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Validity Not Before: Apr 10 05:58:50 2026 GMT Not After : Apr 9 06:03:50 2027 GMT Subject: CN=5253565A27C06C800009631402F5A6EE85C46456 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:f1:22:95:c4:6d:48:07:41:31:e2:76:49:6b: 55:94:04:45:08:f0:67:8c:79:b0:9d:bb:c8:de:97: 23:2f:ce:00:f2:a8:46:58:a7:7f:30:73:bb:83:6e: 53:3f:cc:04:16:41:5c:bc:aa:c3:6e:74:73:00:76: 7d:65:a4:b0:05:28:b8:67:a7:46:b7:24:18:e2:6b: c6:23:1f:09:54:d9:78:f5:cb:aa:7e:57:80:eb:34: 43:62:fe:33:fe:4d:4e:85:8f:1f:1e:81:9b:83:3a: a6:83:7b:5a:24:11:cb:15:9c:8a:86:5a:12:d6:28: b7:f4:0b:77:68:c4:90:c1:c0:e4:9a:88:f1:1f:a2: f9:11:ed:19:f9:e0:34:8f:20:f7:7a:55:91:51:b6: 2d:cd:9d:8c:ef:c2:64:8e:0f:26:a9:76:dc:a1:d7: 0f:4c:02:a2:41:a1:a0:8a:d2:66:2c:f5:6c:0a:a7: d1:5e:d7:0b:1b:2d:40:4d:7c:54:d9:25:a9:1b:c0: a8:7e:c9:3f:d1:1a:2c:c8:c4:30:84:97:bf:31:31: cf:8f:f3:b3:a6:1a:bc:d1:59:84:6c:b4:8d:30:57: 1b:67:e3:3e:bc:d3:9b:f1:08:20:99:7c:97:80:4f: e6:08:3d:e7:79:1e:bb:65:a0:70:c1:b6:e6:88:ac: b1:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 52:53:56:5A:27:C0:6C:80:00:09:63:14:02:F5:A6:EE:85:C4:64:56 X509v3 Authority Key Identifier: keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1094865295295643651/0/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1094865295295643651/0/5253565A27C06C800009631402F5A6EE85C46456.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 61.28.0.0/17 IPv6: 2401:9a00::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 17490 Signature Algorithm: sha256WithRSAEncryption 4e:8a:cf:7f:9d:03:99:47:4d:f4:af:f9:ed:0e:43:b7:63:3c: 19:74:2e:f9:ee:74:a9:f0:db:cc:d9:cb:90:5a:61:18:87:7c: 05:a9:d5:4c:0b:18:5d:91:5b:cb:d7:2d:6c:95:4b:08:44:f7: 92:ae:b5:bc:96:10:38:4d:ec:be:b2:c6:90:17:14:25:e4:56: 33:22:0c:59:f6:5f:9c:37:d1:b5:7a:c4:f3:9f:4d:89:36:69: 87:36:bd:1c:f4:07:e7:12:09:cb:17:63:10:d2:95:28:62:16: 5e:67:36:6e:b3:4d:fb:c2:ed:0b:3d:20:77:99:9a:52:86:93: 72:b7:c7:ea:3c:9e:fd:e5:2a:83:8c:0d:78:1b:83:10:b6:5d: 8e:58:fa:be:2e:fe:cd:e4:c7:93:7c:51:9c:90:66:78:89:4e: f3:3c:38:46:75:df:90:65:98:27:65:ed:0d:2c:37:f1:99:ae: 67:b8:de:ef:f7:91:31:c0:5d:67:71:4a:a5:7e:6d:9d:1e:33: 38:48:dd:d3:8d:2e:29:92:d0:16:e9:fb:9c:16:96:91:51:20: d9:af:36:39:9e:fd:c0:13:2a:a7:08:f7:e5:34:9f:95:b1:92: 58:7c:ea:48:c6:28:22:a2:f6:e2:2f:78:dd:72:a7:ca:25:e9: ec:c0:98:50 -----BEGIN CERTIFICATE----- MIIF0TCCBLmgAwIBAgIUCQJHJBX0UfK03lXLBQnpDPh5QAQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDQxMDA1NTg1MFoX DTI3MDQwOTA2MDM1MFowMzExMC8GA1UEAxMoNTI1MzU2NUEyN0MwNkM4MDAwMDk2 MzE0MDJGNUE2RUU4NUM0NjQ1NjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANfxIpXEbUgHQTHidklrVZQERQjwZ4x5sJ27yN6XIy/OAPKoRlinfzBzu4Nu Uz/MBBZBXLyqw250cwB2fWWksAUouGenRrckGOJrxiMfCVTZePXLqn5XgOs0Q2L+ M/5NToWPHx6Bm4M6poN7WiQRyxWcioZaEtYot/QLd2jEkMHA5JqI8R+i+RHtGfng NI8g93pVkVG2Lc2djO/CZI4PJql23KHXD0wCokGhoIrSZiz1bAqn0V7XCxstQE18 VNklqRvAqH7JP9EaLMjEMISXvzExz4/zs6YavNFZhGy0jTBXG2fjPrzTm/EIIJl8 l4BP5gg953keu2WgcMG25oissUECAwEAAaOCAsQwggLAMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFFJTVlonwGyAAAljFAL1pu6FxGRWMB8GA1UdIwQYMBaAFKVu hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTA5NDg2NTI5NTI5NTY0MzY1MS8wLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDk0ODY1Mjk1Mjk1NjQzNjUx LzAvNTI1MzU2NUEyN0MwNkM4MDAwMDk2MzE0MDJGNUE2RUU4NUM0NjQ1Ni5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUH AQcBAf8EHzAdMAwEAgABMAYDBAc9HAAwDQQCAAIwBwMFACQBmgAwGQYIKwYBBQUH AQgBAf8ECjAIoAYwBAICRFIwDQYJKoZIhvcNAQELBQADggEBAE6Kz3+dA5lHTfSv +e0OQ7djPBl0LvnudKnw28zZy5BaYRiHfAWp1UwLGF2RW8vXLWyVSwhE95KutbyW EDhN7L6yxpAXFCXkVjMiDFn2X5w30bV6xPOfTYk2aYc2vRz0B+cSCcsXYxDSlShi Fl5nNm6zTfvC7Qs9IHeZmlKGk3K3x+o8nv3lKoOMDXgbgxC2XY5Y+r4u/s3kx5N8 UZyQZniJTvM8OEZ135BlmCdl7Q0sN/GZrme43u/3kTHAXWdxSqV+bZ0eMzhI3dON LimS0Bbp+5wWlpFRINmvNjme/cATKqcI9+U0n5Wxklh86kjGKCKi9uIveN1yp8ol 6ezAmFA= -----END CERTIFICATE-----Generated at Mon Apr 13 09:29:08 2026 by rpki-client