$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/52FBEC63231AAADF153ABC98E48B2A634CE07D2A.cer File: 52FBEC63231AAADF153ABC98E48B2A634CE07D2A.cer (raw, json) Hash identifier: ZVx8KeJJXNb/yeTUeQapHUPLK++WqPPfPbFreRK33zQ= Subject key identifier: 52:FB:EC:63:23:1A:AA:DF:15:3A:BC:98:E4:8B:2A:63:4C:E0:7D:2A Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Certificate serial: 154E112E4AF7AB7FE1A140639EB47199EB203F7C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1065591195721334785/0/52FBEC63231AAADF153ABC98E48B2A634CE07D2A.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1065591195721334785/0/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Fri 29 May 2026 06:16:36 +0000 Certificate not after: Fri 28 May 2027 06:21:36 +0000 Subordinate resources: IP: 103.126.100.0/22 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 15:28:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:4e:11:2e:4a:f7:ab:7f:e1:a1:40:63:9e:b4:71:99:eb:20:3f:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Validity Not Before: May 29 06:16:36 2026 GMT Not After : May 28 06:21:36 2027 GMT Subject: CN=52FBEC63231AAADF153ABC98E48B2A634CE07D2A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:07:8c:aa:ef:a6:59:17:44:95:63:e0:fc:ef: 90:b4:6a:0a:9a:e0:1c:47:f1:55:8a:10:e8:79:ff: c6:92:14:ba:a9:1c:9b:53:d5:a9:80:00:ca:1f:ad: 1b:be:56:dc:aa:04:9a:60:b0:a5:05:72:31:c5:e1: 7c:5b:c7:ef:19:43:88:30:be:45:cc:42:74:2c:88: c7:b9:c0:e8:d4:be:2b:3b:47:62:18:a0:d6:57:c2: e0:e1:99:c8:b6:c7:43:86:43:4a:00:11:bf:3e:13: 9f:d8:59:98:77:a2:a6:8b:d5:c6:30:98:59:9a:84: a1:34:35:6d:75:64:e9:15:76:9c:1b:f3:83:c8:2d: f4:61:b5:1d:97:cf:c1:4e:9b:33:d6:be:8f:66:95: 62:da:46:e2:fc:89:ee:dc:a9:03:53:49:c7:cd:2f: 02:02:e7:ee:91:52:e5:0c:11:69:50:59:9a:ef:75: 30:03:aa:9d:c7:de:b1:9f:8a:a5:20:eb:bc:11:8d: 7b:b8:40:8e:67:93:1e:0e:5c:86:59:5f:9d:8a:e2: 15:38:cc:a6:2d:76:e1:97:20:72:2f:78:bd:ac:61: 44:ee:16:18:98:90:49:94:27:71:d8:33:14:e9:d4: bb:f2:14:8c:63:7a:bc:12:ef:70:45:eb:f6:b1:11: 08:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 52:FB:EC:63:23:1A:AA:DF:15:3A:BC:98:E4:8B:2A:63:4C:E0:7D:2A X509v3 Authority Key Identifier: keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721334785/0/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721334785/0/52FBEC63231AAADF153ABC98E48B2A634CE07D2A.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.126.100.0/22 Signature Algorithm: sha256WithRSAEncryption 4a:df:f9:a5:31:de:5d:e8:6a:b9:a3:a6:83:96:cc:4d:50:78: 83:41:11:d6:3f:37:86:ce:a2:6b:2e:51:dd:af:ef:c2:e0:67: 15:26:74:fb:c2:bb:7c:df:68:29:ef:56:d5:4a:ac:ab:34:b3: 7c:c2:ba:f7:17:cd:92:b0:34:0a:69:b4:0a:ba:ec:ac:85:bc: 35:56:c4:c9:71:13:11:78:7b:60:4c:c0:5c:1e:b4:56:ed:f9: 22:ff:cb:eb:77:26:83:d3:70:08:90:a1:0e:0f:5a:be:8b:33: 4d:73:6c:96:2b:ae:d7:d6:d0:09:e4:4c:2f:14:49:a7:5e:66: e7:d8:1b:43:40:46:8f:d8:f9:ca:d2:62:d0:8b:94:04:9c:5a: 6a:3e:a6:4b:d4:32:cb:59:9c:46:12:ef:ac:a9:08:18:17:ed: 40:1f:c2:93:4d:f4:02:70:d1:30:95:d6:d0:81:0c:8c:25:d9: 33:fc:87:2a:5f:18:df:83:e2:62:df:d6:a2:af:af:ce:8f:51: df:ef:dd:c2:b7:14:66:4e:38:87:1d:fa:a3:40:ad:c8:19:a1: de:11:b7:0b:53:73:0c:9f:d9:12:42:e8:5f:62:c8:24:68:e7: 06:a5:a8:fc:c0:3a:9d:27:33:67:6a:34:6c:d6:4c:37:60:86: c0:83:b1:99 -----BEGIN CERTIFICATE----- MIIFpzCCBI+gAwIBAgIUFU4RLkr3q3/hoUBjnrRxmesgP3wwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDUyOTA2MTYzNloX DTI3MDUyODA2MjEzNlowMzExMC8GA1UEAxMoNTJGQkVDNjMyMzFBQUFERjE1M0FC Qzk4RTQ4QjJBNjM0Q0UwN0QyQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAPQHjKrvplkXRJVj4PzvkLRqCprgHEfxVYoQ6Hn/xpIUuqkcm1PVqYAAyh+t G75W3KoEmmCwpQVyMcXhfFvH7xlDiDC+RcxCdCyIx7nA6NS+KztHYhig1lfC4OGZ yLbHQ4ZDSgARvz4Tn9hZmHeipovVxjCYWZqEoTQ1bXVk6RV2nBvzg8gt9GG1HZfP wU6bM9a+j2aVYtpG4vyJ7typA1NJx80vAgLn7pFS5QwRaVBZmu91MAOqncfesZ+K pSDrvBGNe7hAjmeTHg5chllfnYriFTjMpi124Zcgci94vaxhRO4WGJiQSZQncdgz FOnUu/IUjGN6vBLvcEXr9rERCJ0CAwEAAaOCApowggKWMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFFL77GMjGqrfFTq8mOSLKmNM4H0qMB8GA1UdIwQYMBaAFKVu hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTA2NTU5MTE5NTcyMTMzNDc4NS8wLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDY1NTkxMTk1NzIxMzM0Nzg1 LzAvNTJGQkVDNjMyMzFBQUFERjE1M0FCQzk4RTQ4QjJBNjM0Q0UwN0QyQS5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAJnfmQwDQYJKoZIhvcNAQELBQADggEBAErf+aUx 3l3oarmjpoOWzE1QeINBEdY/N4bOomsuUd2v78LgZxUmdPvCu3zfaCnvVtVKrKs0 s3zCuvcXzZKwNApptAq67KyFvDVWxMlxExF4e2BMwFwetFbt+SL/y+t3JoPTcAiQ oQ4PWr6LM01zbJYrrtfW0AnkTC8USadeZufYG0NARo/Y+crSYtCLlAScWmo+pkvU MstZnEYS76ypCBgX7UAfwpNN9AJw0TCV1tCBDIwl2TP8hypfGN+D4mLf1qKvr86P Ud/v3cK3FGZOOIcd+qNArcgZod4RtwtTcwyf2RJC6F9iyCRo5walqPzAOp0nM2dq NGzWTDdghsCDsZk= -----END CERTIFICATE-----Generated at Fri May 29 21:12:32 2026 by rpki-client