$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/53516FA1497CFCCDBBF28F2BDE9FA486FE90FE24.cer File: 53516FA1497CFCCDBBF28F2BDE9FA486FE90FE24.cer (raw, json) Hash identifier: xOwaZ+Gp6izfXpQq7zoHU/nzj563tCPaV7PlN61v6r8= Subject key identifier: 53:51:6F:A1:49:7C:FC:CD:BB:F2:8F:2B:DE:9F:A4:86:FE:90:FE:24 Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Certificate serial: 305369B3C023A92E1F5C95B3363A904381E38CC2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1108663550978555925/1/53516FA1497CFCCDBBF28F2BDE9FA486FE90FE24.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1108663550978555925/1/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Mon 18 May 2026 07:48:12 +0000 Certificate not after: Mon 17 May 2027 07:53:12 +0000 Subordinate resources: AS: 151284 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 15:28:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:53:69:b3:c0:23:a9:2e:1f:5c:95:b3:36:3a:90:43:81:e3:8c:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Validity Not Before: May 18 07:48:12 2026 GMT Not After : May 17 07:53:12 2027 GMT Subject: CN=53516FA1497CFCCDBBF28F2BDE9FA486FE90FE24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:95:32:1f:ba:33:1f:ab:60:99:c3:72:17:9d: 47:42:99:92:bd:b9:74:49:7e:dc:a6:ad:10:27:e4: 9d:3c:b6:00:36:1d:26:31:8d:fc:f4:19:7c:47:90: 60:81:29:bb:b9:10:02:18:fe:2a:7b:27:80:6a:29: e0:82:51:a0:69:8e:40:0a:51:d7:3f:7e:4a:15:8c: 46:97:b4:c3:e2:df:45:e9:86:e9:5d:13:16:82:ae: e1:f4:2b:94:7e:79:35:95:9e:e4:2f:0a:b4:f3:7f: ad:87:c2:a1:b1:20:32:0e:96:e7:1f:2b:ec:26:97: 3a:65:17:5c:43:21:f5:aa:d6:25:f3:ad:b9:3c:fc: e5:50:b1:d7:3e:14:a9:47:01:bd:10:70:b6:b2:99: db:34:45:33:20:59:52:17:86:0e:a5:05:9e:57:f3: 9e:09:02:eb:19:6f:77:3f:03:e5:71:93:c2:b1:4f: 1e:64:0c:48:51:9a:d1:57:c4:6e:52:b4:c6:9f:6a: cc:83:9e:77:4f:aa:74:89:c9:11:c2:99:b8:36:7a: a0:ee:9f:11:60:3b:c5:2e:99:18:7d:7b:7c:67:9b: 06:8c:c1:aa:d6:bc:92:8b:18:6e:aa:e3:00:4d:54: c5:eb:dd:0f:6f:2a:f8:4b:40:1a:24:de:cc:e4:3c: 12:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 53:51:6F:A1:49:7C:FC:CD:BB:F2:8F:2B:DE:9F:A4:86:FE:90:FE:24 X509v3 Authority Key Identifier: keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1108663550978555925/1/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1108663550978555925/1/53516FA1497CFCCDBBF28F2BDE9FA486FE90FE24.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 151284 Signature Algorithm: sha256WithRSAEncryption 89:03:21:be:77:1d:f6:7b:58:b8:35:4f:6f:ff:6b:f8:75:c7: 57:5d:d1:97:ca:f6:9b:3c:17:ba:0b:2e:6a:51:fe:f8:44:18: 14:f3:80:e1:d9:b7:8d:0b:7d:c5:c8:b0:21:0f:df:c7:5c:89: 70:0b:d1:3a:13:38:dd:45:af:c1:a1:48:8c:1a:b7:05:91:52: 79:2d:23:3f:77:96:3d:6b:d8:42:f4:86:3c:d7:34:88:28:6e: 77:09:8e:c9:38:05:3c:49:8f:a0:90:13:c0:9a:60:de:10:9e: 21:f9:2d:f2:ab:c0:ef:c6:85:c5:4f:1e:b1:0b:eb:da:82:b5: b0:15:35:74:ea:69:16:9c:26:f4:0e:9f:f5:b2:3c:17:15:be: 16:d6:84:22:a1:7f:15:12:49:a7:2e:65:e5:38:b7:4c:f0:50: 88:75:c7:c4:de:d6:6e:79:6b:1c:eb:6b:15:24:9f:01:cd:06: f8:f0:6c:f7:fc:e2:6d:c9:4b:e1:9c:09:d2:3b:04:77:2e:c6: 2e:a1:6a:4c:35:5e:12:73:62:85:f6:2b:c6:4b:82:11:38:8e: 02:54:3f:84:32:71:7d:98:66:79:ac:0d:0b:af:ff:c5:9b:d9: 62:ee:46:ca:7e:b3:be:a4:b1:c2:0a:71:f6:07:2c:b3:ba:33: 0f:70:c1:b6 -----BEGIN CERTIFICATE----- MIIFojCCBIqgAwIBAgIUMFNps8AjqS4fXJWzNjqQQ4HjjMIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDUxODA3NDgxMloX DTI3MDUxNzA3NTMxMlowMzExMC8GA1UEAxMoNTM1MTZGQTE0OTdDRkNDREJCRjI4 RjJCREU5RkE0ODZGRTkwRkUyNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANOVMh+6Mx+rYJnDchedR0KZkr25dEl+3KatECfknTy2ADYdJjGN/PQZfEeQ YIEpu7kQAhj+KnsngGop4IJRoGmOQApR1z9+ShWMRpe0w+LfRemG6V0TFoKu4fQr lH55NZWe5C8KtPN/rYfCobEgMg6W5x8r7CaXOmUXXEMh9arWJfOtuTz85VCx1z4U qUcBvRBwtrKZ2zRFMyBZUheGDqUFnlfzngkC6xlvdz8D5XGTwrFPHmQMSFGa0VfE blK0xp9qzIOed0+qdInJEcKZuDZ6oO6fEWA7xS6ZGH17fGebBozBqta8kosYbqrj AE1UxevdD28q+EtAGiTezOQ8EvECAwEAAaOCApUwggKRMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFFNRb6FJfPzNu/KPK96fpIb+kP4kMB8GA1UdIwQYMBaAFKVu hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTEwODY2MzU1MDk3ODU1NTkyNS8xLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMTA4NjYzNTUwOTc4NTU1OTI1 LzEvNTM1MTZGQTE0OTdDRkNDREJCRjI4RjJCREU5RkE0ODZGRTkwRkUyNC5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwGgYIKwYBBQUH AQgBAf8ECzAJoAcwBQIDAk70MA0GCSqGSIb3DQEBCwUAA4IBAQCJAyG+dx32e1i4 NU9v/2v4dcdXXdGXyvabPBe6Cy5qUf74RBgU84Dh2beNC33FyLAhD9/HXIlwC9E6 EzjdRa/BoUiMGrcFkVJ5LSM/d5Y9a9hC9IY81zSIKG53CY7JOAU8SY+gkBPAmmDe EJ4h+S3yq8DvxoXFTx6xC+vagrWwFTV06mkWnCb0Dp/1sjwXFb4W1oQioX8VEkmn LmXlOLdM8FCIdcfE3tZueWsc62sVJJ8BzQb48Gz3/OJtyUvhnAnSOwR3LsYuoWpM NV4Sc2KF9ivGS4IROI4CVD+EMnF9mGZ5rA0Lr//Fm9li7kbKfrO+pLHCCnH2Byyz ujMPcMG2 -----END CERTIFICATE-----Generated at Fri May 29 21:11:45 2026 by rpki-client