$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/53814E2CDF95CC9747D91E3B5A01478695BE00AA.cer File: 53814E2CDF95CC9747D91E3B5A01478695BE00AA.cer (raw, json) Hash identifier: 4pQL9AKRAncZTgPjp1HGEYOufbwVXVKDu6quPkMH8m0= Subject key identifier: 53:81:4E:2C:DF:95:CC:97:47:D9:1E:3B:5A:01:47:86:95:BE:00:AA Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Certificate serial: 07A25874503FCEBEADDA8BAAEE567D3FDAD38CB7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1111909334314385427/0/53814E2CDF95CC9747D91E3B5A01478695BE00AA.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1111909334314385427/0/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Wed 27 May 2026 06:45:44 +0000 Certificate not after: Wed 26 May 2027 06:50:44 +0000 Subordinate resources: AS: 63695 IP: 42.157.128.0/17 IP: 43.255.192.0/22 IP: 45.114.40.0/22 IP: 103.5.52.0/22 IP: 103.53.248.0/22 IP: 211.99.96.0/19 IP: 2403:2440::/32 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 15:28:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:a2:58:74:50:3f:ce:be:ad:da:8b:aa:ee:56:7d:3f:da:d3:8c:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Validity Not Before: May 27 06:45:44 2026 GMT Not After : May 26 06:50:44 2027 GMT Subject: CN=53814E2CDF95CC9747D91E3B5A01478695BE00AA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:ae:30:2f:35:30:5a:4d:24:05:4d:cf:92:10: 12:22:09:f7:5e:e5:d8:07:4b:21:57:4e:12:a5:93: 94:dd:2f:ee:da:5a:42:01:71:5e:a3:20:e4:22:40: 16:15:fe:c9:30:4c:1d:50:0d:7b:87:a0:5c:63:32: c4:45:af:e0:f2:76:2e:4f:37:54:41:b6:3e:9c:78: 54:4c:89:79:c0:4b:01:53:42:0c:bb:3f:ec:d7:22: 4c:9c:68:5e:31:8a:3d:b0:20:65:a3:81:40:04:68: 52:96:82:77:fb:79:6d:4e:c1:5a:d4:0e:85:fd:1e: 83:17:a5:d5:77:55:01:98:8a:20:b2:e6:85:09:b5: 53:bf:71:41:cd:53:96:71:bc:9a:92:02:39:9a:7e: bb:04:cb:61:ab:bf:5f:57:ce:cc:fe:95:3c:f5:6b: 8b:b1:6b:6b:93:57:6d:43:ef:0b:96:6b:62:ca:aa: f9:8c:28:f9:80:02:a0:b4:8c:b7:8f:72:51:66:5a: ed:39:2c:87:f4:bf:b1:e1:20:ef:97:e8:f2:61:d7: a8:4a:ca:46:f1:51:48:f5:67:c1:05:9f:0e:f3:63: 3e:a9:4a:07:02:09:84:86:7c:6d:fc:7d:91:8b:24: 3e:b2:0c:db:aa:53:82:c7:96:f5:fe:9d:b5:57:e9: b5:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 53:81:4E:2C:DF:95:CC:97:47:D9:1E:3B:5A:01:47:86:95:BE:00:AA X509v3 Authority Key Identifier: keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1111909334314385427/0/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1111909334314385427/0/53814E2CDF95CC9747D91E3B5A01478695BE00AA.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 42.157.128.0/17 43.255.192.0/22 45.114.40.0/22 103.5.52.0/22 103.53.248.0/22 211.99.96.0/19 IPv6: 2403:2440::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 63695 Signature Algorithm: sha256WithRSAEncryption 91:6a:c1:30:4f:52:ac:f5:9c:17:4d:a7:87:06:08:55:57:91: 48:6a:2d:64:5d:1c:30:1e:02:64:15:8a:88:76:10:ad:69:03: 06:0f:98:5c:7b:d4:ed:a0:53:a1:05:94:43:76:25:b7:59:a7: f1:14:a4:e4:00:33:8a:9e:b4:2a:8c:5a:43:9a:ac:19:25:79: 16:4a:4d:10:6b:f6:e0:42:b8:80:71:bf:b2:71:3f:09:70:84: 64:3b:14:ad:87:9e:c0:fc:85:54:6b:85:b5:ba:9f:50:dc:1d: b3:22:23:b4:fb:6f:68:f6:20:40:19:8f:62:a9:23:9b:06:35: b7:86:7a:0a:9a:ef:e1:ed:b2:f4:a2:d9:14:1c:74:8c:be:92: d0:17:7f:34:28:dd:a0:ce:20:1d:f9:24:9d:8e:0e:51:b8:38: 0d:2e:2b:0d:0f:03:fb:d2:a9:bc:21:74:25:67:b6:c4:a8:1d: 87:c0:f9:3c:b0:be:2e:d5:5f:74:a6:1b:8f:b4:21:a1:f1:67: ed:24:58:7f:0a:e5:47:86:59:8d:f1:9a:83:1c:7f:cd:f1:81: cf:1a:ab:b5:d2:55:5c:da:d6:a9:51:5a:09:bd:c8:e7:a4:9b: 54:ad:88:0a:5f:b7:10:88:bb:9a:fa:11:1b:9e:a0:04:73:3a: b9:36:f5:ae -----BEGIN CERTIFICATE----- MIIF8DCCBNigAwIBAgIUB6JYdFA/zr6t2ouq7lZ9P9rTjLcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDUyNzA2NDU0NFoX DTI3MDUyNjA2NTA0NFowMzExMC8GA1UEAxMoNTM4MTRFMkNERjk1Q0M5NzQ3RDkx RTNCNUEwMTQ3ODY5NUJFMDBBQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMmuMC81MFpNJAVNz5IQEiIJ917l2AdLIVdOEqWTlN0v7tpaQgFxXqMg5CJA FhX+yTBMHVANe4egXGMyxEWv4PJ2Lk83VEG2Ppx4VEyJecBLAVNCDLs/7NciTJxo XjGKPbAgZaOBQARoUpaCd/t5bU7BWtQOhf0egxel1XdVAZiKILLmhQm1U79xQc1T lnG8mpICOZp+uwTLYau/X1fOzP6VPPVri7Fra5NXbUPvC5ZrYsqq+Ywo+YACoLSM t49yUWZa7Tksh/S/seEg75fo8mHXqErKRvFRSPVnwQWfDvNjPqlKBwIJhIZ8bfx9 kYskPrIM26pTgseW9f6dtVfptZkCAwEAAaOCAuMwggLfMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFFOBTizflcyXR9keO1oBR4aVvgCqMB8GA1UdIwQYMBaAFKVu hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTExMTkwOTMzNDMxNDM4NTQyNy8wLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMTExOTA5MzM0MzE0Mzg1NDI3 LzAvNTM4MTRFMkNERjk1Q0M5NzQ3RDkxRTNCNUEwMTQ3ODY5NUJFMDBBQS5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwTAYIKwYBBQUH AQcBAf8EPTA7MCoEAgABMCQDBAcqnYADBAIr/8ADBAItcigDBAJnBTQDBAJnNfgD BAXTY2AwDQQCAAIwBwMFACQDJEAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDAPjP MA0GCSqGSIb3DQEBCwUAA4IBAQCRasEwT1Ks9ZwXTaeHBghVV5FIai1kXRwwHgJk FYqIdhCtaQMGD5hce9TtoFOhBZRDdiW3WafxFKTkADOKnrQqjFpDmqwZJXkWSk0Q a/bgQriAcb+ycT8JcIRkOxSth57A/IVUa4W1up9Q3B2zIiO0+29o9iBAGY9iqSOb BjW3hnoKmu/h7bL0otkUHHSMvpLQF380KN2gziAd+SSdjg5RuDgNLisNDwP70qm8 IXQlZ7bEqB2HwPk8sL4u1V90phuPtCGh8WftJFh/CuVHhlmN8ZqDHH/N8YHPGqu1 0lVc2tapUVoJvcjnpJtUrYgKX7cQiLua+hEbnqAEczq5NvWu -----END CERTIFICATE-----Generated at Fri May 29 21:12:00 2026 by rpki-client