$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5A13B0DE9C8C165E1DF74B37ED5F08A00DC705F4.cer File: 5A13B0DE9C8C165E1DF74B37ED5F08A00DC705F4.cer (raw, json) Hash identifier: bl6O5CRWU2CAcqpKYTBZQzvJdtUGQCcdmCt52834N+4= Subject key identifier: 5A:13:B0:DE:9C:8C:16:5E:1D:F7:4B:37:ED:5F:08:A0:0D:C7:05:F4 Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Certificate serial: 39EB584AE07FA551EEC51ED950EED93CAD3F1912 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1112300133472534549/0/5A13B0DE9C8C165E1DF74B37ED5F08A00DC705F4.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1112300133472534549/0/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Thu 28 May 2026 08:38:38 +0000 Certificate not after: Thu 27 May 2027 08:43:38 +0000 Subordinate resources: IP: 2406:1e40::/32 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 15:28:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:eb:58:4a:e0:7f:a5:51:ee:c5:1e:d9:50:ee:d9:3c:ad:3f:19:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Validity Not Before: May 28 08:38:38 2026 GMT Not After : May 27 08:43:38 2027 GMT Subject: CN=5A13B0DE9C8C165E1DF74B37ED5F08A00DC705F4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:5c:4b:2e:98:b0:75:17:01:67:e8:b2:07:0a: cf:96:5d:ea:b6:6e:0d:25:bd:a4:ee:fe:bd:28:fc: 7e:a5:ac:ea:2c:ab:08:a0:3b:9d:98:e2:aa:59:51: a1:e4:50:a4:51:ca:f4:c5:86:1a:27:44:9e:ca:90: 06:84:a0:8c:11:8b:4a:eb:dd:94:ab:f3:3a:93:58: dd:fc:e1:a1:43:dd:04:4e:3a:44:27:42:6f:46:66: 0d:6e:e1:3d:de:4b:ef:56:c3:ca:88:ab:26:08:c7: cf:ba:7b:40:de:4b:8a:6f:2f:e8:21:87:cb:c4:6b: 2d:20:e4:c4:34:1f:96:77:d8:55:5a:6d:49:a8:fa: e1:6e:75:a8:94:04:e0:4e:f2:17:2d:05:28:87:ee: 99:99:b9:48:86:22:7d:3d:60:0c:5c:33:ae:88:93: 01:bb:09:b7:f3:75:e1:f7:e0:dd:33:95:7f:fa:b7: 94:52:fc:20:06:49:91:20:99:8e:15:10:3e:06:48: e2:94:e5:92:ce:8c:18:64:74:b1:33:23:be:ac:f9: 7c:a1:3c:20:3c:f8:24:0a:7c:e4:d2:13:d4:fc:58: 36:b6:38:72:66:17:e7:50:11:fe:30:e7:28:98:de: 2d:e0:10:9d:12:20:44:79:90:ab:6a:85:20:2e:e3: f7:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 5A:13:B0:DE:9C:8C:16:5E:1D:F7:4B:37:ED:5F:08:A0:0D:C7:05:F4 X509v3 Authority Key Identifier: keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1112300133472534549/0/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1112300133472534549/0/5A13B0DE9C8C165E1DF74B37ED5F08A00DC705F4.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:1e40::/32 Signature Algorithm: sha256WithRSAEncryption 24:92:3d:2a:f9:4b:7f:8c:af:af:e9:b0:7f:38:7d:28:f2:a7: 84:b0:c9:dc:49:98:9c:54:b3:e3:8c:85:83:f7:36:82:60:d4: ba:b2:0d:0d:4f:7b:91:85:f1:fe:6b:14:39:d5:d3:67:e1:64: e7:c1:bb:40:a5:45:9e:4b:68:96:0c:74:5b:51:6f:2e:b8:d9: db:c9:2f:b9:51:b7:2c:09:77:e4:e5:05:54:b3:b9:89:e9:46: ce:06:d6:49:0f:7e:45:01:e6:81:61:ba:be:1a:11:aa:c7:1e: 45:b4:c2:49:c5:4f:09:23:66:81:c7:19:c6:ab:1c:fb:f4:77: 53:29:40:2b:57:60:16:28:23:1d:2e:22:f3:75:66:87:25:ff: f2:a3:36:de:58:c8:63:83:8e:8c:aa:fa:a1:3e:b5:40:d3:20: 59:91:6e:03:91:03:e3:aa:4c:d9:d1:0f:c5:57:1d:4a:2f:74: d2:27:7b:a2:de:22:48:c3:9c:f6:28:89:ef:dc:65:d4:d0:af: f2:d2:c7:55:77:59:23:ee:ab:11:d1:ec:4d:1f:ff:90:b6:b7: b4:52:23:a1:e6:a1:85:ed:44:61:56:8d:8d:e6:02:45:89:0e: 5e:d3:cd:e2:50:29:59:c6:e2:70:26:8f:51:84:f7:6e:47:b1: ce:42:6f:46 -----BEGIN CERTIFICATE----- MIIFqDCCBJCgAwIBAgIUOetYSuB/pVHuxR7ZUO7ZPK0/GRIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDUyODA4MzgzOFoX DTI3MDUyNzA4NDMzOFowMzExMC8GA1UEAxMoNUExM0IwREU5QzhDMTY1RTFERjc0 QjM3RUQ1RjA4QTAwREM3MDVGNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAL5cSy6YsHUXAWfosgcKz5Zd6rZuDSW9pO7+vSj8fqWs6iyrCKA7nZjiqllR oeRQpFHK9MWGGidEnsqQBoSgjBGLSuvdlKvzOpNY3fzhoUPdBE46RCdCb0ZmDW7h Pd5L71bDyoirJgjHz7p7QN5Lim8v6CGHy8RrLSDkxDQflnfYVVptSaj64W51qJQE 4E7yFy0FKIfumZm5SIYifT1gDFwzroiTAbsJt/N14ffg3TOVf/q3lFL8IAZJkSCZ jhUQPgZI4pTlks6MGGR0sTMjvqz5fKE8IDz4JAp85NIT1PxYNrY4cmYX51AR/jDn KJjeLeAQnRIgRHmQq2qFIC7j9ycCAwEAAaOCApswggKXMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFFoTsN6cjBZeHfdLN+1fCKANxwX0MB8GA1UdIwQYMBaAFKVu hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTExMjMwMDEzMzQ3MjUzNDU0OS8wLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMTEyMzAwMTMzNDcyNTM0NTQ5 LzAvNUExM0IwREU5QzhDMTY1RTFERjc0QjM3RUQ1RjA4QTAwREM3MDVGNC5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUH AQcBAf8EETAPMA0EAgACMAcDBQAkBh5AMA0GCSqGSIb3DQEBCwUAA4IBAQAkkj0q +Ut/jK+v6bB/OH0o8qeEsMncSZicVLPjjIWD9zaCYNS6sg0NT3uRhfH+axQ51dNn 4WTnwbtApUWeS2iWDHRbUW8uuNnbyS+5UbcsCXfk5QVUs7mJ6UbOBtZJD35FAeaB Ybq+GhGqxx5FtMJJxU8JI2aBxxnGqxz79HdTKUArV2AWKCMdLiLzdWaHJf/yozbe WMhjg46MqvqhPrVA0yBZkW4DkQPjqkzZ0Q/FVx1KL3TSJ3ui3iJIw5z2KInv3GXU 0K/y0sdVd1kj7qsR0exNH/+Qtre0UiOh5qGF7URhVo2N5gJFiQ5e083iUClZxuJw Jo9RhPduR7HOQm9G -----END CERTIFICATE-----Generated at Fri May 29 21:11:45 2026 by rpki-client