$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5A810173A47217EBB60C9FD95C833B012AD8D3D9.cer File: 5A810173A47217EBB60C9FD95C833B012AD8D3D9.cer (raw, json) Hash identifier: 9ZtPUH27StVGUjLLQrvc387JTou3Y3Dv4H/DlFMoilw= Subject key identifier: 5A:81:01:73:A4:72:17:EB:B6:0C:9F:D9:5C:83:3B:01:2A:D8:D3:D9 Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Certificate serial: 51FC05A5F89C4FA441CE56BA05CBD03B21BF1AD0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1112624177837244435/0/5A810173A47217EBB60C9FD95C833B012AD8D3D9.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1112624177837244435/0/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Fri 29 May 2026 06:06:17 +0000 Certificate not after: Fri 28 May 2027 06:11:17 +0000 Subordinate resources: IP: 103.8.32.0/22 IP: 2404:6500::/32 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 15:28:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:fc:05:a5:f8:9c:4f:a4:41:ce:56:ba:05:cb:d0:3b:21:bf:1a:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Validity Not Before: May 29 06:06:17 2026 GMT Not After : May 28 06:11:17 2027 GMT Subject: CN=5A810173A47217EBB60C9FD95C833B012AD8D3D9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:55:54:26:10:36:f3:de:f6:bc:de:ac:ec:7c: bb:0b:4a:63:40:9f:a4:73:d3:fe:ce:ca:9b:35:0e: c6:8e:70:ec:5a:44:00:c7:b2:50:8e:35:b6:0b:2b: be:ec:07:74:93:9c:29:23:c0:ae:bd:09:c9:a0:c7: b7:37:04:20:2d:8c:8b:70:04:c3:ad:2d:3c:dd:00: b0:f0:11:e6:73:7f:bf:4a:a7:af:c6:a5:73:55:66: da:73:5b:05:a1:6d:7c:14:d5:de:dd:b4:e7:61:aa: 9e:83:08:0b:27:27:ba:f9:de:27:41:15:e4:d0:eb: 70:13:21:2b:a7:0e:df:5f:9d:1f:3a:eb:c7:dc:e6: 0f:07:aa:f0:0f:8d:02:44:95:61:da:95:0b:53:28: 85:13:05:e6:65:58:66:3c:86:19:d4:b6:72:fe:68: 5f:cf:fe:c6:91:1e:37:50:45:98:0c:e6:00:c5:f7: e0:13:d2:5e:9b:f6:89:85:08:8d:dd:b7:86:3c:5a: 8f:7f:c1:7a:76:2a:b9:26:61:73:8a:f6:51:e9:cb: ee:d4:10:e0:93:26:cb:dc:15:a7:26:b8:aa:e8:04: 1b:79:3b:01:d5:89:54:11:8c:c0:2f:14:98:3f:3f: fc:97:b3:97:19:82:7e:98:92:8d:86:29:cb:45:c2: 7a:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 5A:81:01:73:A4:72:17:EB:B6:0C:9F:D9:5C:83:3B:01:2A:D8:D3:D9 X509v3 Authority Key Identifier: keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1112624177837244435/0/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1112624177837244435/0/5A810173A47217EBB60C9FD95C833B012AD8D3D9.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.8.32.0/22 IPv6: 2404:6500::/32 Signature Algorithm: sha256WithRSAEncryption 37:b0:fe:28:d0:a4:89:fb:cd:57:10:20:9b:11:66:37:4a:80: 2d:c9:ed:b9:dc:dd:19:d3:c2:38:89:e4:fe:d6:3e:db:5b:c5: fa:7b:6d:02:88:e7:83:26:a8:03:74:ae:54:be:11:72:be:5d: 01:23:6a:3d:73:35:0c:0a:68:ce:57:f1:87:88:7d:b6:34:aa: ef:7e:36:44:87:f4:8e:eb:7e:0e:1c:3f:d7:7e:a9:3f:f9:71: 52:5f:96:61:fc:f0:ba:a1:ac:32:58:73:cc:01:39:10:0f:76: ea:fc:ed:ee:bb:38:ab:e8:95:65:f3:ef:f6:00:5e:8b:60:5b: 7f:06:a7:75:64:80:d2:a8:65:e6:fd:1e:bb:45:18:97:b7:15: 2e:b8:e7:39:69:b6:c3:21:ad:c3:a4:6e:bb:be:f1:f0:e8:cc: 0f:f1:1a:8b:97:7d:99:23:bf:d2:55:b5:a7:8c:e1:2e:0f:50: be:50:7e:d8:30:a5:ae:45:02:47:09:bd:de:0b:be:64:86:44: d2:24:2b:25:d2:ce:5d:fd:cb:54:45:e3:ae:0f:68:58:33:c8: 26:06:76:c8:35:06:cf:39:5f:d0:c9:e8:eb:32:0d:41:54:c3: 91:16:27:5d:b2:90:a8:cb:89:b7:29:eb:67:53:c6:e8:6e:af: df:a5:30:59 -----BEGIN CERTIFICATE----- MIIFtjCCBJ6gAwIBAgIUUfwFpficT6RBzla6BcvQOyG/GtAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDUyOTA2MDYxN1oX DTI3MDUyODA2MTExN1owMzExMC8GA1UEAxMoNUE4MTAxNzNBNDcyMTdFQkI2MEM5 RkQ5NUM4MzNCMDEyQUQ4RDNEOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAM1VVCYQNvPe9rzerOx8uwtKY0CfpHPT/s7KmzUOxo5w7FpEAMeyUI41tgsr vuwHdJOcKSPArr0JyaDHtzcEIC2Mi3AEw60tPN0AsPAR5nN/v0qnr8alc1Vm2nNb BaFtfBTV3t2052GqnoMICycnuvneJ0EV5NDrcBMhK6cO31+dHzrrx9zmDweq8A+N AkSVYdqVC1MohRMF5mVYZjyGGdS2cv5oX8/+xpEeN1BFmAzmAMX34BPSXpv2iYUI jd23hjxaj3/BenYquSZhc4r2UenL7tQQ4JMmy9wVpya4qugEG3k7AdWJVBGMwC8U mD8//JezlxmCfpiSjYYpy0XCepsCAwEAAaOCAqkwggKlMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFFqBAXOkchfrtgyf2VyDOwEq2NPZMB8GA1UdIwQYMBaAFKVu hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTExMjYyNDE3NzgzNzI0NDQzNS8wLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMTEyNjI0MTc3ODM3MjQ0NDM1 LzAvNUE4MTAxNzNBNDcyMTdFQkI2MEM5RkQ5NUM4MzNCMDEyQUQ4RDNEOS5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUH AQcBAf8EHzAdMAwEAgABMAYDBAJnCCAwDQQCAAIwBwMFACQEZQAwDQYJKoZIhvcN AQELBQADggEBADew/ijQpIn7zVcQIJsRZjdKgC3J7bnc3RnTwjiJ5P7WPttbxfp7 bQKI54MmqAN0rlS+EXK+XQEjaj1zNQwKaM5X8YeIfbY0qu9+NkSH9I7rfg4cP9d+ qT/5cVJflmH88LqhrDJYc8wBORAPdur87e67OKvolWXz7/YAXotgW38Gp3VkgNKo Zeb9HrtFGJe3FS645zlptsMhrcOkbru+8fDozA/xGouXfZkjv9JVtaeM4S4PUL5Q ftgwpa5FAkcJvd4LvmSGRNIkKyXSzl39y1RF464PaFgzyCYGdsg1Bs85X9DJ6Osy DUFUw5EWJ12ykKjLibcp62dTxuhur9+lMFk= -----END CERTIFICATE-----Generated at Fri May 29 21:12:19 2026 by rpki-client