$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5BAFD52D9FB4A37C7A1382A8EFCC19AC1AC8F48C.cer File: 5BAFD52D9FB4A37C7A1382A8EFCC19AC1AC8F48C.cer (raw, json) Hash identifier: tms5IqjaUtqoNOmLiCaJ+6PeT1RnSSIkxUE9wnIVKg8= Subject key identifier: 5B:AF:D5:2D:9F:B4:A3:7C:7A:13:82:A8:EF:CC:19:AC:1A:C8:F4:8C Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Certificate serial: 328E3F4365758975F9BBB87438DBAFC431AE0AC5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1094553714812780546/0/5BAFD52D9FB4A37C7A1382A8EFCC19AC1AC8F48C.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1094553714812780546/0/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Thu 09 Apr 2026 09:20:43 +0000 Certificate not after: Thu 08 Apr 2027 09:25:43 +0000 Subordinate resources: AS: 137726 IP: 103.130.132.0/22 IP: 240a:c000::/20 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 12:10:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:8e:3f:43:65:75:89:75:f9:bb:b8:74:38:db:af:c4:31:ae:0a:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Validity Not Before: Apr 9 09:20:43 2026 GMT Not After : Apr 8 09:25:43 2027 GMT Subject: CN=5BAFD52D9FB4A37C7A1382A8EFCC19AC1AC8F48C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:76:b6:b1:83:80:27:03:d0:94:a3:c3:f1:0e: c3:bb:e8:11:54:8a:71:65:4d:b9:ce:b9:51:78:90: 26:bc:38:c1:b4:0b:da:dc:23:9e:99:68:70:e6:2f: 66:a9:58:7a:ff:b8:e5:c8:d0:0d:2e:70:47:12:b3: d2:f7:04:73:31:6a:ea:7d:9e:23:b0:6d:18:e2:76: 19:46:a5:6d:62:c7:94:75:49:f7:68:19:ee:cc:f4: 89:45:67:e6:fe:f1:42:56:94:97:f5:16:44:54:44: 33:fb:76:c7:33:47:a6:c1:5e:f3:a1:cc:1e:c6:d4: a1:87:e2:da:cc:f8:7b:9e:a2:ff:12:1c:bc:6b:42: eb:21:fa:51:2a:17:f8:68:01:51:fd:8c:a0:18:e3: 2c:a2:ac:8e:63:11:33:83:f3:46:8a:a1:c5:7e:b0: 74:a0:0d:ee:9e:05:54:75:23:a7:0e:73:b2:02:20: 24:9c:2c:23:dc:be:f0:cf:d5:83:bf:fc:16:4f:0f: 38:66:93:ee:92:b9:0a:c6:ab:7f:c5:9f:c7:3d:af: f7:af:49:08:99:f7:1b:33:5c:66:91:04:20:78:2f: 0f:37:9a:81:0c:93:c5:23:41:ed:b6:7c:7c:a0:04: 17:af:5a:64:b0:28:2c:96:9c:e6:c4:26:c3:70:a7: 9e:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 5B:AF:D5:2D:9F:B4:A3:7C:7A:13:82:A8:EF:CC:19:AC:1A:C8:F4:8C X509v3 Authority Key Identifier: keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1094553714812780546/0/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1094553714812780546/0/5BAFD52D9FB4A37C7A1382A8EFCC19AC1AC8F48C.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.130.132.0/22 IPv6: 240a:c000::/20 sbgp-autonomousSysNum: critical Autonomous System Numbers: 137726 Signature Algorithm: sha256WithRSAEncryption 29:5c:5a:ba:10:ea:66:67:7d:21:5e:b1:ef:dc:14:73:b4:bd: 64:a1:2a:8d:4b:e6:5c:97:da:2d:d9:32:57:86:88:8d:78:a7: b8:2f:d1:d6:ad:36:20:3a:6e:ef:2b:f3:a5:aa:0f:00:8d:07: 3b:8c:b9:34:e2:90:cc:70:9d:f4:0a:83:5a:73:a1:1a:47:1c: 70:93:60:30:d5:28:3e:2f:f2:d2:82:95:ed:6b:41:c1:bf:20: 04:2f:77:5d:e8:6b:bc:1e:ea:33:0c:e2:6b:e8:d0:a3:86:ff: 40:be:b0:7e:4c:76:b9:e5:13:fb:f3:a6:71:62:76:64:54:72: c5:e6:32:4c:b9:cc:83:89:49:8b:bd:56:56:2d:36:e6:23:d0: 01:e5:cc:56:36:3d:43:8b:a5:f9:d7:b4:30:97:16:a0:50:11: f7:13:af:d3:b9:8f:63:11:04:01:d4:68:45:87:e4:c7:cb:fc: 4d:4f:0c:28:b2:e1:99:2f:9e:19:2d:e4:12:00:c3:69:59:3b: 7a:ac:52:38:23:8d:fd:7e:80:73:32:b9:01:3e:e2:b1:49:92: 61:48:64:fa:6c:4d:c2:70:58:86:33:b7:1c:bf:46:61:e9:5f: 8c:85:a5:c9:75:fa:14:96:fa:ef:90:f5:92:fe:92:2a:2a:b8: e5:47:dc:e5 -----BEGIN CERTIFICATE----- MIIF0TCCBLmgAwIBAgIUMo4/Q2V1iXX5u7h0ONuvxDGuCsUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDQwOTA5MjA0M1oX DTI3MDQwODA5MjU0M1owMzExMC8GA1UEAxMoNUJBRkQ1MkQ5RkI0QTM3QzdBMTM4 MkE4RUZDQzE5QUMxQUM4RjQ4QzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALR2trGDgCcD0JSjw/EOw7voEVSKcWVNuc65UXiQJrw4wbQL2twjnplocOYv ZqlYev+45cjQDS5wRxKz0vcEczFq6n2eI7BtGOJ2GUalbWLHlHVJ92gZ7sz0iUVn 5v7xQlaUl/UWRFREM/t2xzNHpsFe86HMHsbUoYfi2sz4e56i/xIcvGtC6yH6USoX +GgBUf2MoBjjLKKsjmMRM4PzRoqhxX6wdKAN7p4FVHUjpw5zsgIgJJwsI9y+8M/V g7/8Fk8POGaT7pK5Csarf8Wfxz2v969JCJn3GzNcZpEEIHgvDzeagQyTxSNB7bZ8 fKAEF69aZLAoLJac5sQmw3Cnns8CAwEAAaOCAsQwggLAMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFFuv1S2ftKN8ehOCqO/MGawayPSMMB8GA1UdIwQYMBaAFKVu hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTA5NDU1MzcxNDgxMjc4MDU0Ni8wLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDk0NTUzNzE0ODEyNzgwNTQ2 LzAvNUJBRkQ1MkQ5RkI0QTM3QzdBMTM4MkE4RUZDQzE5QUMxQUM4RjQ4Qy5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwLQYIKwYBBQUH AQcBAf8EHjAcMAwEAgABMAYDBAJngoQwDAQCAAIwBgMEBCQKwDAaBggrBgEFBQcB CAEB/wQLMAmgBzAFAgMCGf4wDQYJKoZIhvcNAQELBQADggEBAClcWroQ6mZnfSFe se/cFHO0vWShKo1L5lyX2i3ZMleGiI14p7gv0datNiA6bu8r86WqDwCNBzuMuTTi kMxwnfQKg1pzoRpHHHCTYDDVKD4v8tKCle1rQcG/IAQvd13oa7we6jMM4mvo0KOG /0C+sH5MdrnlE/vzpnFidmRUcsXmMky5zIOJSYu9VlYtNuYj0AHlzFY2PUOLpfnX tDCXFqBQEfcTr9O5j2MRBAHUaEWH5MfL/E1PDCiy4Zkvnhkt5BIAw2lZO3qsUjgj jf1+gHMyuQE+4rFJkmFIZPpsTcJwWIYztxy/RmHpX4yFpcl1+hSW+u+Q9ZL+kioq uOVH3OU= -----END CERTIFICATE-----Generated at Mon Apr 13 09:28:16 2026 by rpki-client