$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/845BB307E2A1100E89FA0C939A9389686796F0F6.cer File: 845BB307E2A1100E89FA0C939A9389686796F0F6.cer (raw, json) Hash identifier: Eb5P9nqwOY/kM1cDGhqYheh3YaMe1/GfuiHA3IGAeh8= Subject key identifier: 84:5B:B3:07:E2:A1:10:0E:89:FA:0C:93:9A:93:89:68:67:96:F0:F6 Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Certificate serial: 380D31A5296DE6FC26B6F63AE7C2458701E50AB2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1065591195721793537/0/845BB307E2A1100E89FA0C939A9389686796F0F6.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1065591195721793537/0/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Fri 29 May 2026 06:35:02 +0000 Certificate not after: Fri 28 May 2027 06:40:02 +0000 Subordinate resources: IP: 240a:4000::/21 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 15:28:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:0d:31:a5:29:6d:e6:fc:26:b6:f6:3a:e7:c2:45:87:01:e5:0a:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Validity Not Before: May 29 06:35:02 2026 GMT Not After : May 28 06:40:02 2027 GMT Subject: CN=845BB307E2A1100E89FA0C939A9389686796F0F6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:73:9a:9e:b5:eb:93:49:86:3b:b5:4e:d0:da: d4:8f:f5:bf:40:b6:87:ad:66:71:8f:ef:ff:0d:a1: dc:f0:3a:d8:c7:eb:ac:54:27:a6:2c:fa:67:aa:95: 4b:65:6e:0c:29:a3:7d:7a:89:58:60:b9:ec:c7:c1: 9c:77:63:e7:34:3c:62:7d:97:7b:94:50:5e:a7:d1: 80:63:71:41:5b:c4:40:c5:eb:aa:00:3d:69:fc:9b: f5:07:ea:93:33:39:34:60:c3:c4:01:86:83:7f:3f: 1f:32:59:8b:c1:d9:1a:89:21:71:74:f0:aa:5e:e7: ad:43:ac:51:dc:56:8d:17:01:b2:a8:66:1c:63:e9: d7:14:7e:7f:e6:bb:90:a7:79:c3:0e:da:72:81:09: cc:a4:e1:de:49:a1:fd:e2:2f:08:50:9c:05:26:df: 9a:4a:0a:8c:d5:2f:65:7b:81:8c:80:73:b6:9d:25: 25:2b:e6:06:8e:be:b0:09:3e:10:c0:5e:f0:29:2a: 43:5a:c2:e7:58:cd:bd:91:7e:fc:f0:38:b8:df:c9: 7f:b4:09:c7:5f:d8:5d:e1:cf:b9:76:c6:57:c7:2c: bc:69:10:de:89:ce:fc:fd:15:27:98:1b:33:2d:6b: 99:4f:8b:d7:72:fa:d4:49:b6:25:b6:0d:c6:c6:11: 8c:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 84:5B:B3:07:E2:A1:10:0E:89:FA:0C:93:9A:93:89:68:67:96:F0:F6 X509v3 Authority Key Identifier: keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721793537/0/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721793537/0/845BB307E2A1100E89FA0C939A9389686796F0F6.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:4000::/21 Signature Algorithm: sha256WithRSAEncryption 3c:1d:76:86:db:4c:db:51:3d:8e:a3:21:1c:ed:26:d8:84:ac: cc:f0:8c:7c:40:be:48:bb:30:e5:04:0d:cb:49:42:40:24:46: de:64:6d:13:2a:95:a2:d4:fc:fc:4d:c4:31:cf:12:7f:3f:d8: 80:24:a1:99:6e:23:56:2d:e7:3e:64:08:8f:4c:19:02:9a:39: 2b:45:ff:97:d7:f9:b8:84:51:61:49:db:3c:ce:74:f0:94:fb: 4a:31:64:89:15:06:4b:fd:39:db:24:fa:3f:38:fe:ab:6d:7b: 9f:01:eb:d6:ef:fc:20:c1:12:72:5b:c1:60:49:52:00:18:6a: e6:c3:17:23:e4:42:5d:f3:23:a8:90:89:5a:54:31:23:b4:ad: 7f:2e:a6:fb:d4:58:70:33:aa:33:83:97:00:ea:7a:d2:dd:3d: 12:53:f2:fb:10:32:a8:b9:cd:e8:0f:13:25:d0:d1:71:ea:3b: a3:77:10:06:52:ec:44:83:09:cf:3b:d8:a7:05:92:f5:2d:12: b0:66:c0:86:06:07:55:36:04:87:50:14:2e:4e:14:d7:27:f0: b1:9a:6c:cf:61:3e:aa:56:b9:f5:50:17:46:8f:12:b9:c5:dc: 74:f4:0b:53:7f:7b:7f:39:7d:25:29:ea:47:72:10:72:fe:97: 23:f9:fa:e6 -----BEGIN CERTIFICATE----- MIIFpzCCBI+gAwIBAgIUOA0xpSlt5vwmtvY658JFhwHlCrIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDUyOTA2MzUwMloX DTI3MDUyODA2NDAwMlowMzExMC8GA1UEAxMoODQ1QkIzMDdFMkExMTAwRTg5RkEw QzkzOUE5Mzg5Njg2Nzk2RjBGNjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOhzmp6165NJhju1TtDa1I/1v0C2h61mcY/v/w2h3PA62MfrrFQnpiz6Z6qV S2VuDCmjfXqJWGC57MfBnHdj5zQ8Yn2Xe5RQXqfRgGNxQVvEQMXrqgA9afyb9Qfq kzM5NGDDxAGGg38/HzJZi8HZGokhcXTwql7nrUOsUdxWjRcBsqhmHGPp1xR+f+a7 kKd5ww7acoEJzKTh3kmh/eIvCFCcBSbfmkoKjNUvZXuBjIBztp0lJSvmBo6+sAk+ EMBe8CkqQ1rC51jNvZF+/PA4uN/Jf7QJx1/YXeHPuXbGV8csvGkQ3onO/P0VJ5gb My1rmU+L13L61Em2JbYNxsYRjA0CAwEAAaOCApowggKWMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFIRbswfioRAOifoMk5qTiWhnlvD2MB8GA1UdIwQYMBaAFKVu hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTA2NTU5MTE5NTcyMTc5MzUzNy8wLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDY1NTkxMTk1NzIxNzkzNTM3 LzAvODQ1QkIzMDdFMkExMTAwRTg5RkEwQzkzOUE5Mzg5Njg2Nzk2RjBGNi5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgACMAYDBAMkCkAwDQYJKoZIhvcNAQELBQADggEBADwddobb TNtRPY6jIRztJtiErMzwjHxAvki7MOUEDctJQkAkRt5kbRMqlaLU/PxNxDHPEn8/ 2IAkoZluI1Yt5z5kCI9MGQKaOStF/5fX+biEUWFJ2zzOdPCU+0oxZIkVBkv9Odsk +j84/qtte58B69bv/CDBEnJbwWBJUgAYaubDFyPkQl3zI6iQiVpUMSO0rX8upvvU WHAzqjODlwDqetLdPRJT8vsQMqi5zegPEyXQ0XHqO6N3EAZS7ESDCc872KcFkvUt ErBmwIYGB1U2BIdQFC5OFNcn8LGabM9hPqpWufVQF0aPErnF3HT0C1N/e385fSUp 6kdyEHL+lyP5+uY= -----END CERTIFICATE-----Generated at Fri May 29 21:14:31 2026 by rpki-client