$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8D406BEC452CB074D630ABDBD6275BC5445DC3A1.cer File: 8D406BEC452CB074D630ABDBD6275BC5445DC3A1.cer (raw, json) Hash identifier: RW5IGFSS49OG+tnvFUD4VACS2VTH3Xv9P8LdclYbWeY= Subject key identifier: 8D:40:6B:EC:45:2C:B0:74:D6:30:AB:DB:D6:27:5B:C5:44:5D:C3:A1 Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Certificate serial: 1445263A61A406C26433D0EE78DA3A42C2CEA3C2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1065585911217717251/0/8D406BEC452CB074D630ABDBD6275BC5445DC3A1.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1065585911217717251/0/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Fri 29 May 2026 03:10:44 +0000 Certificate not after: Fri 28 May 2027 03:15:44 +0000 Subordinate resources: AS: 151230 IP: 45.115.18.0/23 IP: 2402:20e0::/32 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 15:28:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:45:26:3a:61:a4:06:c2:64:33:d0:ee:78:da:3a:42:c2:ce:a3:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Validity Not Before: May 29 03:10:44 2026 GMT Not After : May 28 03:15:44 2027 GMT Subject: CN=8D406BEC452CB074D630ABDBD6275BC5445DC3A1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:34:27:80:41:11:83:47:90:57:80:36:a8:f8: 1d:35:5e:b5:31:b7:be:f7:b5:80:e0:49:c0:2a:c9: 72:65:61:1a:dc:77:a3:0f:e4:3a:17:2d:f7:67:56: bb:c9:70:2c:d6:20:d5:16:cb:b6:95:b3:35:dd:d4: ac:06:36:0c:e6:0d:78:fe:89:90:ae:ab:d1:5e:db: b0:61:00:26:d9:48:ad:23:0a:2b:73:ab:72:9b:2f: 6a:c0:da:f9:91:d7:25:4b:b6:56:c4:fb:b4:0a:35: 9f:2e:b6:73:59:1a:6d:70:ba:fd:3f:37:e2:1f:14: 4b:c4:74:dd:c7:24:c9:71:ec:3b:55:be:0d:21:a8: 7a:11:06:46:dc:5a:8c:d3:7e:cf:65:95:eb:e7:ba: f7:79:d0:dd:3c:37:72:28:b7:b6:8c:73:b0:e9:bd: 9a:8c:94:db:f5:ee:26:7e:91:e0:60:05:14:4e:70: e1:9b:f2:33:77:22:2e:d4:48:20:5e:31:55:f4:4d: ad:08:b1:04:80:2d:fd:2a:c0:04:b7:01:42:73:47: 23:b5:49:5a:b1:71:45:79:1f:15:54:51:91:9a:09: 3f:34:18:4e:6c:69:81:63:39:4d:90:62:17:69:89: 5c:14:76:6e:5f:b6:ee:57:12:99:ce:78:0a:09:89: a5:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 8D:40:6B:EC:45:2C:B0:74:D6:30:AB:DB:D6:27:5B:C5:44:5D:C3:A1 X509v3 Authority Key Identifier: keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217717251/0/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217717251/0/8D406BEC452CB074D630ABDBD6275BC5445DC3A1.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.115.18.0/23 IPv6: 2402:20e0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 151230 Signature Algorithm: sha256WithRSAEncryption 7a:92:a5:bc:a7:10:33:f4:47:e9:48:69:1a:2f:67:6a:04:1c: be:e4:a4:5d:47:a4:91:ae:93:5a:7e:1a:0d:c4:5d:40:c0:e5: bb:ea:94:cf:20:67:c7:5e:88:eb:b2:48:bc:58:65:e7:c7:e4: 14:55:74:9b:30:14:36:42:c6:30:7a:50:16:37:5f:17:c2:70: 42:72:30:1b:75:f6:74:fc:fe:8a:a3:43:17:b4:46:9d:ec:23: bd:15:b5:72:9a:d4:0f:7a:16:0a:f1:7a:31:cd:7a:e6:c7:cc: e6:92:ef:84:62:c5:f8:76:96:23:bd:bc:21:93:1a:4d:43:e5: d1:7f:b9:5e:ce:48:bb:0b:30:27:14:75:48:dd:2a:d4:9e:1b: 57:68:4f:32:7a:c9:ab:70:d7:03:79:d6:fc:8a:dc:db:18:56: 08:30:64:78:60:8f:2d:db:e7:ab:ac:92:2a:33:1b:85:5e:fe: 63:32:91:a6:c9:28:5d:65:4c:8f:6c:b5:fb:fe:b1:72:95:c2: 31:47:5b:28:2a:22:22:b8:e3:07:49:36:4a:e5:26:8d:93:85: b9:b8:7e:b8:d1:1c:a6:cf:33:4f:45:ce:02:a9:15:1e:07:87: 95:34:f3:5c:ed:c2:c7:8a:b7:1c:c4:7e:4b:73:3b:2c:a6:75: 84:b0:49:68 -----BEGIN CERTIFICATE----- MIIF0jCCBLqgAwIBAgIUFEUmOmGkBsJkM9DueNo6QsLOo8IwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDUyOTAzMTA0NFoX DTI3MDUyODAzMTU0NFowMzExMC8GA1UEAxMoOEQ0MDZCRUM0NTJDQjA3NEQ2MzBB QkRCRDYyNzVCQzU0NDVEQzNBMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMA0J4BBEYNHkFeANqj4HTVetTG3vve1gOBJwCrJcmVhGtx3ow/kOhct92dW u8lwLNYg1RbLtpWzNd3UrAY2DOYNeP6JkK6r0V7bsGEAJtlIrSMKK3OrcpsvasDa +ZHXJUu2VsT7tAo1ny62c1kabXC6/T834h8US8R03cckyXHsO1W+DSGoehEGRtxa jNN+z2WV6+e693nQ3Tw3cii3toxzsOm9moyU2/XuJn6R4GAFFE5w4ZvyM3ciLtRI IF4xVfRNrQixBIAt/SrABLcBQnNHI7VJWrFxRXkfFVRRkZoJPzQYTmxpgWM5TZBi F2mJXBR2bl+27lcSmc54CgmJpekCAwEAAaOCAsUwggLBMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFI1Aa+xFLLB01jCr29YnW8VEXcOhMB8GA1UdIwQYMBaAFKVu hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTA2NTU4NTkxMTIxNzcxNzI1MS8wLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDY1NTg1OTExMjE3NzE3MjUx LzAvOEQ0MDZCRUM0NTJDQjA3NEQ2MzBBQkRCRDYyNzVCQzU0NDVEQzNBMS5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUH AQcBAf8EHzAdMAwEAgABMAYDBAEtcxIwDQQCAAIwBwMFACQCIOAwGgYIKwYBBQUH AQgBAf8ECzAJoAcwBQIDAk6+MA0GCSqGSIb3DQEBCwUAA4IBAQB6kqW8pxAz9Efp SGkaL2dqBBy+5KRdR6SRrpNafhoNxF1AwOW76pTPIGfHXojrski8WGXnx+QUVXSb MBQ2QsYwelAWN18XwnBCcjAbdfZ0/P6Ko0MXtEad7CO9FbVymtQPehYK8XoxzXrm x8zmku+EYsX4dpYjvbwhkxpNQ+XRf7lezki7CzAnFHVI3SrUnhtXaE8yesmrcNcD edb8itzbGFYIMGR4YI8t2+errJIqMxuFXv5jMpGmyShdZUyPbLX7/rFylcIxR1so KiIiuOMHSTZK5SaNk4W5uH640RymzzNPRc4CqRUeB4eVNPNc7cLHirccxH5Lczss pnWEsElo -----END CERTIFICATE-----Generated at Fri May 29 21:13:21 2026 by rpki-client