$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A14C5431A0072F5BD88242DAA57169EE3163CFC1.cer File: A14C5431A0072F5BD88242DAA57169EE3163CFC1.cer (raw, json) Hash identifier: JXGSiOFMFwaXWamisthNJtMLoYBiHkRLnOSHJbGqUE0= Subject key identifier: A1:4C:54:31:A0:07:2F:5B:D8:82:42:DA:A5:71:69:EE:31:63:CF:C1 Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Certificate serial: 30B40E0FD46F5C09FBDD75EFFA6641D7CCBF3157 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1065576199948075011/0/A14C5431A0072F5BD88242DAA57169EE3163CFC1.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1065576199948075011/0/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Thu 28 May 2026 04:49:44 +0000 Certificate not after: Thu 27 May 2027 04:54:44 +0000 Subordinate resources: AS: 24147 IP: 103.235.80.0/22 IP: 113.208.96.0 -- 113.208.255.255 IP: 113.212.0.0/18 IP: 150.242.92.0/22 IP: 203.86.32.0/19 IP: 211.102.240.0/20 IP: 219.235.192.0/20 IP: 2401:18e0::/28 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Jun 2026 19:04:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:b4:0e:0f:d4:6f:5c:09:fb:dd:75:ef:fa:66:41:d7:cc:bf:31:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Validity Not Before: May 28 04:49:44 2026 GMT Not After : May 27 04:54:44 2027 GMT Subject: CN=A14C5431A0072F5BD88242DAA57169EE3163CFC1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:23:fd:0c:6e:a2:ff:e2:04:01:a3:92:3b:20: 5b:4a:45:d5:e5:a5:c7:6d:ec:8d:5d:1b:57:df:b8: ff:b8:ca:6f:ba:20:7a:80:bd:49:e9:1f:37:9b:5a: cb:cc:7d:dd:9f:5f:b1:dc:e7:c5:8f:50:54:9e:95: 6c:a7:ba:fe:b1:11:cc:c5:42:30:c6:ae:bf:c7:83: d1:7f:11:61:3b:af:29:d5:b4:00:9b:e4:7b:74:d6: f7:7e:62:e5:74:f7:11:20:50:30:0c:58:a6:27:a8: 1a:af:23:1f:38:bf:12:2a:be:e5:ac:3a:4a:21:d9: 38:c7:df:75:b4:17:c7:e8:c3:b5:bc:ff:31:87:19: 99:49:2c:e6:f7:d9:85:ae:7e:a9:73:51:dd:74:4e: 3f:d1:86:10:ac:9c:1d:ca:a0:ff:96:8d:1c:65:c3: e3:0e:66:51:b0:2c:1d:60:2c:31:3f:a9:eb:1a:c7: 8d:d8:04:7d:bc:c0:46:c8:a3:75:61:81:c2:1f:75: b7:13:52:29:b3:b5:b5:b5:5c:97:8b:ab:9f:9f:4c: 84:1a:c2:0a:e9:9d:93:93:8d:2c:a1:66:93:1b:86: b2:b5:7a:dd:14:22:d7:ca:37:c6:d1:89:2e:c9:61: d3:73:48:e9:0e:cb:72:97:ef:df:3f:88:a1:78:ac: 09:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: A1:4C:54:31:A0:07:2F:5B:D8:82:42:DA:A5:71:69:EE:31:63:CF:C1 X509v3 Authority Key Identifier: keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948075011/0/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948075011/0/A14C5431A0072F5BD88242DAA57169EE3163CFC1.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.235.80.0/22 113.208.96.0-113.208.255.255 113.212.0.0/18 150.242.92.0/22 203.86.32.0/19 211.102.240.0/20 219.235.192.0/20 IPv6: 2401:18e0::/28 sbgp-autonomousSysNum: critical Autonomous System Numbers: 24147 Signature Algorithm: sha256WithRSAEncryption 2c:58:c2:7a:0c:99:9e:8d:3c:0c:cf:b5:70:39:00:99:17:5f: d2:0d:10:03:a7:1f:87:bb:3b:ab:ae:7e:51:a0:93:70:cf:ff: eb:fa:83:53:a4:06:7a:78:e2:46:31:10:bf:7f:dc:97:65:7c: 39:1a:d4:55:6a:1c:e9:2d:8b:8e:42:a6:9c:ec:1e:73:f1:e7: ab:b2:5d:a4:cb:bc:73:f1:b1:54:68:64:bc:61:0e:b9:20:e1: 5d:1b:5d:1f:da:ff:33:7c:7c:d6:d5:37:ca:20:28:8f:55:b8: 1a:af:d0:2b:fa:fc:b2:6e:20:01:57:90:fd:e7:e5:c5:f2:5f: 47:1e:e1:b4:d7:fd:04:58:a6:c9:f1:dd:b6:b5:e1:fa:4d:de: ac:d2:3d:d0:25:22:cb:71:aa:d2:6e:03:fc:71:c4:14:8a:54: be:aa:f4:cc:96:b3:dd:06:e3:70:90:f0:57:83:7d:bc:3a:56: bf:ee:29:4c:0d:35:7c:e7:98:60:ca:38:48:31:ba:82:7b:43: e5:57:44:c9:d5:b1:13:d2:91:14:cc:dc:b4:2b:5d:e6:b8:58: bd:4e:42:a0:85:b0:92:04:66:ff:40:82:bd:78:45:6e:35:db: 41:5a:03:58:61:46:9a:79:74:50:b5:c9:d8:d6:1e:0a:25:db: 27:f2:bd:1c -----BEGIN CERTIFICATE----- MIIF/DCCBOSgAwIBAgIUMLQOD9RvXAn73XXv+mZB18y/MVcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDUyODA0NDk0NFoX DTI3MDUyNzA0NTQ0NFowMzExMC8GA1UEAxMoQTE0QzU0MzFBMDA3MkY1QkQ4ODI0 MkRBQTU3MTY5RUUzMTYzQ0ZDMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOMj/Qxuov/iBAGjkjsgW0pF1eWlx23sjV0bV9+4/7jKb7ogeoC9SekfN5ta y8x93Z9fsdznxY9QVJ6VbKe6/rERzMVCMMauv8eD0X8RYTuvKdW0AJvke3TW935i 5XT3ESBQMAxYpieoGq8jHzi/Eiq+5aw6SiHZOMffdbQXx+jDtbz/MYcZmUks5vfZ ha5+qXNR3XROP9GGEKycHcqg/5aNHGXD4w5mUbAsHWAsMT+p6xrHjdgEfbzARsij dWGBwh91txNSKbO1tbVcl4urn59MhBrCCumdk5ONLKFmkxuGsrV63RQi18o3xtGJ Lslh03NI6Q7Lcpfv3z+IoXisCV0CAwEAAaOCAu8wggLrMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFKFMVDGgBy9b2IJC2qVxae4xY8/BMB8GA1UdIwQYMBaAFKVu hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTA2NTU3NjE5OTk0ODA3NTAxMS8wLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDY1NTc2MTk5OTQ4MDc1MDEx LzAvQTE0QzU0MzFBMDA3MkY1QkQ4ODI0MkRBQTU3MTY5RUUzMTYzQ0ZDMS5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwWQYIKwYBBQUH AQcBAf8ESjBIMDcEAgABMDEDBAJn61AwCwMEBXHQYAMDAHHQAwQGcdQAAwQClvJc AwQFy1YgAwQE02bwAwQE2+vAMA0EAgACMAcDBQQkARjgMBkGCCsGAQUFBwEIAQH/ BAowCKAGMAQCAl5TMA0GCSqGSIb3DQEBCwUAA4IBAQAsWMJ6DJmejTwMz7VwOQCZ F1/SDRADpx+Huzurrn5RoJNwz//r+oNTpAZ6eOJGMRC/f9yXZXw5GtRVahzpLYuO Qqac7B5z8eersl2ky7xz8bFUaGS8YQ65IOFdG10f2v8zfHzW1TfKICiPVbgar9Ar +vyybiABV5D95+XF8l9HHuG01/0EWKbJ8d22teH6Td6s0j3QJSLLcarSbgP8ccQU ilS+qvTMlrPdBuNwkPBXg328Ola/7ilMDTV855hgyjhIMbqCe0PlV0TJ1bET0pEU zNy0K13muFi9TkKghbCSBGb/QIK9eEVuNdtBWgNYYUaaeXRQtcnY1h4KJdsn8r0c -----END CERTIFICATE-----Generated at Fri Jun 12 03:56:28 2026 by rpki-client