$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A51408E97010BDB44146281B8A78BCFA4E0E4C5E.cer File: A51408E97010BDB44146281B8A78BCFA4E0E4C5E.cer (raw, json) Hash identifier: yDTLGeGg1Jy3DgMI8jT/1WVkfPHfy1QAPXrMKljyHtQ= Subject key identifier: A5:14:08:E9:70:10:BD:B4:41:46:28:1B:8A:78:BC:FA:4E:0E:4C:5E Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Certificate serial: 074BABA6FF95111B8A048B65E968D1263690630F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/0/A51408E97010BDB44146281B8A78BCFA4E0E4C5E.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/0/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Fri 29 May 2026 08:43:02 +0000 Certificate not after: Fri 28 May 2027 08:48:02 +0000 Subordinate resources: AS: 37965 AS: 55988 AS: 58857 IP: 43.247.44.0 -- 43.247.51.255 IP: 103.13.124.0/22 IP: 103.26.240.0/22 IP: 222.126.128.0/17 IP: 2401:2a00::/32 IP: 2407:5500::/32 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 15:28:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:4b:ab:a6:ff:95:11:1b:8a:04:8b:65:e9:68:d1:26:36:90:63:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Validity Not Before: May 29 08:43:02 2026 GMT Not After : May 28 08:48:02 2027 GMT Subject: CN=A51408E97010BDB44146281B8A78BCFA4E0E4C5E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:86:21:bd:e9:63:0a:c4:d4:80:60:32:f3:70: 00:3e:0d:7a:7b:80:a1:03:5a:1d:3e:76:29:3d:43: 22:e3:8a:42:85:97:d8:0f:2e:ca:81:c5:99:bb:c8: 14:6a:60:43:52:f6:64:02:8b:c2:87:a7:45:b2:6c: af:9a:b6:33:93:60:eb:fe:02:74:15:a1:11:80:e5: e5:fd:ac:07:ad:b5:fe:67:88:81:c2:3d:93:13:08: 0b:66:1c:80:ff:60:a9:74:59:49:6d:77:96:fe:5d: 6c:56:dd:19:5b:a0:b0:dc:5a:ca:09:8f:d9:2c:31: d1:61:a8:ee:0b:2a:c9:4c:ee:8b:50:23:84:28:98: 10:30:7e:27:85:da:22:5a:9c:b0:b8:9d:75:da:c5: 27:18:e9:cd:3e:a3:d1:f6:ef:0a:91:4d:d0:2f:8a: 66:1f:c0:59:b7:88:47:57:3f:f8:a8:31:fe:4f:95: d9:27:28:9e:58:4d:3a:9d:5c:83:40:ba:e7:82:83: 3f:4d:8d:75:da:11:c6:94:14:ca:06:20:df:c1:24: 80:f7:b2:c9:cc:82:bd:ee:ed:a5:61:f9:0a:ea:2b: a7:e6:e8:3d:2a:6e:ce:76:97:51:fe:f2:63:10:8e: 94:dc:86:5d:b8:10:7e:e8:ea:af:8b:55:70:e1:cb: 1b:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: A5:14:08:E9:70:10:BD:B4:41:46:28:1B:8A:78:BC:FA:4E:0E:4C:5E X509v3 Authority Key Identifier: keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/0/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/0/A51408E97010BDB44146281B8A78BCFA4E0E4C5E.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.247.44.0-43.247.51.255 103.13.124.0/22 103.26.240.0/22 222.126.128.0/17 IPv6: 2401:2a00::/32 2407:5500::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 37965 55988 58857 Signature Algorithm: sha256WithRSAEncryption 67:25:86:41:35:e1:be:53:0e:9d:63:39:88:03:ec:8a:76:02: 1b:c0:d5:66:22:e2:b5:3c:9e:4b:06:54:78:39:b6:5d:23:29: a8:f1:fb:46:91:22:c2:2d:64:1c:9c:e7:db:95:ee:4d:31:dd: d1:fb:29:db:7f:a2:29:54:cc:75:2f:6d:d6:fa:18:34:12:54: ac:1b:19:58:17:c6:0a:7d:de:08:6b:f7:f5:48:88:8d:60:84: c4:79:93:f8:e3:e7:60:51:67:a5:72:4a:2f:4a:f2:5a:37:c6: f7:bf:a4:1c:71:9f:21:b2:ed:f7:35:50:c4:70:bb:93:5c:15: 0f:67:a8:e3:33:3d:e8:04:fa:ac:97:ec:18:5a:0f:a1:82:20: de:21:c1:20:e2:d2:d6:08:ce:3d:94:3a:23:c6:18:f4:c9:56: 63:bb:f5:5e:24:2e:f6:93:c6:2e:52:a1:4c:4d:08:50:f0:66: b9:f4:31:30:df:b9:47:73:8f:a0:63:17:1c:fd:ef:4e:6c:2d: e5:66:c5:cb:80:10:d9:e3:89:93:de:ce:e2:e5:55:3e:a4:db: 71:e2:e3:6b:09:98:55:a3:80:41:a7:77:11:09:5d:94:b7:a0: 5d:04:e8:ef:d9:c9:ca:52:d6:e8:2f:3e:2e:dd:f5:28:f4:14: 7c:64:d9:15 -----BEGIN CERTIFICATE----- MIIF/TCCBOWgAwIBAgIUB0urpv+VERuKBItl6WjRJjaQYw8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDUyOTA4NDMwMloX DTI3MDUyODA4NDgwMlowMzExMC8GA1UEAxMoQTUxNDA4RTk3MDEwQkRCNDQxNDYy ODFCOEE3OEJDRkE0RTBFNEM1RTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMOGIb3pYwrE1IBgMvNwAD4NenuAoQNaHT52KT1DIuOKQoWX2A8uyoHFmbvI FGpgQ1L2ZAKLwoenRbJsr5q2M5Ng6/4CdBWhEYDl5f2sB621/meIgcI9kxMIC2Yc gP9gqXRZSW13lv5dbFbdGVugsNxaygmP2Swx0WGo7gsqyUzui1AjhCiYEDB+J4Xa IlqcsLidddrFJxjpzT6j0fbvCpFN0C+KZh/AWbeIR1c/+Kgx/k+V2SconlhNOp1c g0C654KDP02NddoRxpQUygYg38EkgPeyycyCve7tpWH5Cuorp+boPSpuznaXUf7y YxCOlNyGXbgQfujqr4tVcOHLG+cCAwEAAaOCAvAwggLsMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFKUUCOlwEL20QUYoG4p4vPpODkxeMB8GA1UdIwQYMBaAFKVu hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTA2NTU3NjE5OTk0ODI3MTYxOS8wLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDY1NTc2MTk5OTQ4MjcxNjE5 LzAvQTUxNDA4RTk3MDEwQkRCNDQxNDYyODFCOEE3OEJDRkE0RTBFNEM1RS5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwTwYIKwYBBQUH AQcBAf8EQDA+MCYEAgABMCAwDAMEAiv3LAMEAiv3MAMEAmcNfAMEAmca8AMEB95+ gDAUBAIAAjAOAwUAJAEqAAMFACQHVQAwJAYIKwYBBQUHAQgBAf8EFTAToBEwDwID AJRNAgMA2rQCAwDl6TANBgkqhkiG9w0BAQsFAAOCAQEAZyWGQTXhvlMOnWM5iAPs inYCG8DVZiLitTyeSwZUeDm2XSMpqPH7RpEiwi1kHJzn25XuTTHd0fsp23+iKVTM dS9t1voYNBJUrBsZWBfGCn3eCGv39UiIjWCExHmT+OPnYFFnpXJKL0ryWjfG97+k HHGfIbLt9zVQxHC7k1wVD2eo4zM96AT6rJfsGFoPoYIg3iHBIOLS1gjOPZQ6I8YY 9MlWY7v1XiQu9pPGLlKhTE0IUPBmufQxMN+5R3OPoGMXHP3vTmwt5WbFy4AQ2eOJ k97O4uVVPqTbceLjawmYVaOAQad3EQldlLegXQTo79nJylLW6C8+Lt31KPQUfGTZ FQ== -----END CERTIFICATE-----Generated at Fri May 29 21:14:09 2026 by rpki-client