$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AB4AAC8049BFA0F4F278AC22385CA9ABCAB9A341.cer File: AB4AAC8049BFA0F4F278AC22385CA9ABCAB9A341.cer (raw, json) Hash identifier: 2ybaf2I2X7oTADiTUeHTDTEf4GifBC2pRtpy+0/xZVs= Subject key identifier: AB:4A:AC:80:49:BF:A0:F4:F2:78:AC:22:38:5C:A9:AB:CA:B9:A3:41 Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Certificate serial: 2022EC1E30FA2FAE8B3978DA3FAE3A4FC56492AC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1069195700119535618/0/AB4AAC8049BFA0F4F278AC22385CA9ABCAB9A341.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1069195700119535618/0/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Fri 29 May 2026 07:06:02 +0000 Certificate not after: Fri 28 May 2027 07:11:02 +0000 Subordinate resources: IP: 27.106.128.0/18 IP: 45.121.96.0/22 IP: 103.61.176.0/22 IP: 211.148.64.0/18 IP: 220.152.128.0/17 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 15:28:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:22:ec:1e:30:fa:2f:ae:8b:39:78:da:3f:ae:3a:4f:c5:64:92:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Validity Not Before: May 29 07:06:02 2026 GMT Not After : May 28 07:11:02 2027 GMT Subject: CN=AB4AAC8049BFA0F4F278AC22385CA9ABCAB9A341 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:cf:97:00:8d:c5:a5:6a:3c:b6:dc:30:0b:0b: 01:ac:f4:17:9b:26:59:d5:be:43:71:4d:52:c2:c5: da:a2:37:89:53:bb:9c:2d:54:71:fc:f2:27:3e:84: 06:db:07:79:5b:ca:31:22:88:c4:bc:a7:f1:b4:ff: b3:96:74:3b:b9:d9:32:40:5f:87:89:62:da:d7:c4: cb:e9:49:38:bc:92:7e:4f:36:26:84:e9:91:d1:dc: bd:f9:e3:59:7e:e1:ca:e4:b0:b3:ae:42:d1:5e:d6: d5:25:95:5e:2e:ce:36:17:2e:5e:02:33:87:74:39: ef:88:2a:70:8c:a0:78:41:a5:19:ef:02:26:a8:d4: aa:a7:a2:6d:bc:db:d8:8d:ab:f5:ca:59:fb:84:00: ca:30:48:fd:9d:9b:29:49:c2:03:03:01:dc:66:7e: c2:3c:8a:08:37:41:2d:28:c1:28:6a:f2:52:42:76: f4:e6:0f:0d:2c:98:4d:46:f0:a1:62:00:3f:70:0a: 02:e3:17:80:dd:ce:df:3c:d7:fd:d4:04:17:37:82: 45:42:92:4d:b4:da:58:cf:92:65:61:fc:78:ab:f9: 2d:1b:af:8d:37:77:b8:9b:33:58:55:94:ea:b4:0e: 3c:ae:b7:20:23:dd:16:a1:d2:2f:32:62:68:60:40: fe:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: AB:4A:AC:80:49:BF:A0:F4:F2:78:AC:22:38:5C:A9:AB:CA:B9:A3:41 X509v3 Authority Key Identifier: keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1069195700119535618/0/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1069195700119535618/0/AB4AAC8049BFA0F4F278AC22385CA9ABCAB9A341.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 27.106.128.0/18 45.121.96.0/22 103.61.176.0/22 211.148.64.0/18 220.152.128.0/17 Signature Algorithm: sha256WithRSAEncryption 0e:76:66:c2:51:b0:d4:8d:2d:e0:f0:43:00:9f:b4:65:86:e7: ce:19:1d:20:74:c4:b9:6d:fa:d1:9f:15:76:2f:59:b4:91:55: 2c:fa:52:46:12:e0:98:e1:7e:90:46:50:5d:1c:cc:7a:01:2c: df:9a:69:b3:00:a3:d5:12:12:14:ee:b4:a0:33:da:5d:8a:a2: 95:59:62:ad:a6:b0:27:91:54:45:09:0b:5f:a4:fc:b2:d9:7f: 34:e0:94:ec:3b:eb:89:97:0f:f6:ba:ae:f9:a3:8e:88:1c:60: 59:94:2d:9a:70:b9:49:5e:3a:ea:d3:43:5b:4d:42:78:a3:ae: de:37:58:2d:bf:e2:78:62:56:c6:00:90:76:e5:31:2e:41:70: bd:5e:c1:8d:d1:99:3d:9d:4d:2e:b3:c1:e6:3a:cb:26:b5:1c: 6b:98:5c:c1:40:6c:ba:b6:60:8f:e2:7b:24:fc:15:11:c5:b4: 61:9a:00:79:15:49:ee:ef:e8:49:68:01:3f:b3:6c:e8:89:1b: ab:8f:11:ab:2d:3f:ff:bd:46:8e:05:0f:43:1f:92:5f:af:f9: 7e:8b:30:f6:62:97:b0:4d:8e:36:5f:52:c0:f2:de:e9:ca:c2: 07:db:3f:d1:69:4e:bc:90:39:a5:df:bf:99:d9:2f:f4:34:6a: 4f:77:15:93 -----BEGIN CERTIFICATE----- MIIFvzCCBKegAwIBAgIUICLsHjD6L66LOXjaP646T8VkkqwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDUyOTA3MDYwMloX DTI3MDUyODA3MTEwMlowMzExMC8GA1UEAxMoQUI0QUFDODA0OUJGQTBGNEYyNzhB QzIyMzg1Q0E5QUJDQUI5QTM0MTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMjPlwCNxaVqPLbcMAsLAaz0F5smWdW+Q3FNUsLF2qI3iVO7nC1UcfzyJz6E BtsHeVvKMSKIxLyn8bT/s5Z0O7nZMkBfh4li2tfEy+lJOLySfk82JoTpkdHcvfnj WX7hyuSws65C0V7W1SWVXi7ONhcuXgIzh3Q574gqcIygeEGlGe8CJqjUqqeibbzb 2I2r9cpZ+4QAyjBI/Z2bKUnCAwMB3GZ+wjyKCDdBLSjBKGryUkJ29OYPDSyYTUbw oWIAP3AKAuMXgN3O3zzX/dQEFzeCRUKSTbTaWM+SZWH8eKv5LRuvjTd3uJszWFWU 6rQOPK63ICPdFqHSLzJiaGBA/v0CAwEAAaOCArIwggKuMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFKtKrIBJv6D08nisIjhcqavKuaNBMB8GA1UdIwQYMBaAFKVu hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTA2OTE5NTcwMDExOTUzNTYxOC8wLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDY5MTk1NzAwMTE5NTM1NjE4 LzAvQUI0QUFDODA0OUJGQTBGNEYyNzhBQzIyMzg1Q0E5QUJDQUI5QTM0MS5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwNwYIKwYBBQUH AQcBAf8EKDAmMCQEAgABMB4DBAYbaoADBAIteWADBAJnPbADBAbTlEADBAfcmIAw DQYJKoZIhvcNAQELBQADggEBAA52ZsJRsNSNLeDwQwCftGWG584ZHSB0xLlt+tGf FXYvWbSRVSz6UkYS4JjhfpBGUF0czHoBLN+aabMAo9USEhTutKAz2l2KopVZYq2m sCeRVEUJC1+k/LLZfzTglOw764mXD/a6rvmjjogcYFmULZpwuUleOurTQ1tNQnij rt43WC2/4nhiVsYAkHblMS5BcL1ewY3RmT2dTS6zweY6yya1HGuYXMFAbLq2YI/i eyT8FRHFtGGaAHkVSe7v6EloAT+zbOiJG6uPEastP/+9Ro4FD0Mfkl+v+X6LMPZi l7BNjjZfUsDy3unKwgfbP9FpTryQOaXfv5nZL/Q0ak93FZM= -----END CERTIFICATE-----Generated at Fri May 29 21:13:05 2026 by rpki-client