$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B4E055792301140D1D1A5A462561EA2D919B364F.cer File: B4E055792301140D1D1A5A462561EA2D919B364F.cer (raw, json) Hash identifier: u0jZt+O4hwxrHm2n4O5+xVBmW7MrHsmUz+9YzbbL/vo= Subject key identifier: B4:E0:55:79:23:01:14:0D:1D:1A:5A:46:25:61:EA:2D:91:9B:36:4F Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Certificate serial: 5D02D76CC1E9749A39BC6078260235C74993FF41 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1108379782258622481/0/B4E055792301140D1D1A5A462561EA2D919B364F.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1108379782258622481/0/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Sun 17 May 2026 13:00:34 +0000 Certificate not after: Sun 16 May 2027 13:05:34 +0000 Subordinate resources: AS: 24150 IP: 43.240.132.0/22 IP: 43.250.28.0/22 IP: 60.255.0.0/16 IP: 103.5.252.0/22 IP: 103.41.160.0/22 IP: 180.222.224.0/19 IP: 2401:1200::/32 IP: 2401:7700::/32 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 May 2026 02:27:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:02:d7:6c:c1:e9:74:9a:39:bc:60:78:26:02:35:c7:49:93:ff:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Validity Not Before: May 17 13:00:34 2026 GMT Not After : May 16 13:05:34 2027 GMT Subject: CN=B4E055792301140D1D1A5A462561EA2D919B364F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:a4:57:fe:9b:e8:5a:28:16:ed:38:13:2c:8a: 03:d5:78:d9:8a:1c:40:96:b1:e8:aa:97:2f:6b:f8: f0:ed:85:de:ad:06:b8:1c:68:8a:c4:d1:95:b1:40: ef:04:2c:46:36:2e:a5:07:51:c3:e4:c1:a0:d3:62: 06:2e:80:60:b2:86:5a:70:9f:c4:41:d6:b5:ef:04: 80:b7:06:18:80:4c:65:3f:d7:36:8c:a8:87:49:72: ad:c5:09:b2:f5:ab:8a:f4:e7:1c:4f:c5:43:3e:ce: da:29:c2:82:24:b7:8d:d2:8c:49:14:4c:99:ba:9c: ad:d1:70:ea:b4:bf:8b:cd:c7:8d:b1:3e:34:92:dc: 21:d9:de:e3:f4:04:20:f7:0b:37:86:75:a6:30:84: 00:2e:54:d6:4d:47:cf:9f:1c:3c:3c:0f:96:6b:f3: 17:03:48:cb:51:76:a0:2a:38:5f:8a:69:f0:fd:29: 90:a8:0c:89:48:f6:bb:0b:ef:79:b8:99:ac:70:76: 03:eb:fb:26:0e:6c:4f:f4:0f:22:e8:56:61:73:81: c3:fe:ee:ec:05:55:c9:59:fa:3d:df:14:6a:cf:6b: 45:a3:f6:6d:82:7a:46:56:c7:80:5b:64:6a:0c:31: cf:96:9a:70:b5:5e:8f:e8:07:86:0e:4f:ee:fb:cb: 72:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: B4:E0:55:79:23:01:14:0D:1D:1A:5A:46:25:61:EA:2D:91:9B:36:4F X509v3 Authority Key Identifier: keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1108379782258622481/0/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1108379782258622481/0/B4E055792301140D1D1A5A462561EA2D919B364F.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.240.132.0/22 43.250.28.0/22 60.255.0.0/16 103.5.252.0/22 103.41.160.0/22 180.222.224.0/19 IPv6: 2401:1200::/32 2401:7700::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 24150 Signature Algorithm: sha256WithRSAEncryption 08:f0:b4:9d:57:38:d4:ee:e9:47:4a:60:8c:21:a7:6a:a9:99: 0c:0e:82:4f:a7:c4:21:7d:19:e5:57:6b:de:bf:e8:19:51:15: 28:a3:cb:12:68:c8:20:5a:19:ec:e8:be:21:19:05:82:12:27: 2e:b6:89:b8:cd:a1:73:3d:f3:38:89:07:ad:4c:98:55:e1:07: 4e:78:33:9a:a4:5e:c0:3b:b5:90:ff:d9:c1:29:d7:d6:2b:82: 5c:f5:41:29:80:d1:a3:96:90:86:79:b6:14:85:57:24:8d:27: 35:d5:5f:2f:96:cf:a6:9c:0e:42:09:3e:ef:a2:79:c7:8e:cb: 03:2e:2c:95:ac:55:70:14:80:55:f0:44:fa:8c:6a:3a:1b:0f: e6:1b:64:04:1f:b7:12:cd:6d:b5:6e:fc:11:16:67:a0:83:e9: 11:88:b1:2a:e9:20:31:d7:06:5e:ea:19:14:93:8b:6e:b3:29: e8:01:c6:22:f3:d3:67:77:c0:27:67:97:f5:ab:7b:f8:20:ef: 6c:af:b7:3b:3e:ae:2d:e7:3f:52:da:9d:f6:47:92:f7:38:52: e7:10:a0:fa:db:07:f9:97:81:4a:86:6b:3e:77:4e:99:22:1a: a4:2f:f1:ce:b6:bf:c2:76:01:a8:ec:f6:f0:07:8e:08:b2:e2: 5b:86:1d:db -----BEGIN CERTIFICATE----- MIIF9TCCBN2gAwIBAgIUXQLXbMHpdJo5vGB4JgI1x0mT/0EwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDUxNzEzMDAzNFoX DTI3MDUxNjEzMDUzNFowMzExMC8GA1UEAxMoQjRFMDU1NzkyMzAxMTQwRDFEMUE1 QTQ2MjU2MUVBMkQ5MTlCMzY0RjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAPekV/6b6FooFu04EyyKA9V42YocQJax6KqXL2v48O2F3q0GuBxoisTRlbFA 7wQsRjYupQdRw+TBoNNiBi6AYLKGWnCfxEHWte8EgLcGGIBMZT/XNoyoh0lyrcUJ svWrivTnHE/FQz7O2inCgiS3jdKMSRRMmbqcrdFw6rS/i83HjbE+NJLcIdne4/QE IPcLN4Z1pjCEAC5U1k1Hz58cPDwPlmvzFwNIy1F2oCo4X4pp8P0pkKgMiUj2uwvv ebiZrHB2A+v7Jg5sT/QPIuhWYXOBw/7u7AVVyVn6Pd8Uas9rRaP2bYJ6RlbHgFtk agwxz5aacLVej+gHhg5P7vvLcn8CAwEAAaOCAugwggLkMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFLTgVXkjARQNHRpaRiVh6i2RmzZPMB8GA1UdIwQYMBaAFKVu hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTEwODM3OTc4MjI1ODYyMjQ4MS8wLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMTA4Mzc5NzgyMjU4NjIyNDgx LzAvQjRFMDU1NzkyMzAxMTQwRDFEMUE1QTQ2MjU2MUVBMkQ5MTlCMzY0Ri5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwUgYIKwYBBQUH AQcBAf8EQzBBMCkEAgABMCMDBAIr8IQDBAIr+hwDAwA8/wMEAmcF/AMEAmcpoAME BbTe4DAUBAIAAjAOAwUAJAESAAMFACQBdwAwGQYIKwYBBQUHAQgBAf8ECjAIoAYw BAICXlYwDQYJKoZIhvcNAQELBQADggEBAAjwtJ1XONTu6UdKYIwhp2qpmQwOgk+n xCF9GeVXa96/6BlRFSijyxJoyCBaGezoviEZBYISJy62ibjNoXM98ziJB61MmFXh B054M5qkXsA7tZD/2cEp19Yrglz1QSmA0aOWkIZ5thSFVySNJzXVXy+Wz6acDkIJ Pu+ieceOywMuLJWsVXAUgFXwRPqMajobD+YbZAQftxLNbbVu/BEWZ6CD6RGIsSrp IDHXBl7qGRSTi26zKegBxiLz02d3wCdnl/Wre/gg72yvtzs+ri3nP1LanfZHkvc4 UucQoPrbB/mXgUqGaz53TpkiGqQv8c62v8J2Aajs9vAHjgiy4luGHds= -----END CERTIFICATE-----Generated at Sat May 23 03:46:59 2026 by rpki-client