$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/450AC0E4CDE3181682FF27C2521CC4BF7290C0D7.cer File: 450AC0E4CDE3181682FF27C2521CC4BF7290C0D7.cer (raw, json) Hash identifier: MfeaBk8Q3aH3wk/jA46/8Q2zM3IUjxfXbKQ+eWAj47w= Subject key identifier: 45:0A:C0:E4:CD:E3:18:16:82:FF:27:C2:52:1C:C4:BF:72:90:C0:D7 Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Certificate serial: 053FD519FA99A6E205DAE0E775BC1033FCDCF7BE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1102991697580654601/0/450AC0E4CDE3181682FF27C2521CC4BF7290C0D7.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1102991697580654601/0/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Sat 02 May 2026 16:10:15 +0000 Certificate not after: Sat 01 May 2027 16:15:15 +0000 Subordinate resources: IP: 43.254.112.0/22 IP: 103.228.204.0/22 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 11:49:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:3f:d5:19:fa:99:a6:e2:05:da:e0:e7:75:bc:10:33:fc:dc:f7:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Validity Not Before: May 2 16:10:15 2026 GMT Not After : May 1 16:15:15 2027 GMT Subject: CN=450AC0E4CDE3181682FF27C2521CC4BF7290C0D7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:47:d3:d0:9c:14:ee:71:1e:62:e8:c3:58:a8: 61:b7:5f:bb:a0:7c:55:eb:05:58:26:9c:a2:a6:2b: 09:fb:a3:e0:74:aa:b2:dc:4c:ee:af:4d:1a:34:8f: 31:fd:3d:4d:93:17:05:64:b1:c7:f3:2d:22:de:a8: 1d:3a:90:45:15:e0:f8:38:57:57:ab:ff:7f:a6:32: d6:74:83:35:f4:68:1b:26:5c:b4:21:f1:68:8c:fa: d8:ef:14:b5:e4:ae:78:fc:02:c7:8f:c8:6d:d2:46: 96:f0:e9:fb:df:89:0d:7b:bd:80:a6:38:8e:a6:45: 50:9b:aa:53:d0:2c:16:8a:4a:b6:28:54:47:a1:3d: 2c:00:ce:4a:2b:93:07:b4:91:0d:9b:9b:d8:2a:2e: f8:d2:eb:34:b0:90:1c:a3:1c:4d:7b:94:6f:a3:ee: 3c:2f:83:a6:da:43:b2:0d:c9:58:f0:b3:b6:c3:e1: 3d:4b:19:f0:19:40:d7:95:d9:ec:b4:41:e0:12:2a: 55:f6:b0:0e:28:76:ed:05:27:a8:00:ba:b4:d2:79: 5c:32:65:a2:8e:b5:c4:8e:65:4a:fb:0c:de:f1:f6: d1:14:a5:38:2c:ec:57:fc:45:d8:5e:47:0b:05:9a: 3e:59:dc:d4:02:9a:8e:83:23:67:68:5a:81:74:8b: 0b:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 45:0A:C0:E4:CD:E3:18:16:82:FF:27:C2:52:1C:C4:BF:72:90:C0:D7 X509v3 Authority Key Identifier: keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1102991697580654601/0/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1102991697580654601/0/450AC0E4CDE3181682FF27C2521CC4BF7290C0D7.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.254.112.0/22 103.228.204.0/22 Signature Algorithm: sha256WithRSAEncryption 15:f4:63:e1:15:d4:7f:91:8d:23:73:9f:cc:a1:df:3a:87:69: 1b:7c:5f:f1:a6:6f:40:8c:35:2b:87:69:d3:cd:2d:3e:11:bc: ad:56:16:1c:64:74:9f:f5:06:d2:27:c5:ff:0d:3d:5b:9c:ec: 7f:d7:dd:c8:c1:26:27:97:a6:a7:cc:2d:74:45:84:74:82:a1: 6e:18:e3:06:a3:ec:97:c1:d0:1f:6e:b9:58:58:dc:af:3a:7b: ac:12:eb:21:6f:0e:06:0f:91:a9:11:0d:15:40:db:8c:e2:56: 4a:16:2d:85:41:36:f1:b4:a7:2f:b7:04:f2:d9:6f:78:cf:0b: 3e:1c:a3:ed:b7:f8:31:b6:84:cf:d8:0a:37:b2:ac:60:39:6c: af:ec:53:79:4d:ce:6c:17:5b:7f:11:3a:0f:91:1d:04:c3:08: 79:ee:4b:c3:bf:dd:04:69:1d:39:2c:b1:3b:23:3a:de:ae:60: ca:c7:e6:4f:e1:7e:ed:6f:27:8e:7b:c4:69:aa:51:09:22:a1: b6:d9:b9:e2:82:4c:07:a4:d9:d6:e0:3d:43:a4:4d:a5:4e:99: f1:cb:a8:5e:f6:7e:1d:0d:13:a9:da:df:bb:4d:b5:32:81:97: 4c:66:ab:7b:08:dd:1c:6d:14:75:f1:cc:91:bf:69:e5:09:ff: ee:14:15:c2 -----BEGIN CERTIFICATE----- MIIFrTCCBJWgAwIBAgIUBT/VGfqZpuIF2uDndbwQM/zc974wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDUwMjE2MTAxNVoX DTI3MDUwMTE2MTUxNVowMzExMC8GA1UEAxMoNDUwQUMwRTRDREUzMTgxNjgyRkYy N0MyNTIxQ0M0QkY3MjkwQzBENzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALhH09CcFO5xHmLow1ioYbdfu6B8VesFWCacoqYrCfuj4HSqstxM7q9NGjSP Mf09TZMXBWSxx/MtIt6oHTqQRRXg+DhXV6v/f6Yy1nSDNfRoGyZctCHxaIz62O8U teSuePwCx4/IbdJGlvDp+9+JDXu9gKY4jqZFUJuqU9AsFopKtihUR6E9LADOSiuT B7SRDZub2Cou+NLrNLCQHKMcTXuUb6PuPC+DptpDsg3JWPCztsPhPUsZ8BlA15XZ 7LRB4BIqVfawDih27QUnqAC6tNJ5XDJloo61xI5lSvsM3vH20RSlOCzsV/xF2F5H CwWaPlnc1AKajoMjZ2hagXSLC38CAwEAAaOCAqAwggKcMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFEUKwOTN4xgWgv8nwlIcxL9ykMDXMB8GA1UdIwQYMBaAFKVu hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTEwMjk5MTY5NzU4MDY1NDYwMS8wLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMTAyOTkxNjk3NTgwNjU0NjAx LzAvNDUwQUMwRTRDREUzMTgxNjgyRkYyN0MyNTIxQ0M0QkY3MjkwQzBENy5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwJQYIKwYBBQUH AQcBAf8EFjAUMBIEAgABMAwDBAIr/nADBAJn5MwwDQYJKoZIhvcNAQELBQADggEB ABX0Y+EV1H+RjSNzn8yh3zqHaRt8X/Gmb0CMNSuHadPNLT4RvK1WFhxkdJ/1BtIn xf8NPVuc7H/X3cjBJieXpqfMLXRFhHSCoW4Y4waj7JfB0B9uuVhY3K86e6wS6yFv DgYPkakRDRVA24ziVkoWLYVBNvG0py+3BPLZb3jPCz4co+23+DG2hM/YCjeyrGA5 bK/sU3lNzmwXW38ROg+RHQTDCHnuS8O/3QRpHTkssTsjOt6uYMrH5k/hfu1vJ457 xGmqUQkiobbZueKCTAek2dbgPUOkTaVOmfHLqF72fh0NE6na37tNtTKBl0xmq3sI 3RxtFHXxzJG/aeUJ/+4UFcI= -----END CERTIFICATE-----Generated at Wed May 13 16:43:16 2026 by rpki-client