$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5D2DCBB6D82401B5E0E5802542BB53E561C1F8EF.cer File: 5D2DCBB6D82401B5E0E5802542BB53E561C1F8EF.cer (raw, json) Hash identifier: LiJnpDYms84bVOAM8peJaeNDIk/YICV+A5yyvvcvRRg= Subject key identifier: 5D:2D:CB:B6:D8:24:01:B5:E0:E5:80:25:42:BB:53:E5:61:C1:F8:EF Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Certificate serial: 7B6D79792FE84A288A0ABE78C9BB907FE7C342D8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1099919334379094017/0/5D2DCBB6D82401B5E0E5802542BB53E561C1F8EF.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1099919334379094017/0/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Fri 24 Apr 2026 04:41:45 +0000 Certificate not after: Fri 23 Apr 2027 04:46:45 +0000 Subordinate resources: AS: 137748 IP: 2406:cac0::/32 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 11:49:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:6d:79:79:2f:e8:4a:28:8a:0a:be:78:c9:bb:90:7f:e7:c3:42:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Validity Not Before: Apr 24 04:41:45 2026 GMT Not After : Apr 23 04:46:45 2027 GMT Subject: CN=5D2DCBB6D82401B5E0E5802542BB53E561C1F8EF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:d0:7f:50:98:11:55:2e:6c:db:a8:21:93:66: dd:e9:14:11:5c:16:c5:2d:bd:fd:bd:0c:77:23:34: fd:d9:79:43:36:57:30:50:2e:2d:b7:ea:f9:9f:25: 93:da:d6:ce:a5:17:fb:a9:23:7c:0b:3a:b7:d3:28: 8a:12:e7:99:35:2a:9f:1b:26:3f:49:22:ed:ed:c7: 57:b9:57:c8:fd:b5:ed:e0:28:94:f0:03:4b:d3:df: 94:7c:44:b8:09:5c:97:98:42:cd:81:1f:c1:4c:3b: 90:64:f4:e3:29:2b:5d:9a:49:42:e5:9c:79:3b:a1: 85:5e:d1:de:0c:07:c3:d5:6d:4b:d8:1a:f7:ae:fe: 16:00:a5:ec:fc:53:ad:f8:ca:ea:ab:5a:14:11:79: 06:e0:65:de:ac:b5:14:12:ad:3e:ff:c6:91:ec:b4: ba:25:37:a6:44:67:86:5b:80:12:54:11:bc:38:fd: 01:4f:75:b0:ae:20:03:76:c6:c7:0c:ae:16:6f:f5: 6d:79:ec:36:1f:08:69:d0:46:73:1a:8a:0d:1c:13: 06:e3:36:47:e1:4a:30:fa:13:0b:d3:94:9f:be:c2: d4:77:3b:17:83:be:e3:d9:5c:de:96:41:d3:be:7f: b2:33:23:c0:72:6f:29:a2:20:c1:08:68:f5:f0:62: 89:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 5D:2D:CB:B6:D8:24:01:B5:E0:E5:80:25:42:BB:53:E5:61:C1:F8:EF X509v3 Authority Key Identifier: keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1099919334379094017/0/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1099919334379094017/0/5D2DCBB6D82401B5E0E5802542BB53E561C1F8EF.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:cac0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 137748 Signature Algorithm: sha256WithRSAEncryption 45:36:94:c9:ab:74:1f:62:5d:83:94:91:6c:c5:2c:2d:77:6f: 99:d5:dc:59:bc:d9:64:49:0c:53:28:ba:be:8e:b4:07:ff:d0: 5f:09:f9:07:84:0d:ee:5a:ee:2d:c0:32:ab:5b:51:86:26:99: 1c:1a:0d:a9:fb:32:5b:52:0d:d5:61:21:3f:66:e4:64:f2:96: c7:4e:b0:f7:62:32:9d:fb:ce:3f:30:bb:a3:ed:b5:fd:00:c8: e4:b4:10:25:4e:4e:06:b5:d3:c2:99:6d:65:de:75:4e:bc:55: 4b:ac:54:f4:ce:89:ec:3c:9d:cf:33:5f:4b:ad:a8:75:6a:b8: ff:3a:c8:2e:15:c8:53:ef:a0:40:1a:fc:69:ec:7a:a0:5d:60: 5c:e0:6f:d3:83:31:4b:be:81:70:b5:a2:98:c7:ea:c1:1f:66: 2f:d2:67:ea:d7:ef:2a:f6:76:d6:7a:cf:a2:62:6c:b0:66:5d: 15:94:ad:82:fa:99:d7:40:cc:a2:16:bb:d8:50:2a:88:76:a7: 26:05:43:f4:72:af:40:d0:5a:a4:eb:dd:24:39:c8:7c:e6:cb: 77:4b:e5:3c:33:7f:f6:3e:16:6c:c6:c7:74:40:a5:c2:b9:09: e7:d4:36:f0:8b:5f:24:f8:e2:2b:80:7e:9c:13:8a:cf:87:58: f8:40:ab:33 -----BEGIN CERTIFICATE----- MIIFxDCCBKygAwIBAgIUe215eS/oSiiKCr54ybuQf+fDQtgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDQyNDA0NDE0NVoX DTI3MDQyMzA0NDY0NVowMzExMC8GA1UEAxMoNUQyRENCQjZEODI0MDFCNUUwRTU4 MDI1NDJCQjUzRTU2MUMxRjhFRjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMrQf1CYEVUubNuoIZNm3ekUEVwWxS29/b0MdyM0/dl5QzZXMFAuLbfq+Z8l k9rWzqUX+6kjfAs6t9MoihLnmTUqnxsmP0ki7e3HV7lXyP217eAolPADS9PflHxE uAlcl5hCzYEfwUw7kGT04ykrXZpJQuWceTuhhV7R3gwHw9VtS9ga967+FgCl7PxT rfjK6qtaFBF5BuBl3qy1FBKtPv/Gkey0uiU3pkRnhluAElQRvDj9AU91sK4gA3bG xwyuFm/1bXnsNh8IadBGcxqKDRwTBuM2R+FKMPoTC9OUn77C1Hc7F4O+49lc3pZB 075/sjMjwHJvKaIgwQho9fBiiZMCAwEAAaOCArcwggKzMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFF0ty7bYJAG14OWAJUK7U+VhwfjvMB8GA1UdIwQYMBaAFKVu hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTA5OTkxOTMzNDM3OTA5NDAxNy8wLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDk5OTE5MzM0Mzc5MDk0MDE3 LzAvNUQyRENCQjZEODI0MDFCNUUwRTU4MDI1NDJCQjUzRTU2MUMxRjhFRi5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUH AQcBAf8EETAPMA0EAgACMAcDBQAkBsrAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwIaFDANBgkqhkiG9w0BAQsFAAOCAQEARTaUyat0H2Jdg5SRbMUsLXdvmdXcWbzZ ZEkMUyi6vo60B//QXwn5B4QN7lruLcAyq1tRhiaZHBoNqfsyW1IN1WEhP2bkZPKW x06w92IynfvOPzC7o+21/QDI5LQQJU5OBrXTwpltZd51TrxVS6xU9M6J7DydzzNf S62odWq4/zrILhXIU++gQBr8aex6oF1gXOBv04MxS76BcLWimMfqwR9mL9Jn6tfv KvZ21nrPomJssGZdFZStgvqZ10DMoha72FAqiHanJgVD9HKvQNBapOvdJDnIfObL d0vlPDN/9j4WbMbHdEClwrkJ59Q28ItfJPjiK4B+nBOKz4dY+ECrMw== -----END CERTIFICATE-----Generated at Wed May 13 19:39:22 2026 by rpki-client