$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/0/5A6112BF7CBEE15DA8C00A8556B7755AFB44A885.cer File: 5A6112BF7CBEE15DA8C00A8556B7755AFB44A885.cer (raw, json) Hash identifier: aUcotLMmPQiTssKTV76Fcl3mUMgPFs6qqW2mZvpH9Cs= Subject key identifier: 5A:61:12:BF:7C:BE:E1:5D:A8:C0:0A:85:56:B7:75:5A:FB:44:A8:85 Authority key identifier: CB:02:14:A5:C4:04:D6:F8:40:43:3B:12:0C:AC:BB:5B:8C:59:E6:13 Certificate issuer: /CN=A9162E3D0001/serialNumber=CB0214A5C404D6F840433B120CACBB5B8C59E613 Certificate serial: 5D3DA9C0F7FB559EF95B95E8D672EB22749AC588 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1116910113051901977/1/5A6112BF7CBEE15DA8C00A8556B7755AFB44A885.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1116910113051901977/1/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Wed 10 Jun 2026 01:57:05 +0000 Certificate not after: Wed 09 Jun 2027 02:02:05 +0000 Subordinate resources: IP: 158.60.0.0/16 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 17:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:3d:a9:c0:f7:fb:55:9e:f9:5b:95:e8:d6:72:eb:22:74:9a:c5:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=CB0214A5C404D6F840433B120CACBB5B8C59E613 Validity Not Before: Jun 10 01:57:05 2026 GMT Not After : Jun 9 02:02:05 2027 GMT Subject: CN=5A6112BF7CBEE15DA8C00A8556B7755AFB44A885 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:30:4b:4a:f1:c8:35:9a:c4:42:a2:3f:e4:3f: 21:2e:34:e6:b8:f6:7e:a2:f0:30:41:c9:ff:ae:0d: df:15:3a:c7:ec:e0:f8:78:b0:d8:c5:45:d6:80:d3: a5:96:87:62:d4:26:55:2d:9c:92:01:b6:e7:6e:6c: 09:2d:58:c8:5e:95:ff:ea:7e:35:80:98:50:7b:97: 20:d7:7f:bf:9d:92:c3:49:3f:1f:37:5d:51:77:3f: c4:51:1c:29:82:35:c7:b5:12:c5:68:c5:8c:08:e7: e6:40:3e:9e:fb:8b:55:8e:e9:61:b6:b8:0a:4c:d0: a6:29:b4:73:55:3d:be:d8:d4:2a:1d:4e:f7:f7:fd: 48:92:ac:27:ea:0d:23:eb:a1:10:6f:50:92:b4:d5: 4a:a8:05:39:67:5e:6e:51:16:d0:6a:a6:48:02:61: 28:b3:1c:f7:27:e5:82:a5:3e:cb:a1:b3:b4:f4:af: 87:01:82:ae:81:26:d4:16:05:4e:f7:18:d6:19:a1: 73:d4:df:10:9a:02:2a:a0:e1:57:15:11:a8:1c:8d: bd:13:4c:c8:57:22:9e:34:7b:e4:b8:52:f8:db:d3: 4d:99:77:ed:10:a2:2f:69:c0:f3:18:b5:f5:71:55: 15:69:87:54:6c:e3:57:d9:da:25:86:41:dd:d6:e8: 77:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 5A:61:12:BF:7C:BE:E1:5D:A8:C0:0A:85:56:B7:75:5A:FB:44:A8:85 X509v3 Authority Key Identifier: keyid:CB:02:14:A5:C4:04:D6:F8:40:43:3B:12:0C:AC:BB:5B:8C:59:E6:13 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1116910113051901977/1/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1116910113051901977/1/5A6112BF7CBEE15DA8C00A8556B7755AFB44A885.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 158.60.0.0/16 Signature Algorithm: sha256WithRSAEncryption 50:8b:bd:7b:8d:8d:e6:93:9b:c5:74:53:d3:52:92:4f:50:c4: a9:d7:f7:b0:fe:2a:96:23:51:d5:d7:c7:4d:61:dc:7e:24:ef: 3f:2c:88:77:8f:10:60:66:08:a3:32:cb:3f:29:26:b5:9e:5e: ce:32:68:e2:c7:13:c7:e6:de:e4:b7:df:4b:33:36:19:d6:ac: af:42:d7:cd:7c:55:de:5a:9c:e9:27:b1:f2:11:54:aa:f4:61: c3:40:7a:10:f6:c1:fb:21:34:95:2f:e6:ea:75:97:7e:13:4c: d3:82:5d:0c:c3:d5:4b:ba:bc:8b:a8:54:94:33:71:d4:2b:3a: ab:70:44:60:18:82:6e:b9:d4:e1:f3:6f:b4:ab:c2:29:ed:ba: f3:17:25:d4:b2:5a:c8:fc:93:b2:d0:5d:d6:29:a2:a5:8b:f6: d8:64:c3:8a:f3:ce:b4:4d:c1:7a:0c:83:4e:ed:74:f2:28:90: ea:ea:a3:03:7b:be:f5:8c:b9:6a:a3:7c:62:d6:d8:5c:d2:ec: 78:c4:98:3a:a9:b3:45:81:1e:6e:d6:df:0c:b5:ae:be:7c:23: 9c:08:e2:1c:b2:a9:c5:91:89:68:04:5b:f9:5d:ce:a3:56:6c: 5c:0f:7e:53:28:3a:d5:0e:a8:1e:32:56:10:90:21:bf:11:f5: ae:ab:1a:78 -----BEGIN CERTIFICATE----- MIIFpjCCBI6gAwIBAgIUXT2pwPf7VZ75W5Xo1nLrInSaxYgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhDQjAyMTRBNUM0 MDRENkY4NDA0MzNCMTIwQ0FDQkI1QjhDNTlFNjEzMB4XDTI2MDYxMDAxNTcwNVoX DTI3MDYwOTAyMDIwNVowMzExMC8GA1UEAxMoNUE2MTEyQkY3Q0JFRTE1REE4QzAw QTg1NTZCNzc1NUFGQjQ0QTg4NTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAN4wS0rxyDWaxEKiP+Q/IS405rj2fqLwMEHJ/64N3xU6x+zg+Hiw2MVF1oDT pZaHYtQmVS2ckgG2525sCS1YyF6V/+p+NYCYUHuXINd/v52Sw0k/HzddUXc/xFEc KYI1x7USxWjFjAjn5kA+nvuLVY7pYba4CkzQpim0c1U9vtjUKh1O9/f9SJKsJ+oN I+uhEG9QkrTVSqgFOWdeblEW0GqmSAJhKLMc9yflgqU+y6GztPSvhwGCroEm1BYF TvcY1hmhc9TfEJoCKqDhVxURqByNvRNMyFcinjR75LhS+NvTTZl37RCiL2nA8xi1 9XFVFWmHVGzjV9naJYZB3dbodz0CAwEAAaOCApkwggKVMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFFphEr98vuFdqMAKhVa3dVr7RKiFMB8GA1UdIwQYMBaAFMsC FKXEBNb4QEM7Egysu1uMWeYTMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMC9DQjAyMTRBNUM0MDRENkY4NDA0MzNCMTIwQ0FDQkI1QjhDNTlF NjEzLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CM0EyNEYyMDFENjYxMUUyOEFDODgzN0M3 MkZEMUZGMi95d0lVcGNRRTF2aEFRenNTREt5N1c0eFo1aE0uY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTExNjkxMDExMzA1MTkwMTk3Ny8xLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMTE2OTEwMTEzMDUxOTAxOTc3 LzEvNUE2MTEyQkY3Q0JFRTE1REE4QzAwQTg1NTZCNzc1NUFGQjQ0QTg4NS5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUH AQcBAf8EDzANMAsEAgABMAUDAwCePDANBgkqhkiG9w0BAQsFAAOCAQEAUIu9e42N 5pObxXRT01KST1DEqdf3sP4qliNR1dfHTWHcfiTvPyyId48QYGYIozLLPykmtZ5e zjJo4scTx+be5LffSzM2Gdasr0LXzXxV3lqc6Sex8hFUqvRhw0B6EPbB+yE0lS/m 6nWXfhNM04JdDMPVS7q8i6hUlDNx1Cs6q3BEYBiCbrnU4fNvtKvCKe268xcl1LJa yPyTstBd1imipYv22GTDivPOtE3BegyDTu108iiQ6uqjA3u+9Yy5aqN8YtbYXNLs eMSYOqmzRYEebtbfDLWuvnwjnAjiHLKpxZGJaARb+V3Oo1ZsXA9+Uyg61Q6oHjJW EJAhvxH1rqsaeA== -----END CERTIFICATE-----Generated at Sun Jun 14 04:00:14 2026 by rpki-client