$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/528FB7389148F9961BE07564A1BCC28DE1440954.cer File: 528FB7389148F9961BE07564A1BCC28DE1440954.cer (raw, json) Hash identifier: BW1GIxl6F5nTLe9giTdLiEamHYvLThYrxmv3p6g+67Q= Subject key identifier: 52:8F:B7:38:91:48:F9:96:1B:E0:75:64:A1:BC:C2:8D:E1:44:09:54 Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Certificate serial: 2D4A829A3B1A1687CA4A79C14321C571A9DF4E36 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1065591195721531393/0/528FB7389148F9961BE07564A1BCC28DE1440954.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1065591195721531393/0/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Fri 29 May 2026 06:24:08 +0000 Certificate not after: Fri 28 May 2027 06:29:08 +0000 Subordinate resources: IP: 103.152.246.0/23 IP: 2406:3ac0::/32 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 16:02:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:4a:82:9a:3b:1a:16:87:ca:4a:79:c1:43:21:c5:71:a9:df:4e:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Validity Not Before: May 29 06:24:08 2026 GMT Not After : May 28 06:29:08 2027 GMT Subject: CN=528FB7389148F9961BE07564A1BCC28DE1440954 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:be:dc:43:eb:b2:ca:dc:0a:91:4a:57:c4:42: 48:1e:a8:4a:3d:74:9d:39:66:f3:b0:d1:09:75:fd: 06:2d:8c:c2:4e:13:b6:cf:97:d5:5b:3c:2d:bf:9c: fd:03:2f:42:3d:02:0a:53:7f:e4:e0:10:3a:9d:7c: 89:6e:bd:ee:c4:f9:02:48:f8:14:cc:09:5f:46:9b: f3:c6:86:79:9e:d0:ed:9f:16:e7:7c:9d:d5:f8:b0: 34:7c:99:fb:a4:86:be:72:94:c5:73:37:16:69:84: e6:c5:49:bd:8d:8d:20:4a:8d:32:87:f9:70:77:6e: 32:17:ad:e5:62:59:68:e6:f5:75:2c:f4:6e:43:74: 69:5a:ed:89:7f:59:62:db:06:66:5a:5f:9a:d8:7a: a0:3f:96:89:5b:c4:9a:ca:1d:68:8b:6f:42:34:60: 61:7c:e4:4c:e2:35:f3:58:2f:0e:d9:95:2d:78:a3: 54:b0:70:ff:15:1b:93:3d:dd:0e:1a:e3:8f:4c:8f: 92:51:5e:79:63:c2:ab:54:05:6e:10:2f:e7:75:a0: ef:35:58:c3:8c:95:1c:ef:e9:70:6f:43:82:76:7a: 51:ed:61:03:ec:13:1a:f2:8a:b6:96:b0:5f:f2:04: 0f:bf:fd:ef:49:64:8c:1a:79:a9:0e:ae:88:ed:ea: 5b:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 52:8F:B7:38:91:48:F9:96:1B:E0:75:64:A1:BC:C2:8D:E1:44:09:54 X509v3 Authority Key Identifier: keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721531393/0/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721531393/0/528FB7389148F9961BE07564A1BCC28DE1440954.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.152.246.0/23 IPv6: 2406:3ac0::/32 Signature Algorithm: sha256WithRSAEncryption 89:6f:fa:19:fc:da:26:b0:78:20:55:62:8b:c0:df:81:81:36: 0f:97:f9:1f:cd:08:f9:be:d3:04:8f:df:db:1e:fb:6f:9d:b1: eb:03:43:30:6f:50:ec:bb:d0:9d:6f:17:71:ff:c9:0e:b8:fc: f0:30:ab:16:00:ac:09:34:a1:ed:c0:29:cb:95:72:af:a6:48: 78:aa:70:0a:b1:6e:fd:27:e7:2e:69:57:3e:a1:95:7a:f8:fc: 6b:a4:22:e2:61:47:5c:bf:1c:a8:cd:c8:f3:99:20:2e:d5:fd: 10:5b:76:92:3d:c1:c4:62:a5:b3:7d:70:ff:5d:d7:ee:da:a1: 98:fe:61:72:de:da:d5:0e:9e:2a:71:9e:06:b3:d0:ff:31:ef: 06:cc:4c:be:c5:27:cc:41:51:18:ec:bf:ed:26:9d:53:19:19: 26:f7:26:ee:53:41:70:07:4a:48:54:cf:50:f8:ca:12:83:56: 96:40:5f:1e:d0:20:fb:7a:45:4b:08:0f:a2:86:48:f9:9b:28: a5:ee:8e:9d:52:08:4e:e9:16:36:4c:a4:ef:b2:55:2a:f1:eb: 79:66:85:f0:86:35:4e:e7:d6:9d:62:63:69:cd:d3:fa:b2:05: 66:a7:02:c3:5d:8a:c9:6e:d5:bd:1a:89:24:29:a3:17:57:1f: f9:bc:bc:f1 -----BEGIN CERTIFICATE----- MIIFtjCCBJ6gAwIBAgIULUqCmjsaFofKSnnBQyHFcanfTjYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDUyOTA2MjQwOFoX DTI3MDUyODA2MjkwOFowMzExMC8GA1UEAxMoNTI4RkI3Mzg5MTQ4Rjk5NjFCRTA3 NTY0QTFCQ0MyOERFMTQ0MDk1NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOa+3EPrssrcCpFKV8RCSB6oSj10nTlm87DRCXX9Bi2Mwk4Tts+X1Vs8Lb+c /QMvQj0CClN/5OAQOp18iW697sT5Akj4FMwJX0ab88aGeZ7Q7Z8W53yd1fiwNHyZ +6SGvnKUxXM3FmmE5sVJvY2NIEqNMof5cHduMhet5WJZaOb1dSz0bkN0aVrtiX9Z YtsGZlpfmth6oD+WiVvEmsodaItvQjRgYXzkTOI181gvDtmVLXijVLBw/xUbkz3d Dhrjj0yPklFeeWPCq1QFbhAv53Wg7zVYw4yVHO/pcG9DgnZ6Ue1hA+wTGvKKtpaw X/IED7/970lkjBp5qQ6uiO3qWwkCAwEAAaOCAqkwggKlMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFFKPtziRSPmWG+B1ZKG8wo3hRAlUMB8GA1UdIwQYMBaAFKVu hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTA2NTU5MTE5NTcyMTUzMTM5My8wLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDY1NTkxMTk1NzIxNTMxMzkz LzAvNTI4RkI3Mzg5MTQ4Rjk5NjFCRTA3NTY0QTFCQ0MyOERFMTQ0MDk1NC5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUH AQcBAf8EHzAdMAwEAgABMAYDBAFnmPYwDQQCAAIwBwMFACQGOsAwDQYJKoZIhvcN AQELBQADggEBAIlv+hn82iaweCBVYovA34GBNg+X+R/NCPm+0wSP39se+2+dsesD QzBvUOy70J1vF3H/yQ64/PAwqxYArAk0oe3AKcuVcq+mSHiqcAqxbv0n5y5pVz6h lXr4/GukIuJhR1y/HKjNyPOZIC7V/RBbdpI9wcRipbN9cP9d1+7aoZj+YXLe2tUO nipxngaz0P8x7wbMTL7FJ8xBURjsv+0mnVMZGSb3Ju5TQXAHSkhUz1D4yhKDVpZA Xx7QIPt6RUsID6KGSPmbKKXujp1SCE7pFjZMpO+yVSrx63lmhfCGNU7n1p1iY2nN 0/qyBWanAsNdislu1b0aiSQpoxdXH/m8vPE= -----END CERTIFICATE-----Generated at Sun Jun 14 07:14:57 2026 by rpki-client