$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5B8731D8200C740F2B8746CC3AFF45FEE6A8240E.cer File: 5B8731D8200C740F2B8746CC3AFF45FEE6A8240E.cer (raw, json) Hash identifier: PUKR5KoY4NP3CkyNcbCvCCsWjl8WCsaThqrWUd2gpx8= Subject key identifier: 5B:87:31:D8:20:0C:74:0F:2B:87:46:CC:3A:FF:45:FE:E6:A8:24:0E Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Certificate serial: 156DCAFEA33994BEA1E1122BDA6A2F867994F04E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1113648026729054227/1/5B8731D8200C740F2B8746CC3AFF45FEE6A8240E.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1113648026729054227/1/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Mon 01 Jun 2026 01:54:42 +0000 Certificate not after: Mon 31 May 2027 01:59:42 +0000 Subordinate resources: AS: 137762 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 16:02:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:6d:ca:fe:a3:39:94:be:a1:e1:12:2b:da:6a:2f:86:79:94:f0:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Validity Not Before: Jun 1 01:54:42 2026 GMT Not After : May 31 01:59:42 2027 GMT Subject: CN=5B8731D8200C740F2B8746CC3AFF45FEE6A8240E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:42:9d:91:9f:32:50:5a:f6:12:ba:13:db:5b: a6:01:2a:b3:c6:51:58:79:2f:9c:46:bd:3d:f1:c7: 54:6c:d2:6c:ce:05:16:cb:1d:f3:59:2a:c9:da:4f: 86:23:7c:4d:84:cf:53:07:10:ba:a0:dc:87:4c:9b: 96:d7:aa:86:77:e8:84:4b:36:3f:8c:32:a2:32:bd: 88:e3:83:b4:62:79:72:08:fc:0a:15:51:86:20:ac: 06:c0:98:e8:72:24:db:1e:33:29:1a:a5:2b:14:71: 07:e4:1f:1f:04:fa:5f:0c:2d:07:70:b4:fb:9f:f9: d7:4a:46:71:86:8f:2a:fa:29:c7:02:22:ea:0d:23: 5d:02:bd:f3:e0:c8:34:6e:9e:d7:87:fc:2f:ff:03: 95:86:35:da:94:b6:73:e0:35:7a:1f:75:42:53:aa: d2:b7:f3:fd:ab:28:6f:db:f7:53:8e:3b:e4:9b:b8: 79:5e:57:85:d0:4d:26:ea:64:36:66:f9:c2:7a:4f: 11:87:41:b4:68:09:0d:e5:ea:48:e6:b9:49:24:07: 5d:49:e2:a8:35:d3:f0:10:3e:29:fe:97:d3:ea:03: 16:5f:e4:b8:66:d5:71:05:14:5a:32:c0:65:40:b6: 60:ed:d4:91:04:cf:51:fc:a5:57:ae:71:53:62:ac: cf:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 5B:87:31:D8:20:0C:74:0F:2B:87:46:CC:3A:FF:45:FE:E6:A8:24:0E X509v3 Authority Key Identifier: keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1113648026729054227/1/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1113648026729054227/1/5B8731D8200C740F2B8746CC3AFF45FEE6A8240E.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 137762 Signature Algorithm: sha256WithRSAEncryption 79:ed:3a:4f:b9:41:30:ea:38:27:8c:80:e2:7e:33:03:ea:f7: 72:b0:27:11:a6:9e:23:c3:41:98:fa:79:b3:45:b3:c5:65:de: 6a:b3:22:73:83:26:07:6d:fd:5f:82:21:bc:c9:ac:43:d4:5d: a5:0a:ce:89:f6:af:f0:88:d7:45:aa:96:9d:a9:9f:82:10:bb: 68:c4:b8:9d:34:8f:78:0b:3e:25:c3:fb:1a:af:df:14:48:6c: 0e:5d:eb:e0:87:0b:85:8b:42:35:bd:bf:7e:ec:52:58:b6:5b: 5d:23:c9:bd:5f:be:25:e8:e7:47:72:12:93:2f:6b:62:0c:7e: 9d:14:48:9f:5a:b2:13:20:5b:9b:67:1a:01:72:0e:88:b2:ce: 95:d2:18:67:8f:88:04:83:62:49:26:2c:32:89:ed:c6:ae:07: 5a:e6:fb:da:ef:5f:4e:c3:b2:02:d3:8a:22:08:10:b2:82:86: 1a:b9:03:a4:2f:f0:03:01:97:33:95:87:e7:f7:68:6d:e5:92: 2b:6a:00:dd:2d:35:b9:75:28:64:28:a2:26:cd:58:74:a5:f6: 2a:15:0a:a9:57:30:71:a9:b0:c8:66:22:40:40:ba:c5:0e:e1: 39:d3:3e:21:67:0f:7b:0d:e9:f1:27:1c:5b:05:fe:a3:0b:0e: 70:7b:df:31 -----BEGIN CERTIFICATE----- MIIFojCCBIqgAwIBAgIUFW3K/qM5lL6h4RIr2movhnmU8E4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDYwMTAxNTQ0MloX DTI3MDUzMTAxNTk0MlowMzExMC8GA1UEAxMoNUI4NzMxRDgyMDBDNzQwRjJCODc0 NkNDM0FGRjQ1RkVFNkE4MjQwRTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANFCnZGfMlBa9hK6E9tbpgEqs8ZRWHkvnEa9PfHHVGzSbM4FFssd81kqydpP hiN8TYTPUwcQuqDch0yblteqhnfohEs2P4wyojK9iOODtGJ5cgj8ChVRhiCsBsCY 6HIk2x4zKRqlKxRxB+QfHwT6XwwtB3C0+5/510pGcYaPKvopxwIi6g0jXQK98+DI NG6e14f8L/8DlYY12pS2c+A1eh91QlOq0rfz/asob9v3U4475Ju4eV5XhdBNJupk Nmb5wnpPEYdBtGgJDeXqSOa5SSQHXUniqDXT8BA+Kf6X0+oDFl/kuGbVcQUUWjLA ZUC2YO3UkQTPUfylV65xU2Ksz/ECAwEAAaOCApUwggKRMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFFuHMdggDHQPK4dGzDr/Rf7mqCQOMB8GA1UdIwQYMBaAFKVu hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTExMzY0ODAyNjcyOTA1NDIyNy8xLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMTEzNjQ4MDI2NzI5MDU0MjI3 LzEvNUI4NzMxRDgyMDBDNzQwRjJCODc0NkNDM0FGRjQ1RkVFNkE4MjQwRS5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwGgYIKwYBBQUH AQgBAf8ECzAJoAcwBQIDAhoiMA0GCSqGSIb3DQEBCwUAA4IBAQB57TpPuUEw6jgn jIDifjMD6vdysCcRpp4jw0GY+nmzRbPFZd5qsyJzgyYHbf1fgiG8yaxD1F2lCs6J 9q/wiNdFqpadqZ+CELtoxLidNI94Cz4lw/sar98USGwOXevghwuFi0I1vb9+7FJY tltdI8m9X74l6OdHchKTL2tiDH6dFEifWrITIFubZxoBcg6Iss6V0hhnj4gEg2JJ Jiwyie3Grgda5vva719Ow7IC04oiCBCygoYauQOkL/ADAZczlYfn92ht5ZIragDd LTW5dShkKKImzVh0pfYqFQqpVzBxqbDIZiJAQLrFDuE50z4hZw97DenxJxxbBf6j Cw5we98x -----END CERTIFICATE-----Generated at Sun Jun 14 05:40:13 2026 by rpki-client