$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/86525FC830F7BAD1E457545F5ABE0187592FDF35.cer File: 86525FC830F7BAD1E457545F5ABE0187592FDF35.cer (raw, json) Hash identifier: j/y7m++Qtq5r9aQezMmq+V7b/gknH+nK2Cve3roNlPw= Subject key identifier: 86:52:5F:C8:30:F7:BA:D1:E4:57:54:5F:5A:BE:01:87:59:2F:DF:35 Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Certificate serial: 723315F4ED57D3772E8C6EB4DA3E3DBC64DBF70A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1095966185683419139/1/86525FC830F7BAD1E457545F5ABE0187592FDF35.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1095966185683419139/1/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Mon 13 Apr 2026 06:53:23 +0000 Certificate not after: Mon 12 Apr 2027 06:58:23 +0000 Subordinate resources: AS: 151272 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 09:51:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:33:15:f4:ed:57:d3:77:2e:8c:6e:b4:da:3e:3d:bc:64:db:f7:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Validity Not Before: Apr 13 06:53:23 2026 GMT Not After : Apr 12 06:58:23 2027 GMT Subject: CN=86525FC830F7BAD1E457545F5ABE0187592FDF35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:37:1e:57:04:32:7e:c7:58:18:de:22:25:fe: c8:0a:6c:22:1a:66:99:b4:bd:f2:f6:cd:ce:d1:33: 09:d9:9d:39:a0:f3:1a:f5:de:0e:68:f6:2d:25:eb: e7:3b:4e:a9:3e:0e:91:e5:80:35:fc:6e:0f:16:6c: 52:48:ef:ad:8c:09:5c:cb:b2:c7:76:b7:16:24:79: 37:39:23:55:eb:09:63:6e:51:3e:c5:c5:3c:d6:b5: 7f:f0:2a:44:08:92:73:7d:19:26:78:f9:bb:5c:12: 5b:36:96:6f:eb:05:3b:60:eb:a2:5e:60:65:91:06: 1d:97:93:91:e9:ab:8f:f3:1b:7b:5b:2c:7f:31:43: c6:41:66:bb:ef:54:de:8e:74:28:4f:c0:d2:3e:bc: 66:76:87:dc:0d:9a:ed:25:d3:d2:7a:31:32:a1:1e: 13:40:42:d4:84:d9:73:4e:60:a6:8c:6e:a9:9f:71: 8f:58:03:7c:85:6a:48:b2:43:3a:8a:1a:6d:c6:26: 29:ba:9b:4d:bf:da:2f:3c:e8:46:88:56:19:67:71: 30:56:43:55:2f:c2:b0:39:79:2c:22:59:0a:00:30: e1:96:4f:02:44:91:a4:89:1e:af:73:5a:12:4a:cf: 9c:02:29:81:09:fc:4c:06:d0:09:be:69:8a:b9:57: 20:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 86:52:5F:C8:30:F7:BA:D1:E4:57:54:5F:5A:BE:01:87:59:2F:DF:35 X509v3 Authority Key Identifier: keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1095966185683419139/1/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1095966185683419139/1/86525FC830F7BAD1E457545F5ABE0187592FDF35.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 151272 Signature Algorithm: sha256WithRSAEncryption 7a:ac:b9:49:66:69:43:da:13:56:13:28:9f:36:f8:5f:2a:0f: 56:3c:fd:b2:16:17:66:99:af:1b:4a:53:a3:5e:96:64:9f:52: dd:cc:85:2f:cc:d7:69:60:d6:1b:68:81:27:db:3d:f4:c0:8b: 42:1b:55:48:33:40:dc:06:7d:3f:06:2a:93:ea:fa:5b:f8:de: fe:22:6f:a1:1f:1f:a4:36:e7:5f:28:5f:51:bf:5c:d3:0e:64: e7:43:b1:ae:51:be:7b:51:4d:7d:de:82:3e:7e:15:35:7b:fc: a8:ce:6e:49:32:79:74:f6:5b:60:84:59:7c:38:98:a6:d8:05: a1:35:d1:46:19:b7:18:17:55:53:2d:91:79:12:48:68:bc:81: 70:1e:4d:a1:b9:43:df:df:e9:24:84:4f:54:28:a8:0c:c8:96: f0:23:33:dd:c3:9b:1e:f7:67:f3:b2:e4:fa:6c:16:6c:b2:6e: 03:fb:17:4b:68:35:48:fa:29:a2:c5:49:ad:2b:4d:82:35:d2: 3a:ab:04:b8:12:0b:9e:07:aa:47:7e:e7:52:69:78:bc:20:6b: 89:fe:1d:92:0f:8e:33:3a:ac:93:ba:d3:a8:7a:c1:51:e4:21: 5c:10:88:cf:99:7d:2a:27:ad:81:c5:47:e4:5a:04:3d:7b:61: 87:ff:19:9c -----BEGIN CERTIFICATE----- MIIFojCCBIqgAwIBAgIUcjMV9O1X03cujG602j49vGTb9wowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDQxMzA2NTMyM1oX DTI3MDQxMjA2NTgyM1owMzExMC8GA1UEAxMoODY1MjVGQzgzMEY3QkFEMUU0NTc1 NDVGNUFCRTAxODc1OTJGREYzNTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALQ3HlcEMn7HWBjeIiX+yApsIhpmmbS98vbNztEzCdmdOaDzGvXeDmj2LSXr 5ztOqT4OkeWANfxuDxZsUkjvrYwJXMuyx3a3FiR5NzkjVesJY25RPsXFPNa1f/Aq RAiSc30ZJnj5u1wSWzaWb+sFO2Drol5gZZEGHZeTkemrj/Mbe1ssfzFDxkFmu+9U 3o50KE/A0j68ZnaH3A2a7SXT0noxMqEeE0BC1ITZc05gpoxuqZ9xj1gDfIVqSLJD OooabcYmKbqbTb/aLzzoRohWGWdxMFZDVS/CsDl5LCJZCgAw4ZZPAkSRpIker3Na EkrPnAIpgQn8TAbQCb5pirlXIDUCAwEAAaOCApUwggKRMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFIZSX8gw97rR5FdUX1q+AYdZL981MB8GA1UdIwQYMBaAFKVu hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTA5NTk2NjE4NTY4MzQxOTEzOS8xLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDk1OTY2MTg1NjgzNDE5MTM5 LzEvODY1MjVGQzgzMEY3QkFEMUU0NTc1NDVGNUFCRTAxODc1OTJGREYzNS5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwGgYIKwYBBQUH AQgBAf8ECzAJoAcwBQIDAk7oMA0GCSqGSIb3DQEBCwUAA4IBAQB6rLlJZmlD2hNW EyifNvhfKg9WPP2yFhdmma8bSlOjXpZkn1LdzIUvzNdpYNYbaIEn2z30wItCG1VI M0DcBn0/BiqT6vpb+N7+Im+hHx+kNudfKF9Rv1zTDmTnQ7GuUb57UU193oI+fhU1 e/yozm5JMnl09ltghFl8OJim2AWhNdFGGbcYF1VTLZF5EkhovIFwHk2huUPf3+kk hE9UKKgMyJbwIzPdw5se92fzsuT6bBZssm4D+xdLaDVI+imixUmtK02CNdI6qwS4 EgueB6pHfudSaXi8IGuJ/h2SD44zOqyTutOoesFR5CFcEIjPmX0qJ62BxUfkWgQ9 e2GH/xmc -----END CERTIFICATE-----Generated at Fri Apr 17 12:52:55 2026 by rpki-client