$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/0/8A05255B735973D13F97609E45A6D000FBCD953B.cer File: 8A05255B735973D13F97609E45A6D000FBCD953B.cer (raw, json) Hash identifier: ZmXu+OELcezsvljOGzmGVVHpzYS0EQXbYlj/YfPdKEA= Subject key identifier: 8A:05:25:5B:73:59:73:D1:3F:97:60:9E:45:A6:D0:00:FB:CD:95:3B Authority key identifier: CB:02:14:A5:C4:04:D6:F8:40:43:3B:12:0C:AC:BB:5B:8C:59:E6:13 Certificate issuer: /CN=A9162E3D0001/serialNumber=CB0214A5C404D6F840433B120CACBB5B8C59E613 Certificate serial: 66041799D54B325F12B1E3591CFD9D0B0819CC5A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1097071812157702145/0/8A05255B735973D13F97609E45A6D000FBCD953B.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1097071812157702145/0/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Thu 16 Apr 2026 08:07:28 +0000 Certificate not after: Thu 15 Apr 2027 08:12:28 +0000 Subordinate resources: IP: 168.160.0.0/16 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 15:28:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:04:17:99:d5:4b:32:5f:12:b1:e3:59:1c:fd:9d:0b:08:19:cc:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=CB0214A5C404D6F840433B120CACBB5B8C59E613 Validity Not Before: Apr 16 08:07:28 2026 GMT Not After : Apr 15 08:12:28 2027 GMT Subject: CN=8A05255B735973D13F97609E45A6D000FBCD953B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:c2:65:a5:69:3e:82:7c:17:e8:d3:e1:21:9a: 62:19:71:d2:e6:ba:71:8b:01:26:23:55:88:0f:3f: e9:9e:fe:17:e3:53:c2:66:1a:54:d3:69:21:a2:2d: e3:28:f0:19:6b:28:e7:73:96:48:a0:ce:17:0e:cd: 79:28:06:3b:04:35:85:fc:7a:3b:f8:18:19:88:b1: 3c:a5:d1:48:3f:a1:0d:f2:57:4c:e3:65:39:d7:c8: 1c:4b:46:27:1e:91:6d:6a:17:a9:61:dd:f3:aa:ac: 64:df:01:28:07:fd:e5:4c:be:0f:e7:85:49:40:6c: bf:27:e7:3b:16:3e:6e:0c:95:c6:15:d7:74:c5:ee: 9d:4f:53:b9:c1:4a:a6:90:5a:39:34:e3:53:5a:f3: cc:48:0a:24:b6:7d:c7:90:a1:dc:bf:56:4f:30:30: 7e:69:03:a1:72:19:25:ab:66:d4:82:2e:26:0f:e1: 3e:9c:3e:50:46:16:a0:38:5b:b1:b9:b2:c3:14:cf: c5:fd:a1:4c:13:03:3e:9c:4e:04:d0:d8:18:06:93: 88:e0:6e:5a:db:e6:2b:52:a0:05:af:ff:b0:20:c7: d2:25:c5:90:c0:45:02:ed:5f:7e:c8:1a:77:9f:63: fd:3b:7b:58:ea:16:66:25:25:87:82:34:94:6c:b9: 58:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 8A:05:25:5B:73:59:73:D1:3F:97:60:9E:45:A6:D0:00:FB:CD:95:3B X509v3 Authority Key Identifier: keyid:CB:02:14:A5:C4:04:D6:F8:40:43:3B:12:0C:AC:BB:5B:8C:59:E6:13 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1097071812157702145/0/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1097071812157702145/0/8A05255B735973D13F97609E45A6D000FBCD953B.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 168.160.0.0/16 Signature Algorithm: sha256WithRSAEncryption 64:76:e6:ae:a6:af:3e:d5:ba:d3:87:99:a2:11:6a:19:5f:74: 17:a3:7d:e1:97:4e:7e:5c:3e:29:09:e4:28:51:eb:93:a9:b5: 86:57:54:96:44:2f:1c:b9:9d:5f:f0:c3:d3:6a:72:34:13:a0: 89:60:88:ce:24:84:57:ca:ba:bb:2c:e2:50:7d:ca:1f:8a:3b: e6:e6:c7:0e:fd:87:88:4d:61:bf:80:cb:be:19:86:e0:df:57: cf:46:77:99:a0:68:7f:e7:60:01:03:cc:5a:8a:a6:d3:78:f6: 72:0d:77:4e:86:52:78:03:51:e6:a7:2d:09:dc:f7:56:f9:1f: ab:96:0d:60:24:53:46:8f:af:3d:c9:89:ac:ff:e5:65:f5:7d: b0:c0:8c:51:58:d3:b8:33:2d:d7:e7:d4:92:19:2d:85:21:c3: 0d:e2:75:01:17:01:d9:8d:92:f9:d6:b9:2a:ac:8c:5a:ef:7c: 2b:b1:ce:72:b1:ca:a1:b8:57:c0:90:24:34:88:bf:ca:ee:31: a2:07:9d:e1:f4:fc:f9:b3:5b:17:f6:24:62:9f:ba:7a:d6:40: 84:d8:38:e8:2e:e9:87:2b:12:27:a5:c9:11:17:1e:eb:23:1e: be:1f:a0:a7:f0:1f:3d:e3:7d:0b:4e:b3:a6:5f:3d:5d:90:30: a0:f3:ce:ee -----BEGIN CERTIFICATE----- MIIFpjCCBI6gAwIBAgIUZgQXmdVLMl8SseNZHP2dCwgZzFowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhDQjAyMTRBNUM0 MDRENkY4NDA0MzNCMTIwQ0FDQkI1QjhDNTlFNjEzMB4XDTI2MDQxNjA4MDcyOFoX DTI3MDQxNTA4MTIyOFowMzExMC8GA1UEAxMoOEEwNTI1NUI3MzU5NzNEMTNGOTc2 MDlFNDVBNkQwMDBGQkNEOTUzQjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANLCZaVpPoJ8F+jT4SGaYhlx0ua6cYsBJiNViA8/6Z7+F+NTwmYaVNNpIaIt 4yjwGWso53OWSKDOFw7NeSgGOwQ1hfx6O/gYGYixPKXRSD+hDfJXTONlOdfIHEtG Jx6RbWoXqWHd86qsZN8BKAf95Uy+D+eFSUBsvyfnOxY+bgyVxhXXdMXunU9TucFK ppBaOTTjU1rzzEgKJLZ9x5Ch3L9WTzAwfmkDoXIZJatm1IIuJg/hPpw+UEYWoDhb sbmywxTPxf2hTBMDPpxOBNDYGAaTiOBuWtvmK1KgBa//sCDH0iXFkMBFAu1ffsga d59j/Tt7WOoWZiUlh4I0lGy5WD8CAwEAAaOCApkwggKVMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFIoFJVtzWXPRP5dgnkWm0AD7zZU7MB8GA1UdIwQYMBaAFMsC FKXEBNb4QEM7Egysu1uMWeYTMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMC9DQjAyMTRBNUM0MDRENkY4NDA0MzNCMTIwQ0FDQkI1QjhDNTlF NjEzLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CM0EyNEYyMDFENjYxMUUyOEFDODgzN0M3 MkZEMUZGMi95d0lVcGNRRTF2aEFRenNTREt5N1c0eFo1aE0uY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTA5NzA3MTgxMjE1NzcwMjE0NS8wLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDk3MDcxODEyMTU3NzAyMTQ1 LzAvOEEwNTI1NUI3MzU5NzNEMTNGOTc2MDlFNDVBNkQwMDBGQkNEOTUzQi5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUH AQcBAf8EDzANMAsEAgABMAUDAwCooDANBgkqhkiG9w0BAQsFAAOCAQEAZHbmrqav PtW604eZohFqGV90F6N94ZdOflw+KQnkKFHrk6m1hldUlkQvHLmdX/DD02pyNBOg iWCIziSEV8q6uyziUH3KH4o75ubHDv2HiE1hv4DLvhmG4N9Xz0Z3maBof+dgAQPM Woqm03j2cg13ToZSeANR5qctCdz3Vvkfq5YNYCRTRo+vPcmJrP/lZfV9sMCMUVjT uDMt1+fUkhkthSHDDeJ1ARcB2Y2S+da5KqyMWu98K7HOcrHKobhXwJAkNIi/yu4x oged4fT8+bNbF/YkYp+6etZAhNg46C7physSJ6XJERce6yMevh+gp/AfPeN9C06z pl89XZAwoPPO7g== -----END CERTIFICATE-----Generated at Fri Apr 17 23:30:15 2026 by rpki-client