$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/050FFFF977C2D4CDECAE9AD46790A6C5631235A9.cer File: 050FFFF977C2D4CDECAE9AD46790A6C5631235A9.cer (raw, json) Hash identifier: woA6KQUAMTkQ/3mFYPrw9uu1N7v3JOeFyRKxVOCc8S4= Subject key identifier: 05:0F:FF:F9:77:C2:D4:CD:EC:AE:9A:D4:67:90:A6:C5:63:12:35:A9 Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Certificate serial: 7A35496E6C4A23C261BDFD5C81601B2057B6CD24 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1096270861217824771/0/050FFFF977C2D4CDECAE9AD46790A6C5631235A9.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1096270861217824771/0/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Tue 14 Apr 2026 03:04:02 +0000 Certificate not after: Tue 13 Apr 2027 03:09:02 +0000 Subordinate resources: AS: 24423 IP: 180.233.0.0 -- 180.233.95.255 IP: 202.153.48.0/20 IP: 203.190.96.0/20 IP: 211.156.80.0/20 IP: 2402:4440::/32 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 17:12:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:35:49:6e:6c:4a:23:c2:61:bd:fd:5c:81:60:1b:20:57:b6:cd:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Validity Not Before: Apr 14 03:04:02 2026 GMT Not After : Apr 13 03:09:02 2027 GMT Subject: CN=050FFFF977C2D4CDECAE9AD46790A6C5631235A9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:1c:3f:a1:1f:fc:b6:10:12:eb:4c:ef:00:fa: 1d:da:4d:db:bd:68:18:91:46:f4:b6:b8:37:30:34: a5:05:11:79:67:bc:03:b7:58:a8:e5:09:8c:65:4b: 31:e7:ca:9f:6b:fb:ed:e7:26:5b:8b:35:1e:ed:9f: ea:62:55:7a:f7:f8:e6:ca:2d:c0:8c:10:7c:72:d3: 87:66:13:72:da:86:f9:72:79:f7:4b:63:2b:7e:4f: 86:d0:0d:32:8c:ff:3b:dc:9c:88:00:8b:47:6f:ff: ef:48:45:6a:19:25:2e:d8:c0:01:36:10:2b:4b:91: 89:77:2c:4b:2d:43:5f:48:54:7a:0b:8f:28:8e:57: 41:e8:19:bc:24:e7:7a:aa:be:c7:65:96:3f:28:f1: e1:e5:7a:d1:70:a4:95:82:f3:4b:22:54:04:9c:03: 55:0f:42:40:67:99:2b:f2:5a:b8:c2:05:49:df:cf: 3e:c6:91:87:32:9a:f8:e0:02:a3:7d:38:c0:1c:27: 64:3e:e4:bb:71:73:d7:23:5d:86:02:28:2c:04:13: 87:36:4c:35:c0:67:8d:ba:88:1b:28:3f:3b:0e:47: bc:6b:17:7c:96:c4:05:16:b3:b4:09:a0:a3:33:de: ae:11:74:d4:1d:5b:3e:07:11:8c:74:4b:15:ef:d3: f4:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 05:0F:FF:F9:77:C2:D4:CD:EC:AE:9A:D4:67:90:A6:C5:63:12:35:A9 X509v3 Authority Key Identifier: keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1096270861217824771/0/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1096270861217824771/0/050FFFF977C2D4CDECAE9AD46790A6C5631235A9.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 180.233.0.0-180.233.95.255 202.153.48.0/20 203.190.96.0/20 211.156.80.0/20 IPv6: 2402:4440::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 24423 Signature Algorithm: sha256WithRSAEncryption 70:98:24:43:f7:dc:ca:db:8c:64:4a:73:14:bf:72:2c:13:10: e6:ad:b7:73:ee:b0:35:74:1b:de:15:01:bc:60:f1:32:e6:1f: e5:c8:b5:c3:49:91:bc:c6:a9:db:f7:a6:41:7c:6d:9b:f5:2c: 74:6b:1a:d2:5c:88:75:95:b6:07:3c:1c:13:e1:89:1b:b7:b7: 75:37:0a:da:c1:84:73:0e:c5:15:c1:02:49:1a:c3:84:05:71: e6:11:d2:fd:a0:84:5e:1d:08:83:d5:6a:da:24:4c:df:cc:91: c8:54:6e:44:41:83:48:56:42:0c:b8:aa:43:7c:ce:df:01:f6: 43:e6:44:b3:cf:df:e8:67:6a:e0:6d:33:36:7c:af:c9:b5:1b: 79:26:98:b3:40:90:f3:54:c3:be:53:71:34:72:e2:28:ba:b5: 2b:ac:7e:bb:03:d2:99:7f:80:d8:11:03:0b:fc:a1:e7:26:6f: 82:f7:59:2d:a6:81:6c:8a:d9:0c:f3:9c:66:45:06:b1:04:60: bc:83:8e:6d:e3:89:7c:9f:1c:f7:3f:94:14:b4:da:b8:76:dd: e5:15:f5:ae:10:f8:de:75:4b:87:03:c3:28:f7:c2:ee:51:8e: d3:d3:20:be:dd:59:27:51:39:31:46:89:a1:0b:82:c9:5e:95: b9:09:98:c1 -----BEGIN CERTIFICATE----- MIIF6jCCBNKgAwIBAgIUejVJbmxKI8Jhvf1cgWAbIFe2zSQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDQxNDAzMDQwMloX DTI3MDQxMzAzMDkwMlowMzExMC8GA1UEAxMoMDUwRkZGRjk3N0MyRDRDREVDQUU5 QUQ0Njc5MEE2QzU2MzEyMzVBOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALgcP6Ef/LYQEutM7wD6HdpN271oGJFG9La4NzA0pQUReWe8A7dYqOUJjGVL MefKn2v77ecmW4s1Hu2f6mJVevf45sotwIwQfHLTh2YTctqG+XJ590tjK35PhtAN Moz/O9yciACLR2//70hFahklLtjAATYQK0uRiXcsSy1DX0hUeguPKI5XQegZvCTn eqq+x2WWPyjx4eV60XCklYLzSyJUBJwDVQ9CQGeZK/JauMIFSd/PPsaRhzKa+OAC o304wBwnZD7ku3Fz1yNdhgIoLAQThzZMNcBnjbqIGyg/Ow5HvGsXfJbEBRaztAmg ozPerhF01B1bPgcRjHRLFe/T9B0CAwEAAaOCAt0wggLZMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFAUP//l3wtTN7K6a1GeQpsVjEjWpMB8GA1UdIwQYMBaAFKVu hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTA5NjI3MDg2MTIxNzgyNDc3MS8wLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDk2MjcwODYxMjE3ODI0Nzcx LzAvMDUwRkZGRjk3N0MyRDRDREVDQUU5QUQ0Njc5MEE2QzU2MzEyMzVBOS5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwRwYIKwYBBQUH AQcBAf8EODA2MCUEAgABMB8wCwMDALTpAwQFtOlAAwQEypkwAwQEy75gAwQE05xQ MA0EAgACMAcDBQAkAkRAMBkGCCsGAQUFBwEIAQH/BAowCKAGMAQCAl9nMA0GCSqG SIb3DQEBCwUAA4IBAQBwmCRD99zK24xkSnMUv3IsExDmrbdz7rA1dBveFQG8YPEy 5h/lyLXDSZG8xqnb96ZBfG2b9Sx0axrSXIh1lbYHPBwT4Ykbt7d1NwrawYRzDsUV wQJJGsOEBXHmEdL9oIReHQiD1WraJEzfzJHIVG5EQYNIVkIMuKpDfM7fAfZD5kSz z9/oZ2rgbTM2fK/JtRt5JpizQJDzVMO+U3E0cuIourUrrH67A9KZf4DYEQML/KHn Jm+C91ktpoFsitkM85xmRQaxBGC8g45t44l8nxz3P5QUtNq4dt3lFfWuEPjedUuH A8Mo98LuUY7T0yC+3VknUTkxRomhC4LJXpW5CZjB -----END CERTIFICATE-----Generated at Fri Apr 17 17:12:23 2026 by rpki-client