$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/0/8A05255B735973D13F97609E45A6D000FBCD953B.cer File: 8A05255B735973D13F97609E45A6D000FBCD953B.cer (raw, json) Hash identifier: eijgjFXx18RgKKfGdCReGxW4yCRGtY71JxmcgoZnemY= Subject key identifier: 8A:05:25:5B:73:59:73:D1:3F:97:60:9E:45:A6:D0:00:FB:CD:95:3B Authority key identifier: CB:02:14:A5:C4:04:D6:F8:40:43:3B:12:0C:AC:BB:5B:8C:59:E6:13 Certificate issuer: /CN=A9162E3D0001/serialNumber=CB0214A5C404D6F840433B120CACBB5B8C59E613 Certificate serial: 01756573379C69D1DEAB227F2AB61460DB5C9D63 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1097071812157702145/0/8A05255B735973D13F97609E45A6D000FBCD953B.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1097071812157702145/0/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Fri 29 May 2026 08:36:56 +0000 Certificate not after: Fri 28 May 2027 08:41:56 +0000 Subordinate resources: IP: 168.160.0.0/16 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Jun 2026 13:43:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:75:65:73:37:9c:69:d1:de:ab:22:7f:2a:b6:14:60:db:5c:9d:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=CB0214A5C404D6F840433B120CACBB5B8C59E613 Validity Not Before: May 29 08:36:56 2026 GMT Not After : May 28 08:41:56 2027 GMT Subject: CN=8A05255B735973D13F97609E45A6D000FBCD953B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:c2:65:a5:69:3e:82:7c:17:e8:d3:e1:21:9a: 62:19:71:d2:e6:ba:71:8b:01:26:23:55:88:0f:3f: e9:9e:fe:17:e3:53:c2:66:1a:54:d3:69:21:a2:2d: e3:28:f0:19:6b:28:e7:73:96:48:a0:ce:17:0e:cd: 79:28:06:3b:04:35:85:fc:7a:3b:f8:18:19:88:b1: 3c:a5:d1:48:3f:a1:0d:f2:57:4c:e3:65:39:d7:c8: 1c:4b:46:27:1e:91:6d:6a:17:a9:61:dd:f3:aa:ac: 64:df:01:28:07:fd:e5:4c:be:0f:e7:85:49:40:6c: bf:27:e7:3b:16:3e:6e:0c:95:c6:15:d7:74:c5:ee: 9d:4f:53:b9:c1:4a:a6:90:5a:39:34:e3:53:5a:f3: cc:48:0a:24:b6:7d:c7:90:a1:dc:bf:56:4f:30:30: 7e:69:03:a1:72:19:25:ab:66:d4:82:2e:26:0f:e1: 3e:9c:3e:50:46:16:a0:38:5b:b1:b9:b2:c3:14:cf: c5:fd:a1:4c:13:03:3e:9c:4e:04:d0:d8:18:06:93: 88:e0:6e:5a:db:e6:2b:52:a0:05:af:ff:b0:20:c7: d2:25:c5:90:c0:45:02:ed:5f:7e:c8:1a:77:9f:63: fd:3b:7b:58:ea:16:66:25:25:87:82:34:94:6c:b9: 58:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 8A:05:25:5B:73:59:73:D1:3F:97:60:9E:45:A6:D0:00:FB:CD:95:3B X509v3 Authority Key Identifier: keyid:CB:02:14:A5:C4:04:D6:F8:40:43:3B:12:0C:AC:BB:5B:8C:59:E6:13 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1097071812157702145/0/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1097071812157702145/0/8A05255B735973D13F97609E45A6D000FBCD953B.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 168.160.0.0/16 Signature Algorithm: sha256WithRSAEncryption 53:8b:46:2b:fd:c1:0e:b8:97:fb:06:11:c6:1d:74:37:97:14: de:3c:8b:16:22:27:f0:dc:5e:c6:8a:48:3e:24:ac:b0:76:e3: c9:2c:8c:de:f3:22:41:a6:f3:76:0e:dd:9b:27:7f:94:61:10: 96:23:f1:54:88:81:fa:1b:c3:ca:44:ba:c0:d2:a3:e9:a3:aa: 9c:18:c8:e6:1e:af:71:ba:7f:6d:d2:54:e6:a3:29:98:fc:34: 30:03:82:39:a0:14:f0:63:50:8e:dd:c5:36:42:88:86:dc:24: da:8e:bd:d0:c9:f9:28:5b:0a:77:72:ec:b9:59:e1:65:2a:2c: 39:73:80:0f:33:39:73:b8:81:b2:c4:d9:03:c9:52:ca:74:45: 87:b3:09:d7:1f:97:20:e9:11:74:5f:57:ba:24:da:b1:55:8e: d8:f8:35:23:45:fe:12:be:c9:6d:5c:bb:85:4d:bf:0d:c6:0b: cf:9b:ba:55:7c:4a:b7:e1:e1:84:81:87:81:46:c0:8e:ff:74: d1:0a:cf:ed:5f:aa:9a:5f:ad:5f:af:27:6c:23:e1:f5:98:b2: a9:cc:36:54:57:38:0b:8e:4c:5b:37:1a:88:58:77:47:da:ec: 17:4c:00:e2:90:4f:af:ef:55:3e:72:20:b6:4a:79:70:ca:1f: da:be:3d:51 -----BEGIN CERTIFICATE----- MIIFpjCCBI6gAwIBAgIUAXVlczecadHeqyJ/KrYUYNtcnWMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhDQjAyMTRBNUM0 MDRENkY4NDA0MzNCMTIwQ0FDQkI1QjhDNTlFNjEzMB4XDTI2MDUyOTA4MzY1NloX DTI3MDUyODA4NDE1NlowMzExMC8GA1UEAxMoOEEwNTI1NUI3MzU5NzNEMTNGOTc2 MDlFNDVBNkQwMDBGQkNEOTUzQjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANLCZaVpPoJ8F+jT4SGaYhlx0ua6cYsBJiNViA8/6Z7+F+NTwmYaVNNpIaIt 4yjwGWso53OWSKDOFw7NeSgGOwQ1hfx6O/gYGYixPKXRSD+hDfJXTONlOdfIHEtG Jx6RbWoXqWHd86qsZN8BKAf95Uy+D+eFSUBsvyfnOxY+bgyVxhXXdMXunU9TucFK ppBaOTTjU1rzzEgKJLZ9x5Ch3L9WTzAwfmkDoXIZJatm1IIuJg/hPpw+UEYWoDhb sbmywxTPxf2hTBMDPpxOBNDYGAaTiOBuWtvmK1KgBa//sCDH0iXFkMBFAu1ffsga d59j/Tt7WOoWZiUlh4I0lGy5WD8CAwEAAaOCApkwggKVMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFIoFJVtzWXPRP5dgnkWm0AD7zZU7MB8GA1UdIwQYMBaAFMsC FKXEBNb4QEM7Egysu1uMWeYTMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMC9DQjAyMTRBNUM0MDRENkY4NDA0MzNCMTIwQ0FDQkI1QjhDNTlF NjEzLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CM0EyNEYyMDFENjYxMUUyOEFDODgzN0M3 MkZEMUZGMi95d0lVcGNRRTF2aEFRenNTREt5N1c0eFo1aE0uY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTA5NzA3MTgxMjE1NzcwMjE0NS8wLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDk3MDcxODEyMTU3NzAyMTQ1 LzAvOEEwNTI1NUI3MzU5NzNEMTNGOTc2MDlFNDVBNkQwMDBGQkNEOTUzQi5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUH AQcBAf8EDzANMAsEAgABMAUDAwCooDANBgkqhkiG9w0BAQsFAAOCAQEAU4tGK/3B DriX+wYRxh10N5cU3jyLFiIn8NxexopIPiSssHbjySyM3vMiQabzdg7dmyd/lGEQ liPxVIiB+hvDykS6wNKj6aOqnBjI5h6vcbp/bdJU5qMpmPw0MAOCOaAU8GNQjt3F NkKIhtwk2o690Mn5KFsKd3LsuVnhZSosOXOADzM5c7iBssTZA8lSynRFh7MJ1x+X IOkRdF9XuiTasVWO2Pg1I0X+Er7JbVy7hU2/DcYLz5u6VXxKt+HhhIGHgUbAjv90 0QrP7V+qml+tX68nbCPh9Ziyqcw2VFc4C45MWzcaiFh3R9rsF0wA4pBPr+9VPnIg tkp5cMof2r49UQ== -----END CERTIFICATE-----Generated at Thu Jun 4 14:12:16 2026 by rpki-client