$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/050FFFF977C2D4CDECAE9AD46790A6C5631235A9.cer File: 050FFFF977C2D4CDECAE9AD46790A6C5631235A9.cer (raw, json) Hash identifier: 89wuP9wX1BkC9/6qtVZssfkvUVVGePjB0nd9XsPbHeA= Subject key identifier: 05:0F:FF:F9:77:C2:D4:CD:EC:AE:9A:D4:67:90:A6:C5:63:12:35:A9 Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Certificate serial: 47B63847113293C36ED2D5F1CDFDF82713376D10 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1096270861217824771/0/050FFFF977C2D4CDECAE9AD46790A6C5631235A9.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1096270861217824771/0/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Wed 27 May 2026 01:44:39 +0000 Certificate not after: Wed 26 May 2027 01:49:39 +0000 Subordinate resources: AS: 24423 IP: 119.233.128.0/17 IP: 180.233.0.0 -- 180.233.95.255 IP: 202.153.48.0/20 IP: 203.190.96.0/20 IP: 211.156.80.0/20 IP: 2402:4440::/32 IP: 2404:b900::/32 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 15:28:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:b6:38:47:11:32:93:c3:6e:d2:d5:f1:cd:fd:f8:27:13:37:6d:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Validity Not Before: May 27 01:44:39 2026 GMT Not After : May 26 01:49:39 2027 GMT Subject: CN=050FFFF977C2D4CDECAE9AD46790A6C5631235A9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:1c:3f:a1:1f:fc:b6:10:12:eb:4c:ef:00:fa: 1d:da:4d:db:bd:68:18:91:46:f4:b6:b8:37:30:34: a5:05:11:79:67:bc:03:b7:58:a8:e5:09:8c:65:4b: 31:e7:ca:9f:6b:fb:ed:e7:26:5b:8b:35:1e:ed:9f: ea:62:55:7a:f7:f8:e6:ca:2d:c0:8c:10:7c:72:d3: 87:66:13:72:da:86:f9:72:79:f7:4b:63:2b:7e:4f: 86:d0:0d:32:8c:ff:3b:dc:9c:88:00:8b:47:6f:ff: ef:48:45:6a:19:25:2e:d8:c0:01:36:10:2b:4b:91: 89:77:2c:4b:2d:43:5f:48:54:7a:0b:8f:28:8e:57: 41:e8:19:bc:24:e7:7a:aa:be:c7:65:96:3f:28:f1: e1:e5:7a:d1:70:a4:95:82:f3:4b:22:54:04:9c:03: 55:0f:42:40:67:99:2b:f2:5a:b8:c2:05:49:df:cf: 3e:c6:91:87:32:9a:f8:e0:02:a3:7d:38:c0:1c:27: 64:3e:e4:bb:71:73:d7:23:5d:86:02:28:2c:04:13: 87:36:4c:35:c0:67:8d:ba:88:1b:28:3f:3b:0e:47: bc:6b:17:7c:96:c4:05:16:b3:b4:09:a0:a3:33:de: ae:11:74:d4:1d:5b:3e:07:11:8c:74:4b:15:ef:d3: f4:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 05:0F:FF:F9:77:C2:D4:CD:EC:AE:9A:D4:67:90:A6:C5:63:12:35:A9 X509v3 Authority Key Identifier: keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1096270861217824771/0/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1096270861217824771/0/050FFFF977C2D4CDECAE9AD46790A6C5631235A9.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 119.233.128.0/17 180.233.0.0-180.233.95.255 202.153.48.0/20 203.190.96.0/20 211.156.80.0/20 IPv6: 2402:4440::/32 2404:b900::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 24423 Signature Algorithm: sha256WithRSAEncryption 3a:ad:f1:2a:57:50:52:25:39:81:46:47:78:12:71:c0:8e:78: fe:0c:01:72:a2:3b:47:37:47:21:72:4a:47:63:c1:02:1f:f5: cc:90:27:c9:30:fd:b5:6f:28:d2:32:e3:37:ef:0a:ca:9b:7d: 67:13:1a:16:2e:f7:92:2f:9c:87:ee:13:bb:ab:64:a7:27:f8: 4b:4d:25:83:1e:d3:08:d7:d8:54:d3:b8:e5:87:0b:d8:a3:af: 3f:af:aa:54:fb:41:89:6f:04:6c:4b:88:50:c5:af:84:4b:ac: df:66:4f:81:76:d9:4c:6f:d4:e1:b6:57:f8:1e:20:9c:63:69: 86:31:0b:39:00:41:6e:fe:62:5a:9c:35:f2:4b:69:cf:db:80: 44:7c:5d:c7:9e:f8:f8:34:56:c4:8f:d0:30:8f:0b:f0:09:cb: c5:49:4b:1c:0e:e9:d6:a3:63:eb:47:4e:71:bf:1f:d8:ce:f5: ea:ec:8c:a5:ae:60:55:e4:a8:c3:8e:28:6b:11:09:28:6b:26: e1:be:d7:36:ee:6d:bd:ef:4f:d3:27:04:08:33:75:5e:87:51: c8:49:f1:9a:06:d5:af:6e:d6:06:b1:89:bf:3e:5a:92:c5:0b: b4:19:92:65:cb:4b:cd:a1:25:7e:b4:9a:78:61:d3:6a:20:fe: 62:17:5c:4b -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUR7Y4RxEyk8Nu0tXxzf34JxM3bRAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDUyNzAxNDQzOVoX DTI3MDUyNjAxNDkzOVowMzExMC8GA1UEAxMoMDUwRkZGRjk3N0MyRDRDREVDQUU5 QUQ0Njc5MEE2QzU2MzEyMzVBOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALgcP6Ef/LYQEutM7wD6HdpN271oGJFG9La4NzA0pQUReWe8A7dYqOUJjGVL MefKn2v77ecmW4s1Hu2f6mJVevf45sotwIwQfHLTh2YTctqG+XJ590tjK35PhtAN Moz/O9yciACLR2//70hFahklLtjAATYQK0uRiXcsSy1DX0hUeguPKI5XQegZvCTn eqq+x2WWPyjx4eV60XCklYLzSyJUBJwDVQ9CQGeZK/JauMIFSd/PPsaRhzKa+OAC o304wBwnZD7ku3Fz1yNdhgIoLAQThzZMNcBnjbqIGyg/Ow5HvGsXfJbEBRaztAmg ozPerhF01B1bPgcRjHRLFe/T9B0CAwEAAaOCAuowggLmMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFAUP//l3wtTN7K6a1GeQpsVjEjWpMB8GA1UdIwQYMBaAFKVu hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTA5NjI3MDg2MTIxNzgyNDc3MS8wLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDk2MjcwODYxMjE3ODI0Nzcx LzAvMDUwRkZGRjk3N0MyRDRDREVDQUU5QUQ0Njc5MEE2QzU2MzEyMzVBOS5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwVAYIKwYBBQUH AQcBAf8ERTBDMCsEAgABMCUDBAd36YAwCwMDALTpAwQFtOlAAwQEypkwAwQEy75g AwQE05xQMBQEAgACMA4DBQAkAkRAAwUAJAS5ADAZBggrBgEFBQcBCAEB/wQKMAig BjAEAgJfZzANBgkqhkiG9w0BAQsFAAOCAQEAOq3xKldQUiU5gUZHeBJxwI54/gwB cqI7RzdHIXJKR2PBAh/1zJAnyTD9tW8o0jLjN+8Kypt9ZxMaFi73ki+ch+4Tu6tk pyf4S00lgx7TCNfYVNO45YcL2KOvP6+qVPtBiW8EbEuIUMWvhEus32ZPgXbZTG/U 4bZX+B4gnGNphjELOQBBbv5iWpw18ktpz9uARHxdx574+DRWxI/QMI8L8AnLxUlL HA7p1qNj60dOcb8f2M716uyMpa5gVeSow44oaxEJKGsm4b7XNu5tve9P0ycECDN1 XodRyEnxmgbVr27WBrGJvz5aksULtBmSZctLzaElfrSaeGHTaiD+YhdcSw== -----END CERTIFICATE-----Generated at Fri May 29 21:11:22 2026 by rpki-client