$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/58040501FF5E61F0E29F465314024C0C7BD4DC49.cer File: 58040501FF5E61F0E29F465314024C0C7BD4DC49.cer (raw, json) Hash identifier: PCgpd0+8brSmJvbNmNjwE7B0AETY49j6gKCPqmqnOnk= Subject key identifier: 58:04:05:01:FF:5E:61:F0:E2:9F:46:53:14:02:4C:0C:7B:D4:DC:49 Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Certificate serial: 36E848C923BC8D8026BA51AA69EE35A38983057E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1123602192389898275/0/58040501FF5E61F0E29F465314024C0C7BD4DC49.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1123602192389898275/0/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Sun 28 Jun 2026 13:08:59 +0000 Certificate not after: Sun 27 Jun 2027 13:13:59 +0000 Subordinate resources: AS: 131546 IP: 103.101.124.0/22 IP: 119.61.128.0/19 IP: 2401:cfc0::/32 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 Jul 2026 20:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:e8:48:c9:23:bc:8d:80:26:ba:51:aa:69:ee:35:a3:89:83:05:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Validity Not Before: Jun 28 13:08:59 2026 GMT Not After : Jun 27 13:13:59 2027 GMT Subject: CN=58040501FF5E61F0E29F465314024C0C7BD4DC49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:26:89:2b:6b:51:4c:09:8d:f2:70:69:fc:05: 73:43:a6:c1:aa:6f:e1:55:73:b7:c0:59:61:2f:94: 61:77:49:c0:bc:e8:4d:f1:7e:75:b6:16:55:08:8e: bd:04:64:77:b6:90:a6:8b:63:a5:6f:27:6d:cc:f9: b3:b9:d9:91:db:d1:cf:40:fa:e3:09:1f:a1:ff:6d: bb:24:2c:be:50:27:08:1c:97:e9:83:7f:12:f4:79: eb:36:0d:6e:3a:a9:5c:41:d0:d9:2b:6a:1f:ba:44: 71:34:6a:c4:a4:5f:d0:89:35:47:71:be:a4:2c:ab: f2:49:e4:4b:c2:d5:52:16:28:56:d5:8e:99:63:97: a8:ee:f0:ae:b0:8e:81:5d:5b:d9:c3:0f:ee:1e:e5: 5e:39:95:d9:d2:bf:d6:f7:b6:17:47:cf:68:81:1f: ae:f2:ce:49:56:51:4e:59:19:88:71:5e:cc:cf:5b: 1f:43:c1:0f:65:09:fa:11:c0:52:36:92:a3:5a:d8: c3:be:8b:4f:d8:a5:aa:70:65:0b:52:f1:65:41:7f: ea:80:17:0c:3f:f6:74:c1:8f:83:bd:e0:31:ae:88: 70:fd:46:01:c9:6e:c7:b1:c6:37:45:22:23:9a:f9: 08:a2:57:da:15:ff:53:17:64:af:c8:1c:91:f9:37: ef:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 58:04:05:01:FF:5E:61:F0:E2:9F:46:53:14:02:4C:0C:7B:D4:DC:49 X509v3 Authority Key Identifier: keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1123602192389898275/0/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1123602192389898275/0/58040501FF5E61F0E29F465314024C0C7BD4DC49.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.101.124.0/22 119.61.128.0/19 IPv6: 2401:cfc0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 131546 Signature Algorithm: sha256WithRSAEncryption 23:3c:fe:98:b7:eb:e0:5d:87:1c:87:19:22:ad:31:16:16:89: 93:16:3b:21:a1:3c:b7:31:e0:31:9f:9a:69:ae:c4:ba:41:e3: e6:f9:42:e3:fb:d2:61:b1:7b:1c:ac:55:17:58:cd:55:66:dd: 25:12:cb:77:8c:d9:a5:48:89:ce:98:87:11:a1:a1:05:b2:79: 04:06:84:e3:c5:13:92:01:37:fa:6c:5a:5b:54:f0:91:3c:11: 33:43:15:1f:50:2e:7a:ad:a7:e4:c4:7c:0a:e2:79:63:71:13: a7:f9:6c:5f:35:46:fa:8c:9b:fd:26:f2:3c:fd:78:dc:d6:3f: e7:0f:49:1b:53:d3:84:b9:a6:29:41:d8:85:83:45:5c:63:61: 4e:d7:48:5e:85:0e:01:fb:68:9f:b1:72:2e:8c:c1:64:48:8c: 55:7f:0d:8b:2e:7d:e9:d4:13:f4:01:ad:ec:0c:f7:39:f5:e6: b0:d5:37:4c:c5:07:71:68:aa:be:40:ae:b2:2e:2e:d6:a0:23: 10:9a:6c:de:e2:56:7b:61:21:a6:f8:28:cb:0c:5f:47:b0:e3: ca:97:91:93:a6:34:0f:69:b2:da:e2:8c:ed:de:f1:e7:b7:51: ec:72:59:52:b7:62:fa:c8:e7:e5:77:3a:6f:1c:c6:d6:f8:77: bd:91:e9:55 -----BEGIN CERTIFICATE----- MIIF2DCCBMCgAwIBAgIUNuhIySO8jYAmulGqae41o4mDBX4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDYyODEzMDg1OVoX DTI3MDYyNzEzMTM1OVowMzExMC8GA1UEAxMoNTgwNDA1MDFGRjVFNjFGMEUyOUY0 NjUzMTQwMjRDMEM3QkQ0REM0OTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKwmiStrUUwJjfJwafwFc0Omwapv4VVzt8BZYS+UYXdJwLzoTfF+dbYWVQiO vQRkd7aQpotjpW8nbcz5s7nZkdvRz0D64wkfof9tuyQsvlAnCByX6YN/EvR56zYN bjqpXEHQ2StqH7pEcTRqxKRf0Ik1R3G+pCyr8knkS8LVUhYoVtWOmWOXqO7wrrCO gV1b2cMP7h7lXjmV2dK/1ve2F0fPaIEfrvLOSVZRTlkZiHFezM9bH0PBD2UJ+hHA UjaSo1rYw76LT9ilqnBlC1LxZUF/6oAXDD/2dMGPg73gMa6IcP1GAclux7HGN0Ui I5r5CKJX2hX/Uxdkr8gckfk3768CAwEAAaOCAsswggLHMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFFgEBQH/XmHw4p9GUxQCTAx71NxJMB8GA1UdIwQYMBaAFKVu hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTEyMzYwMjE5MjM4OTg5ODI3NS8wLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMTIzNjAyMTkyMzg5ODk4Mjc1 LzAvNTgwNDA1MDFGRjVFNjFGMEUyOUY0NjUzMTQwMjRDMEM3QkQ0REM0OS5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwNAYIKwYBBQUH AQcBAf8EJTAjMBIEAgABMAwDBAJnZXwDBAV3PYAwDQQCAAIwBwMFACQBz8AwGgYI KwYBBQUHAQgBAf8ECzAJoAcwBQIDAgHaMA0GCSqGSIb3DQEBCwUAA4IBAQAjPP6Y t+vgXYcchxkirTEWFomTFjshoTy3MeAxn5pprsS6QePm+ULj+9JhsXscrFUXWM1V Zt0lEst3jNmlSInOmIcRoaEFsnkEBoTjxROSATf6bFpbVPCRPBEzQxUfUC56rafk xHwK4nljcROn+WxfNUb6jJv9JvI8/Xjc1j/nD0kbU9OEuaYpQdiFg0VcY2FO10he hQ4B+2ifsXIujMFkSIxVfw2LLn3p1BP0Aa3sDPc59eaw1TdMxQdxaKq+QK6yLi7W oCMQmmze4lZ7YSGm+CjLDF9HsOPKl5GTpjQPabLa4ozt3vHnt1HscllSt2L6yOfl dzpvHMbW+He9kelV -----END CERTIFICATE-----Generated at Tue Jul 14 19:09:10 2026 by rpki-client