$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C05947A00A72638CD4BE67C4BF53224357777E0A.cer File: C05947A00A72638CD4BE67C4BF53224357777E0A.cer (raw, json) Hash identifier: qT9AW9Y4aR10YRjh15SUjNTF5cjSZdra1fKgFwP8Bu0= Subject key identifier: C0:59:47:A0:0A:72:63:8C:D4:BE:67:C4:BF:53:22:43:57:77:7E:0A Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Certificate serial: 62FF7F058D1E7B62A7FC6DCF0E7CD30FE7326028 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1105067938269888525/0/C05947A00A72638CD4BE67C4BF53224357777E0A.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1105067938269888525/0/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Fri 08 May 2026 09:40:29 +0000 Certificate not after: Fri 07 May 2027 09:45:29 +0000 Subordinate resources: IP: 103.212.108.0/22 IP: 139.5.212.0/22 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 11:49:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:ff:7f:05:8d:1e:7b:62:a7:fc:6d:cf:0e:7c:d3:0f:e7:32:60:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Validity Not Before: May 8 09:40:29 2026 GMT Not After : May 7 09:45:29 2027 GMT Subject: CN=C05947A00A72638CD4BE67C4BF53224357777E0A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:fc:42:ab:82:89:e0:de:d6:b9:20:a0:65:93: 9c:1d:a0:69:3e:a4:5d:44:6c:e7:94:19:be:ca:fb: b9:7e:17:ce:ff:3c:e6:bb:81:49:b0:38:6f:ac:31: 05:d0:1b:9f:8d:db:4c:44:e4:fd:dc:53:57:2a:11: c8:df:ba:c9:d6:d2:16:95:6e:44:2e:49:ba:30:7a: eb:6e:97:d9:c1:5f:c3:2c:8e:1c:4f:7e:ba:63:9d: af:7f:3f:3a:72:b8:47:32:14:6e:cb:40:ba:e5:6e: c4:0f:f4:ef:fc:53:af:d1:ea:5e:0e:bb:88:9b:65: 79:05:71:01:04:15:11:9e:5f:8b:6b:b5:c4:b0:4d: 91:50:fa:99:54:62:7f:c5:d8:88:ee:f2:bc:97:af: 72:3d:7e:fe:a1:ab:ac:f6:47:ff:df:11:c5:24:87: b9:36:14:ca:97:78:bf:65:a2:61:01:f2:ee:23:45: ea:ed:cb:eb:5b:15:32:77:08:ff:d9:5e:e0:f8:1b: 58:8c:d5:64:cf:75:19:05:a5:88:31:d2:f7:75:d2: 10:d2:82:cc:ec:ce:21:96:e3:c6:11:94:0a:3d:a8: d2:ec:3a:68:ee:86:d8:4b:eb:81:79:f5:fd:b2:51: e4:47:c9:6b:82:8a:e6:34:ec:2e:7e:4a:54:84:b9: 44:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: C0:59:47:A0:0A:72:63:8C:D4:BE:67:C4:BF:53:22:43:57:77:7E:0A X509v3 Authority Key Identifier: keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1105067938269888525/0/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1105067938269888525/0/C05947A00A72638CD4BE67C4BF53224357777E0A.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.212.108.0/22 139.5.212.0/22 Signature Algorithm: sha256WithRSAEncryption 93:2f:0d:d6:ff:58:11:3c:8d:6b:fe:72:3c:4a:a4:46:dd:b1: d9:68:5f:02:e6:9e:6c:a2:4e:28:f9:c0:0d:27:fd:18:00:94: f2:80:77:51:eb:88:76:e0:5d:62:13:b5:3e:c6:2c:21:38:39: 50:43:31:3c:c4:f4:7e:8e:3c:01:c7:ec:18:cb:bd:29:68:8f: 69:5c:ac:bd:33:da:64:01:82:25:f9:14:3c:93:f3:90:5c:d1: 66:fe:de:77:ed:36:08:e8:56:aa:7d:d1:67:46:ac:82:ec:5f: 97:5e:e3:c8:8e:7b:30:81:3d:95:8e:24:a8:6d:4a:5d:4f:08: 49:8e:65:ce:a2:cd:73:11:be:60:3c:7b:14:81:63:cc:fc:b7: ce:cd:15:79:23:55:84:67:d8:13:44:7f:7c:06:ad:b4:c3:12: c5:e3:cb:32:65:8a:89:9a:0d:54:98:58:57:16:32:69:2a:88: 02:4d:5b:c5:62:d1:a6:68:a5:59:96:95:e8:60:3d:b4:91:2b: 97:d5:f3:83:2a:8e:a0:13:79:57:aa:3d:8f:e1:0b:0d:0e:02: f1:4c:58:ec:45:6d:79:fb:34:7d:da:b2:dc:a8:ae:4f:39:fa: 64:0f:8d:a1:c4:08:89:c1:21:71:af:9e:91:97:b5:a6:bd:23: 5e:ec:4a:6d -----BEGIN CERTIFICATE----- MIIFrTCCBJWgAwIBAgIUYv9/BY0ee2Kn/G3PDnzTD+cyYCgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDUwODA5NDAyOVoX DTI3MDUwNzA5NDUyOVowMzExMC8GA1UEAxMoQzA1OTQ3QTAwQTcyNjM4Q0Q0QkU2 N0M0QkY1MzIyNDM1Nzc3N0UwQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANL8QquCieDe1rkgoGWTnB2gaT6kXURs55QZvsr7uX4Xzv885ruBSbA4b6wx BdAbn43bTETk/dxTVyoRyN+6ydbSFpVuRC5JujB6626X2cFfwyyOHE9+umOdr38/ OnK4RzIUbstAuuVuxA/07/xTr9HqXg67iJtleQVxAQQVEZ5fi2u1xLBNkVD6mVRi f8XYiO7yvJevcj1+/qGrrPZH/98RxSSHuTYUypd4v2WiYQHy7iNF6u3L61sVMncI /9le4PgbWIzVZM91GQWliDHS93XSENKCzOzOIZbjxhGUCj2o0uw6aO6G2EvrgXn1 /bJR5EfJa4KK5jTsLn5KVIS5REsCAwEAAaOCAqAwggKcMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFMBZR6AKcmOM1L5nxL9TIkNXd34KMB8GA1UdIwQYMBaAFKVu hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTEwNTA2NzkzODI2OTg4ODUyNS8wLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMTA1MDY3OTM4MjY5ODg4NTI1 LzAvQzA1OTQ3QTAwQTcyNjM4Q0Q0QkU2N0M0QkY1MzIyNDM1Nzc3N0UwQS5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwJQYIKwYBBQUH AQcBAf8EFjAUMBIEAgABMAwDBAJn1GwDBAKLBdQwDQYJKoZIhvcNAQELBQADggEB AJMvDdb/WBE8jWv+cjxKpEbdsdloXwLmnmyiTij5wA0n/RgAlPKAd1HriHbgXWIT tT7GLCE4OVBDMTzE9H6OPAHH7BjLvSloj2lcrL0z2mQBgiX5FDyT85Bc0Wb+3nft NgjoVqp90WdGrILsX5de48iOezCBPZWOJKhtSl1PCEmOZc6izXMRvmA8exSBY8z8 t87NFXkjVYRn2BNEf3wGrbTDEsXjyzJliomaDVSYWFcWMmkqiAJNW8Vi0aZopVmW lehgPbSRK5fV84MqjqATeVeqPY/hCw0OAvFMWOxFbXn7NH3astyork85+mQPjaHE CInBIXGvnpGXtaa9I17sSm0= -----END CERTIFICATE-----Generated at Wed May 13 16:48:03 2026 by rpki-client