$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C527EEF22ED4B9034949C91E3D39B24A69FDF984.cer File: C527EEF22ED4B9034949C91E3D39B24A69FDF984.cer (raw, json) Hash identifier: 8+Z4TPxoiu/XlkU37wBdv7aZOgecE1YjgTfmSSL9k+c= Subject key identifier: C5:27:EE:F2:2E:D4:B9:03:49:49:C9:1E:3D:39:B2:4A:69:FD:F9:84 Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Certificate serial: 4DE8B7F7C5B86ADC4D63C5DC15A8EB9971CA0E83 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1106767084924174355/0/C527EEF22ED4B9034949C91E3D39B24A69FDF984.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1106767084924174355/0/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Wed 13 May 2026 02:12:18 +0000 Certificate not after: Wed 12 May 2027 02:17:18 +0000 Subordinate resources: AS: 55992 IP: 101.197.0.0 -- 101.199.255.255 IP: 103.21.112.0/22 IP: 103.28.8.0/22 IP: 150.242.44.0/22 IP: 2405:a900::/32 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 11:49:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:e8:b7:f7:c5:b8:6a:dc:4d:63:c5:dc:15:a8:eb:99:71:ca:0e:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Validity Not Before: May 13 02:12:18 2026 GMT Not After : May 12 02:17:18 2027 GMT Subject: CN=C527EEF22ED4B9034949C91E3D39B24A69FDF984 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:7b:96:fa:67:42:2f:10:d5:07:12:88:92:8a: 19:c2:b2:e6:9b:a8:c8:ac:13:19:2f:88:6d:6b:da: bc:62:aa:04:49:0a:bd:d3:fe:a9:d8:48:75:25:6d: e0:da:75:16:c7:8d:7e:29:77:98:c2:84:d8:71:3d: 36:68:c9:9a:f6:02:9b:52:c5:ea:eb:03:59:4b:04: 9b:03:88:23:1e:94:81:fc:f6:ba:bf:91:f5:42:07: fc:19:bb:4c:df:e6:0b:42:4f:3e:28:6c:6d:a9:38: 88:d5:ab:f7:04:50:16:fc:ef:fb:38:34:7e:3d:8d: 01:88:0f:24:ea:34:da:5d:66:b7:c2:24:81:fc:71: 0a:19:b0:3c:ae:05:c6:51:70:3d:c4:f8:cf:64:39: 84:8e:4b:2b:39:a1:1a:2d:fc:a8:3b:f2:62:5c:ce: 20:00:3d:40:14:28:78:6b:d1:ea:46:c1:74:5c:fe: ab:fe:c1:a3:24:78:bc:26:d1:1c:2a:61:c4:a8:f6: 84:f6:4f:77:eb:ce:c1:d6:58:78:1f:0c:99:0b:23: b9:ca:e4:17:57:00:6b:e1:29:85:aa:47:14:35:a2: bc:49:2a:83:2d:f6:71:1c:0e:33:99:28:81:3e:63: 93:e6:3a:b2:c1:89:dd:a7:50:94:cf:7c:ed:36:86: 10:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: C5:27:EE:F2:2E:D4:B9:03:49:49:C9:1E:3D:39:B2:4A:69:FD:F9:84 X509v3 Authority Key Identifier: keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1106767084924174355/0/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1106767084924174355/0/C527EEF22ED4B9034949C91E3D39B24A69FDF984.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 101.197.0.0-101.199.255.255 103.21.112.0/22 103.28.8.0/22 150.242.44.0/22 IPv6: 2405:a900::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 55992 Signature Algorithm: sha256WithRSAEncryption 54:2c:4c:fd:ae:d3:50:b8:e8:9e:58:d2:13:3f:d8:71:cb:d9: 32:b9:37:63:40:f0:73:ba:82:d2:01:94:e5:6e:71:b7:58:4a: 5c:8f:83:8e:05:3f:b5:68:6d:30:f9:73:18:74:57:ec:f2:26: d0:07:db:27:cd:ec:2b:5e:aa:bc:b5:7a:16:3c:f5:b0:7a:61: ed:3b:15:a9:a7:b9:92:75:c4:b6:9a:57:d7:3e:5b:67:00:89: 42:85:31:44:bc:8e:c7:1d:51:f9:ab:da:51:2a:31:07:58:4b: f3:66:5c:73:8e:67:59:d2:ab:bc:f6:db:c0:66:0d:d9:22:1c: f2:2c:7a:b7:e8:ed:f9:9d:d7:74:84:71:c4:45:e0:f9:ac:a9: 62:6d:67:99:5d:cb:f6:08:ca:04:7a:42:c4:eb:39:9f:92:82: 7e:95:f9:3a:ab:4a:84:8f:d5:2d:58:a2:aa:6f:7a:41:7a:dd: ad:ee:a7:12:af:9c:a9:a6:65:2e:c8:ad:5b:9b:e7:e6:96:e1: 1a:0f:cf:fd:8e:b1:55:8c:d4:f3:75:58:77:21:a6:c2:bc:20: 3c:8c:af:c7:df:8b:71:e1:e8:76:22:6a:d1:19:02:33:1e:f5: f3:b0:88:6e:54:7a:33:75:f9:77:3b:ec:70:a1:eb:ab:50:dc: 0b:88:6a:62 -----BEGIN CERTIFICATE----- MIIF6jCCBNKgAwIBAgIUTei398W4atxNY8XcFajrmXHKDoMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDUxMzAyMTIxOFoX DTI3MDUxMjAyMTcxOFowMzExMC8GA1UEAxMoQzUyN0VFRjIyRUQ0QjkwMzQ5NDlD OTFFM0QzOUIyNEE2OUZERjk4NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMB7lvpnQi8Q1QcSiJKKGcKy5puoyKwTGS+IbWvavGKqBEkKvdP+qdhIdSVt 4Np1FseNfil3mMKE2HE9NmjJmvYCm1LF6usDWUsEmwOIIx6Ugfz2ur+R9UIH/Bm7 TN/mC0JPPihsbak4iNWr9wRQFvzv+zg0fj2NAYgPJOo02l1mt8IkgfxxChmwPK4F xlFwPcT4z2Q5hI5LKzmhGi38qDvyYlzOIAA9QBQoeGvR6kbBdFz+q/7BoyR4vCbR HCphxKj2hPZPd+vOwdZYeB8MmQsjucrkF1cAa+EphapHFDWivEkqgy32cRwOM5ko gT5jk+Y6ssGJ3adQlM987TaGEJ0CAwEAAaOCAt0wggLZMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFMUn7vIu1LkDSUnJHj05skpp/fmEMB8GA1UdIwQYMBaAFKVu hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTEwNjc2NzA4NDkyNDE3NDM1NS8wLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMTA2NzY3MDg0OTI0MTc0MzU1 LzAvQzUyN0VFRjIyRUQ0QjkwMzQ5NDlDOTFFM0QzOUIyNEE2OUZERjk4NC5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwRgYIKwYBBQUH AQcBAf8ENzA1MCQEAgABMB4wCgMDAGXFAwMDZcADBAJnFXADBAJnHAgDBAKW8iww DQQCAAIwBwMFACQFqQAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDANq4MA0GCSqG SIb3DQEBCwUAA4IBAQBULEz9rtNQuOieWNITP9hxy9kyuTdjQPBzuoLSAZTlbnG3 WEpcj4OOBT+1aG0w+XMYdFfs8ibQB9snzewrXqq8tXoWPPWwemHtOxWpp7mSdcS2 mlfXPltnAIlChTFEvI7HHVH5q9pRKjEHWEvzZlxzjmdZ0qu89tvAZg3ZIhzyLHq3 6O35ndd0hHHEReD5rKlibWeZXcv2CMoEekLE6zmfkoJ+lfk6q0qEj9UtWKKqb3pB et2t7qcSr5yppmUuyK1bm+fmluEaD8/9jrFVjNTzdVh3IabCvCA8jK/H34tx4eh2 ImrRGQIzHvXzsIhuVHozdfl3O+xwoeurUNwLiGpi -----END CERTIFICATE-----Generated at Wed May 13 14:17:53 2026 by rpki-client