$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1B2C77130D7AADA1846FFEFE416F50599F7EED09.cer File: 1B2C77130D7AADA1846FFEFE416F50599F7EED09.cer (raw, json) Hash identifier: BBipAuCIIbuTrvKXVePgyw5Od4aTyTk1TmlwZl7p1Zo= Subject key identifier: 1B:2C:77:13:0D:7A:AD:A1:84:6F:FE:FE:41:6F:50:59:9F:7E:ED:09 Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Certificate serial: 125331C4AF5F809063610E0D61F3725C06B023FB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1105008623362244615/0/1B2C77130D7AADA1846FFEFE416F50599F7EED09.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1105008623362244615/0/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Fri 08 May 2026 05:44:47 +0000 Certificate not after: Fri 07 May 2027 05:49:47 +0000 Subordinate resources: IP: 103.73.116.0/22 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 11:49:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:53:31:c4:af:5f:80:90:63:61:0e:0d:61:f3:72:5c:06:b0:23:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Validity Not Before: May 8 05:44:47 2026 GMT Not After : May 7 05:49:47 2027 GMT Subject: CN=1B2C77130D7AADA1846FFEFE416F50599F7EED09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:d0:f5:9e:98:78:63:6c:a3:6c:38:72:79:66: 31:93:2e:ff:17:dc:7a:45:17:60:4b:1c:c1:3b:d4: 30:3d:3c:02:4d:c8:c9:e3:67:f0:5c:12:69:da:f1: 1b:fc:b6:18:7c:77:dd:21:e1:6f:9e:95:89:56:99: 96:62:09:b3:e4:96:f7:09:7c:be:c9:e8:40:0f:3e: e9:4c:a2:39:6d:e8:dd:4c:e0:a1:3a:68:35:c2:d9: 35:c2:66:8d:01:2c:96:4a:dd:01:90:f2:c8:20:76: 47:30:4b:53:86:a2:69:f1:ee:7c:c0:58:29:4b:a4: bf:73:69:2f:97:52:5b:ed:0f:f3:d5:4c:34:0b:d0: d3:b8:2d:f0:33:38:b6:a1:e3:38:52:01:9a:7f:d8: c8:e3:a2:41:5a:3e:a5:3f:f0:73:5d:25:28:3e:93: 8c:66:8f:f6:24:85:23:8d:1c:8e:c2:26:53:0e:bb: 85:18:e5:79:98:08:b3:fe:69:95:5f:31:b3:af:d8: 63:d1:66:26:b4:33:16:3c:1a:04:82:df:ab:d0:ec: e7:39:9a:07:66:dc:95:c4:b8:05:90:2d:36:e9:4d: ed:5c:2b:64:ed:55:eb:01:b7:c2:6d:d4:6b:23:fa: 1e:81:3a:19:04:ef:2f:de:aa:2e:b3:f8:60:30:53: 89:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 1B:2C:77:13:0D:7A:AD:A1:84:6F:FE:FE:41:6F:50:59:9F:7E:ED:09 X509v3 Authority Key Identifier: keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1105008623362244615/0/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1105008623362244615/0/1B2C77130D7AADA1846FFEFE416F50599F7EED09.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.73.116.0/22 Signature Algorithm: sha256WithRSAEncryption 15:18:e7:8d:d4:37:05:f3:c3:8b:56:3b:31:a7:a3:8e:7f:8e: 00:66:7d:df:17:52:60:70:3c:f9:f9:31:71:fd:09:e3:4c:f8: df:db:a9:5d:a4:2b:96:52:4e:ff:55:60:c4:e9:43:72:b2:69: f7:fc:aa:0d:78:74:8a:54:a2:b0:f0:12:bf:ef:a2:03:ec:84: 69:b3:a4:3a:80:c8:e8:86:e0:2f:7d:64:64:ba:ca:1f:e2:0c: 26:83:50:01:29:8d:46:2d:22:35:f9:2f:93:07:e2:35:99:5b: 28:10:67:a7:69:ce:d5:d0:d1:4f:ef:71:65:b4:6d:11:1f:b8: 5e:5d:75:0a:2f:4a:4c:b7:5d:24:7c:aa:81:b8:90:9a:d5:79: 95:5d:3d:f0:a9:eb:65:8b:63:ba:bb:f7:ac:0e:79:ec:da:32: 3e:6b:e0:71:d9:c4:85:a3:95:d3:9d:20:ca:77:26:80:63:fe: 4f:cc:2f:6c:b3:c0:57:fb:59:b1:3d:68:4c:44:e0:39:03:c4: 32:82:b5:76:a8:d2:e6:e7:29:11:cc:16:4d:0c:ff:e4:eb:b4: 95:3c:04:43:0b:ca:28:ac:11:49:69:91:27:d3:6d:5b:5c:e9: 1a:01:8e:b1:b9:0e:cd:49:1a:02:10:4b:85:7c:73:45:aa:ce: be:22:97:98 -----BEGIN CERTIFICATE----- MIIFpzCCBI+gAwIBAgIUElMxxK9fgJBjYQ4NYfNyXAawI/swDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDUwODA1NDQ0N1oX DTI3MDUwNzA1NDk0N1owMzExMC8GA1UEAxMoMUIyQzc3MTMwRDdBQURBMTg0NkZG RUZFNDE2RjUwNTk5RjdFRUQwOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMrQ9Z6YeGNso2w4cnlmMZMu/xfcekUXYEscwTvUMD08Ak3IyeNn8FwSadrx G/y2GHx33SHhb56ViVaZlmIJs+SW9wl8vsnoQA8+6UyiOW3o3UzgoTpoNcLZNcJm jQEslkrdAZDyyCB2RzBLU4aiafHufMBYKUukv3NpL5dSW+0P89VMNAvQ07gt8DM4 tqHjOFIBmn/YyOOiQVo+pT/wc10lKD6TjGaP9iSFI40cjsImUw67hRjleZgIs/5p lV8xs6/YY9FmJrQzFjwaBILfq9Ds5zmaB2bclcS4BZAtNulN7VwrZO1V6wG3wm3U ayP6HoE6GQTvL96qLrP4YDBTiXMCAwEAAaOCApowggKWMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFBssdxMNeq2hhG/+/kFvUFmffu0JMB8GA1UdIwQYMBaAFKVu hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTEwNTAwODYyMzM2MjI0NDYxNS8wLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMTA1MDA4NjIzMzYyMjQ0NjE1 LzAvMUIyQzc3MTMwRDdBQURBMTg0NkZGRUZFNDE2RjUwNTk5RjdFRUQwOS5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAJnSXQwDQYJKoZIhvcNAQELBQADggEBABUY543U NwXzw4tWOzGno45/jgBmfd8XUmBwPPn5MXH9CeNM+N/bqV2kK5ZSTv9VYMTpQ3Ky aff8qg14dIpUorDwEr/vogPshGmzpDqAyOiG4C99ZGS6yh/iDCaDUAEpjUYtIjX5 L5MH4jWZWygQZ6dpztXQ0U/vcWW0bREfuF5ddQovSky3XSR8qoG4kJrVeZVdPfCp 62WLY7q796wOeezaMj5r4HHZxIWjldOdIMp3JoBj/k/ML2yzwFf7WbE9aExE4DkD xDKCtXao0ubnKRHMFk0M/+TrtJU8BEMLyiisEUlpkSfTbVtc6RoBjrG5Ds1JGgIQ S4V8c0Wqzr4il5g= -----END CERTIFICATE-----Generated at Wed May 13 16:15:13 2026 by rpki-client