$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1D7C1D5DF3229DAA149B7131A6A20D011481DCB7.cer File: 1D7C1D5DF3229DAA149B7131A6A20D011481DCB7.cer (raw, json) Hash identifier: kZcIXF8VIDeWexIaZILe4YMCsUyPm7blb3YcmOYuvBU= Subject key identifier: 1D:7C:1D:5D:F3:22:9D:AA:14:9B:71:31:A6:A2:0D:01:14:81:DC:B7 Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Certificate serial: 2B294CD0A67171DE27105E89FD868B40E4A36D75 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1157515100865691695/0/1D7C1D5DF3229DAA149B7131A6A20D011481DCB7.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1157515100865691695/0/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Wed 30 Sep 2026 03:06:47 +0000 Certificate not after: Wed 29 Sep 2027 03:11:47 +0000 Subordinate resources: IP: 43.241.100.0/23 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 Oct 2026 01:08:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:29:4c:d0:a6:71:71:de:27:10:5e:89:fd:86:8b:40:e4:a3:6d:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Validity Not Before: Sep 30 03:06:47 2026 GMT Not After : Sep 29 03:11:47 2027 GMT Subject: CN=1D7C1D5DF3229DAA149B7131A6A20D011481DCB7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:55:67:6f:a6:07:0e:d5:e8:c1:34:66:76:84: 1f:2b:c1:f3:79:24:47:d7:2f:10:62:a7:72:11:c4: fe:19:f2:9e:2e:f7:ea:ea:72:7a:c2:2a:7d:37:fb: 4b:03:de:48:4a:b6:47:7d:81:d2:46:7c:f1:5a:3f: 1f:2f:ef:eb:0a:c2:ad:e7:12:91:39:f4:bd:25:fd: 33:5d:98:e4:60:ab:65:8e:61:2d:18:1c:99:3f:4a: dc:98:2c:56:6c:e0:aa:48:77:67:d9:ca:3b:d3:10: 50:4d:2f:e8:24:9f:78:79:9c:f3:00:04:d7:b8:bb: 0f:74:2c:92:ec:9d:3b:ad:99:68:9d:fa:38:5e:91: 83:bc:92:db:47:a0:7d:c2:a4:8f:d6:d6:f7:da:02: c3:46:1b:82:5a:1c:b4:b7:b7:e3:f5:8b:8c:42:48: c9:03:f7:aa:0f:aa:18:14:81:ef:12:a9:d9:73:fa: e3:ca:66:05:b7:a8:56:22:1f:2f:8c:e9:8d:17:81: a9:e6:2e:e8:dd:27:b9:8d:32:7c:d1:93:8b:35:c5: f5:a5:87:61:97:ee:d8:a3:d4:01:9e:81:35:a3:d2: ce:a5:93:b7:66:45:6c:64:41:9e:66:b5:0b:f5:ac: 4d:74:7c:cc:27:66:cc:61:e0:0d:32:15:55:88:69: 88:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 1D:7C:1D:5D:F3:22:9D:AA:14:9B:71:31:A6:A2:0D:01:14:81:DC:B7 X509v3 Authority Key Identifier: keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1157515100865691695/0/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1157515100865691695/0/1D7C1D5DF3229DAA149B7131A6A20D011481DCB7.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.241.100.0/23 Signature Algorithm: sha256WithRSAEncryption 46:ed:63:6a:cd:5b:1f:2a:31:d5:8f:75:dc:b0:2f:5c:d9:c4: db:84:9a:e2:49:60:52:af:c3:d4:68:2b:25:27:47:01:78:e6: 5c:c5:5b:2f:21:82:82:ba:c1:7f:27:bb:39:e7:c1:ec:e3:9a: f0:c7:17:29:80:86:31:8d:cb:92:89:a2:65:8b:5d:05:09:16: c3:8c:23:f4:49:b6:8d:29:e8:74:7f:e1:5e:d0:b2:56:40:48: 50:a6:04:71:8d:a1:c7:30:08:28:ce:59:29:a7:cc:51:ab:48: 6e:75:10:4f:84:2f:b6:d2:85:a5:ac:a4:80:a8:ee:98:5b:5e: a1:60:92:58:95:08:02:da:bf:05:16:61:2d:b6:d9:e8:35:08: 61:8d:65:af:f2:b3:8a:5d:94:7a:ff:16:61:20:77:c7:43:50: 68:9f:8c:46:b6:4d:33:fe:57:56:0a:81:e4:38:8c:b8:6c:a6: 7e:cb:aa:98:ff:59:31:a8:73:b6:90:b0:32:26:d8:c2:fc:13: f0:fd:5a:1d:9c:9e:7f:4a:58:e8:72:4e:cb:88:7a:42:6a:86: 0c:88:d5:4f:83:dc:7d:3d:cf:f9:03:9a:0a:38:71:e5:da:9d: 1b:25:f5:2f:cd:ae:ef:83:3f:e5:f6:21:38:3f:af:a3:a6:75: d8:d1:ef:d7 -----BEGIN CERTIFICATE----- MIIFpzCCBI+gAwIBAgIUKylM0KZxcd4nEF6J/YaLQOSjbXUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDkzMDAzMDY0N1oX DTI3MDkyOTAzMTE0N1owMzExMC8GA1UEAxMoMUQ3QzFENURGMzIyOURBQTE0OUI3 MTMxQTZBMjBEMDExNDgxRENCNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMBVZ2+mBw7V6ME0ZnaEHyvB83kkR9cvEGKnchHE/hnyni736upyesIqfTf7 SwPeSEq2R32B0kZ88Vo/Hy/v6wrCrecSkTn0vSX9M12Y5GCrZY5hLRgcmT9K3Jgs Vmzgqkh3Z9nKO9MQUE0v6CSfeHmc8wAE17i7D3QskuydO62ZaJ36OF6Rg7yS20eg fcKkj9bW99oCw0YbgloctLe34/WLjEJIyQP3qg+qGBSB7xKp2XP648pmBbeoViIf L4zpjReBqeYu6N0nuY0yfNGTizXF9aWHYZfu2KPUAZ6BNaPSzqWTt2ZFbGRBnma1 C/WsTXR8zCdmzGHgDTIVVYhpiK8CAwEAAaOCApowggKWMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFB18HV3zIp2qFJtxMaaiDQEUgdy3MB8GA1UdIwQYMBaAFKVu hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTE1NzUxNTEwMDg2NTY5MTY5NS8wLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMTU3NTE1MTAwODY1NjkxNjk1 LzAvMUQ3QzFENURGMzIyOURBQTE0OUI3MTMxQTZBMjBEMDExNDgxRENCNy5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAEr8WQwDQYJKoZIhvcNAQELBQADggEBAEbtY2rN Wx8qMdWPddywL1zZxNuEmuJJYFKvw9RoKyUnRwF45lzFWy8hgoK6wX8nuznnwezj mvDHFymAhjGNy5KJomWLXQUJFsOMI/RJto0p6HR/4V7QslZASFCmBHGNoccwCCjO WSmnzFGrSG51EE+EL7bShaWspICo7phbXqFgkliVCALavwUWYS222eg1CGGNZa/y s4pdlHr/FmEgd8dDUGifjEa2TTP+V1YKgeQ4jLhspn7Lqpj/WTGoc7aQsDIm2ML8 E/D9Wh2cnn9KWOhyTsuIekJqhgyI1U+D3H09z/kDmgo4ceXanRsl9S/Nru+DP+X2 ITg/r6OmddjR79c= -----END CERTIFICATE-----Generated at Mon Oct 12 16:13:33 2026 by rpki-client