$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.cer File: 77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.cer (raw, json) Hash identifier: s/qJUCVqcwUaY8G+srlkUY0wAA3WKRglZOSZ0qyEdl4= Subject key identifier: 77:F1:2F:CF:BD:1F:1C:5E:E5:41:02:A6:63:E2:46:A6:B3:18:AB:F9 Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Certificate serial: 2E4A7B3AA78DC613461F7AC3B7EC1B63426DA065 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1095974252194103297/0/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1095974252194103297/0/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Thu 24 Sep 2026 07:45:05 +0000 Certificate not after: Thu 23 Sep 2027 07:50:05 +0000 Subordinate resources: AS: 131568 IP: 45.251.8.0/22 IP: 101.251.160.0/19 IP: 103.5.168.0/22 IP: 103.219.176.0/22 IP: 103.223.16.0/20 IP: 150.242.80.0/22 IP: 180.188.32.0/20 IP: 202.41.200.0/22 IP: 2405:6880::/32 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 Oct 2026 09:52:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:4a:7b:3a:a7:8d:c6:13:46:1f:7a:c3:b7:ec:1b:63:42:6d:a0:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Validity Not Before: Sep 24 07:45:05 2026 GMT Not After : Sep 23 07:50:05 2027 GMT Subject: CN=77F12FCFBD1F1C5EE54102A663E246A6B318ABF9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:e7:15:ef:73:5d:90:99:84:92:ad:55:f8:77: 2e:7f:c4:b6:8f:1f:7e:08:93:e0:99:10:93:5b:ee: 5c:be:a0:d3:b5:f5:e8:e9:bd:5f:e3:0c:d1:12:21: ca:9d:dc:56:10:19:5a:fd:7d:09:e6:2d:c9:1b:32: 66:75:02:f2:2c:2b:4a:b6:e5:c9:4d:c5:ad:e3:f7: ca:a8:f0:a6:24:2a:af:65:3d:a9:63:57:b3:60:c9: 0e:70:e5:6f:90:50:2e:1b:91:74:10:69:d0:cf:86: 49:7b:ea:17:4f:56:37:36:88:81:4c:5e:d2:97:07: 59:4f:42:74:3c:f8:02:80:c1:7c:8b:4f:87:d4:be: ff:ca:55:11:ac:34:75:59:de:06:34:17:b9:6c:e9: 09:70:69:44:b1:e6:27:9b:86:23:d4:93:f0:86:34: c9:25:21:12:4a:3d:24:38:15:04:00:a8:1f:2c:c0: b2:df:f4:ef:63:1b:99:4b:0c:71:3c:53:05:f1:46: 51:18:48:08:e6:12:84:58:46:5b:b0:bc:b4:3c:47: 28:75:b2:bf:9f:77:32:8a:76:6b:a7:05:9f:67:df: 72:c0:e9:d2:ae:7d:4b:73:f2:1e:60:ef:34:e5:90: 37:84:31:88:a0:eb:48:1b:70:27:1a:8b:38:2c:70: 49:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 77:F1:2F:CF:BD:1F:1C:5E:E5:41:02:A6:63:E2:46:A6:B3:18:AB:F9 X509v3 Authority Key Identifier: keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1095974252194103297/0/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1095974252194103297/0/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.251.8.0/22 101.251.160.0/19 103.5.168.0/22 103.219.176.0/22 103.223.16.0/20 150.242.80.0/22 180.188.32.0/20 202.41.200.0/22 IPv6: 2405:6880::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 131568 Signature Algorithm: sha256WithRSAEncryption 38:b8:ea:f6:1d:dc:3e:8f:ac:d0:db:9d:61:bd:80:95:f7:21: 2c:06:28:21:13:69:d1:7c:5c:49:d5:c0:9b:9f:a1:b4:b8:47: 09:fd:79:63:8e:cc:3e:2b:04:5b:09:ab:f6:c0:88:ed:41:b4: 02:d8:c2:ae:1f:6d:62:d0:23:c3:e6:4b:2b:8b:7f:ba:2b:82: f0:34:c3:d4:ef:1f:bb:ae:a6:ff:ff:2c:bc:29:06:9e:85:be: 47:6c:50:e7:da:ce:8d:e8:bc:03:0c:6c:71:64:e2:df:7f:34: 66:e0:70:51:9d:89:97:4b:98:d6:9c:a7:bb:60:68:86:3c:13: ca:e6:13:ee:56:a3:a4:81:cb:88:7f:f6:c0:3b:e2:97:75:e2: 39:e6:fe:a2:ab:94:55:29:70:4b:9a:f2:5a:c5:d9:80:35:46: 90:46:60:ab:63:38:cf:30:e9:94:d3:6d:06:66:b5:a1:12:f1: 62:9f:f8:e4:6b:51:44:9c:ca:0d:f0:3b:a2:21:c4:d6:ed:86: 08:39:42:3f:39:24:ec:f3:44:05:dd:5a:fd:6d:a1:13:63:1b: c8:99:46:34:5c:bc:06:1a:b3:6a:46:55:f5:b5:dc:2a:fb:dc: 29:78:1d:4f:50:d1:a6:cf:ee:99:9e:2d:a4:e4:3a:ec:70:2d: 83:68:fe:db -----BEGIN CERTIFICATE----- MIIF/DCCBOSgAwIBAgIULkp7OqeNxhNGH3rDt+wbY0JtoGUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDkyNDA3NDUwNVoX DTI3MDkyMzA3NTAwNVowMzExMC8GA1UEAxMoNzdGMTJGQ0ZCRDFGMUM1RUU1NDEw MkE2NjNFMjQ2QTZCMzE4QUJGOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALrnFe9zXZCZhJKtVfh3Ln/Eto8ffgiT4JkQk1vuXL6g07X16Om9X+MM0RIh yp3cVhAZWv19CeYtyRsyZnUC8iwrSrblyU3FreP3yqjwpiQqr2U9qWNXs2DJDnDl b5BQLhuRdBBp0M+GSXvqF09WNzaIgUxe0pcHWU9CdDz4AoDBfItPh9S+/8pVEaw0 dVneBjQXuWzpCXBpRLHmJ5uGI9ST8IY0ySUhEko9JDgVBACoHyzAst/072MbmUsM cTxTBfFGURhICOYShFhGW7C8tDxHKHWyv593Mop2a6cFn2ffcsDp0q59S3PyHmDv NOWQN4QxiKDrSBtwJxqLOCxwSaECAwEAAaOCAu8wggLrMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFHfxL8+9Hxxe5UECpmPiRqazGKv5MB8GA1UdIwQYMBaAFKVu hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTA5NTk3NDI1MjE5NDEwMzI5Ny8wLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDk1OTc0MjUyMTk0MTAzMjk3 LzAvNzdGMTJGQ0ZCRDFGMUM1RUU1NDEwMkE2NjNFMjQ2QTZCMzE4QUJGOS5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwWAYIKwYBBQUH AQcBAf8ESTBHMDYEAgABMDADBAIt+wgDBAVl+6ADBAJnBagDBAJn27ADBARn3xAD BAKW8lADBAS0vCADBALKKcgwDQQCAAIwBwMFACQFaIAwGgYIKwYBBQUHAQgBAf8E CzAJoAcwBQIDAgHwMA0GCSqGSIb3DQEBCwUAA4IBAQA4uOr2Hdw+j6zQ251hvYCV 9yEsBighE2nRfFxJ1cCbn6G0uEcJ/Xljjsw+KwRbCav2wIjtQbQC2MKuH21i0CPD 5ksri3+6K4LwNMPU7x+7rqb//yy8KQaehb5HbFDn2s6N6LwDDGxxZOLffzRm4HBR nYmXS5jWnKe7YGiGPBPK5hPuVqOkgcuIf/bAO+KXdeI55v6iq5RVKXBLmvJaxdmA NUaQRmCrYzjPMOmU020GZrWhEvFin/jka1FEnMoN8DuiIcTW7YYIOUI/OSTs80QF 3Vr9baETYxvImUY0XLwGGrNqRlX1tdwq+9wpeB1PUNGmz+6Zni2k5DrscC2DaP7b -----END CERTIFICATE-----Generated at Sun Oct 11 10:13:46 2026 by rpki-client