$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/0/1E0C6D40B86B2CC5DEFEDF8E42F6BA8451C6F077.cer File: 1E0C6D40B86B2CC5DEFEDF8E42F6BA8451C6F077.cer (raw, json) Hash identifier: 1G8T9LfH19EiRCT3wtB+rgHFcrAyrshKMoO4Voqarfs= Subject key identifier: 1E:0C:6D:40:B8:6B:2C:C5:DE:FE:DF:8E:42:F6:BA:84:51:C6:F0:77 Authority key identifier: CB:02:14:A5:C4:04:D6:F8:40:43:3B:12:0C:AC:BB:5B:8C:59:E6:13 Certificate issuer: /CN=A9162E3D0001/serialNumber=CB0214A5C404D6F840433B120CACBB5B8C59E613 Certificate serial: 382628D384E550F3EAB2138A5B1B259ABF0F1DB4 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/1/1E0C6D40B86B2CC5DEFEDF8E42F6BA8451C6F077.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/1/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Fri 29 May 2026 09:01:59 +0000 Certificate not after: Fri 28 May 2027 09:06:59 +0000 Subordinate resources: IP: 140.210.16.0/20 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Jun 2026 13:43:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:26:28:d3:84:e5:50:f3:ea:b2:13:8a:5b:1b:25:9a:bf:0f:1d:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=CB0214A5C404D6F840433B120CACBB5B8C59E613 Validity Not Before: May 29 09:01:59 2026 GMT Not After : May 28 09:06:59 2027 GMT Subject: CN=1E0C6D40B86B2CC5DEFEDF8E42F6BA8451C6F077 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:8b:f1:9d:e6:8b:74:ce:ec:ba:06:cf:67:4c: e9:e0:04:46:18:c0:f9:ed:98:d1:6a:3a:0b:27:65: 8d:53:0f:8d:2e:97:3d:cf:64:0c:c4:8c:f4:19:af: 4d:e1:9e:6d:26:8b:af:88:bd:08:b4:07:50:3e:97: 7f:20:e5:2d:ae:68:22:30:e1:37:b4:54:5a:ba:8d: 8d:9a:0e:5e:ea:e1:f6:9b:9c:98:61:b4:59:f1:a2: 0d:5b:92:17:4e:68:c1:cc:64:66:8c:4d:43:fa:fc: 77:af:0d:3b:21:70:2d:bb:cd:fa:5b:ab:aa:63:2b: d1:76:67:f3:b7:76:e1:79:d2:af:6a:b9:9b:5a:93: a8:90:0c:86:a7:4a:3f:5f:ec:1d:b8:85:ea:4e:79: 0b:e6:a5:f5:af:6b:ae:87:7e:c1:c8:1c:7d:cf:d1: 5e:73:3a:5c:b5:70:ec:15:cf:24:b4:39:7b:3d:da: 82:91:b8:8a:85:17:72:6f:46:4e:15:b2:96:19:08: 80:91:92:90:cb:13:5d:f9:03:f5:36:91:cf:60:11: 62:e4:be:cc:9e:8e:4e:e1:f3:53:1c:90:e7:d1:b5: 23:8e:5a:11:7a:39:2d:3f:34:07:f6:b7:99:e2:57: c7:a6:a4:03:13:62:19:b8:47:20:7b:e4:9a:af:86: 5a:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 1E:0C:6D:40:B8:6B:2C:C5:DE:FE:DF:8E:42:F6:BA:84:51:C6:F0:77 X509v3 Authority Key Identifier: keyid:CB:02:14:A5:C4:04:D6:F8:40:43:3B:12:0C:AC:BB:5B:8C:59:E6:13 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/1/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/1/1E0C6D40B86B2CC5DEFEDF8E42F6BA8451C6F077.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 140.210.16.0/20 Signature Algorithm: sha256WithRSAEncryption 29:22:e0:63:05:7f:48:79:5a:68:eb:dd:fe:66:8c:85:50:54: a3:87:cb:18:fd:0c:9c:60:33:28:24:1c:26:82:6e:fb:b1:f3: ed:90:5a:09:37:5f:42:21:d3:2b:0c:55:c4:24:03:c7:5a:52: 76:cf:d9:de:f9:2e:e3:3e:f7:5e:65:b1:36:32:5d:ab:60:b8: 7c:19:da:dc:9d:2b:69:87:cb:bc:84:4e:a8:0b:81:9c:f6:c9: 2b:36:ab:ce:f6:e4:09:40:46:43:c3:88:7e:6c:ae:78:81:98: 57:2c:98:0b:cd:f5:26:a5:87:fa:ea:d2:cf:59:57:a7:b6:92: 92:06:0e:a9:45:e3:93:20:ed:1b:c5:d5:07:d1:cb:64:05:d1: db:fe:5e:45:cf:9d:fd:b5:19:28:37:fa:55:88:b9:63:76:b9: c8:46:4f:6a:61:88:e1:c7:8f:14:27:b7:04:ea:77:94:f5:7f: 76:58:65:78:c3:71:44:77:59:60:e2:e5:77:64:0c:b8:c4:af: db:d7:a9:88:f0:91:25:b8:b7:8f:e6:be:2a:2d:cc:9a:ef:6e: 87:cb:14:7a:50:33:cc:2b:3f:74:8c:63:67:7d:f6:37:d2:ab: e7:01:a5:ee:b5:b9:07:ef:8f:ea:8b:2d:dd:e6:c2:86:3e:88: a1:9b:79:74 -----BEGIN CERTIFICATE----- MIIFpzCCBI+gAwIBAgIUOCYo04TlUPPqshOKWxslmr8PHbQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhDQjAyMTRBNUM0 MDRENkY4NDA0MzNCMTIwQ0FDQkI1QjhDNTlFNjEzMB4XDTI2MDUyOTA5MDE1OVoX DTI3MDUyODA5MDY1OVowMzExMC8GA1UEAxMoMUUwQzZENDBCODZCMkNDNURFRkVE RjhFNDJGNkJBODQ1MUM2RjA3NzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALGL8Z3mi3TO7LoGz2dM6eAERhjA+e2Y0Wo6CydljVMPjS6XPc9kDMSM9Bmv TeGebSaLr4i9CLQHUD6XfyDlLa5oIjDhN7RUWrqNjZoOXurh9pucmGG0WfGiDVuS F05owcxkZoxNQ/r8d68NOyFwLbvN+lurqmMr0XZn87d24XnSr2q5m1qTqJAMhqdK P1/sHbiF6k55C+al9a9rrod+wcgcfc/RXnM6XLVw7BXPJLQ5ez3agpG4ioUXcm9G ThWylhkIgJGSkMsTXfkD9TaRz2ARYuS+zJ6OTuHzUxyQ59G1I45aEXo5LT80B/a3 meJXx6akAxNiGbhHIHvkmq+GWiECAwEAAaOCApowggKWMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFB4MbUC4ayzF3v7fjkL2uoRRxvB3MB8GA1UdIwQYMBaAFMsC FKXEBNb4QEM7Egysu1uMWeYTMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMC9DQjAyMTRBNUM0MDRENkY4NDA0MzNCMTIwQ0FDQkI1QjhDNTlF NjEzLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CM0EyNEYyMDFENjYxMUUyOEFDODgzN0M3 MkZEMUZGMi95d0lVcGNRRTF2aEFRenNTREt5N1c0eFo1aE0uY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTA2NTU3OTc5NjcxNDgxNTQ4OS8xLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDY1NTc5Nzk2NzE0ODE1NDg5 LzEvMUUwQzZENDBCODZCMkNDNURFRkVERjhFNDJGNkJBODQ1MUM2RjA3Ny5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBASM0hAwDQYJKoZIhvcNAQELBQADggEBACki4GMF f0h5Wmjr3f5mjIVQVKOHyxj9DJxgMygkHCaCbvux8+2QWgk3X0Ih0ysMVcQkA8da UnbP2d75LuM+915lsTYyXatguHwZ2tydK2mHy7yETqgLgZz2ySs2q8725AlARkPD iH5srniBmFcsmAvN9Salh/rq0s9ZV6e2kpIGDqlF45Mg7RvF1QfRy2QF0dv+XkXP nf21GSg3+lWIuWN2uchGT2phiOHHjxQntwTqd5T1f3ZYZXjDcUR3WWDi5XdkDLjE r9vXqYjwkSW4t4/mviotzJrvbofLFHpQM8wrP3SMY2d99jfSq+cBpe61uQfvj+qL Ld3mwoY+iKGbeXQ= -----END CERTIFICATE-----Generated at Thu Jun 4 14:11:15 2026 by rpki-client