$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1557B2F78A0F8ACA63B4BED7564D19B79B69FFED.cer File: 1557B2F78A0F8ACA63B4BED7564D19B79B69FFED.cer (raw, json) Hash identifier: foYYU8DPiaNarZ4Tvyd3Z66GLzXCrQ9nQh7Ok4slIvI= Subject key identifier: 15:57:B2:F7:8A:0F:8A:CA:63:B4:BE:D7:56:4D:19:B7:9B:69:FF:ED Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Certificate serial: 7B21041EC429A58ECAE7E9922BAF635780879845 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1146998263128260653/0/1557B2F78A0F8ACA63B4BED7564D19B79B69FFED.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1146998263128260653/0/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Tue 01 Sep 2026 02:36:37 +0000 Certificate not after: Tue 31 Aug 2027 02:41:37 +0000 Subordinate resources: AS: 146780 IP: 123.103.24.0/22 IP: 203.130.32.0/23 IP: 220.243.138.0/24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 13 Sep 2026 00:32:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:21:04:1e:c4:29:a5:8e:ca:e7:e9:92:2b:af:63:57:80:87:98:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Validity Not Before: Sep 1 02:36:37 2026 GMT Not After : Aug 31 02:41:37 2027 GMT Subject: CN=1557B2F78A0F8ACA63B4BED7564D19B79B69FFED Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:18:a0:57:27:9a:3e:87:40:2a:cb:9f:28:52: 16:67:f9:4f:82:d3:0f:e7:e4:fa:66:43:82:a2:83: 34:b8:17:27:33:3c:05:89:3d:89:ef:cb:d9:e3:7f: 0e:0e:e8:8b:7a:59:98:5c:a3:bf:1b:94:69:8d:55: 14:64:8d:b7:f2:42:0f:5f:c3:e2:41:e7:e2:2c:aa: 37:ed:73:9b:81:f5:cc:87:26:a9:e0:cf:09:45:5c: e0:6e:70:29:51:2e:d7:6c:10:e4:17:eb:10:92:1e: 2b:86:65:d9:13:e9:df:3e:a5:3d:fa:9d:de:59:91: cd:5e:fe:d0:63:ce:a6:b8:7e:c1:d4:ab:f4:33:4d: 16:e4:7e:89:1a:88:fe:10:75:82:11:39:40:df:1a: 3c:76:61:1a:08:5e:06:7d:b0:12:a2:f1:58:23:b1: 54:8e:bb:38:e3:d1:fc:03:af:25:3b:6c:ad:22:12: ef:dd:43:be:ac:f2:bd:10:9e:76:a1:8b:f0:c2:30: 5e:ea:71:fb:c1:4d:e8:d0:c3:ca:f4:38:80:4d:d3: a8:1e:0e:dc:1f:2a:4b:e7:6a:71:5b:a6:fb:26:c1: 11:92:ff:ab:7b:6b:80:15:ac:d6:18:05:bc:06:a0: 8c:24:c2:36:8d:ce:12:9a:a4:25:c1:35:4c:9b:8b: a0:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 15:57:B2:F7:8A:0F:8A:CA:63:B4:BE:D7:56:4D:19:B7:9B:69:FF:ED X509v3 Authority Key Identifier: keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1146998263128260653/0/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1146998263128260653/0/1557B2F78A0F8ACA63B4BED7564D19B79B69FFED.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 123.103.24.0/22 203.130.32.0/23 220.243.138.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 146780 Signature Algorithm: sha256WithRSAEncryption 7a:50:6e:1a:07:89:48:61:a9:40:00:aa:db:3a:49:9a:92:74: 6f:90:6b:19:d3:5f:81:71:7e:24:54:7d:38:51:b0:45:04:06: 90:59:d6:d9:5a:39:e5:d8:d1:28:31:ba:0d:6b:f6:09:26:9b: 8c:42:9d:70:27:a8:ba:d9:1c:f0:68:ca:fe:ff:17:bb:5f:f5: c6:f9:17:48:b0:41:96:e2:ae:20:73:0d:e4:7e:e0:7b:ad:c8: 67:57:4f:7e:9c:af:8b:13:1d:db:e3:1b:65:d9:28:ff:c5:67: 58:ed:a3:37:91:65:8b:90:ba:04:c0:06:3d:39:13:9e:23:d0: 6d:1e:61:cd:fe:56:a0:58:a3:d0:d1:65:fb:1b:cf:e6:67:0c: 27:6e:c7:4a:ba:9e:87:9b:e7:80:8a:98:78:ce:c9:e2:0b:e4: 79:8b:b4:4f:7c:99:ac:08:9b:40:4b:d2:da:aa:75:08:9f:f3: 41:2a:e2:79:5c:62:a1:6c:dc:70:ba:dc:fa:e8:a9:45:21:f3: 11:37:1b:99:aa:68:a3:0d:b8:2c:ff:b7:45:3c:70:b6:07:28: 39:2d:35:d7:71:ee:50:de:ab:01:6c:4b:06:cd:b4:c4:db:2b: 7a:14:ad:5f:0b:92:b2:7f:1f:4b:00:d4:cc:98:7a:01:5f:6e: 8f:6c:d6:53 -----BEGIN CERTIFICATE----- MIIFzzCCBLegAwIBAgIUeyEEHsQppY7K5+mSK69jV4CHmEUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDkwMTAyMzYzN1oX DTI3MDgzMTAyNDEzN1owMzExMC8GA1UEAxMoMTU1N0IyRjc4QTBGOEFDQTYzQjRC RUQ3NTY0RDE5Qjc5QjY5RkZFRDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALIYoFcnmj6HQCrLnyhSFmf5T4LTD+fk+mZDgqKDNLgXJzM8BYk9ie/L2eN/ Dg7oi3pZmFyjvxuUaY1VFGSNt/JCD1/D4kHn4iyqN+1zm4H1zIcmqeDPCUVc4G5w KVEu12wQ5BfrEJIeK4Zl2RPp3z6lPfqd3lmRzV7+0GPOprh+wdSr9DNNFuR+iRqI /hB1ghE5QN8aPHZhGgheBn2wEqLxWCOxVI67OOPR/AOvJTtsrSIS791DvqzyvRCe dqGL8MIwXupx+8FN6NDDyvQ4gE3TqB4O3B8qS+dqcVum+ybBEZL/q3trgBWs1hgF vAagjCTCNo3OEpqkJcE1TJuLoAUCAwEAAaOCAsIwggK+MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFBVXsveKD4rKY7S+11ZNGbebaf/tMB8GA1UdIwQYMBaAFKVu hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTE0Njk5ODI2MzEyODI2MDY1My8wLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMTQ2OTk4MjYzMTI4MjYwNjUz LzAvMTU1N0IyRjc4QTBGOEFDQTYzQjRCRUQ3NTY0RDE5Qjc5QjY5RkZFRC5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwKwYIKwYBBQUH AQcBAf8EHDAaMBgEAgABMBIDBAJ7ZxgDBAHLgiADBADc84owGgYIKwYBBQUHAQgB Af8ECzAJoAcwBQIDAj1cMA0GCSqGSIb3DQEBCwUAA4IBAQB6UG4aB4lIYalAAKrb OkmaknRvkGsZ01+BcX4kVH04UbBFBAaQWdbZWjnl2NEoMboNa/YJJpuMQp1wJ6i6 2RzwaMr+/xe7X/XG+RdIsEGW4q4gcw3kfuB7rchnV09+nK+LEx3b4xtl2Sj/xWdY 7aM3kWWLkLoEwAY9OROeI9BtHmHN/lagWKPQ0WX7G8/mZwwnbsdKup6Hm+eAiph4 zsniC+R5i7RPfJmsCJtAS9LaqnUIn/NBKuJ5XGKhbNxwutz66KlFIfMRNxuZqmij Dbgs/7dFPHC2Byg5LTXXce5Q3qsBbEsGzbTE2yt6FK1fC5Kyfx9LANTMmHoBX26P bNZT -----END CERTIFICATE-----Generated at Thu Sep 10 15:12:06 2026 by rpki-client