$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1A5D93C2B21C390D054872B547EF671BC1112ED5.cer File: 1A5D93C2B21C390D054872B547EF671BC1112ED5.cer (raw, json) Hash identifier: XU8Wd3YG+z555KtKBoyxQMwygm5+2GQBamaLOWI5e6Y= Subject key identifier: 1A:5D:93:C2:B2:1C:39:0D:05:48:72:B5:47:EF:67:1B:C1:11:2E:D5 Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Certificate serial: 4CC963BFD7617054CE138A58A66260C7E5EC4915 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1065588993548353538/0/1A5D93C2B21C390D054872B547EF671BC1112ED5.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1065588993548353538/0/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Fri 29 May 2026 06:00:51 +0000 Certificate not after: Fri 28 May 2027 06:05:51 +0000 Subordinate resources: IP: 43.228.76.0/22 IP: 43.254.252.0/22 IP: 103.23.8.0/22 IP: 103.47.80.0/22 IP: 103.90.192.0/22 IP: 103.203.140.0/22 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 15:28:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:c9:63:bf:d7:61:70:54:ce:13:8a:58:a6:62:60:c7:e5:ec:49:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Validity Not Before: May 29 06:00:51 2026 GMT Not After : May 28 06:05:51 2027 GMT Subject: CN=1A5D93C2B21C390D054872B547EF671BC1112ED5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:62:67:d0:8d:24:6a:b6:78:b1:50:6a:ba:69: 6f:0d:0c:14:72:b7:08:de:bb:6d:9f:a4:76:0f:7d: f9:69:c4:9a:b4:71:2f:da:54:8b:68:cb:0d:f4:ac: 7d:54:95:c5:46:c0:63:99:f5:8b:af:78:e7:f7:8a: bc:a5:85:ec:40:5d:75:03:3d:4f:19:89:fc:e8:35: b9:bd:01:47:6d:6a:58:ce:18:5c:77:c9:64:69:3f: 70:9b:4e:9a:8e:58:4a:57:73:df:8b:18:56:46:c7: 77:cf:27:6c:61:46:4b:ba:e2:a2:b3:e9:6b:6a:34: 5e:ae:8e:d6:ea:f5:20:17:61:8c:7f:9e:8b:5f:b9: f1:38:f5:c6:09:42:8b:74:d2:35:ec:86:19:9f:e5: 05:ec:52:c3:f3:53:b5:78:b8:b2:af:09:0b:ec:23: 55:d5:25:26:03:7e:4c:c6:42:86:60:6d:64:0c:74: 97:d2:19:c6:d2:b6:6b:4b:66:59:16:21:81:03:f6: 72:7a:b4:08:f6:ea:40:7a:3a:ed:20:d1:39:0a:12: 17:70:4c:10:d6:ad:f6:8d:8e:a8:73:32:69:b4:1f: 5c:36:8d:7e:20:b9:89:3d:81:be:fc:b0:73:3f:e0: e7:dc:9c:99:ee:bc:94:0d:a2:59:bd:b3:cd:fa:b2: 76:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 1A:5D:93:C2:B2:1C:39:0D:05:48:72:B5:47:EF:67:1B:C1:11:2E:D5 X509v3 Authority Key Identifier: keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548353538/0/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548353538/0/1A5D93C2B21C390D054872B547EF671BC1112ED5.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.228.76.0/22 43.254.252.0/22 103.23.8.0/22 103.47.80.0/22 103.90.192.0/22 103.203.140.0/22 Signature Algorithm: sha256WithRSAEncryption 11:d4:d5:86:61:bc:94:6b:54:8b:fe:e8:66:ec:2e:81:ad:a1: b5:d6:f1:77:de:11:c9:a4:31:26:8f:23:a1:e0:b2:0c:e6:3a: cf:1e:38:66:98:fd:ee:1a:e5:86:dd:99:88:01:86:8e:35:40: ad:1f:40:68:ef:e3:53:84:9d:c6:a7:cf:c7:4f:ae:06:39:ad: fd:a1:f8:4e:b7:01:45:f7:c1:7d:3b:c9:17:60:09:b2:e9:66: 5e:5e:2b:4d:d2:da:7d:71:2c:0e:81:13:8c:58:13:2e:f1:bc: c0:61:0a:79:5a:dc:28:bc:2d:3e:13:38:df:f5:51:f8:9f:bd: d1:64:54:77:27:43:a2:1f:9c:8c:2c:3c:ab:3a:33:39:29:04: d3:55:d4:6a:7f:da:67:08:c7:c0:4d:9b:d4:17:82:c9:c7:54: 15:07:ab:14:ff:ff:77:e2:62:a5:0a:8a:69:a6:b7:45:a7:34: 53:74:7c:2f:40:0d:e0:f4:3a:4c:f4:11:c7:16:19:c3:2a:ab: 8f:4e:9c:8d:f6:4c:45:fc:c5:ee:95:40:b6:ca:64:8f:3c:1c: 38:16:6c:92:5b:f2:18:54:c1:65:65:fc:a6:23:5d:8e:99:1e: d2:cf:13:8d:38:89:7a:0d:33:ad:4e:45:83:4f:69:3e:3b:8c: 7a:c8:69:0d -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUTMljv9dhcFTOE4pYpmJgx+XsSRUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDUyOTA2MDA1MVoX DTI3MDUyODA2MDU1MVowMzExMC8GA1UEAxMoMUE1RDkzQzJCMjFDMzkwRDA1NDg3 MkI1NDdFRjY3MUJDMTExMkVENTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANNiZ9CNJGq2eLFQarppbw0MFHK3CN67bZ+kdg99+WnEmrRxL9pUi2jLDfSs fVSVxUbAY5n1i6945/eKvKWF7EBddQM9TxmJ/Og1ub0BR21qWM4YXHfJZGk/cJtO mo5YSldz34sYVkbHd88nbGFGS7riorPpa2o0Xq6O1ur1IBdhjH+ei1+58Tj1xglC i3TSNeyGGZ/lBexSw/NTtXi4sq8JC+wjVdUlJgN+TMZChmBtZAx0l9IZxtK2a0tm WRYhgQP2cnq0CPbqQHo67SDROQoSF3BMENat9o2OqHMyabQfXDaNfiC5iT2Bvvyw cz/g59ycme68lA2iWb2zzfqydrMCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFBpdk8KyHDkNBUhytUfvZxvBES7VMB8GA1UdIwQYMBaAFKVu hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTA2NTU4ODk5MzU0ODM1MzUzOC8wLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDY1NTg4OTkzNTQ4MzUzNTM4 LzAvMUE1RDkzQzJCMjFDMzkwRDA1NDg3MkI1NDdFRjY3MUJDMTExMkVENS5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwPQYIKwYBBQUH AQcBAf8ELjAsMCoEAgABMCQDBAIr5EwDBAIr/vwDBAJnFwgDBAJnL1ADBAJnWsAD BAJny4wwDQYJKoZIhvcNAQELBQADggEBABHU1YZhvJRrVIv+6GbsLoGtobXW8Xfe EcmkMSaPI6HgsgzmOs8eOGaY/e4a5YbdmYgBho41QK0fQGjv41OEncanz8dPrgY5 rf2h+E63AUX3wX07yRdgCbLpZl5eK03S2n1xLA6BE4xYEy7xvMBhCnla3Ci8LT4T ON/1UfifvdFkVHcnQ6IfnIwsPKs6MzkpBNNV1Gp/2mcIx8BNm9QXgsnHVBUHqxT/ /3fiYqUKimmmt0WnNFN0fC9ADeD0Okz0EccWGcMqq49OnI32TEX8xe6VQLbKZI88 HDgWbJJb8hhUwWVl/KYjXY6ZHtLPE404iXoNM61ORYNPaT47jHrIaQ0= -----END CERTIFICATE-----Generated at Fri May 29 21:14:10 2026 by rpki-client