$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1BF077990B3EF2F79478B657B4C3AF7BDEB8F260.cer File: 1BF077990B3EF2F79478B657B4C3AF7BDEB8F260.cer (raw, json) Hash identifier: T3hWzH58Xpwnch/S9pU5kalH4tPSJ3foKESNJtw6HqU= Subject key identifier: 1B:F0:77:99:0B:3E:F2:F7:94:78:B6:57:B4:C3:AF:7B:DE:B8:F2:60 Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Certificate serial: 6A91C2D757AC69058F4B66EB0733F5E416B5CD4A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1065583221972402179/0/1BF077990B3EF2F79478B657B4C3AF7BDEB8F260.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1065583221972402179/0/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Fri 29 May 2026 01:27:07 +0000 Certificate not after: Fri 28 May 2027 01:32:07 +0000 Subordinate resources: AS: 139139 IP: 103.152.186.0/23 IP: 2406:3340::/32 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 15:28:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:91:c2:d7:57:ac:69:05:8f:4b:66:eb:07:33:f5:e4:16:b5:cd:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Validity Not Before: May 29 01:27:07 2026 GMT Not After : May 28 01:32:07 2027 GMT Subject: CN=1BF077990B3EF2F79478B657B4C3AF7BDEB8F260 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:e7:13:a8:1a:73:83:11:8e:22:89:0c:eb:b3: 0f:18:9c:04:c1:ec:0e:0a:b9:08:91:f4:ac:84:23: cf:35:a0:c5:0a:7e:3b:91:9e:b8:4a:4e:83:7b:ea: 9e:2a:3e:62:08:f8:8d:db:70:31:5e:d1:9e:27:ae: 25:e8:f9:70:0c:47:f5:59:16:fa:3e:2e:46:f0:c9: cd:96:19:ef:3a:b8:ff:94:89:fe:90:a7:c1:80:8b: c4:54:31:ef:c8:d8:a0:0d:ac:2d:c6:0c:de:06:73: f6:a0:63:4e:9f:89:63:43:59:c6:65:12:38:29:f3: 68:e7:7a:60:db:f0:b6:de:0a:9d:bf:0b:c1:ed:48: 70:17:f4:38:f8:d9:eb:2a:f4:1e:6a:af:f9:c1:4f: 83:d0:54:a9:c8:3e:da:6e:c2:e4:f3:b0:88:a2:1d: 25:e6:c2:a0:62:2c:b7:f0:f0:67:d4:24:30:9b:db: 00:0c:a7:cf:c1:06:4f:1d:97:69:96:df:fa:d8:e3: b0:f4:e8:1e:56:91:f6:50:fd:1f:da:9c:05:a7:e2: 19:52:be:dd:ba:20:f3:c6:22:8f:ec:07:2f:1c:9b: 72:85:e2:68:bf:23:11:36:9c:a6:73:b1:a3:04:dc: 65:b9:83:76:7b:3c:00:3b:7b:8b:d5:43:c8:6e:44: 28:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 1B:F0:77:99:0B:3E:F2:F7:94:78:B6:57:B4:C3:AF:7B:DE:B8:F2:60 X509v3 Authority Key Identifier: keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1065583221972402179/0/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1065583221972402179/0/1BF077990B3EF2F79478B657B4C3AF7BDEB8F260.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.152.186.0/23 IPv6: 2406:3340::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 139139 Signature Algorithm: sha256WithRSAEncryption 35:a0:31:3d:df:3d:20:a8:be:79:12:83:ff:36:d0:d7:67:2b: 71:ce:54:2e:3b:bf:ba:9d:7e:e2:78:32:74:81:e3:6c:d0:e0: 2c:9f:fd:19:56:05:97:f8:99:8d:1a:85:20:f6:f4:bb:55:bf: c2:30:b3:3b:32:8a:2c:c8:28:55:b0:16:5a:1c:16:62:0b:10: ba:71:14:26:87:01:7f:f8:22:8b:6a:0e:98:7b:48:76:52:4e: fe:13:d8:62:fd:98:93:b9:b5:e0:b1:94:2b:04:a4:58:9e:57: a0:ca:4e:c5:1c:31:1a:a3:c9:7c:08:44:f3:66:bc:bf:a6:7e: e1:c9:9f:b2:52:23:f2:85:a0:2c:28:bb:fe:d5:c4:4f:c6:5b: 49:02:c5:ff:5c:fe:69:33:8c:a5:5c:91:af:e8:0a:09:5d:22: c1:77:94:49:cc:0e:99:2e:ce:17:b1:bf:8b:a0:54:ed:55:5a: 4f:00:b5:25:ff:9e:e3:21:96:3c:04:e1:63:e9:52:65:0b:13: 81:9f:08:4a:59:21:68:1c:ee:a1:71:07:7e:de:06:05:83:a2: 12:0e:a1:f9:f7:66:42:f8:f6:09:c7:65:76:74:70:df:b2:e4: 65:85:5c:70:f5:bf:a5:a2:d5:e9:6b:1b:69:31:56:f5:40:a6: 3f:0a:35:d4 -----BEGIN CERTIFICATE----- MIIF0jCCBLqgAwIBAgIUapHC11esaQWPS2brBzP15Ba1zUowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDUyOTAxMjcwN1oX DTI3MDUyODAxMzIwN1owMzExMC8GA1UEAxMoMUJGMDc3OTkwQjNFRjJGNzk0NzhC NjU3QjRDM0FGN0JERUI4RjI2MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAPTnE6gac4MRjiKJDOuzDxicBMHsDgq5CJH0rIQjzzWgxQp+O5GeuEpOg3vq nio+Ygj4jdtwMV7RnieuJej5cAxH9VkW+j4uRvDJzZYZ7zq4/5SJ/pCnwYCLxFQx 78jYoA2sLcYM3gZz9qBjTp+JY0NZxmUSOCnzaOd6YNvwtt4Knb8Lwe1IcBf0OPjZ 6yr0Hmqv+cFPg9BUqcg+2m7C5POwiKIdJebCoGIst/DwZ9QkMJvbAAynz8EGTx2X aZbf+tjjsPToHlaR9lD9H9qcBafiGVK+3bog88Yij+wHLxybcoXiaL8jETacpnOx owTcZbmDdns8ADt7i9VDyG5EKIUCAwEAAaOCAsUwggLBMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFBvwd5kLPvL3lHi2V7TDr3veuPJgMB8GA1UdIwQYMBaAFKVu hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTA2NTU4MzIyMTk3MjQwMjE3OS8wLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDY1NTgzMjIxOTcyNDAyMTc5 LzAvMUJGMDc3OTkwQjNFRjJGNzk0NzhCNjU3QjRDM0FGN0JERUI4RjI2MC5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUH AQcBAf8EHzAdMAwEAgABMAYDBAFnmLowDQQCAAIwBwMFACQGM0AwGgYIKwYBBQUH AQgBAf8ECzAJoAcwBQIDAh+DMA0GCSqGSIb3DQEBCwUAA4IBAQA1oDE93z0gqL55 EoP/NtDXZytxzlQuO7+6nX7ieDJ0geNs0OAsn/0ZVgWX+JmNGoUg9vS7Vb/CMLM7 MoosyChVsBZaHBZiCxC6cRQmhwF/+CKLag6Ye0h2Uk7+E9hi/ZiTubXgsZQrBKRY nlegyk7FHDEao8l8CETzZry/pn7hyZ+yUiPyhaAsKLv+1cRPxltJAsX/XP5pM4yl XJGv6AoJXSLBd5RJzA6ZLs4Xsb+LoFTtVVpPALUl/57jIZY8BOFj6VJlCxOBnwhK WSFoHO6hcQd+3gYFg6ISDqH592ZC+PYJx2V2dHDfsuRlhVxw9b+lotXpaxtpMVb1 QKY/CjXU -----END CERTIFICATE-----Generated at Fri May 29 21:14:00 2026 by rpki-client