Certificate

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8C1BF16D482831971E03C6723A58EC7298BAC527.cer
File:                     8C1BF16D482831971E03C6723A58EC7298BAC527.cer (raw, json)
Hash identifier:          9/3JplxJ4V/0z+dPAvb+Holg90MkAxGMIU3pvY3jE6Q=
Subject key identifier:   8C:1B:F1:6D:48:28:31:97:1E:03:C6:72:3A:58:EC:72:98:BA:C5:27
Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10
Certificate issuer:       /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710
Certificate serial:       0FF5120AE212C13B217A126514B33F062365963A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
Manifest:                 rsync://rpki-rps.cnnic.cn/repo/A1112627356737994771/0/8C1BF16D482831971E03C6723A58EC7298BAC527.mft
caRepository:             rsync://rpki-rps.cnnic.cn/repo/A1112627356737994771/0/
Notify URL:               https://rrdp-rps.cnnic.cn/rrdp/notification.xml
Certificate not before:   Fri 29 May 2026 06:18:55 +0000
Certificate not after:    Fri 28 May 2027 06:23:55 +0000
Subordinate resources:    AS: 56010
                          IP: 103.29.136.0/22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 May 2026 15:28:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:f5:12:0a:e2:12:c1:3b:21:7a:12:65:14:b3:3f:06:23:65:96:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710
        Validity
            Not Before: May 29 06:18:55 2026 GMT
            Not After : May 28 06:23:55 2027 GMT
        Subject: CN=8C1BF16D482831971E03C6723A58EC7298BAC527
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:68:0b:5b:3d:1a:b6:d8:88:b3:b3:87:53:b9:
                    21:f7:df:4f:c8:66:d3:26:8a:f4:dd:d5:e0:c2:d4:
                    f8:7d:52:67:0d:10:ad:d4:4f:09:1e:90:2a:b9:fa:
                    ae:92:d7:0b:6c:91:96:a6:87:fb:7b:36:15:b5:fe:
                    9a:ba:84:fb:1d:2f:50:31:96:2c:53:be:79:e1:29:
                    29:4f:fb:bc:6a:c8:8a:79:bc:5d:81:c5:81:bc:09:
                    b3:b7:4d:ba:24:01:c5:c1:0f:9b:fe:06:82:c0:6d:
                    0d:2d:fd:06:0e:60:1b:3f:cb:4f:f3:31:df:25:88:
                    b5:6e:62:4d:42:7a:f5:9e:3c:00:b3:b3:dc:b7:8f:
                    4d:b5:1b:44:8a:a7:4a:27:c7:50:ef:d4:96:bc:99:
                    5b:20:04:00:09:c6:00:84:4e:e7:3e:ca:fe:5a:2f:
                    85:82:96:5e:0c:e4:ea:83:8e:ee:16:8f:52:0c:5b:
                    9a:1d:71:33:b5:4e:8f:d5:7d:9a:a8:fc:2f:82:83:
                    16:c4:9f:01:41:2b:52:52:ac:42:ec:17:b4:35:c4:
                    bd:8d:03:c4:c5:9d:d2:16:7d:6b:2f:d0:f9:8f:ff:
                    fb:e8:b1:29:0b:10:5c:96:d6:55:45:67:87:f9:f0:
                    c3:ab:ba:4a:8a:14:1c:99:65:43:a5:98:c1:ea:75:
                    f2:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                8C:1B:F1:6D:48:28:31:97:1E:03:C6:72:3A:58:EC:72:98:BA:C5:27
            X509v3 Authority Key Identifier:
                keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1112627356737994771/0/
                RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1112627356737994771/0/8C1BF16D482831971E03C6723A58EC7298BAC527.mft
                RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.29.136.0/22

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  56010

    Signature Algorithm: sha256WithRSAEncryption
         3b:da:89:51:0e:16:37:9d:60:b1:cb:6f:df:60:a9:e9:3b:19:
         ff:25:17:cf:95:ff:34:3f:0d:48:63:3c:46:aa:5a:bd:82:98:
         cc:38:7c:a8:89:58:77:80:68:00:8d:ae:9d:81:8a:19:53:60:
         84:06:a1:81:d5:e5:73:3f:1d:ca:e6:a1:66:7e:ec:35:72:80:
         c0:85:ef:55:53:0b:09:09:93:75:dc:52:b2:9b:79:62:b5:a9:
         98:ed:97:57:39:34:f2:16:b0:cc:a1:d4:b8:e1:2b:81:89:5f:
         19:25:48:c0:8d:52:22:15:14:1d:45:6c:3f:05:f7:63:4a:ed:
         e5:dd:ba:4c:e3:04:be:c8:54:0e:2b:03:8f:98:f4:cb:10:18:
         1f:b7:8b:9f:8e:fc:b8:fb:c5:ae:db:93:82:0f:e9:2d:7f:e0:
         ae:f3:eb:f9:b0:fb:d5:ef:59:ad:b5:5d:09:c7:b5:59:79:fc:
         ed:0d:d1:a3:45:3b:11:e9:b5:c7:3f:16:b0:68:7e:e6:e9:c2:
         db:9d:fb:da:ee:3e:12:f5:48:51:71:ed:a2:26:57:63:c4:c7:
         83:51:fd:42:53:49:ab:44:27:1d:76:34:7c:5d:d2:5f:ba:13:
         6f:a9:d9:bd:38:10:8d:ee:c9:92:b7:e1:ab:eb:10:13:2c:d3:
         0a:99:a7:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 29 21:12:21 2026 by rpki-client