$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/0/1CF709ED9E0B03394B9F9BEB57ED8D2C23261DF4.cer File: 1CF709ED9E0B03394B9F9BEB57ED8D2C23261DF4.cer (raw, json) Hash identifier: 1+jMmGS2GRW9HXFM8Ybo5yQk+CdLWjR0YEF3HSUkQ8E= Subject key identifier: 1C:F7:09:ED:9E:0B:03:39:4B:9F:9B:EB:57:ED:8D:2C:23:26:1D:F4 Authority key identifier: CB:02:14:A5:C4:04:D6:F8:40:43:3B:12:0C:AC:BB:5B:8C:59:E6:13 Certificate issuer: /CN=A9162E3D0001/serialNumber=CB0214A5C404D6F840433B120CACBB5B8C59E613 Certificate serial: 34D1A9F19BDA3BD9C296797BC62E22E638C48EA4 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1065585649346084866/1/1CF709ED9E0B03394B9F9BEB57ED8D2C23261DF4.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1065585649346084866/1/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Fri 29 May 2026 08:02:25 +0000 Certificate not after: Fri 28 May 2027 08:07:25 +0000 Subordinate resources: IP: 157.15.94.0/23 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 17:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:d1:a9:f1:9b:da:3b:d9:c2:96:79:7b:c6:2e:22:e6:38:c4:8e:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=CB0214A5C404D6F840433B120CACBB5B8C59E613 Validity Not Before: May 29 08:02:25 2026 GMT Not After : May 28 08:07:25 2027 GMT Subject: CN=1CF709ED9E0B03394B9F9BEB57ED8D2C23261DF4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:d2:91:59:00:f0:49:43:4f:28:93:64:4f:4d: 5d:fb:54:c0:e2:c5:a4:b3:41:1e:1f:53:3e:b7:fe: 16:7a:e1:6a:0f:2d:29:94:ad:b8:85:4f:5b:03:1b: d7:0c:c6:88:85:de:39:6d:ab:fd:f5:af:78:2a:46: 36:fd:e6:ed:ba:6b:65:1f:bb:38:e0:bf:17:cb:98: 3b:9d:e8:74:f9:70:c6:4d:30:f4:48:a9:49:ed:27: 02:14:84:c2:f1:91:02:52:df:a1:66:4c:2a:10:d8: 22:81:6a:04:8c:13:15:4d:73:e3:72:9d:3a:7e:2f: 9a:4a:56:ff:a8:bf:56:a6:f5:15:fd:a2:6d:db:95: 0d:e0:66:e8:14:d1:6b:c4:58:f9:22:c6:73:c1:8e: bf:d2:45:b9:be:f8:d8:e7:24:66:40:da:08:70:d6: 68:15:eb:3d:32:8b:42:60:05:a4:e3:26:d5:a6:2d: ae:79:72:35:27:88:ec:ed:28:df:c4:af:4b:5f:de: 37:1d:92:f8:18:28:ef:d2:ea:81:4e:d5:83:95:a4: b5:66:c0:32:f6:6b:0d:83:d6:47:91:54:a9:9e:38: 54:3a:35:84:d0:9f:e6:45:7c:11:06:fb:44:02:01: b1:bb:03:86:14:47:f6:65:e2:07:64:97:7f:35:66: b5:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 1C:F7:09:ED:9E:0B:03:39:4B:9F:9B:EB:57:ED:8D:2C:23:26:1D:F4 X509v3 Authority Key Identifier: keyid:CB:02:14:A5:C4:04:D6:F8:40:43:3B:12:0C:AC:BB:5B:8C:59:E6:13 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649346084866/1/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649346084866/1/1CF709ED9E0B03394B9F9BEB57ED8D2C23261DF4.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.15.94.0/23 Signature Algorithm: sha256WithRSAEncryption 2f:2b:ee:94:f5:46:72:71:f4:97:7c:fd:ed:08:84:35:98:53: 62:69:3f:55:ad:75:ab:5c:a6:ef:18:e8:ac:e8:31:16:e7:a1: ae:06:2b:ae:8b:08:dd:93:f1:dd:5a:b2:d6:1f:58:3d:ec:c1: 1c:6b:f1:b6:57:7d:71:9e:c7:78:84:b3:2a:26:3c:65:a9:9a: 3f:24:56:58:1c:ad:cd:02:ad:b6:9d:b8:99:40:6b:3a:95:49: 83:70:64:a7:bd:f7:a3:63:3f:9d:9b:d6:fe:3a:41:ff:72:6e: 99:1d:44:f0:01:81:b7:2b:31:25:75:49:58:4c:2e:6a:32:e9: d6:d5:5b:e4:61:cd:f5:f3:84:6e:c5:7d:1f:5d:82:ac:de:d8: 40:f1:3d:9f:e2:30:db:c9:a8:a9:e8:cf:42:29:8c:b4:09:eb: 25:23:e1:08:b4:35:2f:a0:82:4d:06:57:31:cb:95:a3:ca:3e: c9:1b:fe:5d:e1:02:b5:4b:da:61:eb:21:05:c9:86:61:bf:20: c7:65:ba:b8:42:88:a3:fe:b6:bd:1b:03:22:9d:b0:41:e0:8d: 1a:52:ae:bf:ad:f5:08:1e:43:7a:cd:80:32:21:b5:0e:b3:a1: 98:dd:f8:1b:12:18:11:21:56:d6:d9:3e:ab:b2:63:7b:19:d2: ef:84:e1:57 -----BEGIN CERTIFICATE----- MIIFpzCCBI+gAwIBAgIUNNGp8ZvaO9nClnl7xi4i5jjEjqQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhDQjAyMTRBNUM0 MDRENkY4NDA0MzNCMTIwQ0FDQkI1QjhDNTlFNjEzMB4XDTI2MDUyOTA4MDIyNVoX DTI3MDUyODA4MDcyNVowMzExMC8GA1UEAxMoMUNGNzA5RUQ5RTBCMDMzOTRCOUY5 QkVCNTdFRDhEMkMyMzI2MURGNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKnSkVkA8ElDTyiTZE9NXftUwOLFpLNBHh9TPrf+Fnrhag8tKZStuIVPWwMb 1wzGiIXeOW2r/fWveCpGNv3m7bprZR+7OOC/F8uYO53odPlwxk0w9EipSe0nAhSE wvGRAlLfoWZMKhDYIoFqBIwTFU1z43KdOn4vmkpW/6i/Vqb1Ff2ibduVDeBm6BTR a8RY+SLGc8GOv9JFub742OckZkDaCHDWaBXrPTKLQmAFpOMm1aYtrnlyNSeI7O0o 38SvS1/eNx2S+Bgo79LqgU7Vg5WktWbAMvZrDYPWR5FUqZ44VDo1hNCf5kV8EQb7 RAIBsbsDhhRH9mXiB2SXfzVmtRUCAwEAAaOCApowggKWMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFBz3Ce2eCwM5S5+b61ftjSwjJh30MB8GA1UdIwQYMBaAFMsC FKXEBNb4QEM7Egysu1uMWeYTMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMC9DQjAyMTRBNUM0MDRENkY4NDA0MzNCMTIwQ0FDQkI1QjhDNTlF NjEzLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CM0EyNEYyMDFENjYxMUUyOEFDODgzN0M3 MkZEMUZGMi95d0lVcGNRRTF2aEFRenNTREt5N1c0eFo1aE0uY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTA2NTU4NTY0OTM0NjA4NDg2Ni8xLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDY1NTg1NjQ5MzQ2MDg0ODY2 LzEvMUNGNzA5RUQ5RTBCMDMzOTRCOUY5QkVCNTdFRDhEMkMyMzI2MURGNC5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAGdD14wDQYJKoZIhvcNAQELBQADggEBAC8r7pT1 RnJx9Jd8/e0IhDWYU2JpP1Wtdatcpu8Y6KzoMRbnoa4GK66LCN2T8d1astYfWD3s wRxr8bZXfXGex3iEsyomPGWpmj8kVlgcrc0CrbaduJlAazqVSYNwZKe996NjP52b 1v46Qf9ybpkdRPABgbcrMSV1SVhMLmoy6dbVW+RhzfXzhG7FfR9dgqze2EDxPZ/i MNvJqKnoz0IpjLQJ6yUj4Qi0NS+ggk0GVzHLlaPKPskb/l3hArVL2mHrIQXJhmG/ IMdlurhCiKP+tr0bAyKdsEHgjRpSrr+t9QgeQ3rNgDIhtQ6zoZjd+BsSGBEhVtbZ PquyY3sZ0u+E4Vc= -----END CERTIFICATE-----Generated at Sun Jun 14 04:04:06 2026 by rpki-client