$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/0/AEE1991E669A6B0C97E8A1DC9C9657563C1F73C6.cer File: AEE1991E669A6B0C97E8A1DC9C9657563C1F73C6.cer (raw, json) Hash identifier: Lq6C1vmtdv5BgsyhnRa6Bc7nZJu3wqb8EfsqK8DPUn8= Subject key identifier: AE:E1:99:1E:66:9A:6B:0C:97:E8:A1:DC:9C:96:57:56:3C:1F:73:C6 Authority key identifier: CB:02:14:A5:C4:04:D6:F8:40:43:3B:12:0C:AC:BB:5B:8C:59:E6:13 Certificate issuer: /CN=A9162E3D0001/serialNumber=CB0214A5C404D6F840433B120CACBB5B8C59E613 Certificate serial: 5187AA92FE7A035CF0DD4FC4D589B8ADE1A78F7F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/1/AEE1991E669A6B0C97E8A1DC9C9657563C1F73C6.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/1/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Tue 27 Jan 2026 23:49:02 +0000 Certificate not after: Tue 26 Jan 2027 23:54:02 +0000 Subordinate resources: IP: 161.248.108.0/23 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 06:59:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:87:aa:92:fe:7a:03:5c:f0:dd:4f:c4:d5:89:b8:ad:e1:a7:8f:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=CB0214A5C404D6F840433B120CACBB5B8C59E613 Validity Not Before: Jan 27 23:49:02 2026 GMT Not After : Jan 26 23:54:02 2027 GMT Subject: CN=AEE1991E669A6B0C97E8A1DC9C9657563C1F73C6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:ae:db:9c:29:0d:6a:db:73:4e:2b:0f:59:fe: ce:11:78:10:b4:13:b8:7c:fe:54:52:e1:8c:46:e9: 18:55:73:3c:e2:36:b9:db:be:2f:3d:5a:4f:dd:50: 8b:ed:1f:ac:fa:e2:f9:d5:13:44:9b:d0:a8:fb:09: dc:c6:41:7b:d5:01:5c:d7:d1:16:32:81:2a:46:6b: b2:79:c4:04:ca:57:34:4c:82:77:1b:3a:4c:77:69: 1d:1f:0c:3e:2e:4a:81:b9:84:8b:c0:35:83:4f:6c: 10:35:21:9b:c8:23:ff:4b:58:b2:15:80:e2:2d:5c: 55:28:fe:37:60:24:d3:19:0e:d0:21:cc:68:2b:ad: 79:5d:58:55:c8:5a:2c:92:ad:80:d1:04:46:17:93: b7:0f:cf:d2:02:c7:2e:8f:15:f5:82:e1:49:92:cd: 1c:a1:99:08:09:f9:be:a0:d0:2d:3d:b5:8e:0f:8e: 33:42:5a:c1:41:57:e6:0e:69:63:63:e4:88:05:9b: 8e:3f:4d:cc:b6:8b:9d:8f:c6:b5:7e:14:df:13:ba: b2:d6:14:cf:08:4e:5b:0c:2d:9d:d2:cb:62:16:27: 89:a3:60:85:2d:e6:98:94:db:92:d9:70:db:38:9d: 08:9c:30:92:ed:7c:e5:1b:b0:a8:28:d8:6a:4b:0d: ce:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: AE:E1:99:1E:66:9A:6B:0C:97:E8:A1:DC:9C:96:57:56:3C:1F:73:C6 X509v3 Authority Key Identifier: keyid:CB:02:14:A5:C4:04:D6:F8:40:43:3B:12:0C:AC:BB:5B:8C:59:E6:13 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/1/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/1/AEE1991E669A6B0C97E8A1DC9C9657563C1F73C6.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 161.248.108.0/23 Signature Algorithm: sha256WithRSAEncryption 11:ad:be:4e:4e:61:4f:f1:12:f6:fa:ed:77:de:b9:e1:86:8f: f4:e8:4f:ac:65:ae:b6:a9:86:4c:87:a2:3d:df:4a:ff:68:be: 23:6e:93:51:58:61:89:ca:2b:92:dd:5f:82:4c:99:0b:b7:14: 74:cf:d5:89:13:08:51:94:fa:83:2e:dc:9d:02:06:c3:df:d1: e3:7d:ef:16:d1:9d:db:9c:46:a4:87:01:82:e8:e3:a7:b6:3b: 39:9a:2b:79:c7:9c:4a:3e:45:6e:b1:57:15:84:81:56:73:99: 8a:16:f0:cc:e0:0b:c0:cb:01:a7:91:0d:a5:bc:8b:d6:82:e3: d2:74:d3:96:22:47:e4:1e:1f:55:9c:21:71:99:b0:06:52:84: 4e:86:b7:c1:7d:25:34:5a:0f:0b:65:56:04:88:c7:2d:75:80: aa:03:fb:ee:90:27:cd:4b:01:7f:a8:a2:3c:b6:c3:60:03:04: ef:a2:7e:df:4b:91:a8:2e:da:83:b5:f0:bb:06:02:ab:4e:d1: 87:0c:a7:33:40:6b:7c:1f:aa:1d:a7:a6:c5:60:28:c5:bf:a3: 41:19:5f:11:a0:d5:35:11:2a:59:96:4f:4f:67:ea:aa:af:92: cd:9d:b4:5e:4a:f9:fa:45:d7:77:b1:58:49:cf:22:1f:01:8f: 61:4a:02:8b -----BEGIN CERTIFICATE----- MIIFpzCCBI+gAwIBAgIUUYeqkv56A1zw3U/E1Ym4reGnj38wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhDQjAyMTRBNUM0 MDRENkY4NDA0MzNCMTIwQ0FDQkI1QjhDNTlFNjEzMB4XDTI2MDEyNzIzNDkwMloX DTI3MDEyNjIzNTQwMlowMzExMC8GA1UEAxMoQUVFMTk5MUU2NjlBNkIwQzk3RThB MURDOUM5NjU3NTYzQzFGNzNDNjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAPiu25wpDWrbc04rD1n+zhF4ELQTuHz+VFLhjEbpGFVzPOI2udu+Lz1aT91Q i+0frPri+dUTRJvQqPsJ3MZBe9UBXNfRFjKBKkZrsnnEBMpXNEyCdxs6THdpHR8M Pi5KgbmEi8A1g09sEDUhm8gj/0tYshWA4i1cVSj+N2Ak0xkO0CHMaCuteV1YVcha LJKtgNEERheTtw/P0gLHLo8V9YLhSZLNHKGZCAn5vqDQLT21jg+OM0JawUFX5g5p Y2PkiAWbjj9NzLaLnY/GtX4U3xO6stYUzwhOWwwtndLLYhYniaNghS3mmJTbktlw 2zidCJwwku185RuwqCjYaksNzu0CAwEAAaOCApowggKWMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFK7hmR5mmmsMl+ih3JyWV1Y8H3PGMB8GA1UdIwQYMBaAFMsC FKXEBNb4QEM7Egysu1uMWeYTMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMC9DQjAyMTRBNUM0MDRENkY4NDA0MzNCMTIwQ0FDQkI1QjhDNTlF NjEzLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CM0EyNEYyMDFENjYxMUUyOEFDODgzN0M3 MkZEMUZGMi95d0lVcGNRRTF2aEFRenNTREt5N1c0eFo1aE0uY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTA2NTU4ODk5MzU0ODYxNTY4Mi8xLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDY1NTg4OTkzNTQ4NjE1Njgy LzEvQUVFMTk5MUU2NjlBNkIwQzk3RThBMURDOUM5NjU3NTYzQzFGNzNDNi5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAGh+GwwDQYJKoZIhvcNAQELBQADggEBABGtvk5O YU/xEvb67XfeueGGj/ToT6xlrraphkyHoj3fSv9oviNuk1FYYYnKK5LdX4JMmQu3 FHTP1YkTCFGU+oMu3J0CBsPf0eN97xbRnducRqSHAYLo46e2OzmaK3nHnEo+RW6x VxWEgVZzmYoW8MzgC8DLAaeRDaW8i9aC49J005YiR+QeH1WcIXGZsAZShE6Gt8F9 JTRaDwtlVgSIxy11gKoD++6QJ81LAX+oojy2w2ADBO+ift9Lkagu2oO18LsGAqtO 0YcMpzNAa3wfqh2npsVgKMW/o0EZXxGg1TURKlmWT09n6qqvks2dtF5K+fpF13ex WEnPIh8Bj2FKAos= -----END CERTIFICATE-----Generated at Mon Mar 2 13:35:32 2026 by rpki-client