$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE09DD056B3B5EA4C48722C67F63F0A12CAAF727.cer File: AE09DD056B3B5EA4C48722C67F63F0A12CAAF727.cer (raw, json) Hash identifier: jED0g3YhyqqFOFRIVnQSlmxif9PTxQMGfds1y9Kk9DY= Subject key identifier: AE:09:DD:05:6B:3B:5E:A4:C4:87:22:C6:7F:63:F0:A1:2C:AA:F7:27 Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Certificate serial: 16614900A02B9EFD4222C7EDE53868CCBA4D0C53 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1096250886386089987/0/AE09DD056B3B5EA4C48722C67F63F0A12CAAF727.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1096250886386089987/0/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Tue 14 Apr 2026 01:44:39 +0000 Certificate not after: Tue 13 Apr 2027 01:49:39 +0000 Subordinate resources: AS: 59075 IP: 43.240.200.0/22 IP: 103.36.160.0/22 IP: 2401:5c80::/32 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 17:12:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:61:49:00:a0:2b:9e:fd:42:22:c7:ed:e5:38:68:cc:ba:4d:0c:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Validity Not Before: Apr 14 01:44:39 2026 GMT Not After : Apr 13 01:49:39 2027 GMT Subject: CN=AE09DD056B3B5EA4C48722C67F63F0A12CAAF727 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:5e:e4:8f:3b:32:77:44:64:a4:14:d9:1d:c8: 58:a2:9f:a6:be:38:d8:6f:cf:df:71:65:29:f9:fe: 5b:0b:86:22:c3:0b:7d:72:36:0b:ef:84:06:a6:12: f9:cb:c4:3e:46:9f:23:f9:5c:d4:d3:23:44:0b:84: 19:7f:3f:2c:af:a5:70:7d:8b:06:45:0d:e9:c2:44: 20:f7:ef:e5:c1:e1:60:00:02:ac:35:3d:ef:1d:5b: 34:35:22:a6:09:ed:2d:d5:67:93:ba:a9:94:2d:38: 34:14:a5:b7:1f:a4:96:f8:48:e2:db:01:12:ee:b1: c9:6e:8b:c8:16:90:8b:6a:98:db:7c:fe:0a:c0:69: 83:de:ae:b5:59:0d:11:31:b7:29:cb:cd:2c:2d:d8: e1:92:7f:77:35:4d:07:23:ae:d6:b6:cd:65:c9:f5: 61:06:d9:3e:a8:6b:07:f9:e5:1c:dd:d4:28:73:50: 23:ac:2e:45:e4:6f:fb:d8:52:a1:ee:30:77:34:8c: 08:6d:01:17:47:d4:e5:fe:4e:b8:20:2c:5e:2e:66: 92:b5:2d:74:2c:a1:81:d5:26:a9:22:4a:a5:91:33: 9d:70:22:0f:c0:fb:1c:77:cd:33:f3:5c:07:90:c3: 41:62:7c:73:21:96:f4:f9:91:fe:0c:8f:d9:d5:e8: a3:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: AE:09:DD:05:6B:3B:5E:A4:C4:87:22:C6:7F:63:F0:A1:2C:AA:F7:27 X509v3 Authority Key Identifier: keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1096250886386089987/0/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1096250886386089987/0/AE09DD056B3B5EA4C48722C67F63F0A12CAAF727.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.240.200.0/22 103.36.160.0/22 IPv6: 2401:5c80::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 59075 Signature Algorithm: sha256WithRSAEncryption 47:9a:6e:af:61:60:62:52:27:d8:99:10:6d:bf:5e:b8:2a:cd: 96:6f:f9:98:14:64:90:f9:1f:39:0f:3a:f5:54:9a:34:83:b1: 70:61:7e:db:01:46:52:59:c4:a8:47:26:24:2d:b6:c8:e3:8f: 86:15:82:8b:e2:3f:97:38:b7:75:03:e6:34:8f:58:7a:1b:4c: d2:c7:18:0a:77:f5:9c:27:29:f9:ad:b4:ca:1a:4a:c8:a6:fd: f8:1a:1c:4b:f3:36:b0:98:fd:3b:86:b0:23:ff:3c:ad:c0:b1: 1e:09:7b:82:4d:de:c3:f5:fa:cc:ae:c4:38:3c:a1:fb:95:b1: 4e:37:a5:53:d2:34:19:af:bb:80:bd:b2:b6:e6:db:a6:c1:99: f4:cf:22:a9:5b:67:9f:49:73:70:d0:75:c7:91:80:25:83:0a: f3:4b:32:c2:4c:a1:b4:fa:88:48:95:35:be:19:4e:40:7e:be: 83:72:48:9e:55:27:89:b5:ba:c7:73:8a:18:fc:66:40:e9:65: 8d:6a:18:53:62:7a:ce:ee:4a:3c:32:fd:f6:1d:4f:ba:e3:5b: 98:c5:1a:af:46:b0:c2:11:1d:42:d6:b8:10:f6:31:d7:35:c7: 12:d9:af:de:e4:c8:0a:a3:d8:48:27:ac:6c:c1:ca:8e:7b:90: 8a:40:6b:24 -----BEGIN CERTIFICATE----- MIIF2DCCBMCgAwIBAgIUFmFJAKArnv1CIsft5ThozLpNDFMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDQxNDAxNDQzOVoX DTI3MDQxMzAxNDkzOVowMzExMC8GA1UEAxMoQUUwOUREMDU2QjNCNUVBNEM0ODcy MkM2N0Y2M0YwQTEyQ0FBRjcyNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMFe5I87MndEZKQU2R3IWKKfpr442G/P33FlKfn+WwuGIsMLfXI2C++EBqYS +cvEPkafI/lc1NMjRAuEGX8/LK+lcH2LBkUN6cJEIPfv5cHhYAACrDU97x1bNDUi pgntLdVnk7qplC04NBSltx+klvhI4tsBEu6xyW6LyBaQi2qY23z+CsBpg96utVkN ETG3KcvNLC3Y4ZJ/dzVNByOu1rbNZcn1YQbZPqhrB/nlHN3UKHNQI6wuReRv+9hS oe4wdzSMCG0BF0fU5f5OuCAsXi5mkrUtdCyhgdUmqSJKpZEznXAiD8D7HHfNM/Nc B5DDQWJ8cyGW9PmR/gyP2dXoo08CAwEAAaOCAsswggLHMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFK4J3QVrO16kxIcixn9j8KEsqvcnMB8GA1UdIwQYMBaAFKVu hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTA5NjI1MDg4NjM4NjA4OTk4Ny8wLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDk2MjUwODg2Mzg2MDg5OTg3 LzAvQUUwOUREMDU2QjNCNUVBNEM0ODcyMkM2N0Y2M0YwQTEyQ0FBRjcyNy5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwNAYIKwYBBQUH AQcBAf8EJTAjMBIEAgABMAwDBAIr8MgDBAJnJKAwDQQCAAIwBwMFACQBXIAwGgYI KwYBBQUHAQgBAf8ECzAJoAcwBQIDAObDMA0GCSqGSIb3DQEBCwUAA4IBAQBHmm6v YWBiUifYmRBtv164Ks2Wb/mYFGSQ+R85Dzr1VJo0g7FwYX7bAUZSWcSoRyYkLbbI 44+GFYKL4j+XOLd1A+Y0j1h6G0zSxxgKd/WcJyn5rbTKGkrIpv34GhxL8zawmP07 hrAj/zytwLEeCXuCTd7D9frMrsQ4PKH7lbFON6VT0jQZr7uAvbK25tumwZn0zyKp W2efSXNw0HXHkYAlgwrzSzLCTKG0+ohIlTW+GU5Afr6DckieVSeJtbrHc4oY/GZA 6WWNahhTYnrO7ko8Mv32HU+641uYxRqvRrDCER1C1rgQ9jHXNccS2a/e5MgKo9hI J6xswcqOe5CKQGsk -----END CERTIFICATE-----Generated at Fri Apr 17 20:17:09 2026 by rpki-client