$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE75E2C9D84A1AD933AE352A5CAA95BD6D33E44B.cer File: AE75E2C9D84A1AD933AE352A5CAA95BD6D33E44B.cer (raw, json) Hash identifier: OJzVCZOJw5+zWh1I7SfCprkVnBlv3YzRI4EwFStZOK8= Subject key identifier: AE:75:E2:C9:D8:4A:1A:D9:33:AE:35:2A:5C:AA:95:BD:6D:33:E4:4B Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Certificate serial: 0F8726D8DB506D84C0AF4C5ABAB883C6ED989BDC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1096009996593790978/0/AE75E2C9D84A1AD933AE352A5CAA95BD6D33E44B.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1096009996593790978/0/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Mon 13 Apr 2026 09:47:27 +0000 Certificate not after: Mon 12 Apr 2027 09:52:27 +0000 Subordinate resources: AS: 151286 IP: 103.69.16.0/22 IP: 2405:9bc0::/32 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 17:12:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:87:26:d8:db:50:6d:84:c0:af:4c:5a:ba:b8:83:c6:ed:98:9b:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Validity Not Before: Apr 13 09:47:27 2026 GMT Not After : Apr 12 09:52:27 2027 GMT Subject: CN=AE75E2C9D84A1AD933AE352A5CAA95BD6D33E44B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:8b:05:cf:64:73:09:5e:e8:bc:88:c7:30:1a: 77:86:3f:ec:8e:d3:ff:3e:b6:13:6c:8a:30:bd:6c: e3:c7:82:0d:a3:df:a1:11:de:40:c9:92:81:74:b1: 38:fc:3e:45:4f:95:8c:a0:36:0c:4c:07:ef:9a:2d: 63:24:00:cb:ff:be:3d:db:1b:ef:ee:af:4a:f8:bc: 8f:8b:64:73:f1:d5:f1:93:a0:41:48:3d:bb:84:54: 7e:2d:8a:ec:53:c1:6c:ea:04:ff:40:e6:fe:98:54: b8:aa:fa:8b:69:4a:ca:64:7d:8e:66:8a:27:e4:27: 93:ea:dc:53:12:fc:2d:a3:3d:86:03:a6:87:90:97: cf:f7:11:24:4d:1f:32:34:ce:b1:f3:bd:1a:b8:73: b9:e0:2b:a3:45:21:11:24:07:16:ea:27:16:57:51: 27:b3:e2:be:19:e7:df:2f:a3:ef:d1:6a:dd:c8:d2: 61:d7:41:36:86:26:c8:34:a4:30:3e:15:7f:77:71: ea:e9:7a:9a:a7:1d:fc:6d:eb:b1:dc:18:69:00:3a: b1:88:4b:7c:df:ef:2f:3d:66:88:47:98:aa:27:cf: b7:77:93:16:92:70:1f:a3:ef:5b:13:6c:2b:26:f4: 93:8d:99:be:8c:93:dc:e3:fb:41:6a:bc:ed:eb:1a: 9a:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: AE:75:E2:C9:D8:4A:1A:D9:33:AE:35:2A:5C:AA:95:BD:6D:33:E4:4B X509v3 Authority Key Identifier: keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1096009996593790978/0/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1096009996593790978/0/AE75E2C9D84A1AD933AE352A5CAA95BD6D33E44B.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.69.16.0/22 IPv6: 2405:9bc0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 151286 Signature Algorithm: sha256WithRSAEncryption 7e:cb:11:28:cf:4c:e8:45:8b:4e:86:16:b8:70:72:81:dd:f7: d9:00:0c:35:92:3b:d2:e0:66:bb:50:48:a1:eb:32:7f:b4:a8: 14:a5:ab:e6:d3:75:a9:7f:8f:c5:e7:c8:e8:f7:3c:8a:4d:24: 14:c7:90:f7:4d:ee:2b:7e:68:15:59:8b:16:0c:7b:2f:59:39: d1:8a:cf:32:3c:75:77:81:ba:a6:51:8c:dd:ae:4c:f9:dc:a4: 62:95:de:e6:48:82:83:24:a6:6d:6d:7e:e2:a1:d5:82:c1:3d: f6:54:9f:84:5d:0a:b4:71:a0:7c:1c:ca:2c:97:ec:92:d3:09: 56:2e:f9:bb:7f:44:b7:29:2f:1e:5d:58:49:e5:6a:fa:d6:58: 6d:74:9b:d8:91:06:73:09:ab:58:ae:e7:5a:46:26:d9:a4:a2: f4:4f:2c:63:a9:a7:d9:fa:35:4b:af:c2:88:f4:43:ba:4f:9a: ae:49:09:2f:58:5f:93:2a:75:f7:f4:57:7c:c1:70:75:75:6b: 97:40:bc:70:88:94:05:f3:3b:9b:40:ef:77:3f:ea:d0:80:38: 4f:c2:58:05:48:66:ba:5f:7a:e8:e2:58:9e:fa:69:c1:66:b1: 38:f0:9c:eb:a9:48:69:ab:26:c2:7c:7b:29:da:94:bd:5d:b2: 90:68:82:a2 -----BEGIN CERTIFICATE----- MIIF0jCCBLqgAwIBAgIUD4cm2NtQbYTAr0xauriDxu2Ym9wwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDQxMzA5NDcyN1oX DTI3MDQxMjA5NTIyN1owMzExMC8GA1UEAxMoQUU3NUUyQzlEODRBMUFEOTMzQUUz NTJBNUNBQTk1QkQ2RDMzRTQ0QjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMCLBc9kcwle6LyIxzAad4Y/7I7T/z62E2yKML1s48eCDaPfoRHeQMmSgXSx OPw+RU+VjKA2DEwH75otYyQAy/++Pdsb7+6vSvi8j4tkc/HV8ZOgQUg9u4RUfi2K 7FPBbOoE/0Dm/phUuKr6i2lKymR9jmaKJ+Qnk+rcUxL8LaM9hgOmh5CXz/cRJE0f MjTOsfO9GrhzueAro0UhESQHFuonFldRJ7Pivhnn3y+j79Fq3cjSYddBNoYmyDSk MD4Vf3dx6ul6mqcd/G3rsdwYaQA6sYhLfN/vLz1miEeYqifPt3eTFpJwH6PvWxNs Kyb0k42ZvoyT3OP7QWq87esamh8CAwEAAaOCAsUwggLBMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFK514snYShrZM641Klyqlb1tM+RLMB8GA1UdIwQYMBaAFKVu hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTA5NjAwOTk5NjU5Mzc5MDk3OC8wLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDk2MDA5OTk2NTkzNzkwOTc4 LzAvQUU3NUUyQzlEODRBMUFEOTMzQUUzNTJBNUNBQTk1QkQ2RDMzRTQ0Qi5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUH AQcBAf8EHzAdMAwEAgABMAYDBAJnRRAwDQQCAAIwBwMFACQFm8AwGgYIKwYBBQUH AQgBAf8ECzAJoAcwBQIDAk72MA0GCSqGSIb3DQEBCwUAA4IBAQB+yxEoz0zoRYtO hha4cHKB3ffZAAw1kjvS4Ga7UEih6zJ/tKgUpavm03Wpf4/F58jo9zyKTSQUx5D3 Te4rfmgVWYsWDHsvWTnRis8yPHV3gbqmUYzdrkz53KRild7mSIKDJKZtbX7iodWC wT32VJ+EXQq0caB8HMosl+yS0wlWLvm7f0S3KS8eXVhJ5Wr61lhtdJvYkQZzCatY rudaRibZpKL0TyxjqafZ+jVLr8KI9EO6T5quSQkvWF+TKnX39Fd8wXB1dWuXQLxw iJQF8zubQO93P+rQgDhPwlgFSGa6X3ro4lie+mnBZrE48JzrqUhpqybCfHsp2pS9 XbKQaIKi -----END CERTIFICATE-----Generated at Fri Apr 17 23:27:46 2026 by rpki-client