$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/0/19AE5566BF83D1472FD9D9BAE5CC701265BC77AD.cer File: 19AE5566BF83D1472FD9D9BAE5CC701265BC77AD.cer (raw, json) Hash identifier: A0345zQoYsfVPsPttpm8/VIFD4jTLeWiF5lvcgE3zkk= Subject key identifier: 19:AE:55:66:BF:83:D1:47:2F:D9:D9:BA:E5:CC:70:12:65:BC:77:AD Authority key identifier: CB:02:14:A5:C4:04:D6:F8:40:43:3B:12:0C:AC:BB:5B:8C:59:E6:13 Certificate issuer: /CN=A9162E3D0001/serialNumber=CB0214A5C404D6F840433B120CACBB5B8C59E613 Certificate serial: 21E3B23EBC778A871C405FA89FC9C5243FD16553 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1065588553129394179/1/19AE5566BF83D1472FD9D9BAE5CC701265BC77AD.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1065588553129394179/1/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Fri 29 May 2026 08:11:26 +0000 Certificate not after: Fri 28 May 2027 08:16:26 +0000 Subordinate resources: IP: 144.79.10.0/23 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 13:26:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:e3:b2:3e:bc:77:8a:87:1c:40:5f:a8:9f:c9:c5:24:3f:d1:65:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=CB0214A5C404D6F840433B120CACBB5B8C59E613 Validity Not Before: May 29 08:11:26 2026 GMT Not After : May 28 08:16:26 2027 GMT Subject: CN=19AE5566BF83D1472FD9D9BAE5CC701265BC77AD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:c2:05:db:91:f1:6d:4f:4b:96:e9:2b:17:7b: 15:06:9c:30:c8:6c:80:bd:d3:3b:ea:18:27:08:2d: 54:5e:6e:b6:2a:7f:28:4c:9f:df:46:0d:26:4e:e1: cc:5a:01:85:15:49:6d:53:22:3e:06:93:57:f5:5d: bd:12:49:1a:bc:b4:b7:95:67:17:d3:f0:ed:69:5f: bc:66:a6:a9:3c:a8:f8:61:b8:41:ac:d3:52:f3:d5: 54:7b:7b:be:bf:49:d5:68:12:23:f0:61:62:66:35: 01:04:f6:77:56:29:dc:04:c3:b6:c4:ac:cb:7c:78: 16:15:f7:d9:13:1b:3f:c7:d8:4c:97:46:47:da:cc: d3:c0:b8:d8:12:34:06:7e:b1:7a:84:43:73:52:b9: 36:68:f6:a7:2e:ca:02:f4:aa:78:64:c0:7c:a1:60: 9c:08:10:ab:5f:00:f6:bc:b4:fc:aa:c3:12:33:17: 69:c5:c7:77:47:9a:6a:3a:54:3b:37:16:92:da:e0: b2:45:b8:38:ca:3b:dd:d7:d0:63:3b:f0:f9:bf:3b: 6e:14:d7:ef:b9:40:6c:f8:fe:c8:b1:37:2a:34:83: 68:f3:f1:6e:a0:fd:23:c9:98:69:0f:1a:29:c8:8a: be:19:5c:81:7b:10:e0:d8:36:2c:5c:b3:5a:34:3e: 8d:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 19:AE:55:66:BF:83:D1:47:2F:D9:D9:BA:E5:CC:70:12:65:BC:77:AD X509v3 Authority Key Identifier: keyid:CB:02:14:A5:C4:04:D6:F8:40:43:3B:12:0C:AC:BB:5B:8C:59:E6:13 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129394179/1/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129394179/1/19AE5566BF83D1472FD9D9BAE5CC701265BC77AD.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 144.79.10.0/23 Signature Algorithm: sha256WithRSAEncryption 19:b8:71:53:02:77:af:a1:e1:cd:18:5f:da:37:b9:6b:b6:e3: bf:76:32:8a:01:6a:55:c6:42:1c:86:8f:2d:02:d6:ba:6f:a2: d0:bf:d4:14:e1:f8:10:e0:14:ec:3a:c0:7a:8a:a3:1c:b0:60: 28:af:88:2c:c2:2a:20:c4:42:0b:9d:8d:70:a1:08:db:32:d2: 0d:e9:50:73:f7:94:b4:ae:61:a5:da:40:07:33:5c:f6:6d:91: 93:5c:a6:3e:34:f3:ec:2a:90:08:6b:a6:8d:3b:75:6b:b3:95: e6:d4:93:c4:80:eb:ea:76:68:f1:a0:96:d2:b0:ae:00:c5:a4: 2b:44:79:d5:94:22:8e:e1:df:f2:65:ce:5f:56:00:11:ef:5c: 1e:66:9b:33:39:4b:8d:6b:a9:86:cb:ce:0c:b9:24:9b:20:aa: ad:5f:f0:75:e7:23:f3:ea:6f:88:c3:e9:0f:4b:90:21:0b:4f: 9c:02:a7:1b:7f:f5:a4:a7:6b:4d:c8:45:af:29:b9:e4:bb:80: 16:ca:47:be:dd:34:24:1e:e7:40:44:4d:7a:58:e1:33:68:b6: 03:52:a1:1c:88:87:1d:d2:04:0b:1c:0c:0e:6e:e5:fb:9d:6e: be:9a:06:0f:b5:5f:41:0a:a7:4e:dd:06:c8:78:07:c8:47:45: d0:2e:72:c9 -----BEGIN CERTIFICATE----- MIIFpzCCBI+gAwIBAgIUIeOyPrx3ioccQF+on8nFJD/RZVMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhDQjAyMTRBNUM0 MDRENkY4NDA0MzNCMTIwQ0FDQkI1QjhDNTlFNjEzMB4XDTI2MDUyOTA4MTEyNloX DTI3MDUyODA4MTYyNlowMzExMC8GA1UEAxMoMTlBRTU1NjZCRjgzRDE0NzJGRDlE OUJBRTVDQzcwMTI2NUJDNzdBRDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOPCBduR8W1PS5bpKxd7FQacMMhsgL3TO+oYJwgtVF5utip/KEyf30YNJk7h zFoBhRVJbVMiPgaTV/VdvRJJGry0t5VnF9Pw7WlfvGamqTyo+GG4QazTUvPVVHt7 vr9J1WgSI/BhYmY1AQT2d1Yp3ATDtsSsy3x4FhX32RMbP8fYTJdGR9rM08C42BI0 Bn6xeoRDc1K5Nmj2py7KAvSqeGTAfKFgnAgQq18A9ry0/KrDEjMXacXHd0eaajpU OzcWktrgskW4OMo73dfQYzvw+b87bhTX77lAbPj+yLE3KjSDaPPxbqD9I8mYaQ8a KciKvhlcgXsQ4Ng2LFyzWjQ+jdsCAwEAAaOCApowggKWMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFBmuVWa/g9FHL9nZuuXMcBJlvHetMB8GA1UdIwQYMBaAFMsC FKXEBNb4QEM7Egysu1uMWeYTMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMC9DQjAyMTRBNUM0MDRENkY4NDA0MzNCMTIwQ0FDQkI1QjhDNTlF NjEzLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CM0EyNEYyMDFENjYxMUUyOEFDODgzN0M3 MkZEMUZGMi95d0lVcGNRRTF2aEFRenNTREt5N1c0eFo1aE0uY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTA2NTU4ODU1MzEyOTM5NDE3OS8xLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDY1NTg4NTUzMTI5Mzk0MTc5 LzEvMTlBRTU1NjZCRjgzRDE0NzJGRDlEOUJBRTVDQzcwMTI2NUJDNzdBRC5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAGQTwowDQYJKoZIhvcNAQELBQADggEBABm4cVMC d6+h4c0YX9o3uWu24792MooBalXGQhyGjy0C1rpvotC/1BTh+BDgFOw6wHqKoxyw YCiviCzCKiDEQgudjXChCNsy0g3pUHP3lLSuYaXaQAczXPZtkZNcpj408+wqkAhr po07dWuzlebUk8SA6+p2aPGgltKwrgDFpCtEedWUIo7h3/Jlzl9WABHvXB5mmzM5 S41rqYbLzgy5JJsgqq1f8HXnI/Pqb4jD6Q9LkCELT5wCpxt/9aSna03IRa8pueS7 gBbKR77dNCQe50BETXpY4TNotgNSoRyIhx3SBAscDA5u5fudbr6aBg+1X0EKp07d Bsh4B8hHRdAucsk= -----END CERTIFICATE-----Generated at Sat May 30 01:38:09 2026 by rpki-client