$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/0/AE1431CDCA3C52456B0146C49D5EEE32961D793D.cer File: AE1431CDCA3C52456B0146C49D5EEE32961D793D.cer (raw, json) Hash identifier: s/XiMUKCGtpLyqXL5vAvayX65B2d3r/ttMGX5yBdpcE= Subject key identifier: AE:14:31:CD:CA:3C:52:45:6B:01:46:C4:9D:5E:EE:32:96:1D:79:3D Authority key identifier: CB:02:14:A5:C4:04:D6:F8:40:43:3B:12:0C:AC:BB:5B:8C:59:E6:13 Certificate issuer: /CN=A9162E3D0001/serialNumber=CB0214A5C404D6F840433B120CACBB5B8C59E613 Certificate serial: 5DF31F9CFBBEB0395048B20985246F01FF933D6C Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/1/AE1431CDCA3C52456B0146C49D5EEE32961D793D.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/1/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Mon 01 Jun 2026 01:22:11 +0000 Certificate not after: Mon 31 May 2027 01:27:11 +0000 Subordinate resources: IP: 139.9.0.0/16 IP: 139.159.128.0/17 IP: 140.210.128.0/17 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Jun 2026 18:53:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:f3:1f:9c:fb:be:b0:39:50:48:b2:09:85:24:6f:01:ff:93:3d:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=CB0214A5C404D6F840433B120CACBB5B8C59E613 Validity Not Before: Jun 1 01:22:11 2026 GMT Not After : May 31 01:27:11 2027 GMT Subject: CN=AE1431CDCA3C52456B0146C49D5EEE32961D793D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:de:4e:06:74:69:05:a2:e7:e9:52:57:ee:5c: d8:d1:00:30:a1:27:27:84:4b:4c:52:08:fa:fc:3f: e4:8a:d3:58:f4:99:5b:42:97:e6:ef:d9:ab:0a:fb: 70:57:7c:06:9c:fa:b4:a0:13:c2:54:14:70:a3:85: fb:9a:5d:de:0e:05:f2:7b:a2:e9:08:bd:2b:d2:b2: a6:63:ac:0f:4e:39:f3:d7:fa:77:f8:bd:a8:30:cb: dc:a5:3e:dc:99:df:38:6c:35:c2:f6:42:13:ba:dd: 1a:db:dc:87:01:c6:85:00:b2:9a:0e:df:c4:43:81: bc:e3:a1:01:cb:b9:c3:bf:e0:1b:aa:fe:af:80:51: 6a:ec:09:64:0e:a8:98:5c:4c:ed:4e:b7:3d:59:d7: b5:92:58:47:81:94:e9:d1:1f:16:b6:51:d5:c5:cc: 65:ae:86:f2:59:9b:c2:31:f4:18:f3:bd:69:c6:36: d2:23:de:fe:e9:c2:4a:01:e7:d5:ef:8b:bd:4f:01: d7:9a:23:fa:14:b4:61:4b:dc:60:a2:72:79:8c:71: 02:b6:82:fa:5c:e0:da:cc:fc:7c:84:15:cb:9b:2b: 47:08:14:17:01:a2:7c:77:78:3e:f0:58:5f:04:23: 93:7d:d8:65:9c:47:67:4a:be:d0:db:1a:de:3e:81: f5:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: AE:14:31:CD:CA:3C:52:45:6B:01:46:C4:9D:5E:EE:32:96:1D:79:3D X509v3 Authority Key Identifier: keyid:CB:02:14:A5:C4:04:D6:F8:40:43:3B:12:0C:AC:BB:5B:8C:59:E6:13 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/1/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/1/AE1431CDCA3C52456B0146C49D5EEE32961D793D.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 139.9.0.0/16 139.159.128.0/17 140.210.128.0/17 Signature Algorithm: sha256WithRSAEncryption bc:f3:d1:c5:c1:93:8d:3e:51:cd:fa:55:22:f4:f4:8b:06:08: 9a:a7:70:5a:28:a2:82:02:e3:8c:44:6e:0a:20:da:ef:83:61: 1b:3c:7e:9f:3b:9a:e7:f8:7c:e8:7a:2f:d1:77:3b:43:e0:d2: 5e:ae:73:89:3d:13:04:c0:2a:29:9a:1c:fc:14:1c:a4:f8:a3: 4e:66:8b:26:19:21:cb:b2:84:cb:0d:91:7b:e1:35:84:c6:b8: 75:7f:d1:94:5d:f8:da:58:ee:1f:54:2a:b1:2a:02:5c:d4:d0: 7f:37:34:1f:45:67:2a:d7:37:8f:cd:2a:5d:2f:40:62:e4:32: 8b:57:59:55:88:e1:4f:92:21:1f:75:c8:eb:0d:dd:ca:77:fe: 78:93:9a:26:c0:b6:07:1f:65:be:d3:7c:b4:d9:d6:02:bc:ae: 51:6c:d6:49:18:50:3e:81:b1:62:e2:48:18:cc:30:83:ec:13: 5d:d0:83:ea:7d:22:ec:d2:12:93:06:7e:08:d0:52:d0:33:d5: 45:be:7c:f4:5d:62:54:e3:50:88:ce:71:5f:41:c4:96:da:14: 56:32:3a:5d:5c:74:8e:9d:f7:fa:24:f0:81:97:94:5d:14:5f: 0b:40:08:ef:cb:99:0f:69:05:db:b2:55:32:50:36:4c:08:87: 22:ce:ed:97 -----BEGIN CERTIFICATE----- MIIFsjCCBJqgAwIBAgIUXfMfnPu+sDlQSLIJhSRvAf+TPWwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhDQjAyMTRBNUM0 MDRENkY4NDA0MzNCMTIwQ0FDQkI1QjhDNTlFNjEzMB4XDTI2MDYwMTAxMjIxMVoX DTI3MDUzMTAxMjcxMVowMzExMC8GA1UEAxMoQUUxNDMxQ0RDQTNDNTI0NTZCMDE0 NkM0OUQ1RUVFMzI5NjFENzkzRDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAN3eTgZ0aQWi5+lSV+5c2NEAMKEnJ4RLTFII+vw/5IrTWPSZW0KX5u/Zqwr7 cFd8Bpz6tKATwlQUcKOF+5pd3g4F8nui6Qi9K9KypmOsD04589f6d/i9qDDL3KU+ 3JnfOGw1wvZCE7rdGtvchwHGhQCymg7fxEOBvOOhAcu5w7/gG6r+r4BRauwJZA6o mFxM7U63PVnXtZJYR4GU6dEfFrZR1cXMZa6G8lmbwjH0GPO9acY20iPe/unCSgHn 1e+LvU8B15oj+hS0YUvcYKJyeYxxAraC+lzg2sz8fIQVy5srRwgUFwGifHd4PvBY XwQjk33YZZxHZ0q+0Nsa3j6B9V0CAwEAAaOCAqUwggKhMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFK4UMc3KPFJFawFGxJ1e7jKWHXk9MB8GA1UdIwQYMBaAFMsC FKXEBNb4QEM7Egysu1uMWeYTMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMC9DQjAyMTRBNUM0MDRENkY4NDA0MzNCMTIwQ0FDQkI1QjhDNTlF NjEzLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CM0EyNEYyMDFENjYxMUUyOEFDODgzN0M3 MkZEMUZGMi95d0lVcGNRRTF2aEFRenNTREt5N1c0eFo1aE0uY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTA2NTU4NTM4OTI2NTIyMzY4MS8xLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDY1NTg1Mzg5MjY1MjIzNjgx LzEvQUUxNDMxQ0RDQTNDNTI0NTZCMDE0NkM0OUQ1RUVFMzI5NjFENzkzRC5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwKgYIKwYBBQUH AQcBAf8EGzAZMBcEAgABMBEDAwCLCQMEB4ufgAMEB4zSgDANBgkqhkiG9w0BAQsF AAOCAQEAvPPRxcGTjT5RzfpVIvT0iwYImqdwWiiiggLjjERuCiDa74NhGzx+nzua 5/h86Hov0Xc7Q+DSXq5ziT0TBMAqKZoc/BQcpPijTmaLJhkhy7KEyw2Re+E1hMa4 dX/RlF342ljuH1QqsSoCXNTQfzc0H0VnKtc3j80qXS9AYuQyi1dZVYjhT5IhH3XI 6w3dynf+eJOaJsC2Bx9lvtN8tNnWAryuUWzWSRhQPoGxYuJIGMwwg+wTXdCD6n0i 7NISkwZ+CNBS0DPVRb589F1iVONQiM5xX0HEltoUVjI6XVx0jp33+iTwgZeUXRRf C0AI78uZD2kF27JVMlA2TAiHIs7tlw== -----END CERTIFICATE-----Generated at Fri Jun 12 03:55:59 2026 by rpki-client