$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/0/AEE1991E669A6B0C97E8A1DC9C9657563C1F73C6.cer File: AEE1991E669A6B0C97E8A1DC9C9657563C1F73C6.cer (raw, json) Hash identifier: o1brsyNeiXkgplTjk6aBnnS04U9CZ87Y6x+5txtKN24= Subject key identifier: AE:E1:99:1E:66:9A:6B:0C:97:E8:A1:DC:9C:96:57:56:3C:1F:73:C6 Authority key identifier: CB:02:14:A5:C4:04:D6:F8:40:43:3B:12:0C:AC:BB:5B:8C:59:E6:13 Certificate issuer: /CN=A9162E3D0001/serialNumber=CB0214A5C404D6F840433B120CACBB5B8C59E613 Certificate serial: 44896C250A35C7658DCC1C7B1A04AD1062EE3DC8 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/1/AEE1991E669A6B0C97E8A1DC9C9657563C1F73C6.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/1/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Mon 01 Jun 2026 01:53:54 +0000 Certificate not after: Mon 31 May 2027 01:58:54 +0000 Subordinate resources: IP: 161.248.108.0/23 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Jun 2026 13:43:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:89:6c:25:0a:35:c7:65:8d:cc:1c:7b:1a:04:ad:10:62:ee:3d:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=CB0214A5C404D6F840433B120CACBB5B8C59E613 Validity Not Before: Jun 1 01:53:54 2026 GMT Not After : May 31 01:58:54 2027 GMT Subject: CN=AEE1991E669A6B0C97E8A1DC9C9657563C1F73C6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:ae:db:9c:29:0d:6a:db:73:4e:2b:0f:59:fe: ce:11:78:10:b4:13:b8:7c:fe:54:52:e1:8c:46:e9: 18:55:73:3c:e2:36:b9:db:be:2f:3d:5a:4f:dd:50: 8b:ed:1f:ac:fa:e2:f9:d5:13:44:9b:d0:a8:fb:09: dc:c6:41:7b:d5:01:5c:d7:d1:16:32:81:2a:46:6b: b2:79:c4:04:ca:57:34:4c:82:77:1b:3a:4c:77:69: 1d:1f:0c:3e:2e:4a:81:b9:84:8b:c0:35:83:4f:6c: 10:35:21:9b:c8:23:ff:4b:58:b2:15:80:e2:2d:5c: 55:28:fe:37:60:24:d3:19:0e:d0:21:cc:68:2b:ad: 79:5d:58:55:c8:5a:2c:92:ad:80:d1:04:46:17:93: b7:0f:cf:d2:02:c7:2e:8f:15:f5:82:e1:49:92:cd: 1c:a1:99:08:09:f9:be:a0:d0:2d:3d:b5:8e:0f:8e: 33:42:5a:c1:41:57:e6:0e:69:63:63:e4:88:05:9b: 8e:3f:4d:cc:b6:8b:9d:8f:c6:b5:7e:14:df:13:ba: b2:d6:14:cf:08:4e:5b:0c:2d:9d:d2:cb:62:16:27: 89:a3:60:85:2d:e6:98:94:db:92:d9:70:db:38:9d: 08:9c:30:92:ed:7c:e5:1b:b0:a8:28:d8:6a:4b:0d: ce:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: AE:E1:99:1E:66:9A:6B:0C:97:E8:A1:DC:9C:96:57:56:3C:1F:73:C6 X509v3 Authority Key Identifier: keyid:CB:02:14:A5:C4:04:D6:F8:40:43:3B:12:0C:AC:BB:5B:8C:59:E6:13 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/1/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/1/AEE1991E669A6B0C97E8A1DC9C9657563C1F73C6.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 161.248.108.0/23 Signature Algorithm: sha256WithRSAEncryption c7:44:78:5d:07:67:f5:f3:69:58:e3:74:7b:c8:f6:5f:51:f8: 4f:c0:ff:94:83:72:28:22:bd:d9:b3:d5:60:7e:42:f4:b0:30: 9d:cd:5c:7c:a3:26:5f:c6:6d:f3:29:81:2b:10:a5:60:17:89: 79:24:78:4d:28:9d:e1:c9:ba:e6:71:6b:c7:e5:19:5a:46:d3: a9:44:03:3a:c2:27:29:9c:1c:00:d5:a4:e2:82:c2:60:bb:1a: 92:6f:19:de:10:74:c4:d3:5b:28:d7:4b:60:90:7d:7e:77:1c: 15:0b:60:84:85:73:cc:25:b6:0d:77:26:d0:74:d2:6a:8b:bc: 76:dc:2e:8b:64:01:41:5e:ed:5d:11:81:25:c1:24:3c:a7:7c: 5f:f6:46:22:41:b5:00:59:da:95:bd:9c:fd:03:8f:fb:06:10: 87:f0:ad:63:d0:61:6b:71:ed:f2:3e:ae:6e:48:db:82:42:af: f6:f4:42:f9:3b:f4:3f:c4:bb:fa:d5:6f:09:79:f0:9f:25:3b: c3:fa:2c:ff:ad:ca:3c:73:d4:16:c3:34:89:be:08:d9:ac:29: 3a:7b:43:3c:e8:ae:c3:18:b2:7e:69:1f:47:8a:75:c0:dd:34: d0:d6:51:fc:bd:59:01:88:7e:d3:80:8b:de:a0:2a:f8:d6:99: 33:de:c0:29 -----BEGIN CERTIFICATE----- MIIFpzCCBI+gAwIBAgIURIlsJQo1x2WNzBx7GgStEGLuPcgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhDQjAyMTRBNUM0 MDRENkY4NDA0MzNCMTIwQ0FDQkI1QjhDNTlFNjEzMB4XDTI2MDYwMTAxNTM1NFoX DTI3MDUzMTAxNTg1NFowMzExMC8GA1UEAxMoQUVFMTk5MUU2NjlBNkIwQzk3RThB MURDOUM5NjU3NTYzQzFGNzNDNjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAPiu25wpDWrbc04rD1n+zhF4ELQTuHz+VFLhjEbpGFVzPOI2udu+Lz1aT91Q i+0frPri+dUTRJvQqPsJ3MZBe9UBXNfRFjKBKkZrsnnEBMpXNEyCdxs6THdpHR8M Pi5KgbmEi8A1g09sEDUhm8gj/0tYshWA4i1cVSj+N2Ak0xkO0CHMaCuteV1YVcha LJKtgNEERheTtw/P0gLHLo8V9YLhSZLNHKGZCAn5vqDQLT21jg+OM0JawUFX5g5p Y2PkiAWbjj9NzLaLnY/GtX4U3xO6stYUzwhOWwwtndLLYhYniaNghS3mmJTbktlw 2zidCJwwku185RuwqCjYaksNzu0CAwEAAaOCApowggKWMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFK7hmR5mmmsMl+ih3JyWV1Y8H3PGMB8GA1UdIwQYMBaAFMsC FKXEBNb4QEM7Egysu1uMWeYTMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMC9DQjAyMTRBNUM0MDRENkY4NDA0MzNCMTIwQ0FDQkI1QjhDNTlF NjEzLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CM0EyNEYyMDFENjYxMUUyOEFDODgzN0M3 MkZEMUZGMi95d0lVcGNRRTF2aEFRenNTREt5N1c0eFo1aE0uY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTA2NTU4ODk5MzU0ODYxNTY4Mi8xLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDY1NTg4OTkzNTQ4NjE1Njgy LzEvQUVFMTk5MUU2NjlBNkIwQzk3RThBMURDOUM5NjU3NTYzQzFGNzNDNi5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAGh+GwwDQYJKoZIhvcNAQELBQADggEBAMdEeF0H Z/XzaVjjdHvI9l9R+E/A/5SDcigivdmz1WB+QvSwMJ3NXHyjJl/GbfMpgSsQpWAX iXkkeE0oneHJuuZxa8flGVpG06lEAzrCJymcHADVpOKCwmC7GpJvGd4QdMTTWyjX S2CQfX53HBULYISFc8wltg13JtB00mqLvHbcLotkAUFe7V0RgSXBJDynfF/2RiJB tQBZ2pW9nP0Dj/sGEIfwrWPQYWtx7fI+rm5I24JCr/b0Qvk79D/Eu/rVbwl58J8l O8P6LP+tyjxz1BbDNIm+CNmsKTp7QzzorsMYsn5pH0eKdcDdNNDWUfy9WQGIftOA i96gKvjWmTPewCk= -----END CERTIFICATE-----Generated at Thu Jun 4 14:11:59 2026 by rpki-client