$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AA70A0EABCF6A48C197B68C82554CE3B6813921D.cer File: AA70A0EABCF6A48C197B68C82554CE3B6813921D.cer (raw, json) Hash identifier: Wz/MigXftTqBrR4aiUxz7er2DSOtK5C2Ykp9pIDzMhE= Subject key identifier: AA:70:A0:EA:BC:F6:A4:8C:19:7B:68:C8:25:54:CE:3B:68:13:92:1D Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Certificate serial: 29B1B471AE20AF476E2638DE6D45047CFF7D5B24 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1123907165686333477/0/AA70A0EABCF6A48C197B68C82554CE3B6813921D.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1123907165686333477/0/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Mon 29 Jun 2026 09:20:51 +0000 Certificate not after: Mon 28 Jun 2027 09:25:51 +0000 Subordinate resources: IP: 45.115.164.0/22 IP: 103.55.208.0/22 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 Jul 2026 20:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:b1:b4:71:ae:20:af:47:6e:26:38:de:6d:45:04:7c:ff:7d:5b:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Validity Not Before: Jun 29 09:20:51 2026 GMT Not After : Jun 28 09:25:51 2027 GMT Subject: CN=AA70A0EABCF6A48C197B68C82554CE3B6813921D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:4e:da:3b:04:55:09:d5:2c:97:d9:bc:ce:e9: 40:ff:97:e3:53:52:a5:fa:23:de:80:58:6d:76:65: 52:cd:79:8d:9c:76:ea:31:e4:37:ac:ec:1a:f5:0f: de:de:e7:b0:2d:f6:04:2b:ec:27:5f:d8:1b:ca:ec: 63:65:e1:c7:dd:3f:87:35:24:0a:07:a7:4c:85:1d: c8:ad:bc:fc:2d:8c:7f:18:62:80:40:97:39:53:d7: 75:60:68:ba:df:7e:43:d1:b3:2f:95:7a:ca:c8:51: 9b:db:2a:90:4a:4b:38:80:49:00:d5:db:2f:8e:93: 45:5f:ea:a8:07:94:d2:1d:8f:0d:a5:a4:04:a8:88: c3:ff:e3:71:a3:20:3e:6a:e2:1a:cb:60:2c:ba:d8: cb:c6:5e:09:ed:c3:5c:1e:3b:5b:7a:7d:f4:77:f6: 41:ab:51:eb:b0:99:68:92:9a:53:d3:b4:0b:92:37: 81:f6:fd:aa:9f:60:df:28:23:e8:0a:a7:18:54:83: 7a:54:18:db:06:b7:c8:b0:e9:22:f4:21:19:98:2b: 72:62:be:49:e2:a7:73:b4:a8:01:ad:d8:5e:a5:e6: 37:25:c4:96:f8:9c:f1:80:94:42:1f:c5:a4:21:df: 28:9d:a1:97:27:ba:5b:91:e0:e3:a4:cf:3f:2e:85: 6f:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: AA:70:A0:EA:BC:F6:A4:8C:19:7B:68:C8:25:54:CE:3B:68:13:92:1D X509v3 Authority Key Identifier: keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1123907165686333477/0/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1123907165686333477/0/AA70A0EABCF6A48C197B68C82554CE3B6813921D.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.115.164.0/22 103.55.208.0/22 Signature Algorithm: sha256WithRSAEncryption 30:5e:62:ab:04:6e:cf:45:c1:28:7f:3c:5d:4a:7d:86:0a:88: 3a:f4:9a:fe:e9:25:f9:8c:62:44:31:1d:3a:7d:7e:77:df:fe: fe:58:6d:51:f0:da:2e:13:8f:06:d8:2d:eb:27:69:c7:d9:f0: 46:25:8c:cd:16:a7:06:60:ed:ba:cf:5c:59:92:1e:b5:2c:ef: e2:51:10:62:16:0e:db:f8:0b:4b:5d:5a:5e:07:88:64:b4:cf: 24:79:f2:1c:6f:d1:9a:b7:70:e1:a0:5a:1c:da:b7:b0:96:97: 1e:1b:4f:17:b2:eb:81:62:be:d5:74:ab:ed:79:ef:d8:de:68: 7b:f2:06:a8:3f:7c:47:91:cb:a4:38:59:cf:11:f1:ea:d6:bb: 38:45:56:66:d9:0a:a1:60:6e:2d:09:a7:3f:d3:81:be:3b:33: 2c:b6:30:d1:6f:08:a7:8f:a0:e5:9b:72:59:3b:91:21:f6:82: 1c:2f:1b:7d:05:de:e7:f7:46:24:0b:26:6d:39:29:75:61:b0: 35:01:cc:b6:71:c5:aa:c9:25:17:42:fd:f0:ca:bd:34:df:e0: 45:17:20:bc:0a:2d:9d:40:f0:06:85:3e:0a:ae:c9:a8:8f:21: c5:6a:40:d6:f4:2a:de:c7:38:34:21:b9:6e:1e:b6:18:32:04: a0:9c:c9:cf -----BEGIN CERTIFICATE----- MIIFrTCCBJWgAwIBAgIUKbG0ca4gr0duJjjebUUEfP99WyQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDYyOTA5MjA1MVoX DTI3MDYyODA5MjU1MVowMzExMC8GA1UEAxMoQUE3MEEwRUFCQ0Y2QTQ4QzE5N0I2 OEM4MjU1NENFM0I2ODEzOTIxRDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAK9O2jsEVQnVLJfZvM7pQP+X41NSpfoj3oBYbXZlUs15jZx26jHkN6zsGvUP 3t7nsC32BCvsJ1/YG8rsY2Xhx90/hzUkCgenTIUdyK28/C2MfxhigECXOVPXdWBo ut9+Q9GzL5V6yshRm9sqkEpLOIBJANXbL46TRV/qqAeU0h2PDaWkBKiIw//jcaMg PmriGstgLLrYy8ZeCe3DXB47W3p99Hf2QatR67CZaJKaU9O0C5I3gfb9qp9g3ygj 6AqnGFSDelQY2wa3yLDpIvQhGZgrcmK+SeKnc7SoAa3YXqXmNyXElvic8YCUQh/F pCHfKJ2hlye6W5Hg46TPPy6FbxcCAwEAAaOCAqAwggKcMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFKpwoOq89qSMGXtoyCVUzjtoE5IdMB8GA1UdIwQYMBaAFKVu hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTEyMzkwNzE2NTY4NjMzMzQ3Ny8wLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMTIzOTA3MTY1Njg2MzMzNDc3 LzAvQUE3MEEwRUFCQ0Y2QTQ4QzE5N0I2OEM4MjU1NENFM0I2ODEzOTIxRC5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwJQYIKwYBBQUH AQcBAf8EFjAUMBIEAgABMAwDBAItc6QDBAJnN9AwDQYJKoZIhvcNAQELBQADggEB ADBeYqsEbs9FwSh/PF1KfYYKiDr0mv7pJfmMYkQxHTp9fnff/v5YbVHw2i4TjwbY LesnacfZ8EYljM0WpwZg7brPXFmSHrUs7+JREGIWDtv4C0tdWl4HiGS0zyR58hxv 0Zq3cOGgWhzat7CWlx4bTxey64FivtV0q+1579jeaHvyBqg/fEeRy6Q4Wc8R8erW uzhFVmbZCqFgbi0Jpz/Tgb47Myy2MNFvCKePoOWbclk7kSH2ghwvG30F3uf3RiQL Jm05KXVhsDUBzLZxxarJJRdC/fDKvTTf4EUXILwKLZ1A8AaFPgquyaiPIcVqQNb0 Kt7HODQhuW4ethgyBKCcyc8= -----END CERTIFICATE-----Generated at Tue Jul 14 19:09:10 2026 by rpki-client