$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE053C2402CB47FCF6E875C30756E16C9742BFE3.cer File: AE053C2402CB47FCF6E875C30756E16C9742BFE3.cer (raw, json) Hash identifier: UViqUIgUenahuWxEYD1bPIfVy6wWQD6OXmXvYtJN0Eg= Subject key identifier: AE:05:3C:24:02:CB:47:FC:F6:E8:75:C3:07:56:E1:6C:97:42:BF:E3 Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Certificate serial: 63A17F5A91EB18DF6BD94A37055B1C429D9A28C1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1110934764212191253/0/AE053C2402CB47FCF6E875C30756E16C9742BFE3.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1110934764212191253/0/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Sun 24 May 2026 14:13:10 +0000 Certificate not after: Sun 23 May 2027 14:18:10 +0000 Subordinate resources: AS: 24416 IP: 113.209.128.0/17 IP: 117.122.192.0/18 IP: 125.208.0.0/20 IP: 125.208.24.0/21 IP: 211.154.0.0/20 IP: 219.232.96.0/19 IP: 2401:8380::/32 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 15:28:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:a1:7f:5a:91:eb:18:df:6b:d9:4a:37:05:5b:1c:42:9d:9a:28:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Validity Not Before: May 24 14:13:10 2026 GMT Not After : May 23 14:18:10 2027 GMT Subject: CN=AE053C2402CB47FCF6E875C30756E16C9742BFE3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:a9:9c:9c:3d:e4:48:44:d9:95:cd:a9:36:28: 01:42:89:b1:30:ff:0c:a3:a7:f2:e2:d7:3e:6f:a4: c3:d1:59:67:9c:1b:88:9c:be:75:e4:9b:9d:e6:3a: 59:93:fb:7c:ff:a6:69:b1:6e:16:af:56:f6:91:3e: a2:f2:90:28:1a:fe:24:f8:c2:03:9f:5c:33:d8:8c: dd:41:8b:12:c9:ef:a4:3d:18:30:5b:21:65:7f:cb: c5:59:6c:2b:48:75:c3:d9:81:36:cd:cf:49:44:af: 72:12:d9:cb:a5:fd:e2:eb:1e:0d:20:92:1a:a6:8c: ec:2c:a5:62:7f:01:ab:51:39:6a:23:eb:d6:20:fa: 83:21:9e:6b:7d:d9:62:33:aa:9f:df:5e:32:c2:ef: 58:d0:71:b0:0a:95:06:28:12:e9:03:d6:ee:5d:2d: 52:72:6d:eb:74:c9:3a:8e:7e:66:68:ae:73:9e:5b: 48:d0:1d:14:e4:f6:88:ae:68:cc:d2:43:90:c4:9e: 35:a7:e5:f0:05:05:59:77:92:e0:67:9e:e5:f8:b2: b8:2e:10:32:90:4b:98:52:15:e1:d6:4e:3e:fe:fb: e4:ad:0f:6a:40:a9:76:6b:f7:68:f7:2a:03:73:81: e0:34:9f:c3:30:8b:30:45:96:92:67:16:6b:8a:d7: 69:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: AE:05:3C:24:02:CB:47:FC:F6:E8:75:C3:07:56:E1:6C:97:42:BF:E3 X509v3 Authority Key Identifier: keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1110934764212191253/0/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1110934764212191253/0/AE053C2402CB47FCF6E875C30756E16C9742BFE3.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 113.209.128.0/17 117.122.192.0/18 125.208.0.0/20 125.208.24.0/21 211.154.0.0/20 219.232.96.0/19 IPv6: 2401:8380::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 24416 Signature Algorithm: sha256WithRSAEncryption 0d:a8:df:97:1b:a8:c8:65:14:7e:1e:15:a2:ab:e3:d2:7f:01: 1d:89:49:f0:d2:70:f8:f6:93:14:77:d4:88:47:b5:29:77:74: 35:4b:a6:05:df:c5:90:92:d1:84:ff:65:52:e2:9b:d3:9d:26: 21:e2:e0:b8:b4:c1:ae:9d:52:40:45:6d:39:76:06:b5:0c:89: 11:3f:44:fd:51:f5:60:5c:63:83:e6:c9:3c:a4:c0:6c:bc:fe: eb:2f:6e:18:cc:2c:ec:a4:bb:84:31:3d:ff:5c:2b:58:29:ba: 4e:24:76:c0:91:7b:74:e1:8b:23:f6:92:c2:c9:b1:7f:4b:ad: 66:3c:e2:f6:8a:69:d0:fc:65:72:73:9f:b8:e9:49:b7:8f:75: a5:48:86:06:a6:e8:71:00:5a:77:d1:d6:ea:db:d6:ce:c0:2c: ea:30:e3:e2:e4:11:cc:16:25:28:28:ae:d6:cc:84:6a:53:1b: 61:26:0f:2a:7e:b7:9e:a6:3c:30:61:4d:2c:e9:80:20:0d:ce: a8:64:8e:49:22:33:0d:52:65:5f:67:bd:6c:10:55:b2:52:e2: d6:de:9c:4c:fe:b5:de:5b:28:d0:4d:cb:2e:d6:85:62:a2:2a: cc:7e:70:01:45:80:9a:1e:1f:e6:94:90:f4:1b:92:f3:2c:97: 67:78:16:b0 -----BEGIN CERTIFICATE----- MIIF7zCCBNegAwIBAgIUY6F/WpHrGN9r2Uo3BVscQp2aKMEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDUyNDE0MTMxMFoX DTI3MDUyMzE0MTgxMFowMzExMC8GA1UEAxMoQUUwNTNDMjQwMkNCNDdGQ0Y2RTg3 NUMzMDc1NkUxNkM5NzQyQkZFMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAPapnJw95EhE2ZXNqTYoAUKJsTD/DKOn8uLXPm+kw9FZZ5wbiJy+deSbneY6 WZP7fP+mabFuFq9W9pE+ovKQKBr+JPjCA59cM9iM3UGLEsnvpD0YMFshZX/LxVls K0h1w9mBNs3PSUSvchLZy6X94useDSCSGqaM7CylYn8Bq1E5aiPr1iD6gyGea33Z YjOqn99eMsLvWNBxsAqVBigS6QPW7l0tUnJt63TJOo5+Zmiuc55bSNAdFOT2iK5o zNJDkMSeNafl8AUFWXeS4Gee5fiyuC4QMpBLmFIV4dZOPv775K0PakCpdmv3aPcq A3OB4DSfwzCLMEWWkmcWa4rXaSMCAwEAAaOCAuIwggLeMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFK4FPCQCy0f89uh1wwdW4WyXQr/jMB8GA1UdIwQYMBaAFKVu hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTExMDkzNDc2NDIxMjE5MTI1My8wLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMTEwOTM0NzY0MjEyMTkxMjUz LzAvQUUwNTNDMjQwMkNCNDdGQ0Y2RTg3NUMzMDc1NkUxNkM5NzQyQkZFMy5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwTAYIKwYBBQUH AQcBAf8EPTA7MCoEAgABMCQDBAdx0YADBAZ1esADBAR90AADBAN90BgDBATTmgAD BAXb6GAwDQQCAAIwBwMFACQBg4AwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAICX2Aw DQYJKoZIhvcNAQELBQADggEBAA2o35cbqMhlFH4eFaKr49J/AR2JSfDScPj2kxR3 1IhHtSl3dDVLpgXfxZCS0YT/ZVLim9OdJiHi4Li0wa6dUkBFbTl2BrUMiRE/RP1R 9WBcY4PmyTykwGy8/usvbhjMLOyku4QxPf9cK1gpuk4kdsCRe3ThiyP2ksLJsX9L rWY84vaKadD8ZXJzn7jpSbePdaVIhgam6HEAWnfR1urb1s7ALOow4+LkEcwWJSgo rtbMhGpTG2EmDyp+t56mPDBhTSzpgCANzqhkjkkiMw1SZV9nvWwQVbJS4tbenEz+ td5bKNBNyy7WhWKiKsx+cAFFgJoeH+aUkPQbkvMsl2d4FrA= -----END CERTIFICATE-----Generated at Fri May 29 21:11:47 2026 by rpki-client