$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE4AD27D33F9D64B7FA2184C6C030A7B8091E9E9.cer File: AE4AD27D33F9D64B7FA2184C6C030A7B8091E9E9.cer (raw, json) Hash identifier: D3utGDT2MybhCmVnbhFUkgcL8uMGOZV0Gf7Na5TCD2c= Subject key identifier: AE:4A:D2:7D:33:F9:D6:4B:7F:A2:18:4C:6C:03:0A:7B:80:91:E9:E9 Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Certificate serial: 20BCE3D40BA17005EC892AB2CD21D74C276E8222 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1094488822684581890/0/AE4AD27D33F9D64B7FA2184C6C030A7B8091E9E9.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1094488822684581890/0/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Thu 09 Apr 2026 05:02:51 +0000 Certificate not after: Thu 08 Apr 2027 05:07:51 +0000 Subordinate resources: IP: 43.240.220.0/22 IP: 103.36.220.0/22 IP: 103.163.46.0/23 IP: 211.101.232.0/21 IP: 211.101.244.0/22 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 12:10:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:bc:e3:d4:0b:a1:70:05:ec:89:2a:b2:cd:21:d7:4c:27:6e:82:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Validity Not Before: Apr 9 05:02:51 2026 GMT Not After : Apr 8 05:07:51 2027 GMT Subject: CN=AE4AD27D33F9D64B7FA2184C6C030A7B8091E9E9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:2b:0b:87:2e:3e:c3:dd:27:f1:61:c4:79:7a: 5d:69:1d:45:6b:85:0b:66:dc:1a:44:fc:13:3a:4b: c9:c0:8a:24:10:f8:1f:7e:e5:29:51:98:32:5a:49: a0:4c:0b:5c:8e:20:69:f3:35:58:c7:81:84:4b:f0: b8:5c:92:3e:4f:a7:60:85:70:05:ee:79:cd:96:e1: 4e:59:ea:9b:f6:6a:65:c1:f3:c9:4e:25:22:6b:a1: 6a:4c:df:66:2f:76:f8:2d:25:a1:71:e7:74:0b:5f: af:36:40:e8:af:15:94:59:fa:02:d4:ab:de:d0:68: 23:94:7f:ad:59:c8:14:d1:dc:08:d3:21:fb:33:c1: 61:c3:8f:36:85:e7:51:11:d7:b3:69:35:47:48:8c: 03:9d:e3:55:5d:05:7d:24:dc:ae:c6:d2:da:ff:d9: 2c:1f:98:97:41:91:0b:d7:29:16:28:97:3c:1f:18: c5:17:2a:fd:44:6e:36:c2:53:ee:12:ad:1e:22:2a: fa:e1:bf:c7:d6:c8:da:b8:30:81:c9:86:ab:2e:39: 08:b6:a4:41:fb:dd:3f:5b:f8:0d:99:17:ce:5f:a6: b0:9e:a2:64:16:44:16:03:48:e9:52:14:db:a2:db: 0c:09:75:38:0b:c8:09:46:a1:04:1a:b4:06:07:c3: 9b:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: AE:4A:D2:7D:33:F9:D6:4B:7F:A2:18:4C:6C:03:0A:7B:80:91:E9:E9 X509v3 Authority Key Identifier: keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1094488822684581890/0/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1094488822684581890/0/AE4AD27D33F9D64B7FA2184C6C030A7B8091E9E9.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.240.220.0/22 103.36.220.0/22 103.163.46.0/23 211.101.232.0/21 211.101.244.0/22 Signature Algorithm: sha256WithRSAEncryption 3b:5d:8b:07:26:b3:f6:36:38:c7:34:d4:e1:b0:f5:b0:e3:95: 85:30:30:c3:ad:31:ce:80:af:c2:d3:e9:57:b1:76:7c:eb:d3: 2b:9b:49:04:00:35:9c:94:1e:da:be:f5:5c:98:63:2b:c5:3a: 8f:d9:d8:5e:ab:4b:51:7b:a1:de:f5:d9:36:32:30:70:31:76: 8b:f9:6f:df:4a:f0:f6:d9:0b:81:b1:37:80:ff:46:cd:20:e6: f8:b0:55:fb:16:cf:ef:5b:bf:46:8a:79:e3:d1:1e:d6:c7:63: 90:5d:c4:f5:e8:35:91:2f:70:9b:80:0e:96:70:b1:f9:59:0f: 83:d6:b9:30:72:d6:98:7c:5b:84:e9:43:7d:fd:18:58:ab:15: 40:13:9a:e8:c5:2e:18:fa:57:73:00:8c:5d:06:82:34:cc:bf: 46:dc:f0:ff:09:e0:7a:7c:19:05:e5:d1:ce:ed:dd:8d:0e:86: 91:b0:fc:54:0d:c1:c6:47:65:3a:aa:62:89:b8:ea:4e:01:90: 8b:a9:0c:6b:14:fa:5d:14:04:0b:a0:6d:38:69:dc:71:9a:5f: 0c:61:41:24:6e:0a:08:38:aa:e4:7a:be:33:9c:58:b6:cb:1f: 41:79:6d:40:c2:10:b4:b4:82:11:fa:22:96:62:fd:ed:b7:8b: 67:6a:5d:16 -----BEGIN CERTIFICATE----- MIIFvzCCBKegAwIBAgIUILzj1AuhcAXsiSqyzSHXTCdugiIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDQwOTA1MDI1MVoX DTI3MDQwODA1MDc1MVowMzExMC8GA1UEAxMoQUU0QUQyN0QzM0Y5RDY0QjdGQTIx ODRDNkMwMzBBN0I4MDkxRTlFOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAL0rC4cuPsPdJ/FhxHl6XWkdRWuFC2bcGkT8EzpLycCKJBD4H37lKVGYMlpJ oEwLXI4gafM1WMeBhEvwuFySPk+nYIVwBe55zZbhTlnqm/ZqZcHzyU4lImuhakzf Zi92+C0loXHndAtfrzZA6K8VlFn6AtSr3tBoI5R/rVnIFNHcCNMh+zPBYcOPNoXn URHXs2k1R0iMA53jVV0FfSTcrsbS2v/ZLB+Yl0GRC9cpFiiXPB8YxRcq/URuNsJT 7hKtHiIq+uG/x9bI2rgwgcmGqy45CLakQfvdP1v4DZkXzl+msJ6iZBZEFgNI6VIU 26LbDAl1OAvICUahBBq0BgfDm/cCAwEAAaOCArIwggKuMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFK5K0n0z+dZLf6IYTGwDCnuAkenpMB8GA1UdIwQYMBaAFKVu hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTA5NDQ4ODgyMjY4NDU4MTg5MC8wLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDk0NDg4ODIyNjg0NTgxODkw LzAvQUU0QUQyN0QzM0Y5RDY0QjdGQTIxODRDNkMwMzBBN0I4MDkxRTlFOS5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwNwYIKwYBBQUH AQcBAf8EKDAmMCQEAgABMB4DBAIr8NwDBAJnJNwDBAFnoy4DBAPTZegDBALTZfQw DQYJKoZIhvcNAQELBQADggEBADtdiwcms/Y2OMc01OGw9bDjlYUwMMOtMc6Ar8LT 6Vexdnzr0yubSQQANZyUHtq+9VyYYyvFOo/Z2F6rS1F7od712TYyMHAxdov5b99K 8PbZC4GxN4D/Rs0g5viwVfsWz+9bv0aKeePRHtbHY5BdxPXoNZEvcJuADpZwsflZ D4PWuTBy1ph8W4TpQ339GFirFUATmujFLhj6V3MAjF0GgjTMv0bc8P8J4Hp8GQXl 0c7t3Y0OhpGw/FQNwcZHZTqqYom46k4BkIupDGsU+l0UBAugbThp3HGaXwxhQSRu Cgg4quR6vjOcWLbLH0F5bUDCELS0ghH6IpZi/e23i2dqXRY= -----END CERTIFICATE-----Generated at Mon Apr 13 09:29:07 2026 by rpki-client