$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AEB614C24FFC2A6BE0E2DB1C7A3E0AAF641E6A8A.cer File: AEB614C24FFC2A6BE0E2DB1C7A3E0AAF641E6A8A.cer (raw, json) Hash identifier: GTVQXqGo5FZM364/4gpltzOceuK+EeEGm3bV7PrCO/A= Subject key identifier: AE:B6:14:C2:4F:FC:2A:6B:E0:E2:DB:1C:7A:3E:0A:AF:64:1E:6A:8A Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Certificate serial: 4A3713D164928CC591EB6366CF31EF9CE4C32CF1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1099192552394850307/0/AEB614C24FFC2A6BE0E2DB1C7A3E0AAF641E6A8A.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1099192552394850307/0/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Wed 22 Apr 2026 04:33:47 +0000 Certificate not after: Wed 21 Apr 2027 04:38:47 +0000 Subordinate resources: AS: 37960 IP: 116.66.0.0 -- 116.66.47.255 IP: 116.66.64.0 -- 116.66.111.255 IP: 221.133.224.0/19 IP: 2402:4a00::/32 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Apr 2026 07:23:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:37:13:d1:64:92:8c:c5:91:eb:63:66:cf:31:ef:9c:e4:c3:2c:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Validity Not Before: Apr 22 04:33:47 2026 GMT Not After : Apr 21 04:38:47 2027 GMT Subject: CN=AEB614C24FFC2A6BE0E2DB1C7A3E0AAF641E6A8A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:65:0c:37:1f:44:d5:36:dc:8e:59:07:25:4d: 9f:e3:1b:c7:c9:a9:1c:9d:09:66:17:4d:56:3b:fb: 52:88:ae:71:9b:9e:34:4d:b5:bd:c5:9c:4e:e8:89: 73:f6:2c:79:34:11:f4:10:c3:87:91:82:ce:90:47: 2d:58:af:73:e8:67:ef:81:29:00:fc:c1:fb:7a:14: d1:a3:d5:c5:9b:64:62:c5:48:75:ea:c6:62:6c:a1: 7b:c5:50:38:ae:a4:d8:70:0b:15:70:d7:66:6f:21: af:43:2e:18:af:e4:cb:44:d7:96:36:c2:7f:9c:ac: 90:f9:6a:28:1d:a0:29:fd:9a:0b:c6:7b:4c:b0:1b: d2:0d:c3:b3:16:b7:ea:a1:c1:e3:ef:8b:87:64:bd: 60:f7:14:de:27:c0:ef:0b:ad:f4:35:a4:09:28:38: b4:c4:7b:fc:db:bb:ee:86:60:a0:a1:8b:8f:7a:32: bc:35:97:9b:a2:0d:ac:b8:5b:78:37:73:0c:48:71: 60:85:1e:07:e2:32:a4:35:ff:93:96:b9:30:f3:64: 21:e9:1a:78:b3:b0:58:10:81:3b:03:3d:e2:26:62: bb:7f:de:b0:81:32:b5:52:3c:78:6b:9b:5c:60:1f: a9:5e:97:23:4a:aa:d2:e7:0d:6b:68:8e:20:89:3f: 99:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: AE:B6:14:C2:4F:FC:2A:6B:E0:E2:DB:1C:7A:3E:0A:AF:64:1E:6A:8A X509v3 Authority Key Identifier: keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1099192552394850307/0/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1099192552394850307/0/AEB614C24FFC2A6BE0E2DB1C7A3E0AAF641E6A8A.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 116.66.0.0-116.66.47.255 116.66.64.0-116.66.111.255 221.133.224.0/19 IPv6: 2402:4a00::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 37960 Signature Algorithm: sha256WithRSAEncryption 1b:24:1a:82:ff:7a:39:bf:9b:e3:bb:81:09:c8:b1:96:bf:f5: a9:ae:3c:4d:e6:fa:c7:05:b5:32:aa:27:bd:f0:5e:65:5c:83: 0b:3c:9f:ed:c9:be:12:7e:2a:2e:95:ad:2f:bf:33:36:96:75: b3:3e:5e:0e:95:e0:f8:77:8d:e6:e9:cf:de:59:d0:3f:e9:28: 96:da:6e:17:ed:bb:1e:fc:29:b9:70:bc:1d:63:1c:1a:61:27: 2d:d0:fe:82:e7:bd:66:76:de:d0:7a:f9:cb:8d:bc:97:ef:89: f1:bd:c1:4c:21:91:ba:f5:af:62:50:8e:e8:a6:58:98:8b:65: e8:5f:a7:ae:d3:90:76:d5:99:13:5a:d1:fb:1b:76:30:40:34: d4:32:d8:f0:5a:cc:0b:69:63:39:b9:a1:47:4d:19:e5:c9:3a: 31:48:ee:d2:2c:d7:b5:9f:67:41:3b:99:5b:bb:cf:3c:c5:ca: a2:15:be:f2:c9:32:5e:e9:2f:07:48:98:27:76:c8:9e:80:2f: bb:13:b0:63:aa:2a:f6:47:80:3b:99:11:5b:05:0e:fa:e6:a3: bc:58:0f:96:6f:78:9b:9e:d8:c6:b6:21:1a:f8:fe:10:be:d0: fb:86:15:3a:2e:16:a0:cb:c2:b8:9b:8d:55:5b:e7:7a:03:28: 6a:20:5b:98 -----BEGIN CERTIFICATE----- MIIF7TCCBNWgAwIBAgIUSjcT0WSSjMWR62NmzzHvnOTDLPEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDQyMjA0MzM0N1oX DTI3MDQyMTA0Mzg0N1owMzExMC8GA1UEAxMoQUVCNjE0QzI0RkZDMkE2QkUwRTJE QjFDN0EzRTBBQUY2NDFFNkE4QTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANplDDcfRNU23I5ZByVNn+Mbx8mpHJ0JZhdNVjv7UoiucZueNE21vcWcTuiJ c/YseTQR9BDDh5GCzpBHLVivc+hn74EpAPzB+3oU0aPVxZtkYsVIderGYmyhe8VQ OK6k2HALFXDXZm8hr0MuGK/ky0TXljbCf5yskPlqKB2gKf2aC8Z7TLAb0g3Dsxa3 6qHB4++Lh2S9YPcU3ifA7wut9DWkCSg4tMR7/Nu77oZgoKGLj3oyvDWXm6INrLhb eDdzDEhxYIUeB+IypDX/k5a5MPNkIekaeLOwWBCBOwM94iZiu3/esIEytVI8eGub XGAfqV6XI0qq0ucNa2iOIIk/mWECAwEAAaOCAuAwggLcMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFK62FMJP/Cpr4OLbHHo+Cq9kHmqKMB8GA1UdIwQYMBaAFKVu hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTA5OTE5MjU1MjM5NDg1MDMwNy8wLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDk5MTkyNTUyMzk0ODUwMzA3 LzAvQUVCNjE0QzI0RkZDMkE2QkUwRTJEQjFDN0EzRTBBQUY2NDFFNkE4QS5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwSQYIKwYBBQUH AQcBAf8EOjA4MCcEAgABMCEwCwMDAXRCAwQEdEIgMAwDBAZ0QkADBAR0QmADBAXd heAwDQQCAAIwBwMFACQCSgAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDAJRIMA0G CSqGSIb3DQEBCwUAA4IBAQAbJBqC/3o5v5vju4EJyLGWv/WprjxN5vrHBbUyqie9 8F5lXIMLPJ/tyb4Sfioula0vvzM2lnWzPl4OleD4d43m6c/eWdA/6SiW2m4X7bse /Cm5cLwdYxwaYSct0P6C571mdt7QevnLjbyX74nxvcFMIZG69a9iUI7opliYi2Xo X6eu05B21ZkTWtH7G3YwQDTUMtjwWswLaWM5uaFHTRnlyToxSO7SLNe1n2dBO5lb u888xcqiFb7yyTJe6S8HSJgndsiegC+7E7Bjqir2R4A7mRFbBQ765qO8WA+Wb3ib ntjGtiEa+P4QvtD7hhU6Lhagy8K4m41VW+d6AyhqIFuY -----END CERTIFICATE-----Generated at Mon Apr 27 09:37:05 2026 by rpki-client