$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE71DF7002DDAC69D2668951AF859FBB9F0DDC91.cer File: AE71DF7002DDAC69D2668951AF859FBB9F0DDC91.cer (raw, json) Hash identifier: aPA/4+SwHRQAsAI0mW+DYtK6v7vOAFtOSlFRdrOIY10= Subject key identifier: AE:71:DF:70:02:DD:AC:69:D2:66:89:51:AF:85:9F:BB:9F:0D:DC:91 Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Certificate serial: 0221E4321A54BA02928BD78A9EE5232D776FC073 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1083566124529876995/0/AE71DF7002DDAC69D2668951AF859FBB9F0DDC91.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1083566124529876995/0/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Tue 10 Mar 2026 01:39:56 +0000 Certificate not after: Tue 09 Mar 2027 01:44:56 +0000 Subordinate resources: AS: 151239 IP: 163.128.30.0/23 IP: 2402:51a0::/32 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 05:24:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:21:e4:32:1a:54:ba:02:92:8b:d7:8a:9e:e5:23:2d:77:6f:c0:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Validity Not Before: Mar 10 01:39:56 2026 GMT Not After : Mar 9 01:44:56 2027 GMT Subject: CN=AE71DF7002DDAC69D2668951AF859FBB9F0DDC91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:0a:a0:4e:11:6f:cb:2e:8a:88:23:75:6f:71: 71:a5:e6:aa:16:3c:c1:58:af:16:dc:67:0f:ef:21: 63:9f:42:01:3b:86:02:1a:90:6f:22:68:a0:be:11: 42:bc:b9:fb:6c:02:31:cc:83:9a:81:8e:5c:ae:c3: dc:cf:3d:6c:08:ab:a0:ba:db:01:f1:39:20:0b:56: 94:a7:a8:7b:b4:55:9f:94:93:52:f9:59:a7:c3:98: 26:1a:a9:44:a8:42:a6:b6:59:a7:1a:3f:b8:3e:db: 2f:dc:3d:43:11:96:81:3e:37:ca:0a:12:1f:c9:c5: c4:dd:ae:ec:2e:1b:64:46:3a:17:16:d8:31:a6:b4: 0f:86:d2:ce:22:bb:95:a0:65:0d:84:c1:8a:59:ac: 4d:68:28:23:27:2d:67:cd:da:8c:4c:7a:96:a5:75: 4e:02:a7:ec:19:8a:4f:3b:4a:7d:8e:01:e0:9e:48: 0f:bc:c2:dd:35:55:93:fc:2f:01:96:9b:75:9f:2b: b1:06:a4:1e:9d:84:4b:a3:5e:f2:5e:1f:af:fc:70: e1:9d:64:eb:a4:d9:c9:a6:a0:a8:fd:3a:e1:bc:24: c8:4b:c7:31:84:ee:cc:a7:56:6c:19:c8:ed:8f:c5: 8f:ab:10:79:d2:ab:b8:29:b4:b1:ca:1d:05:23:e2: a3:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: AE:71:DF:70:02:DD:AC:69:D2:66:89:51:AF:85:9F:BB:9F:0D:DC:91 X509v3 Authority Key Identifier: keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1083566124529876995/0/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1083566124529876995/0/AE71DF7002DDAC69D2668951AF859FBB9F0DDC91.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 163.128.30.0/23 IPv6: 2402:51a0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 151239 Signature Algorithm: sha256WithRSAEncryption 76:90:b0:74:d0:29:72:18:7e:dc:0f:8e:45:5e:82:66:f2:11: 22:00:70:76:e9:4a:34:b0:dd:7c:1d:9f:69:9b:94:19:0d:79: 7a:8b:9e:f4:84:b7:5b:f5:15:d4:a2:c6:7f:4e:e6:c3:7a:3e: e7:d0:92:8f:6e:c4:22:f6:df:d9:d9:bb:91:92:08:55:71:8c: 1b:e1:85:ac:c0:1a:52:7e:50:be:ee:31:10:85:45:db:70:5f: 00:34:61:7b:6d:ea:ac:2e:d8:39:cc:4f:1e:6a:31:76:3e:de: 65:e6:56:96:47:64:9a:b3:39:e6:0d:e2:39:c6:6b:53:6c:e6: a3:b0:c7:5a:54:fa:88:75:f4:07:ee:22:14:88:75:af:5b:cb: 71:35:d4:74:59:ff:01:61:1f:ef:20:88:13:59:b7:58:2f:bd: b0:f3:a0:7c:b4:8d:0c:eb:d1:1c:ac:e6:6c:68:03:ac:f2:e4: 14:0f:ab:ea:da:04:24:3c:41:65:0c:a3:67:ed:ae:d8:c1:b1: b8:05:6b:95:f9:93:75:91:c4:85:8a:7c:a2:57:b4:f2:5b:75: 1b:b0:e1:74:57:94:f6:36:7d:67:53:b4:72:98:22:e3:d7:bf: 7c:9c:c1:15:54:77:d4:49:a2:7c:e2:37:1c:44:24:d0:8e:e7: 51:c8:cd:53 -----BEGIN CERTIFICATE----- MIIF0jCCBLqgAwIBAgIUAiHkMhpUugKSi9eKnuUjLXdvwHMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDMxMDAxMzk1NloX DTI3MDMwOTAxNDQ1NlowMzExMC8GA1UEAxMoQUU3MURGNzAwMkREQUM2OUQyNjY4 OTUxQUY4NTlGQkI5RjBEREM5MTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMgKoE4Rb8suiogjdW9xcaXmqhY8wVivFtxnD+8hY59CATuGAhqQbyJooL4R Qry5+2wCMcyDmoGOXK7D3M89bAiroLrbAfE5IAtWlKeoe7RVn5STUvlZp8OYJhqp RKhCprZZpxo/uD7bL9w9QxGWgT43ygoSH8nFxN2u7C4bZEY6FxbYMaa0D4bSziK7 laBlDYTBilmsTWgoIyctZ83ajEx6lqV1TgKn7BmKTztKfY4B4J5ID7zC3TVVk/wv AZabdZ8rsQakHp2ES6Ne8l4fr/xw4Z1k66TZyaagqP064bwkyEvHMYTuzKdWbBnI 7Y/Fj6sQedKruCm0scodBSPiox8CAwEAAaOCAsUwggLBMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFK5x33AC3axp0maJUa+Fn7ufDdyRMB8GA1UdIwQYMBaAFKVu hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTA4MzU2NjEyNDUyOTg3Njk5NS8wLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDgzNTY2MTI0NTI5ODc2OTk1 LzAvQUU3MURGNzAwMkREQUM2OUQyNjY4OTUxQUY4NTlGQkI5RjBEREM5MS5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUH AQcBAf8EHzAdMAwEAgABMAYDBAGjgB4wDQQCAAIwBwMFACQCUaAwGgYIKwYBBQUH AQgBAf8ECzAJoAcwBQIDAk7HMA0GCSqGSIb3DQEBCwUAA4IBAQB2kLB00ClyGH7c D45FXoJm8hEiAHB26Uo0sN18HZ9pm5QZDXl6i570hLdb9RXUosZ/TubDej7n0JKP bsQi9t/Z2buRkghVcYwb4YWswBpSflC+7jEQhUXbcF8ANGF7beqsLtg5zE8eajF2 Pt5l5laWR2SasznmDeI5xmtTbOajsMdaVPqIdfQH7iIUiHWvW8txNdR0Wf8BYR/v IIgTWbdYL72w86B8tI0M69EcrOZsaAOs8uQUD6vq2gQkPEFlDKNn7a7YwbG4BWuV +ZN1kcSFinyiV7TyW3UbsOF0V5T2Nn1nU7RymCLj1798nMEVVHfUSaJ84jccRCTQ judRyM1T -----END CERTIFICATE-----Generated at Thu Mar 26 22:46:50 2026 by rpki-client