$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/69D8917902AD24A5AC6751655C29BB7E9171C796.cer File: 69D8917902AD24A5AC6751655C29BB7E9171C796.cer (raw, json) Hash identifier: t1FdMYfXNxMfVO2327zO4N8u/eojQJrWi6l8mOMQXZI= Subject key identifier: 69:D8:91:79:02:AD:24:A5:AC:67:51:65:5C:29:BB:7E:91:71:C7:96 Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Certificate serial: 2066EBF9C5808F4F33C594F65EE8528236C2C560 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1096686730825760771/0/69D8917902AD24A5AC6751655C29BB7E9171C796.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1096686730825760771/0/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Wed 15 Apr 2026 06:39:51 +0000 Certificate not after: Wed 14 Apr 2027 06:44:51 +0000 Subordinate resources: AS: 131542 IP: 43.240.72.0/22 IP: 43.240.156.0/22 IP: 43.241.16.0/22 IP: 43.242.204.0/22 IP: 103.36.60.0/22 IP: 103.36.164.0/22 IP: 103.37.16.0/22 IP: 103.38.84.0/22 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 17:12:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:66:eb:f9:c5:80:8f:4f:33:c5:94:f6:5e:e8:52:82:36:c2:c5:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Validity Not Before: Apr 15 06:39:51 2026 GMT Not After : Apr 14 06:44:51 2027 GMT Subject: CN=69D8917902AD24A5AC6751655C29BB7E9171C796 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:f4:85:94:76:dc:b8:2e:56:f0:e8:ef:d2:45: 0b:8f:7a:ca:6a:cc:f1:35:ff:64:02:ef:38:09:5f: ac:11:47:b2:53:2b:ba:02:3f:5e:35:07:6b:13:90: 96:d3:07:78:11:ee:45:5a:0f:b8:d0:6f:3c:48:c4: 8d:a8:73:ee:63:96:96:92:1c:bb:2d:0d:b7:b8:1c: fc:9b:fb:d6:5d:c4:ea:47:df:ae:de:50:fd:f2:b4: 1e:cc:c0:14:07:ce:a3:68:9e:79:f4:84:19:09:18: fb:7a:c3:eb:5b:cb:6c:b4:1e:9b:47:cc:0c:50:65: f7:20:6e:32:ae:db:77:2e:95:3a:a4:26:1a:0f:40: 4d:47:cf:a9:9d:dc:a1:cc:45:84:5f:04:40:2a:7c: d9:49:7f:09:5f:41:80:d0:13:d0:43:8a:ce:a5:bc: ee:0c:d8:d8:f9:8c:12:81:d3:0a:89:74:74:c6:7d: 74:ae:46:61:0a:82:da:11:2f:cb:90:6b:ce:93:27: 2b:0a:b6:d3:5d:2a:2f:ff:90:46:81:47:01:e3:90: 79:14:96:c2:e2:cd:6e:36:31:d3:5c:f9:52:2a:6d: 8a:e0:8d:64:33:65:28:18:20:ab:f7:7b:ec:08:8b: 50:df:48:1f:23:58:92:98:d5:70:d6:55:28:18:99: dc:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 69:D8:91:79:02:AD:24:A5:AC:67:51:65:5C:29:BB:7E:91:71:C7:96 X509v3 Authority Key Identifier: keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1096686730825760771/0/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1096686730825760771/0/69D8917902AD24A5AC6751655C29BB7E9171C796.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.240.72.0/22 43.240.156.0/22 43.241.16.0/22 43.242.204.0/22 103.36.60.0/22 103.36.164.0/22 103.37.16.0/22 103.38.84.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 131542 Signature Algorithm: sha256WithRSAEncryption 06:5a:7c:13:15:99:69:77:18:2c:b4:e7:ac:2f:78:6d:cb:4e: 47:f8:8d:45:0c:a3:bf:ae:4b:19:6f:24:dc:2a:36:75:5a:36: 79:d3:1f:15:9a:8b:3d:96:44:12:b8:10:e9:22:4c:c4:70:ed: b1:2d:2d:1f:c5:54:83:f4:31:89:09:fb:c7:3a:01:fc:7b:41: 15:e5:7f:d7:7f:25:b6:92:df:68:30:a4:a0:6e:4e:13:82:08: 72:1e:86:0c:d9:ad:9f:49:a5:54:c0:43:dc:dc:d9:9b:dd:43: 79:05:87:61:dd:e9:70:c8:7e:b6:3f:16:70:23:bc:87:93:16: ec:7e:3f:9a:07:c9:3b:2f:d8:3c:10:64:da:a5:bf:5a:d3:ff: 70:82:ca:8b:d0:b0:21:b4:68:f8:68:10:02:86:f6:5f:1a:b2: 37:64:c3:1c:cd:c2:da:01:b9:f9:4d:0e:43:16:05:5b:1c:04: 64:ba:58:0d:84:68:e3:95:80:bc:37:f7:f4:36:0e:d5:d5:5a: 89:23:52:96:9e:40:eb:ff:38:47:d2:4c:1c:4d:aa:ec:85:c8: 2e:26:59:f8:6c:a6:5d:29:b8:c9:a7:70:ff:03:63:b8:05:05: 27:f3:2f:54:50:3f:a9:65:ea:40:7f:ba:2a:32:5c:04:3f:69: cf:c0:e2:36 -----BEGIN CERTIFICATE----- MIIF7TCCBNWgAwIBAgIUIGbr+cWAj08zxZT2XuhSgjbCxWAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDQxNTA2Mzk1MVoX DTI3MDQxNDA2NDQ1MVowMzExMC8GA1UEAxMoNjlEODkxNzkwMkFEMjRBNUFDNjc1 MTY1NUMyOUJCN0U5MTcxQzc5NjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANn0hZR23LguVvDo79JFC496ymrM8TX/ZALvOAlfrBFHslMrugI/XjUHaxOQ ltMHeBHuRVoPuNBvPEjEjahz7mOWlpIcuy0Nt7gc/Jv71l3E6kffrt5Q/fK0HszA FAfOo2ieefSEGQkY+3rD61vLbLQem0fMDFBl9yBuMq7bdy6VOqQmGg9ATUfPqZ3c ocxFhF8EQCp82Ul/CV9BgNAT0EOKzqW87gzY2PmMEoHTCol0dMZ9dK5GYQqC2hEv y5BrzpMnKwq2010qL/+QRoFHAeOQeRSWwuLNbjYx01z5UiptiuCNZDNlKBggq/d7 7AiLUN9IHyNYkpjVcNZVKBiZ3BcCAwEAAaOCAuAwggLcMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFGnYkXkCrSSlrGdRZVwpu36RcceWMB8GA1UdIwQYMBaAFKVu hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTA5NjY4NjczMDgyNTc2MDc3MS8wLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDk2Njg2NzMwODI1NzYwNzcx LzAvNjlEODkxNzkwMkFEMjRBNUFDNjc1MTY1NUMyOUJCN0U5MTcxQzc5Ni5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwSQYIKwYBBQUH AQcBAf8EOjA4MDYEAgABMDADBAIr8EgDBAIr8JwDBAIr8RADBAIr8swDBAJnJDwD BAJnJKQDBAJnJRADBAJnJlQwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDAgHWMA0G CSqGSIb3DQEBCwUAA4IBAQAGWnwTFZlpdxgstOesL3hty05H+I1FDKO/rksZbyTc KjZ1WjZ50x8Vmos9lkQSuBDpIkzEcO2xLS0fxVSD9DGJCfvHOgH8e0EV5X/XfyW2 kt9oMKSgbk4TgghyHoYM2a2fSaVUwEPc3Nmb3UN5BYdh3elwyH62PxZwI7yHkxbs fj+aB8k7L9g8EGTapb9a0/9wgsqL0LAhtGj4aBAChvZfGrI3ZMMczcLaAbn5TQ5D FgVbHARkulgNhGjjlYC8N/f0Ng7V1VqJI1KWnkDr/zhH0kwcTarshcguJln4bKZd KbjJp3D/A2O4BQUn8y9UUD+pZepAf7oqMlwEP2nPwOI2 -----END CERTIFICATE-----Generated at Sat Apr 18 01:01:16 2026 by rpki-client