Certificate
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D569CE49ED940955318F718AEACD6D410BFF66B3.cer
File: D569CE49ED940955318F718AEACD6D410BFF66B3.cer (raw, json)
Hash identifier: CG5NVHrwVA0TlFJsa4YZtXJ0YDyIAfSkOpSqZmIyB4w=
Subject key identifier: D5:69:CE:49:ED:94:09:55:31:8F:71:8A:EA:CD:6D:41:0B:FF:66:B3
Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10
Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710
Certificate serial: 459EDC2E35C7AB2C292A49EE55432B414A2E7DE7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
Manifest: rsync://rpki-rps.cnnic.cn/repo/A1096330859092508673/0/D569CE49ED940955318F718AEACD6D410BFF66B3.mft
caRepository: rsync://rpki-rps.cnnic.cn/repo/A1096330859092508673/0/
Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml
Certificate not before: Tue 14 Apr 2026 07:06:10 +0000
Certificate not after: Tue 13 Apr 2027 07:11:10 +0000
Subordinate resources: AS: 131547
IP: 43.227.252.0/22
IP: 43.228.36.0/22
IP: 43.241.240.0/22
IP: 43.243.136.0/22
IP: 59.153.64.0/22
IP: 103.37.172.0/22
IP: 103.38.224.0/22
IP: 103.43.184.0/22
IP: 103.47.48.0/22
IP: 103.93.204.0/22
IP: 103.198.60.0/22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 17:12:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:9e:dc:2e:35:c7:ab:2c:29:2a:49:ee:55:43:2b:41:4a:2e:7d:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710
Validity
Not Before: Apr 14 07:06:10 2026 GMT
Not After : Apr 13 07:11:10 2027 GMT
Subject: CN=D569CE49ED940955318F718AEACD6D410BFF66B3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:30:54:7d:2e:7c:3a:c9:03:c2:22:28:bd:c6:
c2:01:67:46:f6:d2:5d:be:6d:ae:4e:40:96:2a:c7:
fa:13:78:52:05:e0:f8:ee:02:a5:a5:79:63:68:26:
49:6f:88:d9:9e:c5:be:c9:3d:0e:f5:da:4a:ed:05:
52:65:47:97:ea:42:a1:fa:ba:29:05:71:64:59:c2:
d6:2a:0d:12:00:55:7b:d3:0a:13:23:5a:1f:5d:fc:
51:c8:e8:b4:9c:72:91:a3:27:f1:5f:d3:7c:e8:ea:
8a:29:38:14:c3:21:1c:2d:4b:94:8e:89:fe:93:66:
4e:bc:de:ba:bf:fa:3d:ff:c9:5e:e5:42:ea:f7:41:
3f:eb:f7:ab:d8:d0:9d:63:e3:b7:82:41:99:40:40:
48:8d:9f:b0:5d:c6:9a:1a:c7:74:db:fe:f7:22:11:
2a:b3:5b:d4:b7:f1:89:54:1f:c0:aa:0c:46:62:d8:
80:fb:f5:ea:52:cb:a0:a1:d9:ce:7f:f1:ef:d2:a6:
56:92:30:fe:63:ab:1d:18:27:ed:63:2a:fe:e7:cc:
3f:29:3d:ec:d9:e3:54:84:70:ae:e4:68:97:41:bf:
34:c7:b2:2c:43:4e:f7:5c:8b:00:d6:0c:0a:4b:3c:
40:4e:bc:53:2e:be:fc:fd:98:0b:10:ce:ed:47:6d:
83:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
D5:69:CE:49:ED:94:09:55:31:8F:71:8A:EA:CD:6D:41:0B:FF:66:B3
X509v3 Authority Key Identifier:
keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1096330859092508673/0/
RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1096330859092508673/0/D569CE49ED940955318F718AEACD6D410BFF66B3.mft
RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
43.227.252.0/22
43.228.36.0/22
43.241.240.0/22
43.243.136.0/22
59.153.64.0/22
103.37.172.0/22
103.38.224.0/22
103.43.184.0/22
103.47.48.0/22
103.93.204.0/22
103.198.60.0/22
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
131547
Signature Algorithm: sha256WithRSAEncryption
7a:c7:f1:be:e2:f0:57:77:f1:5d:c0:27:b9:49:e0:f3:b1:5e:
01:5e:e5:d2:5c:95:0d:98:c3:dc:5f:bf:f6:d1:05:33:b9:5f:
b7:a1:9d:8d:1a:2f:de:d7:e6:1f:85:fc:2e:ca:0c:48:65:dd:
6c:f9:1b:70:a0:d5:97:16:33:3f:16:57:0b:fa:34:65:81:73:
db:7f:3c:af:41:c4:7c:75:80:96:f0:f1:a3:10:64:54:1f:b1:
a7:8b:6e:67:86:d4:e9:72:0e:75:26:9a:9d:de:ed:5c:fc:eb:
67:83:16:d7:dc:72:d8:5c:28:73:a1:d2:1e:ee:b8:cc:df:91:
67:de:e1:b3:6e:ab:14:6e:17:dd:25:44:25:e0:62:2c:e1:fd:
7b:1d:8d:c0:31:56:f0:48:37:3b:10:cc:ef:c8:79:04:29:35:
14:3b:e6:70:61:c4:3a:3b:21:1d:7c:e3:c5:20:fa:2e:c4:95:
96:1b:6d:a2:6e:f0:f4:be:43:3b:fc:86:bb:36:d4:00:af:2e:
8f:53:82:6e:0f:d1:3f:75:41:6c:a3:0a:01:88:57:2f:23:cd:
a4:ba:cb:b3:37:7e:5d:92:4b:7e:55:cb:74:d6:54:de:d2:f4:
ed:44:0b:32:89:c2:07:a2:09:a8:4c:5e:0b:b8:8b:f9:09:ca:
a8:43:df:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 22:45:25 2026 by rpki-client