Certificate

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1F693CD57E5ECCEA0DD6A4C0E4D8AB207FC51DF1.cer
File:                     1F693CD57E5ECCEA0DD6A4C0E4D8AB207FC51DF1.cer (raw, json)
Hash identifier:          TSgmLlCPYaqGZz3jaOyq70g4ZI7NpCfJ+FjC0cBjdm0=
Subject key identifier:   1F:69:3C:D5:7E:5E:CC:EA:0D:D6:A4:C0:E4:D8:AB:20:7F:C5:1D:F1
Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10
Certificate issuer:       /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710
Certificate serial:       648480F94526F690396AB49A42C7724C95FDEF8A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
Manifest:                 rsync://rpki-rps.cnnic.cn/repo/A1098465627510669315/0/1F693CD57E5ECCEA0DD6A4C0E4D8AB207FC51DF1.mft
caRepository:             rsync://rpki-rps.cnnic.cn/repo/A1098465627510669315/0/
Notify URL:               https://rrdp-rps.cnnic.cn/rrdp/notification.xml
Certificate not before:   Mon 20 Apr 2026 04:25:16 +0000
Certificate not after:    Mon 19 Apr 2027 04:30:16 +0000
Subordinate resources:    AS: 139118
                          IP: 43.242.96.0/22
                          IP: 103.156.68.0/23
                          IP: 2406:7fc0::/32
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 11:49:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:84:80:f9:45:26:f6:90:39:6a:b4:9a:42:c7:72:4c:95:fd:ef:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710
        Validity
            Not Before: Apr 20 04:25:16 2026 GMT
            Not After : Apr 19 04:30:16 2027 GMT
        Subject: CN=1F693CD57E5ECCEA0DD6A4C0E4D8AB207FC51DF1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:e9:ad:e3:5c:2d:8c:41:05:16:04:45:19:83:
                    91:e3:4b:7e:75:9c:19:a6:d2:e5:77:31:28:86:a6:
                    16:89:15:50:39:64:a1:02:24:82:41:7c:a3:89:13:
                    20:5f:57:53:45:bf:43:39:6f:26:67:d2:c3:e5:dd:
                    80:2c:22:86:82:5b:16:a4:b6:28:a6:6a:e8:31:30:
                    66:67:61:54:a0:62:a5:87:44:60:bd:96:f2:23:cb:
                    01:33:6b:6e:13:73:6d:0d:e0:9b:47:0c:7a:26:8d:
                    03:66:55:bc:f2:c2:e0:d8:fe:68:9c:4e:64:f8:25:
                    3a:0e:66:fe:5b:f9:64:89:24:d8:48:7d:95:d5:eb:
                    52:2b:36:89:25:6e:e2:06:ad:9a:b4:09:37:20:b4:
                    13:c9:a2:7a:2a:fa:b5:95:33:1d:18:95:0c:00:35:
                    ad:c3:ca:6f:5a:6e:0d:f9:96:92:da:a5:4c:52:50:
                    b3:20:d3:30:82:dd:82:19:7c:31:78:72:b6:89:b7:
                    bc:85:a2:7b:cb:25:48:7e:a8:63:f8:9a:3f:e3:35:
                    14:fb:ce:9d:1c:f1:9b:fd:a6:41:61:ab:89:14:63:
                    db:a6:5b:df:9b:c3:74:87:89:14:d8:84:cc:97:01:
                    12:81:66:d2:41:50:cd:fd:f6:e2:2b:18:3d:48:2e:
                    66:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                1F:69:3C:D5:7E:5E:CC:EA:0D:D6:A4:C0:E4:D8:AB:20:7F:C5:1D:F1
            X509v3 Authority Key Identifier:
                keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1098465627510669315/0/
                RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1098465627510669315/0/1F693CD57E5ECCEA0DD6A4C0E4D8AB207FC51DF1.mft
                RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.242.96.0/22
                  103.156.68.0/23
                IPv6:
                  2406:7fc0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  139118

    Signature Algorithm: sha256WithRSAEncryption
         8e:89:fe:f0:81:7f:a0:ee:c3:92:e2:8e:15:d9:95:07:65:84:
         96:4a:1d:59:94:7b:6c:a6:88:80:90:a0:b6:f9:4a:57:ad:45:
         e5:e5:79:8d:48:a9:ef:d1:f7:40:4b:bd:07:84:99:1f:9d:97:
         3c:53:b5:3e:43:93:76:45:f9:36:cc:12:db:aa:5b:c9:89:0c:
         c6:e2:7c:c2:48:5c:b1:fb:c2:14:b0:83:a7:2b:b2:a3:3f:52:
         4d:75:18:c4:fc:9d:2b:73:bc:c5:26:d8:8e:d1:6c:f2:db:45:
         d8:7d:93:5b:c9:08:72:6d:98:ce:3e:26:98:c3:54:ab:4f:0c:
         7a:a5:2d:29:8e:b2:44:42:24:dc:45:59:0d:3a:fb:4e:76:d3:
         73:81:ab:51:2a:92:77:3a:bf:94:74:63:1a:82:fd:5f:96:be:
         dd:8d:4d:4c:6b:49:b2:fa:63:87:8a:f1:fd:5e:a3:6a:d4:74:
         39:ef:7f:46:35:e7:f5:75:56:04:29:43:67:2e:1d:b2:f9:ea:
         fd:3e:32:ee:3a:17:ed:64:e3:d3:f7:7f:a4:3c:25:9e:51:09:
         55:ba:47:b5:99:bf:be:2c:98:75:cd:8a:cb:39:bc:d5:10:bc:
         ea:f1:8e:4b:ee:9b:87:05:33:48:2e:83:ed:02:fe:7b:0e:f1:
         43:b7:72:df
-----BEGIN CERTIFICATE-----
MIIF2DCCBMCgAwIBAgIUZISA+UUm9pA5arSaQsdyTJX974owDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw
M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDQyMDA0MjUxNloX
DTI3MDQxOTA0MzAxNlowMzExMC8GA1UEAxMoMUY2OTNDRDU3RTVFQ0NFQTBERDZB
NEMwRTREOEFCMjA3RkM1MURGMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAL3preNcLYxBBRYERRmDkeNLfnWcGabS5XcxKIamFokVUDlkoQIkgkF8o4kT
IF9XU0W/QzlvJmfSw+XdgCwihoJbFqS2KKZq6DEwZmdhVKBipYdEYL2W8iPLATNr
bhNzbQ3gm0cMeiaNA2ZVvPLC4Nj+aJxOZPglOg5m/lv5ZIkk2Eh9ldXrUis2iSVu
4gatmrQJNyC0E8mieir6tZUzHRiVDAA1rcPKb1puDfmWktqlTFJQsyDTMILdghl8
MXhytom3vIWie8slSH6oY/iaP+M1FPvOnRzxm/2mQWGriRRj26Zb35vDdIeJFNiE
zJcBEoFm0kFQzf324isYPUguZhECAwEAAaOCAsswggLHMA8GA1UdEwEB/wQFMAMB
Af8wHQYDVR0OBBYEFB9pPNV+XszqDdakwOTYqyB/xR3xMB8GA1UdIwQYMBaAFKVu
hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig
ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw
OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE
NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB
BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu
Y24vcmVwby9BMTA5ODQ2NTYyNzUxMDY2OTMxNS8wLzBuBggrBgEFBQcwCoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDk4NDY1NjI3NTEwNjY5MzE1
LzAvMUY2OTNDRDU3RTVFQ0NFQTBERDZBNEMwRTREOEFCMjA3RkM1MURGMS5tZnQw
OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp
ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwNAYIKwYBBQUH
AQcBAf8EJTAjMBIEAgABMAwDBAIr8mADBAFnnEQwDQQCAAIwBwMFACQGf8AwGgYI
KwYBBQUHAQgBAf8ECzAJoAcwBQIDAh9uMA0GCSqGSIb3DQEBCwUAA4IBAQCOif7w
gX+g7sOS4o4V2ZUHZYSWSh1ZlHtspoiAkKC2+UpXrUXl5XmNSKnv0fdAS70HhJkf
nZc8U7U+Q5N2Rfk2zBLbqlvJiQzG4nzCSFyx+8IUsIOnK7KjP1JNdRjE/J0rc7zF
JtiO0Wzy20XYfZNbyQhybZjOPiaYw1SrTwx6pS0pjrJEQiTcRVkNOvtOdtNzgatR
KpJ3Or+UdGMagv1flr7djU1Ma0my+mOHivH9XqNq1HQ5739GNef1dVYEKUNnLh2y
+er9PjLuOhftZOPT93+kPCWeUQlVuke1mb++LJh1zYrLObzVELzq8Y5L7puHBTNI
LoPtAv57DvFDt3Lf
-----END CERTIFICATE-----
Generated at Wed May 13 20:17:18 2026 by rpki-client