$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CA269469647823B4286B5E34CC0E3D54FD201592.cer File: CA269469647823B4286B5E34CC0E3D54FD201592.cer (raw, json) Hash identifier: xz7RMPiri13v9GI+Qvl+oLSPn0z2yIC2/jGUeLGQ0uA= Subject key identifier: CA:26:94:69:64:78:23:B4:28:6B:5E:34:CC:0E:3D:54:FD:20:15:92 Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Certificate serial: 46B98B7B97BC760CDA1D6B38834274D040D4214A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1104692273511137285/0/CA269469647823B4286B5E34CC0E3D54FD201592.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1104692273511137285/0/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Thu 07 May 2026 08:47:44 +0000 Certificate not after: Thu 06 May 2027 08:52:44 +0000 Subordinate resources: IP: 103.212.48.0/22 IP: 192.140.136.0/22 IP: 192.140.156.0/22 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 11:49:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:b9:8b:7b:97:bc:76:0c:da:1d:6b:38:83:42:74:d0:40:d4:21:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Validity Not Before: May 7 08:47:44 2026 GMT Not After : May 6 08:52:44 2027 GMT Subject: CN=CA269469647823B4286B5E34CC0E3D54FD201592 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:fc:02:3e:cf:61:7c:ca:c3:1d:f9:06:ac:56: 9c:07:d3:03:5b:a3:d7:9c:bb:30:ec:71:63:62:7e: 67:ab:ce:15:04:bb:06:0b:3d:10:0b:39:ef:7c:79: 23:07:a7:3c:db:cd:88:52:10:c6:55:a4:2d:43:5e: aa:40:20:35:55:48:2b:1d:31:9b:bf:9c:f5:8c:d0: 75:62:e5:fa:8d:1f:ce:2d:cd:9f:9a:75:13:63:a8: 69:b1:e9:61:6c:13:7c:8a:c6:4a:1b:f9:8f:69:0b: 1d:4f:5d:44:fe:5f:60:9f:7b:12:12:4d:69:6e:10: 72:cf:d7:ef:4d:0d:55:35:8c:8c:87:59:37:65:3e: fa:22:ed:66:29:05:86:df:fd:22:ba:34:19:02:04: f8:64:43:81:bf:6a:cc:6c:f0:69:1e:78:b8:11:86: cf:5d:73:b2:4f:c1:e3:a8:bb:33:a7:f1:cc:f6:fb: 4a:a0:e6:2e:d3:23:8c:ce:be:c4:f5:a2:2f:05:a3: 57:e4:24:48:db:94:65:f9:76:86:f8:03:4f:9d:09: 31:90:3d:d7:9b:c0:6c:6e:71:d0:0f:51:da:d6:7f: 23:12:79:97:2a:7a:29:e6:66:bb:2d:ed:ba:2f:c3: 12:20:1d:a6:8c:7d:e1:e6:84:42:5d:8e:43:5c:3e: 27:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: CA:26:94:69:64:78:23:B4:28:6B:5E:34:CC:0E:3D:54:FD:20:15:92 X509v3 Authority Key Identifier: keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1104692273511137285/0/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1104692273511137285/0/CA269469647823B4286B5E34CC0E3D54FD201592.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.212.48.0/22 192.140.136.0/22 192.140.156.0/22 Signature Algorithm: sha256WithRSAEncryption 62:82:5e:b0:92:d9:fe:96:79:c6:fb:1a:52:52:ad:55:3d:d7: 3c:55:90:35:b1:6c:ef:27:1c:c9:30:9b:47:06:d5:29:02:7c: 15:20:6a:a0:bb:3e:71:2c:ab:cb:44:db:02:8a:71:26:3a:8f: 1a:6e:95:e1:b3:81:18:b6:df:77:77:b8:60:70:67:74:0a:b3: 6a:11:93:91:0e:00:1d:27:6a:4b:c6:fa:da:db:2a:ce:7a:e1: f1:7a:6c:d6:b1:b5:aa:8d:11:bd:19:46:09:ad:90:a3:dc:15: b5:45:03:94:d8:cf:99:d6:b8:1b:89:71:81:82:89:6f:be:18: 60:08:9b:9a:31:9e:a8:54:a2:5b:c3:d8:88:6e:43:2d:db:c7: aa:c7:f0:2d:06:76:18:32:11:ef:49:e3:b7:10:00:5b:f0:e2: 01:5a:c9:8f:3b:c8:96:21:15:44:12:c1:56:8d:f5:8a:90:59: 8a:88:ea:ae:df:d3:0e:75:2c:7d:d3:f2:26:e1:22:c9:ae:ba: a9:db:a1:a8:7e:26:c9:70:77:db:4b:a2:b6:a5:34:8d:84:ca: 34:cd:93:c9:fc:da:4a:6a:0e:cb:5d:41:2b:c7:5c:bc:58:a1: 77:c0:29:ca:33:e1:7b:7c:45:e1:ce:ec:ff:56:e9:f5:9a:d9: e0:c9:62:b2 -----BEGIN CERTIFICATE----- MIIFszCCBJugAwIBAgIURrmLe5e8dgzaHWs4g0J00EDUIUowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDUwNzA4NDc0NFoX DTI3MDUwNjA4NTI0NFowMzExMC8GA1UEAxMoQ0EyNjk0Njk2NDc4MjNCNDI4NkI1 RTM0Q0MwRTNENTRGRDIwMTU5MjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALP8Aj7PYXzKwx35BqxWnAfTA1uj15y7MOxxY2J+Z6vOFQS7Bgs9EAs573x5 IwenPNvNiFIQxlWkLUNeqkAgNVVIKx0xm7+c9YzQdWLl+o0fzi3Nn5p1E2OoabHp YWwTfIrGShv5j2kLHU9dRP5fYJ97EhJNaW4Qcs/X700NVTWMjIdZN2U++iLtZikF ht/9Iro0GQIE+GRDgb9qzGzwaR54uBGGz11zsk/B46i7M6fxzPb7SqDmLtMjjM6+ xPWiLwWjV+QkSNuUZfl2hvgDT50JMZA915vAbG5x0A9R2tZ/IxJ5lyp6KeZmuy3t ui/DEiAdpox94eaEQl2OQ1w+J08CAwEAAaOCAqYwggKiMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFMomlGlkeCO0KGteNMwOPVT9IBWSMB8GA1UdIwQYMBaAFKVu hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTEwNDY5MjI3MzUxMTEzNzI4NS8wLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMTA0NjkyMjczNTExMTM3Mjg1 LzAvQ0EyNjk0Njk2NDc4MjNCNDI4NkI1RTM0Q0MwRTNENTRGRDIwMTU5Mi5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwKwYIKwYBBQUH AQcBAf8EHDAaMBgEAgABMBIDBAJn1DADBALAjIgDBALAjJwwDQYJKoZIhvcNAQEL BQADggEBAGKCXrCS2f6Wecb7GlJSrVU91zxVkDWxbO8nHMkwm0cG1SkCfBUgaqC7 PnEsq8tE2wKKcSY6jxpuleGzgRi233d3uGBwZ3QKs2oRk5EOAB0nakvG+trbKs56 4fF6bNaxtaqNEb0ZRgmtkKPcFbVFA5TYz5nWuBuJcYGCiW++GGAIm5oxnqhUolvD 2IhuQy3bx6rH8C0GdhgyEe9J47cQAFvw4gFayY87yJYhFUQSwVaN9YqQWYqI6q7f 0w51LH3T8ibhIsmuuqnboah+Jslwd9tLoralNI2EyjTNk8n82kpqDstdQSvHXLxY oXfAKcoz4Xt8ReHO7P9W6fWa2eDJYrI= -----END CERTIFICATE-----Generated at Wed May 13 15:58:45 2026 by rpki-client