$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1JQPURo42VRNSLTFxsObBYH4kf4.cer File: 1JQPURo42VRNSLTFxsObBYH4kf4.cer (raw, json) Hash identifier: ctS/sA1E4IpOSbLjMyexT9TMLUocy999bGa09odNZpY= Subject key identifier: D4:94:0F:51:1A:38:D9:54:4D:48:B4:C5:C6:C3:9B:05:81:F8:91:FE Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Certificate serial: E129 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2688/1JQPURo42VRNSLTFxsObBYH4kf4.mft caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2688/ Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml Certificate not before: Thu 23 Oct 2025 03:06:41 +0000 Certificate not after: Fri 23 Oct 2026 03:01:03 +0000 Subordinate resources: AS: 59012 IP: 103.110.136.0/22 IP: 2402:8bc0::/32 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 23:43:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57641 (0xe129) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0000, serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Validity Not Before: Oct 23 03:06:41 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=D4940F511A38D9544D48B4C5C6C39B0581F891FE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:bf:65:8e:cd:3f:b1:83:e7:6d:62:52:51:78: 00:dd:9b:2f:68:3f:02:40:d6:b0:a6:b8:3d:4c:ed: 60:d4:c1:25:d3:84:bd:ff:28:6f:17:74:d0:b8:5d: 66:4e:1e:7b:30:40:a7:1d:e9:53:d7:74:dc:10:bb: f7:c5:08:32:5f:45:c2:92:14:68:ae:14:cd:dd:ad: c6:ae:97:24:fb:09:cf:38:eb:0f:fa:aa:d5:4f:bd: 59:28:1a:9c:69:1d:30:9c:72:38:b7:9b:72:93:e5: 2c:b0:80:ef:85:80:18:9c:f0:e9:92:69:1d:9e:58: 35:05:d0:bd:ad:52:76:b4:6c:14:49:8c:7e:e5:d8: fb:cb:71:79:db:4b:01:12:ea:ec:de:0e:b6:29:7c: 79:a2:17:7a:3a:95:26:8d:cd:33:8f:12:2b:90:6d: f3:34:e8:f6:a7:20:39:c4:c0:c7:2f:3b:36:6a:d0: c3:15:0a:14:5c:5a:4a:aa:ef:3d:99:bc:80:4d:ab: 0e:80:36:21:01:77:9a:24:17:df:94:16:4e:f7:d9: 74:bf:8a:4d:fc:24:a5:87:8b:1b:27:d0:dd:30:e4: ab:29:75:3a:8d:9e:f5:af:b2:d6:f2:36:e9:b5:c2: 27:bb:5f:59:8d:13:e4:18:48:80:3a:98:b6:ad:3e: 94:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:94:0F:51:1A:38:D9:54:4D:48:B4:C5:C6:C3:9B:05:81:F8:91:FE X509v3 Authority Key Identifier: keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2688/ RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2688/1JQPURo42VRNSLTFxsObBYH4kf4.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 59012 sbgp-ipAddrBlock: critical IPv4: 103.110.136.0/22 IPv6: 2402:8bc0::/32 Signature Algorithm: sha256WithRSAEncryption 3d:45:d7:b9:6a:91:9f:ba:e3:20:54:28:07:3d:7d:00:ef:6f: d6:70:ef:6f:d3:c6:f7:e0:36:ae:ee:9c:38:d9:16:ef:c2:e6: d4:d9:68:08:76:0c:99:ff:cb:34:d9:59:15:a5:33:0e:cc:83: b8:64:75:b5:1a:bb:19:80:13:c2:ae:00:1d:43:4c:71:b1:50: 0a:c2:30:03:a2:ee:23:78:ef:68:fe:f2:ac:74:0c:26:1d:e1: 91:ed:af:26:0f:7b:fe:29:ba:22:3c:48:40:2f:2e:e3:6b:ce: d1:d8:0e:8a:3c:38:66:72:c7:20:b0:ac:16:d8:ab:54:97:8a: 02:18:d9:10:e8:18:ca:dc:cc:32:98:6f:7a:b3:9d:dc:40:6d: 34:09:ab:28:25:48:9d:10:81:03:4f:6f:3e:6f:f9:51:f1:9a: a8:f6:6a:c7:91:38:d1:52:8a:b6:96:fd:18:2e:fa:b2:2e:73: fc:ae:82:3c:e8:f8:73:f0:2b:69:0c:a8:fd:15:d9:73:96:b5: 11:56:af:f2:f7:a8:0c:fe:32:78:84:0e:a2:92:5e:a9:5e:97: d5:3b:73:39:f3:c4:9d:4f:1e:cf:37:db:59:c2:35:58:02:99: 53:e4:22:b1:df:ed:da:6f:45:62:9d:e6:8b:1f:8c:7c:66:20: 0f:5e:7c:1f -----BEGIN CERTIFICATE----- MIIFfDCCBGSgAwIBAgIDAOEpMA0GCSqGSIb3DQEBCwUAMEoxFTATBgNVBAMTDEE5 MTYyRTNEMDAwMDExMC8GA1UEBRMoMDQxNjI5QjZBOUVBQjdDQjEzMjRFQTM5NzhG MDM3OTZGODg5QjU0MDAeFw0yNTEwMjMwMzA2NDFaFw0yNjEwMjMwMzAxMDNaMDMx MTAvBgNVBAMTKEQ0OTQwRjUxMUEzOEQ5NTQ0RDQ4QjRDNUM2QzM5QjA1ODFGODkx RkUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9v2WOzT+xg+dtYlJR eADdmy9oPwJA1rCmuD1M7WDUwSXThL3/KG8XdNC4XWZOHnswQKcd6VPXdNwQu/fF CDJfRcKSFGiuFM3drcaulyT7Cc846w/6qtVPvVkoGpxpHTCccji3m3KT5SywgO+F gBic8OmSaR2eWDUF0L2tUna0bBRJjH7l2PvLcXnbSwES6uzeDrYpfHmiF3o6lSaN zTOPEiuQbfM06PanIDnEwMcvOzZq0MMVChRcWkqq7z2ZvIBNqw6ANiEBd5okF9+U Fk732XS/ik38JKWHixsn0N0w5KspdTqNnvWvstbyNum1wie7X1mNE+QYSIA6mLat PpSJAgMBAAGjggKAMIICfDAdBgNVHQ4EFgQU1JQPURo42VRNSLTFxsObBYH4kf4w HwYDVR0jBBgwFoAUBBYptqnqt8sTJOo5ePA3lviJtUAwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjBYBgNVHR8EUTBPME2gS6BJhkdyc3luYzovL3Jwa2kuY25uaWMu Y24vcnBraS9BOTE2MkUzRDAwMDAvQkJZcHRxbnF0OHNUSk9vNWVQQTNsdmlKdFVB LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZE MUZGMi9CQllwdHFucXQ4c1RKT281ZVBBM2x2aUp0VUEuY2VyMA8GA1UdEwEB/wQF MAMBAf8wDgYDVR0PAQH/BAQDAgEGMIHYBggrBgEFBQcBCwSByzCByDA5BggrBgEF BQcwBYYtcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI2 ODgvMFgGCCsGAQUFBzAKhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2 MkUzRDAwMDAvMjY4OC8xSlFQVVJvNDJWUk5TTFRGeHNPYkJZSDRrZjQubWZ0MDEG CCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMuY24vcnJkcC9ub3RpZnkueG1s MBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwDmhDAuBggrBgEFBQcBBwEB/wQfMB0w DAQCAAEwBgMEAmduiDANBAIAAjAHAwUAJAKLwDANBgkqhkiG9w0BAQsFAAOCAQEA PUXXuWqRn7rjIFQoBz19AO9v1nDvb9PG9+A2ru6cONkW78Lm1NloCHYMmf/LNNlZ FaUzDsyDuGR1tRq7GYATwq4AHUNMcbFQCsIwA6LuI3jvaP7yrHQMJh3hke2vJg97 /im6IjxIQC8u42vO0dgOijw4ZnLHILCsFtirVJeKAhjZEOgYytzMMphverOd3EBt NAmrKCVInRCBA09vPm/5UfGaqPZqx5E40VKKtpb9GC76si5z/K6CPOj4c/AraQyo /RXZc5a1EVav8veoDP4yeIQOopJeqV6X1TtzOfPEnU8ezzfbWcI1WAKZU+Qisd/t 2m9FYp3mix+MfGYgD158Hw== -----END CERTIFICATE-----Generated at Wed Nov 5 21:48:26 2025 by rpki-client