$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2S0gFnN4OWtvovkcS7Vg78LTQAM.cer File: 2S0gFnN4OWtvovkcS7Vg78LTQAM.cer (raw, json) Hash identifier: /B/J/9Q2myK5jz0tLPCx0XTL/x58PJAlA/ez+ckyXbo= Subject key identifier: D9:2D:20:16:73:78:39:6B:6F:A2:F9:1C:4B:B5:60:EF:C2:D3:40:03 Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Certificate serial: E3A9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3266/2S0gFnN4OWtvovkcS7Vg78LTQAM.mft caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3266/ Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml Certificate not before: Thu 23 Oct 2025 09:33:43 +0000 Certificate not after: Fri 23 Oct 2026 09:22:11 +0000 Subordinate resources: AS: 146789 IP: 2401:7ce0::/32 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 14:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58281 (0xe3a9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0000, serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Validity Not Before: Oct 23 09:33:43 2025 GMT Not After : Oct 23 09:22:11 2026 GMT Subject: CN=D92D20167378396B6FA2F91C4BB560EFC2D34003 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:4b:63:e5:2d:4a:08:05:e7:ba:2e:28:93:58: 31:39:ce:f9:5b:a1:27:d6:62:fb:41:3f:1d:cf:a3: f5:45:d6:ef:1e:fd:3d:85:98:85:fe:99:8b:a4:8b: 1e:a3:9e:13:28:32:c5:89:9f:39:ce:9e:10:0f:3e: a8:2d:80:fe:9a:88:a5:5f:cb:1d:a4:28:73:05:14: ed:02:8b:c8:a8:e8:3e:e5:4d:4a:27:b2:bc:23:88: 23:fc:5b:c7:e4:4c:c9:86:b4:30:24:66:34:b9:e5: c9:96:aa:bf:e4:73:e1:4d:2f:74:24:dd:4c:6c:93: dc:93:07:b7:d6:53:a7:aa:7c:6d:b8:0b:cf:1a:64: 41:10:a1:9f:c8:95:14:d3:58:0a:a5:0c:22:cd:69: 86:83:62:a8:1d:2a:21:a7:0e:bb:b7:1f:a9:cb:34: 8a:95:83:dd:eb:b1:f2:08:d5:83:7a:2f:a8:9b:42: 9c:c5:b5:29:70:f6:4f:de:c1:91:01:62:2c:76:dd: fb:b8:89:4a:b6:ba:cd:ac:ed:49:4c:98:01:0d:1f: a0:1b:b2:c2:24:f2:95:ee:5d:4f:66:1c:e9:e6:fc: 6c:c7:f2:1b:59:74:76:21:60:b5:d3:2a:51:13:13: b3:c5:af:01:88:a2:cf:ef:1e:13:64:d1:a1:06:5d: 90:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:2D:20:16:73:78:39:6B:6F:A2:F9:1C:4B:B5:60:EF:C2:D3:40:03 X509v3 Authority Key Identifier: keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3266/ RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3266/2S0gFnN4OWtvovkcS7Vg78LTQAM.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 146789 sbgp-ipAddrBlock: critical IPv6: 2401:7ce0::/32 Signature Algorithm: sha256WithRSAEncryption 8c:6d:1a:93:8d:78:47:a8:98:d5:73:5a:80:15:14:61:fc:89: 4f:6f:49:0f:b9:8b:bd:0e:b7:39:1e:b2:3b:31:80:c6:40:e1: db:d1:be:de:11:89:a2:c2:9e:72:2d:40:4d:6d:31:74:98:14: 99:ba:80:34:d8:61:60:79:22:42:96:53:69:b1:f0:4d:88:67: f8:33:f3:2b:e6:a1:f8:d0:fb:94:ee:77:7e:dc:b1:5d:5c:12: 86:a8:51:ab:5e:ac:05:bb:f8:b3:45:e3:c1:0f:52:a4:86:2c: 8f:58:e0:53:f9:b2:ca:03:ad:89:99:6f:44:fe:6c:14:7d:38: f5:84:eb:be:10:68:71:5e:5d:2a:c8:6a:ee:1e:bb:25:d0:61: 31:4b:77:ba:13:af:26:a9:86:0a:01:3f:76:f4:e3:aa:f2:5d: 7b:5f:aa:93:0f:94:40:ba:cd:e1:71:80:ee:3c:8a:5f:4e:61: 46:b9:00:b6:35:f3:71:50:cf:d0:45:1a:ae:d9:a7:4a:79:37: 64:4f:c3:8d:67:c7:59:2c:ab:b0:3a:b6:da:f2:9e:fe:c6:dc: 7c:c1:dd:2c:f3:d2:cd:7a:e8:3c:60:ff:fe:18:5d:91:c6:c6: a1:60:22:7d:13:9a:76:61:17:3c:6f:45:03:a5:d2:7f:6e:6e: b9:37:b2:1d -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIDAOOpMA0GCSqGSIb3DQEBCwUAMEoxFTATBgNVBAMTDEE5 MTYyRTNEMDAwMDExMC8GA1UEBRMoMDQxNjI5QjZBOUVBQjdDQjEzMjRFQTM5NzhG MDM3OTZGODg5QjU0MDAeFw0yNTEwMjMwOTMzNDNaFw0yNjEwMjMwOTIyMTFaMDMx MTAvBgNVBAMTKEQ5MkQyMDE2NzM3ODM5NkI2RkEyRjkxQzRCQjU2MEVGQzJEMzQw MDMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8S2PlLUoIBee6LiiT WDE5zvlboSfWYvtBPx3Po/VF1u8e/T2FmIX+mYukix6jnhMoMsWJnznOnhAPPqgt gP6aiKVfyx2kKHMFFO0Ci8io6D7lTUonsrwjiCP8W8fkTMmGtDAkZjS55cmWqr/k c+FNL3Qk3Uxsk9yTB7fWU6eqfG24C88aZEEQoZ/IlRTTWAqlDCLNaYaDYqgdKiGn Dru3H6nLNIqVg93rsfII1YN6L6ibQpzFtSlw9k/ewZEBYix23fu4iUq2us2s7UlM mAENH6AbssIk8pXuXU9mHOnm/GzH8htZdHYhYLXTKlETE7PFrwGIos/vHhNk0aEG XZCrAgMBAAGjggJyMIICbjAdBgNVHQ4EFgQU2S0gFnN4OWtvovkcS7Vg78LTQAMw HwYDVR0jBBgwFoAUBBYptqnqt8sTJOo5ePA3lviJtUAwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjBYBgNVHR8EUTBPME2gS6BJhkdyc3luYzovL3Jwa2kuY25uaWMu Y24vcnBraS9BOTE2MkUzRDAwMDAvQkJZcHRxbnF0OHNUSk9vNWVQQTNsdmlKdFVB LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZE MUZGMi9CQllwdHFucXQ4c1RKT281ZVBBM2x2aUp0VUEuY2VyMA8GA1UdEwEB/wQF MAMBAf8wDgYDVR0PAQH/BAQDAgEGMIHYBggrBgEFBQcBCwSByzCByDA5BggrBgEF BQcwBYYtcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMy NjYvMFgGCCsGAQUFBzAKhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2 MkUzRDAwMDAvMzI2Ni8yUzBnRm5ONE9XdHZvdmtjUzdWZzc4TFRRQU0ubWZ0MDEG CCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMuY24vcnJkcC9ub3RpZnkueG1s MBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwI9ZTAgBggrBgEFBQcBBwEB/wQRMA8w DQQCAAIwBwMFACQBfOAwDQYJKoZIhvcNAQELBQADggEBAIxtGpONeEeomNVzWoAV FGH8iU9vSQ+5i70OtzkesjsxgMZA4dvRvt4RiaLCnnItQE1tMXSYFJm6gDTYYWB5 IkKWU2mx8E2IZ/gz8yvmofjQ+5Tud37csV1cEoaoUaterAW7+LNF48EPUqSGLI9Y 4FP5ssoDrYmZb0T+bBR9OPWE674QaHFeXSrIau4euyXQYTFLd7oTryaphgoBP3b0 46ryXXtfqpMPlEC6zeFxgO48il9OYUa5ALY183FQz9BFGq7Zp0p5N2RPw41nx1ks q7A6ttrynv7G3HzB3Szz0s166Dxg//4YXZHGxqFgIn0TmnZhFzxvRQOl0n9ubrk3 sh0= -----END CERTIFICATE-----Generated at Wed Nov 5 10:22:53 2025 by rpki-client