$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3Vi43ud7iv5uKRpbggWxMTFpeE8.cer File: 3Vi43ud7iv5uKRpbggWxMTFpeE8.cer (raw, json) Hash identifier: f2uvSCl8RdxXgprTVs6gLGlwnTBLfJLvhwvCqMRVjBI= Subject key identifier: DD:58:B8:DE:E7:7B:8A:FE:6E:29:1A:5B:82:05:B1:31:31:69:78:4F Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Certificate serial: D8BC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2671/3Vi43ud7iv5uKRpbggWxMTFpeE8.mft caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2671/ Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml Certificate not before: Sun 03 Aug 2025 09:13:43 +0000 Certificate not after: Mon 03 Aug 2026 08:44:40 +0000 Subordinate resources: AS: 45112 IP: 103.108.164.0/22 IP: 2402:6bc0::/32 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 Aug 2025 07:32:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55484 (0xd8bc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0000, serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Validity Not Before: Aug 3 09:13:43 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=DD58B8DEE77B8AFE6E291A5B8205B1313169784F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:38:af:0f:bd:e6:83:80:03:bf:0c:81:cc:d3: 84:07:6f:bd:f0:e3:ca:ae:61:ad:f0:ca:68:82:cb: a0:5d:8f:6e:b3:2d:38:67:3e:62:d9:9c:23:b0:ac: 27:f5:72:89:a0:8a:d8:2a:6b:2e:a5:ae:a6:d1:04: b4:d4:ca:ae:1d:59:15:f8:30:19:c2:46:cc:49:71: 44:34:a6:9d:97:42:44:e8:80:02:46:cf:5e:9b:ae: bd:b0:97:10:d7:80:8c:29:b7:60:48:93:ab:71:ac: 3a:1e:b9:2d:e5:61:f7:fa:1c:c0:f6:d8:35:a7:41: 36:55:f6:c6:95:5b:c1:aa:83:c8:e6:ec:71:dc:0d: ee:0d:ad:b1:99:6b:64:59:b4:6e:84:62:0f:0a:19: 02:f3:62:fb:3a:49:54:0a:7a:06:59:80:f1:a5:bb: c1:ac:0f:4b:68:21:be:09:5d:39:8b:7a:e7:af:8c: ba:7a:03:bb:db:8e:fd:1a:7d:61:23:9e:99:db:ba: 2e:48:b8:08:9d:d4:54:b6:97:ee:35:f7:63:db:ee: 67:7a:fe:94:29:67:ab:63:21:c9:b7:7a:de:a8:a8: b3:69:c1:0f:02:0a:49:a3:67:64:97:59:52:b4:fa: ad:87:7b:88:3c:fa:a2:6a:2b:52:70:ff:d8:07:dc: f7:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:58:B8:DE:E7:7B:8A:FE:6E:29:1A:5B:82:05:B1:31:31:69:78:4F X509v3 Authority Key Identifier: keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2671/ RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2671/3Vi43ud7iv5uKRpbggWxMTFpeE8.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 45112 sbgp-ipAddrBlock: critical IPv4: 103.108.164.0/22 IPv6: 2402:6bc0::/32 Signature Algorithm: sha256WithRSAEncryption 71:a7:70:8f:87:96:05:dc:c3:81:0e:96:bb:4d:19:6a:28:38: 5e:3e:23:65:ce:9d:55:98:95:42:93:35:13:99:51:df:10:9b: be:be:75:e0:76:e1:5f:4a:49:56:c2:39:0d:40:77:a8:e5:c3: 37:e4:75:63:9d:12:ab:eb:98:95:bb:64:7b:50:fb:e5:c8:50: 55:78:a3:b2:22:0b:7b:c8:3b:c0:ea:5a:90:d0:03:f7:73:61: de:cf:94:7c:9c:91:a0:0c:13:49:28:f6:36:c3:0e:7a:c9:05: 17:ed:b1:55:74:6d:de:e5:15:f8:76:04:98:54:19:ed:18:81: 42:23:9b:1b:4d:3f:f8:24:db:69:40:2e:9c:af:22:4e:34:70: 18:e8:a7:1d:89:ad:d0:6e:fa:41:26:e7:b5:31:ea:a0:3f:b7: 79:05:29:1f:87:7f:6e:53:1b:c1:5c:b5:c8:1d:80:4a:7b:7e: 7f:85:53:b9:18:94:e0:6b:7b:76:d4:32:98:b6:4c:ba:5e:ea: d2:79:48:77:42:d7:6f:60:bc:d3:e1:e7:b7:09:15:29:c1:46: 76:7e:5c:9c:cc:b1:f3:3d:e3:87:9b:e0:09:8e:c5:b8:ab:63: a0:8d:0a:42:07:ab:e4:b0:73:b5:08:75:64:2d:a3:5a:af:28: 3f:89:70:2c -----BEGIN CERTIFICATE----- MIIFfDCCBGSgAwIBAgIDANi8MA0GCSqGSIb3DQEBCwUAMEoxFTATBgNVBAMTDEE5 MTYyRTNEMDAwMDExMC8GA1UEBRMoMDQxNjI5QjZBOUVBQjdDQjEzMjRFQTM5NzhG MDM3OTZGODg5QjU0MDAeFw0yNTA4MDMwOTEzNDNaFw0yNjA4MDMwODQ0NDBaMDMx MTAvBgNVBAMTKERENThCOERFRTc3QjhBRkU2RTI5MUE1QjgyMDVCMTMxMzE2OTc4 NEYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOOK8PveaDgAO/DIHM 04QHb73w48quYa3wymiCy6Bdj26zLThnPmLZnCOwrCf1comgitgqay6lrqbRBLTU yq4dWRX4MBnCRsxJcUQ0pp2XQkTogAJGz16brr2wlxDXgIwpt2BIk6txrDoeuS3l Yff6HMD22DWnQTZV9saVW8Gqg8jm7HHcDe4NrbGZa2RZtG6EYg8KGQLzYvs6SVQK egZZgPGlu8GsD0toIb4JXTmLeuevjLp6A7vbjv0afWEjnpnbui5IuAid1FS2l+41 92Pb7md6/pQpZ6tjIcm3et6oqLNpwQ8CCkmjZ2SXWVK0+q2He4g8+qJqK1Jw/9gH 3PcxAgMBAAGjggKAMIICfDAdBgNVHQ4EFgQU3Vi43ud7iv5uKRpbggWxMTFpeE8w HwYDVR0jBBgwFoAUBBYptqnqt8sTJOo5ePA3lviJtUAwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjBYBgNVHR8EUTBPME2gS6BJhkdyc3luYzovL3Jwa2kuY25uaWMu Y24vcnBraS9BOTE2MkUzRDAwMDAvQkJZcHRxbnF0OHNUSk9vNWVQQTNsdmlKdFVB LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZE MUZGMi9CQllwdHFucXQ4c1RKT281ZVBBM2x2aUp0VUEuY2VyMA8GA1UdEwEB/wQF MAMBAf8wDgYDVR0PAQH/BAQDAgEGMIHYBggrBgEFBQcBCwSByzCByDA5BggrBgEF BQcwBYYtcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI2 NzEvMFgGCCsGAQUFBzAKhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2 MkUzRDAwMDAvMjY3MS8zVmk0M3VkN2l2NXVLUnBiZ2dXeE1URnBlRTgubWZ0MDEG CCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMuY24vcnJkcC9ub3RpZnkueG1s MBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwCwODAuBggrBgEFBQcBBwEB/wQfMB0w DAQCAAEwBgMEAmdspDANBAIAAjAHAwUAJAJrwDANBgkqhkiG9w0BAQsFAAOCAQEA cadwj4eWBdzDgQ6Wu00Zaig4Xj4jZc6dVZiVQpM1E5lR3xCbvr514HbhX0pJVsI5 DUB3qOXDN+R1Y50Sq+uYlbtke1D75chQVXijsiILe8g7wOpakNAD93Nh3s+UfJyR oAwTSSj2NsMOeskFF+2xVXRt3uUV+HYEmFQZ7RiBQiObG00/+CTbaUAunK8iTjRw GOinHYmt0G76QSbntTHqoD+3eQUpH4d/blMbwVy1yB2ASnt+f4VTuRiU4Gt7dtQy mLZMul7q0nlId0LXb2C80+HntwkVKcFGdn5cnMyx8z3jh5vgCY7FuKtjoI0KQger 5LBztQh1ZC2jWq8oP4lwLA== -----END CERTIFICATE-----Generated at Wed Aug 13 06:01:17 2025 by rpki-client