$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3hutsfIS28F3LKbWTXSCp76C5Sc.cer File: 3hutsfIS28F3LKbWTXSCp76C5Sc.cer (raw, json) Hash identifier: KUK328ScdWtn6frPWabbIjr5Q2EpwSZLEnJLGc5J6J0= Subject key identifier: DE:1B:AD:B1:F2:12:DB:C1:77:2C:A6:D6:4D:74:82:A7:BE:82:E5:27 Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Certificate serial: E23B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1039/3hutsfIS28F3LKbWTXSCp76C5Sc.mft caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1039/ Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml Certificate not before: Thu 23 Oct 2025 03:10:09 +0000 Certificate not after: Fri 23 Oct 2026 03:01:03 +0000 Subordinate resources: IP: 43.226.116.0/22 IP: 103.45.164.0/22 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 18:43:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57915 (0xe23b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0000, serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Validity Not Before: Oct 23 03:10:09 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=DE1BADB1F212DBC1772CA6D64D7482A7BE82E527 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:05:10:bb:ce:7f:09:0f:6e:15:07:b4:45:39: 5b:26:8f:49:47:2a:a8:37:1b:72:d3:1e:dd:df:4e: 74:0d:14:ff:fe:37:86:d3:4f:13:42:52:29:9d:42: 03:57:67:86:99:6a:ce:df:b8:04:1a:74:b7:c4:6e: 16:2a:6f:19:cc:65:12:c9:f1:ca:aa:39:1e:00:3c: 83:5b:c9:f3:f9:23:14:71:6d:19:ab:56:48:b5:d1: ab:cc:1c:12:9e:12:9d:aa:da:af:ab:83:1d:2e:5e: 61:e5:2b:83:21:f6:a9:4b:71:c8:a3:29:f3:ce:af: a5:c5:69:34:66:bd:29:d7:5a:f1:13:47:b5:6a:4b: 24:23:f4:d8:3a:a7:9f:47:80:f3:5f:c3:58:0e:fc: 77:de:06:3b:d9:4c:bb:c8:32:82:8f:e2:74:64:78: 49:15:5b:b7:24:58:3a:6e:74:b6:cb:48:c9:b8:46: 01:4f:2e:e7:b0:f2:f6:9f:3c:f4:e8:d4:17:f5:d5: dd:93:1d:47:f4:02:41:d5:1b:d8:8d:ef:ce:1c:8f: 68:57:63:c5:9f:ee:d4:a5:bf:bf:22:0b:2d:b4:7d: 45:f9:e3:85:ab:1e:6b:93:a2:9e:c8:5c:57:4b:de: a1:e0:fb:2d:5e:ca:e7:9d:12:c1:a6:12:f0:50:5f: 9c:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:1B:AD:B1:F2:12:DB:C1:77:2C:A6:D6:4D:74:82:A7:BE:82:E5:27 X509v3 Authority Key Identifier: keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1039/ RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1039/3hutsfIS28F3LKbWTXSCp76C5Sc.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 43.226.116.0/22 103.45.164.0/22 Signature Algorithm: sha256WithRSAEncryption 0e:69:6c:e7:c7:c9:45:b0:b5:e9:bd:fa:45:69:26:08:fb:e1: 2a:36:5c:2b:fd:3b:ad:d1:6a:05:fd:f7:e7:8b:1a:5c:9d:b5: b6:14:d9:a7:12:fb:ab:c9:60:fd:fd:a5:2b:1f:30:e8:0f:51: 17:f5:79:5c:12:ad:42:0b:0f:eb:30:1b:59:6f:62:71:43:e3: bc:3a:f8:e5:0b:cc:e3:8d:41:d5:b0:a2:4b:15:98:f7:ac:47: c1:9a:c5:67:a1:9a:83:08:ef:e8:16:cd:bb:c7:b6:8e:11:f0: 73:61:99:02:a6:4e:59:a1:38:ef:69:85:4f:11:f3:51:15:c2: 6c:8f:c8:08:3b:b3:7b:71:f2:77:b5:92:a4:dd:cf:6e:68:6c: 5a:ba:ae:2c:12:0a:eb:83:cb:95:f5:12:97:7a:a1:42:0a:68: 2f:ac:96:72:83:b3:36:5b:1a:8b:2c:e9:a3:72:39:33:0b:27: 13:09:29:48:05:f1:88:07:0a:f1:18:20:34:26:3c:90:5f:75: ea:2e:e6:f1:6b:41:c0:5b:f0:96:84:21:a5:ba:2c:c7:8f:ea: b3:de:e7:7b:4e:42:31:fc:ca:91:be:02:3e:12:b2:52:e7:d2: fc:fb:50:7e:f8:41:eb:3b:82:d0:51:07:57:14:5a:82:7b:2c: 51:b2:ac:4d -----BEGIN CERTIFICATE----- MIIFVzCCBD+gAwIBAgIDAOI7MA0GCSqGSIb3DQEBCwUAMEoxFTATBgNVBAMTDEE5 MTYyRTNEMDAwMDExMC8GA1UEBRMoMDQxNjI5QjZBOUVBQjdDQjEzMjRFQTM5NzhG MDM3OTZGODg5QjU0MDAeFw0yNTEwMjMwMzEwMDlaFw0yNjEwMjMwMzAxMDNaMDMx MTAvBgNVBAMTKERFMUJBREIxRjIxMkRCQzE3NzJDQTZENjRENzQ4MkE3QkU4MkU1 MjcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyBRC7zn8JD24VB7RF OVsmj0lHKqg3G3LTHt3fTnQNFP/+N4bTTxNCUimdQgNXZ4aZas7fuAQadLfEbhYq bxnMZRLJ8cqqOR4APINbyfP5IxRxbRmrVki10avMHBKeEp2q2q+rgx0uXmHlK4Mh 9qlLccijKfPOr6XFaTRmvSnXWvETR7VqSyQj9Ng6p59HgPNfw1gO/HfeBjvZTLvI MoKP4nRkeEkVW7ckWDpudLbLSMm4RgFPLuew8vafPPTo1Bf11d2THUf0AkHVG9iN 784cj2hXY8Wf7tSlv78iCy20fUX544WrHmuTop7IXFdL3qHg+y1eyuedEsGmEvBQ X5zPAgMBAAGjggJbMIICVzAdBgNVHQ4EFgQU3hutsfIS28F3LKbWTXSCp76C5Scw HwYDVR0jBBgwFoAUBBYptqnqt8sTJOo5ePA3lviJtUAwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjBYBgNVHR8EUTBPME2gS6BJhkdyc3luYzovL3Jwa2kuY25uaWMu Y24vcnBraS9BOTE2MkUzRDAwMDAvQkJZcHRxbnF0OHNUSk9vNWVQQTNsdmlKdFVB LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZE MUZGMi9CQllwdHFucXQ4c1RKT281ZVBBM2x2aUp0VUEuY2VyMA8GA1UdEwEB/wQF MAMBAf8wDgYDVR0PAQH/BAQDAgEGMIHYBggrBgEFBQcBCwSByzCByDA5BggrBgEF BQcwBYYtcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzEw MzkvMFgGCCsGAQUFBzAKhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2 MkUzRDAwMDAvMTAzOS8zaHV0c2ZJUzI4RjNMS2JXVFhTQ3A3NkM1U2MubWZ0MDEG CCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMuY24vcnJkcC9ub3RpZnkueG1s MCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCK+J0AwQCZy2kMA0GCSqGSIb3 DQEBCwUAA4IBAQAOaWznx8lFsLXpvfpFaSYI++EqNlwr/Tut0WoF/ffnixpcnbW2 FNmnEvuryWD9/aUrHzDoD1EX9XlcEq1CCw/rMBtZb2JxQ+O8OvjlC8zjjUHVsKJL FZj3rEfBmsVnoZqDCO/oFs27x7aOEfBzYZkCpk5ZoTjvaYVPEfNRFcJsj8gIO7N7 cfJ3tZKk3c9uaGxauq4sEgrrg8uV9RKXeqFCCmgvrJZyg7M2WxqLLOmjcjkzCycT CSlIBfGIBwrxGCA0JjyQX3XqLubxa0HAW/CWhCGluizHj+qz3ud7TkIx/MqRvgI+ ErJS59L8+1B++EHrO4LQUQdXFFqCeyxRsqxN -----END CERTIFICATE-----Generated at Wed Nov 5 15:40:36 2025 by rpki-client