$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/4LWzbEhxQqoAYPpbVHULJsXPW9w.cer File: 4LWzbEhxQqoAYPpbVHULJsXPW9w.cer (raw, json) Hash identifier: uAVkJHFVgEUzpTkRCMbZGsMiXARtcoXc2ytDWhXZbfU= Subject key identifier: E0:B5:B3:6C:48:71:42:AA:00:60:FA:5B:54:75:0B:26:C5:CF:5B:DC Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Certificate serial: D81C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/104/4LWzbEhxQqoAYPpbVHULJsXPW9w.mft caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/104/ Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml Certificate not before: Sun 03 Aug 2025 09:12:04 +0000 Certificate not after: Mon 03 Aug 2026 08:44:40 +0000 Subordinate resources: AS: 9306 IP: 211.88.0.0/16 IP: 2001:f38::/32 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 Aug 2025 07:32:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55324 (0xd81c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0000, serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Validity Not Before: Aug 3 09:12:04 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=E0B5B36C487142AA0060FA5B54750B26C5CF5BDC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:27:02:2e:18:e8:2f:54:b4:e9:fe:00:9f:36: 86:01:7d:07:94:33:06:24:25:84:7f:01:ab:95:17: 33:94:d3:36:18:4c:c6:23:a5:3c:13:59:a3:fa:89: 16:35:56:b5:51:e5:10:a3:d1:92:ea:08:b8:5b:ed: 96:e1:a8:8f:9a:d3:14:8b:79:16:be:5a:89:bc:88: 09:36:b5:5d:cd:d2:d9:c1:0a:bb:47:ca:35:16:bf: 1b:82:2f:82:9c:0b:7e:a8:76:d4:46:da:55:c4:62: 1f:13:78:8e:76:12:e4:92:66:7e:f2:67:8a:01:38: cc:73:0d:73:d4:f0:72:c3:6d:50:04:4b:49:3b:a9: ab:09:d4:0f:f5:db:3f:39:7b:92:b7:a9:46:53:5a: 5e:e6:25:53:62:dc:81:9c:7c:d4:db:f6:f9:7e:79: f7:a5:a8:23:6a:12:9b:e2:34:92:9d:1d:ca:96:ca: 38:02:d9:79:80:a1:cc:a0:d6:e7:62:ac:1c:1b:d3: ee:35:89:f7:1a:ce:6a:31:a2:bf:85:f6:95:e9:f2: 34:d0:ad:8c:89:fe:d5:41:c9:26:a1:c3:ef:62:ac: 9a:8a:ac:16:b5:60:2f:bd:b5:22:28:6c:4c:d2:6a: 85:6a:0a:15:00:f2:00:c0:30:65:21:66:48:8b:c7: 9f:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:B5:B3:6C:48:71:42:AA:00:60:FA:5B:54:75:0B:26:C5:CF:5B:DC X509v3 Authority Key Identifier: keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/104/ RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/104/4LWzbEhxQqoAYPpbVHULJsXPW9w.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 9306 sbgp-ipAddrBlock: critical IPv4: 211.88.0.0/16 IPv6: 2001:f38::/32 Signature Algorithm: sha256WithRSAEncryption 89:06:16:ff:c9:17:aa:29:a4:92:98:85:c4:78:64:06:ed:6e: 6b:dd:9b:7f:ec:32:7a:a5:0f:32:6c:9a:46:0c:57:e5:65:7b: ec:57:81:13:f8:e6:ef:80:78:85:b5:70:65:54:d4:2e:f8:0c: 42:1b:5b:49:0a:8b:c4:1c:84:fb:b6:71:10:b5:4e:1a:eb:4b: 94:ee:db:d8:be:64:e1:02:3b:53:27:3f:90:f6:d5:97:a2:12: 7c:01:0c:06:7f:e6:d9:44:9f:76:cb:e1:64:f5:bc:ec:75:7c: a3:29:39:22:5d:81:3b:33:c4:ba:aa:e9:c9:43:96:e3:1a:16: 62:41:5b:12:5e:9d:3a:3a:5d:fb:d9:ef:24:33:a6:1d:14:13: 01:c0:36:11:74:02:e4:ad:51:be:1c:88:15:4d:6d:ae:b4:e0: ea:6a:e4:37:a6:83:34:cb:e2:8b:92:83:13:c4:37:12:41:c8: 5b:ae:66:51:da:29:3b:b2:b2:4c:21:11:af:13:33:56:99:af: d2:bb:ef:05:23:58:b1:6d:1c:11:eb:af:d3:9b:e2:88:57:fd: 49:4b:b2:76:fe:85:e1:b3:6a:dd:b5:6a:34:48:f3:a3:14:b4: de:d1:55:a0:a0:92:33:b9:8e:35:c5:72:41:d2:97:cc:be:b2: eb:1d:40:dd -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIDANgcMA0GCSqGSIb3DQEBCwUAMEoxFTATBgNVBAMTDEE5 MTYyRTNEMDAwMDExMC8GA1UEBRMoMDQxNjI5QjZBOUVBQjdDQjEzMjRFQTM5NzhG MDM3OTZGODg5QjU0MDAeFw0yNTA4MDMwOTEyMDRaFw0yNjA4MDMwODQ0NDBaMDMx MTAvBgNVBAMTKEUwQjVCMzZDNDg3MTQyQUEwMDYwRkE1QjU0NzUwQjI2QzVDRjVC REMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyJwIuGOgvVLTp/gCf NoYBfQeUMwYkJYR/AauVFzOU0zYYTMYjpTwTWaP6iRY1VrVR5RCj0ZLqCLhb7Zbh qI+a0xSLeRa+Wom8iAk2tV3N0tnBCrtHyjUWvxuCL4KcC36odtRG2lXEYh8TeI52 EuSSZn7yZ4oBOMxzDXPU8HLDbVAES0k7qasJ1A/12z85e5K3qUZTWl7mJVNi3IGc fNTb9vl+efelqCNqEpviNJKdHcqWyjgC2XmAocyg1udirBwb0+41ifcazmoxor+F 9pXp8jTQrYyJ/tVBySahw+9irJqKrBa1YC+9tSIobEzSaoVqChUA8gDAMGUhZkiL x59RAgMBAAGjggJ8MIICeDAdBgNVHQ4EFgQU4LWzbEhxQqoAYPpbVHULJsXPW9ww HwYDVR0jBBgwFoAUBBYptqnqt8sTJOo5ePA3lviJtUAwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjBYBgNVHR8EUTBPME2gS6BJhkdyc3luYzovL3Jwa2kuY25uaWMu Y24vcnBraS9BOTE2MkUzRDAwMDAvQkJZcHRxbnF0OHNUSk9vNWVQQTNsdmlKdFVB LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZE MUZGMi9CQllwdHFucXQ4c1RKT281ZVBBM2x2aUp0VUEuY2VyMA8GA1UdEwEB/wQF MAMBAf8wDgYDVR0PAQH/BAQDAgEGMIHWBggrBgEFBQcBCwSByTCBxjA4BggrBgEF BQcwBYYscnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzEw NC8wVwYIKwYBBQUHMAqGS3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYy RTNEMDAwMC8xMDQvNExXemJFaHhRcW9BWVBwYlZIVUxKc1hQVzl3Lm1mdDAxBggr BgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNubmljLmNuL3JyZHAvbm90aWZ5LnhtbDAZ BggrBgEFBQcBCAEB/wQKMAigBjAEAgIkWjAtBggrBgEFBQcBBwEB/wQeMBwwCwQC AAEwBQMDANNYMA0EAgACMAcDBQAgAQ84MA0GCSqGSIb3DQEBCwUAA4IBAQCJBhb/ yReqKaSSmIXEeGQG7W5r3Zt/7DJ6pQ8ybJpGDFflZXvsV4ET+ObvgHiFtXBlVNQu +AxCG1tJCovEHIT7tnEQtU4a60uU7tvYvmThAjtTJz+Q9tWXohJ8AQwGf+bZRJ92 y+Fk9bzsdXyjKTkiXYE7M8S6qunJQ5bjGhZiQVsSXp06Ol372e8kM6YdFBMBwDYR dALkrVG+HIgVTW2utODqauQ3poM0y+KLkoMTxDcSQchbrmZR2ik7srJMIRGvEzNW ma/Su+8FI1ixbRwR66/Tm+KIV/1JS7J2/oXhs2rdtWo0SPOjFLTe0VWgoJIzuY41 xXJB0pfMvrLrHUDd -----END CERTIFICATE-----Generated at Wed Aug 13 05:56:43 2025 by rpki-client