$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/4V--Vq97W6GgJhMV4RkmxcQFwk4.cer File: 4V--Vq97W6GgJhMV4RkmxcQFwk4.cer (raw, json) Hash identifier: HOkxNmISXKOfHwY4CsTXa9Q8QCQo5NisY+FIfBN+vsU= Subject key identifier: E1:5F:BE:56:AF:7B:5B:A1:A0:26:13:15:E1:19:26:C5:C4:05:C2:4E Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Certificate serial: E38A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3402/4V--Vq97W6GgJhMV4RkmxcQFwk4.mft caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3402/ Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml Certificate not before: Thu 23 Oct 2025 06:13:20 +0000 Certificate not after: Fri 23 Oct 2026 06:03:38 +0000 Subordinate resources: AS: 59066 IP: 43.224.161.0/24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 18:43:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58250 (0xe38a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0000, serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Validity Not Before: Oct 23 06:13:20 2025 GMT Not After : Oct 23 06:03:38 2026 GMT Subject: CN=E15FBE56AF7B5BA1A0261315E11926C5C405C24E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:5a:84:21:c2:df:62:53:5d:dd:70:19:23:99: f4:7e:bc:12:11:64:cd:68:c8:eb:cb:bc:36:34:b8: 2a:18:96:ee:44:05:5a:e1:91:f4:98:37:b4:d1:3c: f4:d5:33:06:3c:c7:67:18:69:8c:a9:8e:06:1c:c4: 8c:fb:cc:ca:fd:42:cf:f9:9e:cd:4e:4b:3a:bb:d1: 04:c7:e1:e0:e2:50:0f:83:58:e7:57:67:4e:8e:59: 6d:7b:03:a9:5b:b0:5c:12:f2:80:3d:d9:72:f7:6c: f0:30:bc:d6:9b:49:79:bc:53:f2:04:11:27:2a:61: 04:e5:b0:6c:45:0e:18:85:bb:b1:b5:c7:1c:82:b6: d4:b6:c8:97:18:fd:00:d7:dc:bf:bb:d6:24:0b:5e: 12:3d:07:41:53:ee:f1:f2:4c:81:91:13:4e:64:ed: 1a:b0:b0:0b:4b:b3:ab:30:ca:82:3b:b8:9d:5e:4f: f5:1d:47:d8:7b:7c:ee:37:55:48:e5:3e:ce:43:f2: 4c:45:b0:c9:48:d3:1e:e3:d1:1b:1b:41:5a:35:fe: 29:2d:eb:74:7e:da:94:04:10:23:02:a5:0b:07:89: 57:19:20:b3:9d:09:42:30:35:e6:cc:93:9a:ff:e0: 4e:81:8a:91:86:c8:b9:f7:81:f1:52:a1:64:ff:d8: ca:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:5F:BE:56:AF:7B:5B:A1:A0:26:13:15:E1:19:26:C5:C4:05:C2:4E X509v3 Authority Key Identifier: keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3402/ RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3402/4V--Vq97W6GgJhMV4RkmxcQFwk4.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 59066 sbgp-ipAddrBlock: critical IPv4: 43.224.161.0/24 Signature Algorithm: sha256WithRSAEncryption 3f:ab:d8:e1:16:62:d9:d6:27:5a:a2:14:47:80:ff:db:40:f8: ce:54:0a:00:a8:8e:39:21:69:bb:64:a7:4e:e3:8e:83:cf:97: 50:af:3a:5d:c6:81:ce:04:70:1e:54:29:3b:11:9f:d3:c4:9f: b3:1f:c5:5c:c1:07:74:5e:c3:5d:ee:02:4f:d9:b0:ba:19:a9: 68:8c:0c:92:99:b3:34:04:c9:30:82:7a:c2:97:0c:c9:f9:85: 83:5f:61:ec:16:54:eb:93:b1:44:d7:21:94:e0:c0:c2:14:a3: 2d:ce:c0:99:3d:c2:0a:5b:0b:52:21:a0:af:95:ab:f9:bd:d0: 68:64:91:be:a0:3b:9f:37:59:75:2d:93:86:46:57:eb:91:e3: 98:9a:76:10:bd:e7:41:ab:54:fc:70:2c:49:85:68:68:c0:0f: 40:6f:50:b3:96:96:27:91:27:2f:c3:cc:b3:39:cb:ad:c4:c4: 98:26:38:e2:1b:c1:20:9d:51:91:3f:41:d5:03:8a:06:ac:ce: 34:6b:de:c5:ab:3b:99:83:14:4b:92:ff:e1:28:c1:1f:f7:18: 17:8b:fa:79:6f:d0:62:4f:fa:ca:cb:cf:44:ae:03:17:dc:36: d0:7b:d7:e8:ac:1c:1e:74:de:43:56:aa:9c:23:bb:e8:5a:c6: fe:e7:9c:ca -----BEGIN CERTIFICATE----- MIIFbTCCBFWgAwIBAgIDAOOKMA0GCSqGSIb3DQEBCwUAMEoxFTATBgNVBAMTDEE5 MTYyRTNEMDAwMDExMC8GA1UEBRMoMDQxNjI5QjZBOUVBQjdDQjEzMjRFQTM5NzhG MDM3OTZGODg5QjU0MDAeFw0yNTEwMjMwNjEzMjBaFw0yNjEwMjMwNjAzMzhaMDMx MTAvBgNVBAMTKEUxNUZCRTU2QUY3QjVCQTFBMDI2MTMxNUUxMTkyNkM1QzQwNUMy NEUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIWoQhwt9iU13dcBkj mfR+vBIRZM1oyOvLvDY0uCoYlu5EBVrhkfSYN7TRPPTVMwY8x2cYaYypjgYcxIz7 zMr9Qs/5ns1OSzq70QTH4eDiUA+DWOdXZ06OWW17A6lbsFwS8oA92XL3bPAwvNab SXm8U/IEEScqYQTlsGxFDhiFu7G1xxyCttS2yJcY/QDX3L+71iQLXhI9B0FT7vHy TIGRE05k7RqwsAtLs6swyoI7uJ1eT/UdR9h7fO43VUjlPs5D8kxFsMlI0x7j0Rsb QVo1/ikt63R+2pQEECMCpQsHiVcZILOdCUIwNebMk5r/4E6BipGGyLn3gfFSoWT/ 2MqzAgMBAAGjggJxMIICbTAdBgNVHQ4EFgQU4V++Vq97W6GgJhMV4RkmxcQFwk4w HwYDVR0jBBgwFoAUBBYptqnqt8sTJOo5ePA3lviJtUAwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjBYBgNVHR8EUTBPME2gS6BJhkdyc3luYzovL3Jwa2kuY25uaWMu Y24vcnBraS9BOTE2MkUzRDAwMDAvQkJZcHRxbnF0OHNUSk9vNWVQQTNsdmlKdFVB LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZE MUZGMi9CQllwdHFucXQ4c1RKT281ZVBBM2x2aUp0VUEuY2VyMA8GA1UdEwEB/wQF MAMBAf8wDgYDVR0PAQH/BAQDAgEGMIHYBggrBgEFBQcBCwSByzCByDA5BggrBgEF BQcwBYYtcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzM0 MDIvMFgGCCsGAQUFBzAKhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2 MkUzRDAwMDAvMzQwMi80Vi0tVnE5N1c2R2dKaE1WNFJrbXhjUUZ3azQubWZ0MDEG CCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMuY24vcnJkcC9ub3RpZnkueG1s MBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwDmujAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEACvgoTANBgkqhkiG9w0BAQsFAAOCAQEAP6vY4RZi2dYnWqIUR4D/ 20D4zlQKAKiOOSFpu2SnTuOOg8+XUK86XcaBzgRwHlQpOxGf08Sfsx/FXMEHdF7D Xe4CT9mwuhmpaIwMkpmzNATJMIJ6wpcMyfmFg19h7BZU65OxRNchlODAwhSjLc7A mT3CClsLUiGgr5Wr+b3QaGSRvqA7nzdZdS2ThkZX65HjmJp2EL3nQatU/HAsSYVo aMAPQG9Qs5aWJ5EnL8PMsznLrcTEmCY44hvBIJ1RkT9B1QOKBqzONGvexas7mYMU S5L/4SjBH/cYF4v6eW/QYk/6ysvPRK4DF9w20HvX6KwcHnTeQ1aqnCO76FrG/uec yg== -----END CERTIFICATE-----Generated at Wed Nov 5 16:13:41 2025 by rpki-client