$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/AvsF3jxUSp8cNEpj619s_dNIEVY.cer File: AvsF3jxUSp8cNEpj619s_dNIEVY.cer (raw, json) Hash identifier: y5MsgYJZ17hS6Ie7G+Ql1ggBIU6nSxmHiCXfoFyc+Kw= Subject key identifier: 02:FB:05:DE:3C:54:4A:9F:1C:34:4A:63:EB:5F:6C:FD:D3:48:11:56 Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Certificate serial: E145 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3171/AvsF3jxUSp8cNEpj619s_dNIEVY.mft caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3171/ Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml Certificate not before: Thu 23 Oct 2025 03:07:00 +0000 Certificate not after: Fri 23 Oct 2026 03:01:03 +0000 Subordinate resources: IP: 103.139.92.0/23 IP: 103.197.180.0/22 IP: 103.218.92.0/22 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 18:43:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57669 (0xe145) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0000, serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Validity Not Before: Oct 23 03:07:00 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=02FB05DE3C544A9F1C344A63EB5F6CFDD3481156 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:1b:57:25:fe:aa:6f:70:07:04:6d:fc:66:ad: 73:c2:5a:7d:17:48:66:9a:01:26:d5:e6:69:3a:55: 6a:ea:2c:fe:d9:e8:16:6d:44:c8:c1:49:12:0a:e4: e9:7c:db:1c:c1:42:2a:d3:e5:3a:47:39:52:08:2e: 84:7d:0a:dc:99:fe:95:69:bc:c2:ee:8c:b1:16:8d: 7f:f8:d8:f1:5f:bd:ae:2c:9a:65:7f:83:83:ce:2c: df:c3:c2:76:b7:c1:56:19:b8:b1:88:a9:a4:b6:6e: f9:2f:4c:24:34:e2:31:25:be:57:68:68:7e:63:ff: 84:32:f8:cc:3b:52:40:15:12:a3:71:5c:4a:68:17: 5b:2c:58:ef:10:0b:53:ca:ed:1e:41:81:f8:94:c4: a0:4b:0f:fc:3c:8f:1f:9e:f9:11:8b:87:0b:3e:8b: a7:6c:38:ff:25:ce:ed:59:b8:86:95:aa:b1:02:96: a5:f8:22:d5:ba:3b:05:c5:67:4a:0d:1b:0b:b1:85: 88:07:90:04:ab:c5:d3:42:db:c1:46:46:d5:1c:90: 5e:1c:39:8e:09:d8:0a:1d:53:ca:25:fc:4a:9b:53: 67:1f:6f:10:e2:d8:b7:6a:70:3c:52:47:c6:3f:9e: c0:6b:d5:1e:7d:e2:d6:48:e2:dd:a1:f9:cb:ca:21: e6:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:FB:05:DE:3C:54:4A:9F:1C:34:4A:63:EB:5F:6C:FD:D3:48:11:56 X509v3 Authority Key Identifier: keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3171/ RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3171/AvsF3jxUSp8cNEpj619s_dNIEVY.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.139.92.0/23 103.197.180.0/22 103.218.92.0/22 Signature Algorithm: sha256WithRSAEncryption 56:33:e7:2c:03:e7:da:5b:80:dd:88:f6:b2:f9:e7:92:21:b8: 8b:0f:67:a6:8f:8b:9b:a0:04:04:c9:4b:70:d6:b3:36:6c:bb: e1:8b:8f:5d:bc:47:f4:f5:4f:f5:44:f2:4a:25:08:27:4e:39: 71:a2:f0:af:2a:9d:c2:20:97:7f:50:71:26:0f:88:08:63:b2: 51:b1:42:cc:cf:0d:36:69:cb:4d:8f:83:59:45:37:3e:9a:06: e4:e7:4b:08:ae:cb:3b:03:7a:9d:24:2a:69:5b:f2:5a:84:12: 6b:a1:66:06:e4:88:ab:6e:14:52:56:91:5b:e3:e0:f2:5b:4b: b7:7f:ae:bd:3e:65:72:f9:27:16:2f:b1:a2:b7:02:79:cc:9d: f7:34:ec:ae:fc:16:01:72:5d:a9:6b:2d:14:de:9b:a5:78:6e: 5a:98:0b:3a:c1:de:d4:2a:75:e8:7a:58:f3:25:29:ce:11:ff: 34:e5:fb:19:68:40:1c:df:db:12:6c:73:90:f8:9a:86:88:22: 3e:b6:47:99:54:50:d1:f0:58:5e:1e:1d:eb:0c:6f:f3:fa:37: a3:1f:16:86:0b:f9:7c:f9:58:e5:76:25:42:69:3a:cd:1e:a2: 6e:10:d5:e5:77:84:07:5b:b2:6f:5d:05:37:45:be:d4:7d:8d: 38:79:d7:53 -----BEGIN CERTIFICATE----- MIIFXTCCBEWgAwIBAgIDAOFFMA0GCSqGSIb3DQEBCwUAMEoxFTATBgNVBAMTDEE5 MTYyRTNEMDAwMDExMC8GA1UEBRMoMDQxNjI5QjZBOUVBQjdDQjEzMjRFQTM5NzhG MDM3OTZGODg5QjU0MDAeFw0yNTEwMjMwMzA3MDBaFw0yNjEwMjMwMzAxMDNaMDMx MTAvBgNVBAMTKDAyRkIwNURFM0M1NDRBOUYxQzM0NEE2M0VCNUY2Q0ZERDM0ODEx NTYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDzG1cl/qpvcAcEbfxm rXPCWn0XSGaaASbV5mk6VWrqLP7Z6BZtRMjBSRIK5Ol82xzBQirT5TpHOVIILoR9 CtyZ/pVpvMLujLEWjX/42PFfva4smmV/g4POLN/Dwna3wVYZuLGIqaS2bvkvTCQ0 4jElvldoaH5j/4Qy+Mw7UkAVEqNxXEpoF1ssWO8QC1PK7R5BgfiUxKBLD/w8jx+e +RGLhws+i6dsOP8lzu1ZuIaVqrEClqX4ItW6OwXFZ0oNGwuxhYgHkASrxdNC28FG RtUckF4cOY4J2AodU8ol/EqbU2cfbxDi2LdqcDxSR8Y/nsBr1R594tZI4t2h+cvK IeZRAgMBAAGjggJhMIICXTAdBgNVHQ4EFgQUAvsF3jxUSp8cNEpj619s/dNIEVYw HwYDVR0jBBgwFoAUBBYptqnqt8sTJOo5ePA3lviJtUAwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjBYBgNVHR8EUTBPME2gS6BJhkdyc3luYzovL3Jwa2kuY25uaWMu Y24vcnBraS9BOTE2MkUzRDAwMDAvQkJZcHRxbnF0OHNUSk9vNWVQQTNsdmlKdFVB LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZE MUZGMi9CQllwdHFucXQ4c1RKT281ZVBBM2x2aUp0VUEuY2VyMA8GA1UdEwEB/wQF MAMBAf8wDgYDVR0PAQH/BAQDAgEGMIHYBggrBgEFBQcBCwSByzCByDA5BggrBgEF BQcwBYYtcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMx NzEvMFgGCCsGAQUFBzAKhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2 MkUzRDAwMDAvMzE3MS9BdnNGM2p4VVNwOGNORXBqNjE5c19kTklFVlkubWZ0MDEG CCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMuY24vcnJkcC9ub3RpZnkueG1s MCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQBZ4tcAwQCZ8W0AwQCZ9pcMA0G CSqGSIb3DQEBCwUAA4IBAQBWM+csA+faW4DdiPay+eeSIbiLD2emj4uboAQEyUtw 1rM2bLvhi49dvEf09U/1RPJKJQgnTjlxovCvKp3CIJd/UHEmD4gIY7JRsULMzw02 actNj4NZRTc+mgbk50sIrss7A3qdJCppW/JahBJroWYG5IirbhRSVpFb4+DyW0u3 f669PmVy+ScWL7GitwJ5zJ33NOyu/BYBcl2pay0U3puleG5amAs6wd7UKnXoeljz JSnOEf805fsZaEAc39sSbHOQ+JqGiCI+tkeZVFDR8FheHh3rDG/z+jejHxaGC/l8 +VjldiVCaTrNHqJuENXld4QHW7JvXQU3Rb7UfY04eddT -----END CERTIFICATE-----Generated at Wed Nov 5 17:24:45 2025 by rpki-client