$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/AvsF3jxUSp8cNEpj619s_dNIEVY.cer File: AvsF3jxUSp8cNEpj619s_dNIEVY.cer (raw, json) Hash identifier: s6E6EoniC/Wg/3a8KUQB/v/omArTzPTavssjBDvpjsE= Subject key identifier: 02:FB:05:DE:3C:54:4A:9F:1C:34:4A:63:EB:5F:6C:FD:D3:48:11:56 Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Certificate serial: D8B4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3171/AvsF3jxUSp8cNEpj619s_dNIEVY.mft caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3171/ Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml Certificate not before: Sun 03 Aug 2025 09:13:39 +0000 Certificate not after: Mon 03 Aug 2026 08:44:40 +0000 Subordinate resources: IP: 103.139.92.0/23 IP: 103.197.180.0/22 IP: 103.218.92.0/22 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 11 Aug 2025 15:05:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55476 (0xd8b4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0000, serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Validity Not Before: Aug 3 09:13:39 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=02FB05DE3C544A9F1C344A63EB5F6CFDD3481156 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:1b:57:25:fe:aa:6f:70:07:04:6d:fc:66:ad: 73:c2:5a:7d:17:48:66:9a:01:26:d5:e6:69:3a:55: 6a:ea:2c:fe:d9:e8:16:6d:44:c8:c1:49:12:0a:e4: e9:7c:db:1c:c1:42:2a:d3:e5:3a:47:39:52:08:2e: 84:7d:0a:dc:99:fe:95:69:bc:c2:ee:8c:b1:16:8d: 7f:f8:d8:f1:5f:bd:ae:2c:9a:65:7f:83:83:ce:2c: df:c3:c2:76:b7:c1:56:19:b8:b1:88:a9:a4:b6:6e: f9:2f:4c:24:34:e2:31:25:be:57:68:68:7e:63:ff: 84:32:f8:cc:3b:52:40:15:12:a3:71:5c:4a:68:17: 5b:2c:58:ef:10:0b:53:ca:ed:1e:41:81:f8:94:c4: a0:4b:0f:fc:3c:8f:1f:9e:f9:11:8b:87:0b:3e:8b: a7:6c:38:ff:25:ce:ed:59:b8:86:95:aa:b1:02:96: a5:f8:22:d5:ba:3b:05:c5:67:4a:0d:1b:0b:b1:85: 88:07:90:04:ab:c5:d3:42:db:c1:46:46:d5:1c:90: 5e:1c:39:8e:09:d8:0a:1d:53:ca:25:fc:4a:9b:53: 67:1f:6f:10:e2:d8:b7:6a:70:3c:52:47:c6:3f:9e: c0:6b:d5:1e:7d:e2:d6:48:e2:dd:a1:f9:cb:ca:21: e6:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:FB:05:DE:3C:54:4A:9F:1C:34:4A:63:EB:5F:6C:FD:D3:48:11:56 X509v3 Authority Key Identifier: keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3171/ RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3171/AvsF3jxUSp8cNEpj619s_dNIEVY.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.139.92.0/23 103.197.180.0/22 103.218.92.0/22 Signature Algorithm: sha256WithRSAEncryption 68:86:36:22:0b:60:c3:bb:cc:93:00:a9:47:d4:c1:26:85:25: e0:e8:0b:83:ab:18:74:21:30:d9:84:28:98:0c:5e:c3:d6:47: a8:88:37:e6:7c:60:af:e6:27:87:f8:4e:c6:42:22:8c:b1:fd: af:77:d5:a9:b6:ae:96:0a:9a:e6:36:f9:bb:94:16:50:49:6a: 83:48:85:0d:15:c7:69:14:22:03:c8:f5:5b:7e:a5:27:b9:66: 23:a1:0a:3c:69:4b:2f:8a:8e:aa:9c:12:12:81:1a:79:1e:1d: c2:c9:75:4c:03:68:82:ab:5e:07:7e:59:a8:72:44:4c:e1:9d: ba:b0:0c:2e:23:68:e7:2e:68:f7:31:4b:f6:dc:95:aa:a3:60: e6:7b:b3:6c:fd:74:08:78:23:47:97:b7:de:d3:49:f2:c6:0a: d3:47:2a:c7:f4:c9:8e:38:90:03:13:0e:bb:3d:82:29:99:a4: 1d:a1:92:35:aa:b1:c1:43:e1:8f:bf:65:3f:2f:cd:dc:00:34: 80:d3:2b:64:e2:47:ec:72:5d:af:84:d1:3b:be:eb:2a:f5:08: d2:45:60:b8:79:81:62:c8:13:9d:13:04:32:5c:f4:3e:95:fd: 0c:cd:25:e8:82:a4:96:b5:05:38:60:f6:bc:db:d8:19:5b:0b: cf:74:8b:64 -----BEGIN CERTIFICATE----- MIIFXTCCBEWgAwIBAgIDANi0MA0GCSqGSIb3DQEBCwUAMEoxFTATBgNVBAMTDEE5 MTYyRTNEMDAwMDExMC8GA1UEBRMoMDQxNjI5QjZBOUVBQjdDQjEzMjRFQTM5NzhG MDM3OTZGODg5QjU0MDAeFw0yNTA4MDMwOTEzMzlaFw0yNjA4MDMwODQ0NDBaMDMx MTAvBgNVBAMTKDAyRkIwNURFM0M1NDRBOUYxQzM0NEE2M0VCNUY2Q0ZERDM0ODEx NTYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDzG1cl/qpvcAcEbfxm rXPCWn0XSGaaASbV5mk6VWrqLP7Z6BZtRMjBSRIK5Ol82xzBQirT5TpHOVIILoR9 CtyZ/pVpvMLujLEWjX/42PFfva4smmV/g4POLN/Dwna3wVYZuLGIqaS2bvkvTCQ0 4jElvldoaH5j/4Qy+Mw7UkAVEqNxXEpoF1ssWO8QC1PK7R5BgfiUxKBLD/w8jx+e +RGLhws+i6dsOP8lzu1ZuIaVqrEClqX4ItW6OwXFZ0oNGwuxhYgHkASrxdNC28FG RtUckF4cOY4J2AodU8ol/EqbU2cfbxDi2LdqcDxSR8Y/nsBr1R594tZI4t2h+cvK IeZRAgMBAAGjggJhMIICXTAdBgNVHQ4EFgQUAvsF3jxUSp8cNEpj619s/dNIEVYw HwYDVR0jBBgwFoAUBBYptqnqt8sTJOo5ePA3lviJtUAwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjBYBgNVHR8EUTBPME2gS6BJhkdyc3luYzovL3Jwa2kuY25uaWMu Y24vcnBraS9BOTE2MkUzRDAwMDAvQkJZcHRxbnF0OHNUSk9vNWVQQTNsdmlKdFVB LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZE MUZGMi9CQllwdHFucXQ4c1RKT281ZVBBM2x2aUp0VUEuY2VyMA8GA1UdEwEB/wQF MAMBAf8wDgYDVR0PAQH/BAQDAgEGMIHYBggrBgEFBQcBCwSByzCByDA5BggrBgEF BQcwBYYtcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMx NzEvMFgGCCsGAQUFBzAKhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2 MkUzRDAwMDAvMzE3MS9BdnNGM2p4VVNwOGNORXBqNjE5c19kTklFVlkubWZ0MDEG CCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMuY24vcnJkcC9ub3RpZnkueG1s MCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQBZ4tcAwQCZ8W0AwQCZ9pcMA0G CSqGSIb3DQEBCwUAA4IBAQBohjYiC2DDu8yTAKlH1MEmhSXg6AuDqxh0ITDZhCiY DF7D1keoiDfmfGCv5ieH+E7GQiKMsf2vd9Wptq6WCprmNvm7lBZQSWqDSIUNFcdp FCIDyPVbfqUnuWYjoQo8aUsvio6qnBISgRp5Hh3CyXVMA2iCq14HflmockRM4Z26 sAwuI2jnLmj3MUv23JWqo2Dme7Ns/XQIeCNHl7fe00nyxgrTRyrH9MmOOJADEw67 PYIpmaQdoZI1qrHBQ+GPv2U/L83cADSA0ytk4kfscl2vhNE7vusq9QjSRWC4eYFi yBOdEwQyXPQ+lf0MzSXogqSWtQU4YPa829gZWwvPdItk -----END CERTIFICATE-----Generated at Mon Aug 11 11:03:32 2025 by rpki-client