$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/G-BrtSrwKOYaxD18i7PVCOpP030.cer File: G-BrtSrwKOYaxD18i7PVCOpP030.cer (raw, json) Hash identifier: OOODKOcj2dfJFWu8DYC8mB8GCcYEsQIRmsNIywaOkMU= Subject key identifier: 1B:E0:6B:B5:2A:F0:28:E6:1A:C4:3D:7C:8B:B3:D5:08:EA:4F:D3:7D Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Certificate serial: E2BD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3401/G-BrtSrwKOYaxD18i7PVCOpP030.mft caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3401/ Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml Certificate not before: Thu 23 Oct 2025 03:12:20 +0000 Certificate not after: Fri 23 Oct 2026 03:01:03 +0000 Subordinate resources: IP: 2402:33a0::/32 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 14:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58045 (0xe2bd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0000, serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Validity Not Before: Oct 23 03:12:20 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=1BE06BB52AF028E61AC43D7C8BB3D508EA4FD37D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:6e:24:d8:c1:dc:17:43:16:ad:71:d0:39:f9: 57:9a:b5:a3:cf:ac:2d:2d:dc:bb:d2:75:66:84:25: 8e:9f:01:9e:00:7b:c7:b2:d0:6d:7d:64:a6:ac:b4: f1:b7:f9:da:33:a7:6e:e9:4f:b3:a2:d0:3b:49:72: fa:02:b0:aa:ff:2a:51:f9:2a:2f:ae:ef:ed:89:b1: 89:fb:11:0e:25:c8:c1:b6:08:29:53:2d:89:0b:d2: 26:11:2e:ab:d8:d2:02:a6:8a:4a:f4:4e:6b:a3:a5: 31:72:8c:8c:e6:4f:13:3c:a8:87:d7:da:9c:9b:53: ec:a0:2f:ec:92:0d:49:c9:73:ce:55:23:90:ad:25: a8:3c:12:ad:00:8f:52:7f:01:9d:1a:04:ba:d9:2b: 8c:b4:d5:7b:1a:87:cd:0d:d6:39:87:b9:05:11:21: 27:43:58:b2:fb:ab:45:2f:a9:11:7d:89:6e:4b:15: 22:8f:ae:c8:91:48:42:70:47:6d:4a:db:24:8b:26: e2:fb:1d:56:3f:58:aa:51:a6:05:1f:96:44:e1:a6: 5a:60:4b:23:13:da:4c:bb:9b:2f:a3:5d:31:2a:9c: 76:67:1a:04:ff:3e:12:8d:be:28:8d:a5:ad:2c:4c: 16:14:bd:bb:f9:d3:63:64:5d:4d:27:d0:57:70:48: c1:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:E0:6B:B5:2A:F0:28:E6:1A:C4:3D:7C:8B:B3:D5:08:EA:4F:D3:7D X509v3 Authority Key Identifier: keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3401/ RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3401/G-BrtSrwKOYaxD18i7PVCOpP030.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2402:33a0::/32 Signature Algorithm: sha256WithRSAEncryption 39:18:42:d6:38:98:db:bb:d1:4a:0b:05:f7:c6:1b:0b:29:3a: 92:ae:3b:1a:58:fd:f3:b1:7e:41:3a:cd:fb:88:f4:3f:95:45: 0a:9d:1a:40:32:6f:99:9c:67:f9:77:52:ec:e4:98:fe:95:7d: 17:1b:93:ce:48:c2:b0:0e:59:12:bf:bf:34:5b:0d:d6:ed:c3: 4a:b8:88:3e:9e:22:be:a4:39:7a:df:c4:14:d8:6e:22:c1:37: 21:9e:dd:47:92:94:5d:f2:92:bd:bb:57:91:67:ce:8d:31:93: 19:23:99:da:e0:05:7b:30:d6:77:84:ec:a7:cf:ea:3f:62:fe: b0:53:75:46:18:8d:cc:11:a2:3b:ff:c8:a9:20:04:34:e5:70: 75:a6:67:64:ef:ee:78:54:1a:15:31:92:78:9d:d2:cf:c4:c9: ea:b0:b4:cb:f4:80:d4:55:0f:2e:4c:30:68:04:fc:60:eb:92: 7e:ba:17:55:89:51:db:22:d5:92:01:de:4f:8f:b5:94:99:58: 99:75:4e:5f:31:77:1a:a8:8f:cb:c9:7a:27:73:1b:c1:ce:7e: 6c:0c:24:35:58:1d:69:f2:54:0c:c1:5f:27:95:c1:41:7e:f0: 9d:63:6f:13:88:c0:b4:57:41:5a:ab:11:32:fc:3d:82:13:32: 67:41:83:9f -----BEGIN CERTIFICATE----- MIIFUjCCBDqgAwIBAgIDAOK9MA0GCSqGSIb3DQEBCwUAMEoxFTATBgNVBAMTDEE5 MTYyRTNEMDAwMDExMC8GA1UEBRMoMDQxNjI5QjZBOUVBQjdDQjEzMjRFQTM5NzhG MDM3OTZGODg5QjU0MDAeFw0yNTEwMjMwMzEyMjBaFw0yNjEwMjMwMzAxMDNaMDMx MTAvBgNVBAMTKDFCRTA2QkI1MkFGMDI4RTYxQUM0M0Q3QzhCQjNENTA4RUE0RkQz N0QwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMbiTYwdwXQxatcdA5 +VeataPPrC0t3LvSdWaEJY6fAZ4Ae8ey0G19ZKastPG3+dozp27pT7Oi0DtJcvoC sKr/KlH5Ki+u7+2JsYn7EQ4lyMG2CClTLYkL0iYRLqvY0gKmikr0TmujpTFyjIzm TxM8qIfX2pybU+ygL+ySDUnJc85VI5CtJag8Eq0Aj1J/AZ0aBLrZK4y01Xsah80N 1jmHuQURISdDWLL7q0UvqRF9iW5LFSKPrsiRSEJwR21K2ySLJuL7HVY/WKpRpgUf lkThplpgSyMT2ky7my+jXTEqnHZnGgT/PhKNviiNpa0sTBYUvbv502NkXU0n0Fdw SMFJAgMBAAGjggJWMIICUjAdBgNVHQ4EFgQUG+BrtSrwKOYaxD18i7PVCOpP030w HwYDVR0jBBgwFoAUBBYptqnqt8sTJOo5ePA3lviJtUAwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjBYBgNVHR8EUTBPME2gS6BJhkdyc3luYzovL3Jwa2kuY25uaWMu Y24vcnBraS9BOTE2MkUzRDAwMDAvQkJZcHRxbnF0OHNUSk9vNWVQQTNsdmlKdFVB LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZE MUZGMi9CQllwdHFucXQ4c1RKT281ZVBBM2x2aUp0VUEuY2VyMA8GA1UdEwEB/wQF MAMBAf8wDgYDVR0PAQH/BAQDAgEGMIHYBggrBgEFBQcBCwSByzCByDA5BggrBgEF BQcwBYYtcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzM0 MDEvMFgGCCsGAQUFBzAKhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2 MkUzRDAwMDAvMzQwMS9HLUJydFNyd0tPWWF4RDE4aTdQVkNPcFAwMzAubWZ0MDEG CCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMuY24vcnJkcC9ub3RpZnkueG1s MCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJAIzoDANBgkqhkiG9w0BAQsF AAOCAQEAORhC1jiY27vRSgsF98YbCyk6kq47Glj987F+QTrN+4j0P5VFCp0aQDJv mZxn+XdS7OSY/pV9FxuTzkjCsA5ZEr+/NFsN1u3DSriIPp4ivqQ5et/EFNhuIsE3 IZ7dR5KUXfKSvbtXkWfOjTGTGSOZ2uAFezDWd4Tsp8/qP2L+sFN1RhiNzBGiO//I qSAENOVwdaZnZO/ueFQaFTGSeJ3Sz8TJ6rC0y/SA1FUPLkwwaAT8YOuSfroXVYlR 2yLVkgHeT4+1lJlYmXVOXzF3GqiPy8l6J3Mbwc5+bAwkNVgdafJUDMFfJ5XBQX7w nWNvE4jAtFdBWqsRMvw9ghMyZ0GDnw== -----END CERTIFICATE-----Generated at Wed Nov 5 13:14:19 2025 by rpki-client