$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/GubvWysCBd1fK0KBGsYIANaP1KA.cer File: GubvWysCBd1fK0KBGsYIANaP1KA.cer (raw, json) Hash identifier: Olaz+CS4f+BOEKSDDfvo3SKVPe+xC2e0JhyQUobOiAc= Subject key identifier: 1A:E6:EF:5B:2B:02:05:DD:5F:2B:42:81:1A:C6:08:00:D6:8F:D4:A0 Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Certificate serial: D844 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3379/GubvWysCBd1fK0KBGsYIANaP1KA.mft caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3379/ Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml Certificate not before: Sun 03 Aug 2025 09:12:28 +0000 Certificate not after: Mon 03 Aug 2026 08:44:40 +0000 Subordinate resources: AS: 139187 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 Aug 2025 07:32:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55364 (0xd844) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0000, serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Validity Not Before: Aug 3 09:12:28 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=1AE6EF5B2B0205DD5F2B42811AC60800D68FD4A0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:50:1a:a5:ba:13:6a:53:d5:96:96:31:9c:90: 13:68:51:5b:16:76:98:aa:cf:c9:6e:6a:4f:67:76: 2a:f9:0a:ae:9c:67:b0:83:8e:ee:c7:c7:66:e4:6f: 31:71:c8:38:9d:9d:7b:e7:7a:c1:35:2a:ee:89:13: 34:f1:79:95:ce:d9:c6:7a:53:11:e0:58:98:ab:aa: 1c:d0:d1:18:39:e3:04:43:cb:41:14:63:b0:c1:31: 90:a4:a8:2e:e8:a0:a0:a6:9c:c0:97:da:6e:27:a1: 71:35:e5:89:f6:4c:2c:17:df:3f:ce:e2:b9:a2:f9: 0e:79:23:79:1f:cb:51:d1:af:49:4d:53:97:96:b1: 99:76:f0:63:cd:4a:aa:2a:09:68:fc:1f:16:1b:01: a6:ba:24:b4:0b:8d:65:80:e6:f7:81:19:61:4c:38: cc:81:83:71:08:d4:db:9a:ba:01:0f:57:ef:bd:67: fa:f6:fc:c9:fa:33:03:80:d7:99:29:ed:3a:d5:04: 8e:d9:31:1d:5c:33:36:a2:e7:6a:98:ac:bd:23:21: 73:7f:42:1c:92:3e:44:f2:48:28:a9:36:e6:bf:c4: 37:89:fb:78:a7:8b:78:98:ea:21:df:00:88:93:2c: 73:7d:f1:35:e1:84:2f:73:3f:f7:29:b3:21:f8:1c: 87:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:E6:EF:5B:2B:02:05:DD:5F:2B:42:81:1A:C6:08:00:D6:8F:D4:A0 X509v3 Authority Key Identifier: keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3379/ RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3379/GubvWysCBd1fK0KBGsYIANaP1KA.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 139187 Signature Algorithm: sha256WithRSAEncryption 0c:29:56:ae:74:3a:6b:16:69:e6:61:00:da:6b:6a:59:b4:07: 30:2e:0c:cc:4e:f3:2e:07:8c:7e:6a:df:43:44:60:a4:1e:17: 81:37:75:fd:3d:fb:42:49:c3:24:3c:ae:17:dc:a5:99:81:40: 57:cf:3a:9d:6c:1f:73:50:13:9b:d2:f3:b2:37:13:74:b6:3e: d2:c2:68:5b:cc:b2:50:aa:46:f3:f7:c1:7c:5c:9b:95:09:f7: ad:da:8b:14:09:03:80:7f:9a:b0:d3:33:82:39:11:f6:c0:e8: 84:35:2c:29:6d:02:ea:58:dd:1d:bb:c4:e4:48:ff:f1:dc:75: bb:c2:90:7b:4e:f9:2a:52:ee:41:a8:fc:7d:56:64:99:7f:57: 12:5f:e3:4f:e9:fd:7a:b4:a4:9e:36:52:8c:7e:17:81:12:dd: 1f:10:4d:82:a8:04:89:1a:db:87:59:e3:87:3c:b3:6d:50:a7: 08:ca:da:94:9b:f5:5c:bb:42:fa:3c:5f:53:2f:ab:14:94:42: 1e:33:58:d9:3c:64:e3:a0:d8:41:35:86:85:75:45:fe:de:88: 9e:63:ea:0d:bc:8c:f6:e0:eb:42:fc:43:7e:89:9c:02:a3:04: 15:ca:b3:b4:7e:94:36:f5:5a:14:e3:0d:18:a6:27:7d:52:89: 91:07:46:c7 -----BEGIN CERTIFICATE----- MIIFTDCCBDSgAwIBAgIDANhEMA0GCSqGSIb3DQEBCwUAMEoxFTATBgNVBAMTDEE5 MTYyRTNEMDAwMDExMC8GA1UEBRMoMDQxNjI5QjZBOUVBQjdDQjEzMjRFQTM5NzhG MDM3OTZGODg5QjU0MDAeFw0yNTA4MDMwOTEyMjhaFw0yNjA4MDMwODQ0NDBaMDMx MTAvBgNVBAMTKDFBRTZFRjVCMkIwMjA1REQ1RjJCNDI4MTFBQzYwODAwRDY4RkQ0 QTAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSUBqluhNqU9WWljGc kBNoUVsWdpiqz8luak9ndir5Cq6cZ7CDju7Hx2bkbzFxyDidnXvnesE1Ku6JEzTx eZXO2cZ6UxHgWJirqhzQ0Rg54wRDy0EUY7DBMZCkqC7ooKCmnMCX2m4noXE15Yn2 TCwX3z/O4rmi+Q55I3kfy1HRr0lNU5eWsZl28GPNSqoqCWj8HxYbAaa6JLQLjWWA 5veBGWFMOMyBg3EI1NuaugEPV++9Z/r2/Mn6MwOA15kp7TrVBI7ZMR1cMzai52qY rL0jIXN/QhySPkTySCipNua/xDeJ+3ini3iY6iHfAIiTLHN98TXhhC9zP/cpsyH4 HIexAgMBAAGjggJQMIICTDAdBgNVHQ4EFgQUGubvWysCBd1fK0KBGsYIANaP1KAw HwYDVR0jBBgwFoAUBBYptqnqt8sTJOo5ePA3lviJtUAwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjBYBgNVHR8EUTBPME2gS6BJhkdyc3luYzovL3Jwa2kuY25uaWMu Y24vcnBraS9BOTE2MkUzRDAwMDAvQkJZcHRxbnF0OHNUSk9vNWVQQTNsdmlKdFVB LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZE MUZGMi9CQllwdHFucXQ4c1RKT281ZVBBM2x2aUp0VUEuY2VyMA8GA1UdEwEB/wQF MAMBAf8wDgYDVR0PAQH/BAQDAgEGMIHYBggrBgEFBQcBCwSByzCByDA5BggrBgEF BQcwBYYtcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMz NzkvMFgGCCsGAQUFBzAKhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2 MkUzRDAwMDAvMzM3OS9HdWJ2V3lzQ0JkMWZLMEtCR3NZSUFOYVAxS0EubWZ0MDEG CCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMuY24vcnJkcC9ub3RpZnkueG1s MBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwIfszANBgkqhkiG9w0BAQsFAAOCAQEA DClWrnQ6axZp5mEA2mtqWbQHMC4MzE7zLgeMfmrfQ0RgpB4XgTd1/T37QknDJDyu F9ylmYFAV886nWwfc1ATm9LzsjcTdLY+0sJoW8yyUKpG8/fBfFyblQn3rdqLFAkD gH+asNMzgjkR9sDohDUsKW0C6ljdHbvE5Ej/8dx1u8KQe075KlLuQaj8fVZkmX9X El/jT+n9erSknjZSjH4XgRLdHxBNgqgEiRrbh1njhzyzbVCnCMralJv1XLtC+jxf Uy+rFJRCHjNY2Txk46DYQTWGhXVF/t6InmPqDbyM9uDrQvxDfomcAqMEFcqztH6U NvVaFOMNGKYnfVKJkQdGxw== -----END CERTIFICATE-----Generated at Wed Aug 13 05:55:02 2025 by rpki-client