$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/LEvC-w-ibQkMLpsXWYQ-qInyZLA.cer File: LEvC-w-ibQkMLpsXWYQ-qInyZLA.cer (raw, json) Hash identifier: XuX02v1NsfnsQ2lVC2U22JZu2ZhqtKM2hdK4v4UVX3Y= Subject key identifier: 2C:4B:C2:FB:0F:A2:6D:09:0C:2E:9B:17:59:84:3E:A8:89:F2:64:B0 Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Certificate serial: E123 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3374/LEvC-w-ibQkMLpsXWYQ-qInyZLA.mft caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3374/ Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml Certificate not before: Thu 23 Oct 2025 03:06:37 +0000 Certificate not after: Fri 23 Oct 2026 03:01:03 +0000 Subordinate resources: IP: 45.114.136.0/22 IP: 103.25.148.0/22 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 09:13:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57635 (0xe123) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0000, serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Validity Not Before: Oct 23 03:06:37 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=2C4BC2FB0FA26D090C2E9B1759843EA889F264B0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:81:b7:d2:f1:d9:29:c1:ab:94:90:77:d1:9f: 7d:b7:95:ff:4c:22:ab:df:87:3d:9e:48:52:f2:ac: e3:12:07:9e:bb:9f:37:b2:c0:c4:13:ba:ac:8c:15: 34:38:a4:0e:7a:bf:92:c0:68:91:e9:65:5a:8c:29: 47:69:38:d6:50:87:0e:50:ca:05:49:2a:02:b7:bb: 15:f5:41:bc:5c:20:bd:0a:67:00:95:76:7b:cb:df: 66:6d:60:a1:84:d2:81:dd:d8:34:56:b4:ef:a7:a0: 65:78:4b:eb:6a:e9:32:35:e0:fa:db:c7:4d:9a:39: d0:60:ac:8e:a3:c6:22:d1:1a:5d:98:2c:f8:26:67: 1b:1c:b9:5c:b0:b1:f1:3d:4a:b3:ca:aa:e3:43:37: de:ed:66:92:1d:0c:1b:97:5c:51:da:28:2a:e0:eb: de:6e:99:d3:14:80:65:6f:c8:1b:a8:34:ef:7b:b9: 51:8a:ba:4a:37:85:13:d8:c9:db:bf:d2:46:61:01: be:09:5b:ac:3b:c1:1a:0d:71:11:cd:e7:0e:59:4c: 03:a2:8c:30:5b:51:02:0e:82:41:a8:ac:14:2a:37: b2:e1:98:1e:64:0a:7e:8f:5b:89:5e:e3:f1:ef:5f: 9c:03:ec:88:58:27:3b:1e:ab:b0:de:42:62:b9:be: cc:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:4B:C2:FB:0F:A2:6D:09:0C:2E:9B:17:59:84:3E:A8:89:F2:64:B0 X509v3 Authority Key Identifier: keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3374/ RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3374/LEvC-w-ibQkMLpsXWYQ-qInyZLA.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 45.114.136.0/22 103.25.148.0/22 Signature Algorithm: sha256WithRSAEncryption 81:f1:43:e3:4a:a0:87:cf:ff:7f:a8:e6:d2:3d:1d:53:f6:6d: 53:63:2d:eb:ea:cf:f5:1e:4f:fe:2e:3a:e7:4e:ca:99:b4:c6: 3d:c4:c2:51:0a:37:41:51:54:4a:f8:43:ac:03:d0:f3:9e:6f: 40:7f:ed:00:25:31:77:6f:55:fe:6b:fa:5f:06:38:78:54:46: ed:a5:75:51:2c:48:95:ed:49:72:1d:89:e6:ae:99:3d:67:b7: 43:f3:a8:a6:a8:99:63:71:69:da:4a:ca:da:20:4f:16:cf:b1: fe:49:58:dd:6c:63:09:9d:0f:66:c4:b5:92:ba:06:a2:ba:74: ce:89:fd:ba:9d:5d:a0:d4:ee:67:0e:25:09:fe:ea:0a:03:dc: a4:96:81:69:08:e2:00:a7:8e:e9:b9:a6:07:de:80:74:3e:37: cb:a2:1d:91:57:68:54:4a:b3:62:64:44:f8:01:ea:cf:65:a4: 67:1e:41:38:33:b3:20:04:6d:c9:3e:cd:01:fc:c3:f0:c5:0a: f5:ef:5d:29:23:85:ab:f7:f6:f5:07:69:42:aa:d5:ac:22:2b: ea:5d:8c:08:36:31:2f:c9:1e:60:f4:46:f4:1c:b7:dd:7b:69: 0c:7e:a4:e9:29:06:ec:61:ae:ea:5c:d7:ae:04:d0:ce:86:00: e3:c7:0e:a4 -----BEGIN CERTIFICATE----- MIIFVzCCBD+gAwIBAgIDAOEjMA0GCSqGSIb3DQEBCwUAMEoxFTATBgNVBAMTDEE5 MTYyRTNEMDAwMDExMC8GA1UEBRMoMDQxNjI5QjZBOUVBQjdDQjEzMjRFQTM5NzhG MDM3OTZGODg5QjU0MDAeFw0yNTEwMjMwMzA2MzdaFw0yNjEwMjMwMzAxMDNaMDMx MTAvBgNVBAMTKDJDNEJDMkZCMEZBMjZEMDkwQzJFOUIxNzU5ODQzRUE4ODlGMjY0 QjAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBgbfS8dkpwauUkHfR n323lf9MIqvfhz2eSFLyrOMSB567nzeywMQTuqyMFTQ4pA56v5LAaJHpZVqMKUdp ONZQhw5QygVJKgK3uxX1QbxcIL0KZwCVdnvL32ZtYKGE0oHd2DRWtO+noGV4S+tq 6TI14Prbx02aOdBgrI6jxiLRGl2YLPgmZxscuVywsfE9SrPKquNDN97tZpIdDBuX XFHaKCrg695umdMUgGVvyBuoNO97uVGKuko3hRPYydu/0kZhAb4JW6w7wRoNcRHN 5w5ZTAOijDBbUQIOgkGorBQqN7LhmB5kCn6PW4le4/HvX5wD7IhYJzseq7DeQmK5 vszpAgMBAAGjggJbMIICVzAdBgNVHQ4EFgQULEvC+w+ibQkMLpsXWYQ+qInyZLAw HwYDVR0jBBgwFoAUBBYptqnqt8sTJOo5ePA3lviJtUAwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjBYBgNVHR8EUTBPME2gS6BJhkdyc3luYzovL3Jwa2kuY25uaWMu Y24vcnBraS9BOTE2MkUzRDAwMDAvQkJZcHRxbnF0OHNUSk9vNWVQQTNsdmlKdFVB LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZE MUZGMi9CQllwdHFucXQ4c1RKT281ZVBBM2x2aUp0VUEuY2VyMA8GA1UdEwEB/wQF MAMBAf8wDgYDVR0PAQH/BAQDAgEGMIHYBggrBgEFBQcBCwSByzCByDA5BggrBgEF BQcwBYYtcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMz NzQvMFgGCCsGAQUFBzAKhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2 MkUzRDAwMDAvMzM3NC9MRXZDLXctaWJRa01McHNYV1lRLXFJbnlaTEEubWZ0MDEG CCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMuY24vcnJkcC9ub3RpZnkueG1s MCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCLXKIAwQCZxmUMA0GCSqGSIb3 DQEBCwUAA4IBAQCB8UPjSqCHz/9/qObSPR1T9m1TYy3r6s/1Hk/+LjrnTsqZtMY9 xMJRCjdBUVRK+EOsA9Dznm9Af+0AJTF3b1X+a/pfBjh4VEbtpXVRLEiV7UlyHYnm rpk9Z7dD86imqJljcWnaSsraIE8Wz7H+SVjdbGMJnQ9mxLWSugaiunTOif26nV2g 1O5nDiUJ/uoKA9ykloFpCOIAp47puaYH3oB0PjfLoh2RV2hUSrNiZET4AerPZaRn HkE4M7MgBG3JPs0B/MPwxQr1710pI4Wr9/b1B2lCqtWsIivqXYwINjEvyR5g9Eb0 HLfde2kMfqTpKQbsYa7qXNeuBNDOhgDjxw6k -----END CERTIFICATE-----Generated at Wed Nov 5 08:28:36 2025 by rpki-client