$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/LEvC-w-ibQkMLpsXWYQ-qInyZLA.cer File: LEvC-w-ibQkMLpsXWYQ-qInyZLA.cer (raw, json) Hash identifier: Qut3GPqxcyi0NoiL4sS60fsSYHJfb7Htwae6IR/CBos= Subject key identifier: 2C:4B:C2:FB:0F:A2:6D:09:0C:2E:9B:17:59:84:3E:A8:89:F2:64:B0 Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Certificate serial: D89C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3374/LEvC-w-ibQkMLpsXWYQ-qInyZLA.mft caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3374/ Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml Certificate not before: Sun 03 Aug 2025 09:13:24 +0000 Certificate not after: Mon 03 Aug 2026 08:44:40 +0000 Subordinate resources: IP: 45.114.136.0/22 IP: 103.25.148.0/22 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 Aug 2025 07:32:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55452 (0xd89c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0000, serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Validity Not Before: Aug 3 09:13:24 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=2C4BC2FB0FA26D090C2E9B1759843EA889F264B0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:81:b7:d2:f1:d9:29:c1:ab:94:90:77:d1:9f: 7d:b7:95:ff:4c:22:ab:df:87:3d:9e:48:52:f2:ac: e3:12:07:9e:bb:9f:37:b2:c0:c4:13:ba:ac:8c:15: 34:38:a4:0e:7a:bf:92:c0:68:91:e9:65:5a:8c:29: 47:69:38:d6:50:87:0e:50:ca:05:49:2a:02:b7:bb: 15:f5:41:bc:5c:20:bd:0a:67:00:95:76:7b:cb:df: 66:6d:60:a1:84:d2:81:dd:d8:34:56:b4:ef:a7:a0: 65:78:4b:eb:6a:e9:32:35:e0:fa:db:c7:4d:9a:39: d0:60:ac:8e:a3:c6:22:d1:1a:5d:98:2c:f8:26:67: 1b:1c:b9:5c:b0:b1:f1:3d:4a:b3:ca:aa:e3:43:37: de:ed:66:92:1d:0c:1b:97:5c:51:da:28:2a:e0:eb: de:6e:99:d3:14:80:65:6f:c8:1b:a8:34:ef:7b:b9: 51:8a:ba:4a:37:85:13:d8:c9:db:bf:d2:46:61:01: be:09:5b:ac:3b:c1:1a:0d:71:11:cd:e7:0e:59:4c: 03:a2:8c:30:5b:51:02:0e:82:41:a8:ac:14:2a:37: b2:e1:98:1e:64:0a:7e:8f:5b:89:5e:e3:f1:ef:5f: 9c:03:ec:88:58:27:3b:1e:ab:b0:de:42:62:b9:be: cc:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:4B:C2:FB:0F:A2:6D:09:0C:2E:9B:17:59:84:3E:A8:89:F2:64:B0 X509v3 Authority Key Identifier: keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3374/ RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3374/LEvC-w-ibQkMLpsXWYQ-qInyZLA.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 45.114.136.0/22 103.25.148.0/22 Signature Algorithm: sha256WithRSAEncryption 02:c9:e1:e1:1a:57:37:b0:6c:4a:c5:fb:85:03:85:f2:bd:e6: fb:e9:54:50:aa:d1:e4:49:5e:d4:e6:c4:e2:2a:32:42:95:c5: 66:a3:94:ef:af:8e:8b:ff:b5:a1:09:75:8b:76:cd:1d:af:9f: f1:2b:e5:58:e8:23:26:8c:03:4a:97:8b:9a:3c:58:97:e1:bf: 13:94:b3:bd:fd:c2:1b:50:b5:bd:4b:53:6a:2c:2f:a3:ef:e1: 72:bb:10:7e:2e:59:69:90:28:f3:69:e2:86:17:0b:c5:3a:ba: c1:04:4f:df:c3:c0:3b:9f:00:77:97:ef:c8:b7:1d:14:be:ca: dc:f9:79:19:7e:26:4e:87:4e:f3:75:34:dc:8f:52:3c:7a:f7: ec:ea:74:49:bb:10:6e:ee:0f:73:2a:d1:6a:12:86:73:2b:4d: d5:45:96:3b:2b:cb:9c:ae:69:9a:52:8f:06:37:0e:36:9d:2c: dd:05:12:4b:a0:cd:b9:a5:2e:26:b5:aa:64:cf:02:08:3d:a3: 7a:6f:a5:a1:21:1c:5a:92:64:07:55:0f:07:f3:2e:e5:ff:34: 27:41:b0:d9:a9:18:be:4b:db:1b:c7:9c:33:11:30:5c:99:8c: 0e:87:7c:86:90:1f:84:1c:7f:42:d4:1c:4d:21:33:0e:b1:52: 62:10:cb:cb -----BEGIN CERTIFICATE----- MIIFVzCCBD+gAwIBAgIDANicMA0GCSqGSIb3DQEBCwUAMEoxFTATBgNVBAMTDEE5 MTYyRTNEMDAwMDExMC8GA1UEBRMoMDQxNjI5QjZBOUVBQjdDQjEzMjRFQTM5NzhG MDM3OTZGODg5QjU0MDAeFw0yNTA4MDMwOTEzMjRaFw0yNjA4MDMwODQ0NDBaMDMx MTAvBgNVBAMTKDJDNEJDMkZCMEZBMjZEMDkwQzJFOUIxNzU5ODQzRUE4ODlGMjY0 QjAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBgbfS8dkpwauUkHfR n323lf9MIqvfhz2eSFLyrOMSB567nzeywMQTuqyMFTQ4pA56v5LAaJHpZVqMKUdp ONZQhw5QygVJKgK3uxX1QbxcIL0KZwCVdnvL32ZtYKGE0oHd2DRWtO+noGV4S+tq 6TI14Prbx02aOdBgrI6jxiLRGl2YLPgmZxscuVywsfE9SrPKquNDN97tZpIdDBuX XFHaKCrg695umdMUgGVvyBuoNO97uVGKuko3hRPYydu/0kZhAb4JW6w7wRoNcRHN 5w5ZTAOijDBbUQIOgkGorBQqN7LhmB5kCn6PW4le4/HvX5wD7IhYJzseq7DeQmK5 vszpAgMBAAGjggJbMIICVzAdBgNVHQ4EFgQULEvC+w+ibQkMLpsXWYQ+qInyZLAw HwYDVR0jBBgwFoAUBBYptqnqt8sTJOo5ePA3lviJtUAwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjBYBgNVHR8EUTBPME2gS6BJhkdyc3luYzovL3Jwa2kuY25uaWMu Y24vcnBraS9BOTE2MkUzRDAwMDAvQkJZcHRxbnF0OHNUSk9vNWVQQTNsdmlKdFVB LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZE MUZGMi9CQllwdHFucXQ4c1RKT281ZVBBM2x2aUp0VUEuY2VyMA8GA1UdEwEB/wQF MAMBAf8wDgYDVR0PAQH/BAQDAgEGMIHYBggrBgEFBQcBCwSByzCByDA5BggrBgEF BQcwBYYtcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMz NzQvMFgGCCsGAQUFBzAKhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2 MkUzRDAwMDAvMzM3NC9MRXZDLXctaWJRa01McHNYV1lRLXFJbnlaTEEubWZ0MDEG CCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMuY24vcnJkcC9ub3RpZnkueG1s MCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCLXKIAwQCZxmUMA0GCSqGSIb3 DQEBCwUAA4IBAQACyeHhGlc3sGxKxfuFA4Xyveb76VRQqtHkSV7U5sTiKjJClcVm o5Tvr46L/7WhCXWLds0dr5/xK+VY6CMmjANKl4uaPFiX4b8TlLO9/cIbULW9S1Nq LC+j7+FyuxB+LllpkCjzaeKGFwvFOrrBBE/fw8A7nwB3l+/Itx0Uvsrc+XkZfiZO h07zdTTcj1I8evfs6nRJuxBu7g9zKtFqEoZzK03VRZY7K8ucrmmaUo8GNw42nSzd BRJLoM25pS4mtapkzwIIPaN6b6WhIRxakmQHVQ8H8y7l/zQnQbDZqRi+S9sbx5wz ETBcmYwOh3yGkB+EHH9C1BxNITMOsVJiEMvL -----END CERTIFICATE-----Generated at Wed Aug 13 04:24:16 2025 by rpki-client