$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/Mp8q_Ib-nx-sny-LsxK1q5yRjCY.cer File: Mp8q_Ib-nx-sny-LsxK1q5yRjCY.cer (raw, json) Hash identifier: 1SyraYX4E7jHMt5wGyXqPHFQYToHGSWGKbMpkvxNnzE= Subject key identifier: 32:9F:2A:FC:86:FE:9F:1F:AC:9F:2F:8B:B3:12:B5:AB:9C:91:8C:26 Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Certificate serial: E103 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3301/Mp8q_Ib-nx-sny-LsxK1q5yRjCY.mft caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3301/ Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml Certificate not before: Thu 23 Oct 2025 03:06:16 +0000 Certificate not after: Fri 23 Oct 2026 03:01:03 +0000 Subordinate resources: IP: 2401:afa0::/32 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 18:43:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57603 (0xe103) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0000, serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Validity Not Before: Oct 23 03:06:16 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=329F2AFC86FE9F1FAC9F2F8BB312B5AB9C918C26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:0c:dc:71:22:d2:70:ab:1f:d3:2d:91:ff:bb: e2:c2:c2:6f:a8:17:19:22:ca:1a:c6:48:a9:a9:23: 26:d4:f7:94:66:1a:c8:98:4d:ce:80:6e:0e:fe:e4: a0:ef:b7:81:20:29:d0:5f:2e:2c:45:fc:41:5c:9b: a5:19:7c:62:43:6a:d9:15:64:35:93:11:3a:aa:a2: a9:26:25:76:fb:0d:d3:42:6b:7e:c7:f5:a3:35:3e: 4c:7c:9c:0c:39:8b:45:b1:06:42:f7:ac:cc:c8:3e: 07:12:b8:a0:54:a4:4f:81:2d:8d:d2:28:5c:0d:36: e1:3b:60:7f:42:22:f9:37:53:c2:d4:52:7c:de:40: a4:d0:e1:ca:bf:f8:1f:d8:a1:3f:d8:5c:e5:73:fe: 86:1b:12:7a:e9:5f:64:69:43:35:4b:f1:ab:0e:dd: 39:cf:ef:0e:e5:91:62:cd:18:e3:42:30:2d:ec:7b: 61:63:9d:92:9b:25:5c:64:11:43:8b:6b:51:49:f0: da:5f:3c:a0:e9:c4:bd:32:6a:97:a8:dc:5c:39:d5: 9d:60:6c:9c:e7:07:a9:d7:da:8e:1b:3b:94:31:c1: c0:cb:95:0b:a6:94:81:6d:7f:92:44:e5:1c:36:73: 6c:3b:de:12:55:7b:65:58:41:9f:c6:65:54:40:29: 57:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:9F:2A:FC:86:FE:9F:1F:AC:9F:2F:8B:B3:12:B5:AB:9C:91:8C:26 X509v3 Authority Key Identifier: keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3301/ RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3301/Mp8q_Ib-nx-sny-LsxK1q5yRjCY.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2401:afa0::/32 Signature Algorithm: sha256WithRSAEncryption 5b:c8:c3:df:97:11:1f:54:e2:a0:bd:cf:3e:d8:d8:be:ea:40: 86:aa:ed:03:f6:81:3e:3d:55:42:cd:68:1d:b0:ad:33:df:bb: c8:56:aa:2c:ab:0a:f0:70:c4:03:c9:30:ac:e7:c4:23:8e:71: 83:72:d0:66:44:ec:f6:ff:a6:dc:8b:d1:a7:71:e5:2c:f7:31: fa:ed:e6:e9:9a:8f:a9:d3:74:bc:89:4c:4f:6d:72:3a:c5:16: 60:1d:e6:76:0e:04:9b:48:2c:a6:62:1a:c5:17:7f:3b:18:be: 59:d4:11:07:f7:e7:f7:1e:36:cd:76:c8:90:b5:b0:20:d6:fc: c0:02:3a:a7:7d:69:da:67:6d:8c:c5:4f:18:5e:0d:62:af:09: 8b:bb:e4:ce:6b:48:6f:d0:40:9f:5e:04:6e:ff:10:de:67:bc: 2a:ef:f0:01:7b:44:58:41:8c:36:a0:f4:c5:e8:3e:e0:e6:08: f6:d0:55:37:66:15:37:4d:69:0d:19:7f:6c:97:ad:17:64:77: 77:7c:4d:b4:af:b4:66:20:11:d5:6b:50:88:7b:5a:00:56:6e: ac:ac:5f:f4:8a:36:9f:f9:72:b0:ca:35:da:b0:59:5c:44:8b: d1:f1:93:60:5b:18:8d:92:c6:98:69:1c:c4:d2:ec:3c:2b:d6: 82:04:00:f7 -----BEGIN CERTIFICATE----- MIIFUjCCBDqgAwIBAgIDAOEDMA0GCSqGSIb3DQEBCwUAMEoxFTATBgNVBAMTDEE5 MTYyRTNEMDAwMDExMC8GA1UEBRMoMDQxNjI5QjZBOUVBQjdDQjEzMjRFQTM5NzhG MDM3OTZGODg5QjU0MDAeFw0yNTEwMjMwMzA2MTZaFw0yNjEwMjMwMzAxMDNaMDMx MTAvBgNVBAMTKDMyOUYyQUZDODZGRTlGMUZBQzlGMkY4QkIzMTJCNUFCOUM5MThD MjYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbDNxxItJwqx/TLZH/ u+LCwm+oFxkiyhrGSKmpIybU95RmGsiYTc6Abg7+5KDvt4EgKdBfLixF/EFcm6UZ fGJDatkVZDWTETqqoqkmJXb7DdNCa37H9aM1Pkx8nAw5i0WxBkL3rMzIPgcSuKBU pE+BLY3SKFwNNuE7YH9CIvk3U8LUUnzeQKTQ4cq/+B/YoT/YXOVz/oYbEnrpX2Rp QzVL8asO3TnP7w7lkWLNGONCMC3se2FjnZKbJVxkEUOLa1FJ8NpfPKDpxL0yapeo 3Fw51Z1gbJznB6nX2o4bO5QxwcDLlQumlIFtf5JE5Rw2c2w73hJVe2VYQZ/GZVRA KVczAgMBAAGjggJWMIICUjAdBgNVHQ4EFgQUMp8q/Ib+nx+sny+LsxK1q5yRjCYw HwYDVR0jBBgwFoAUBBYptqnqt8sTJOo5ePA3lviJtUAwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjBYBgNVHR8EUTBPME2gS6BJhkdyc3luYzovL3Jwa2kuY25uaWMu Y24vcnBraS9BOTE2MkUzRDAwMDAvQkJZcHRxbnF0OHNUSk9vNWVQQTNsdmlKdFVB LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZE MUZGMi9CQllwdHFucXQ4c1RKT281ZVBBM2x2aUp0VUEuY2VyMA8GA1UdEwEB/wQF MAMBAf8wDgYDVR0PAQH/BAQDAgEGMIHYBggrBgEFBQcBCwSByzCByDA5BggrBgEF BQcwBYYtcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMz MDEvMFgGCCsGAQUFBzAKhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2 MkUzRDAwMDAvMzMwMS9NcDhxX0liLW54LXNueS1Mc3hLMXE1eVJqQ1kubWZ0MDEG CCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMuY24vcnJkcC9ub3RpZnkueG1s MCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJAGvoDANBgkqhkiG9w0BAQsF AAOCAQEAW8jD35cRH1TioL3PPtjYvupAhqrtA/aBPj1VQs1oHbCtM9+7yFaqLKsK 8HDEA8kwrOfEI45xg3LQZkTs9v+m3IvRp3HlLPcx+u3m6ZqPqdN0vIlMT21yOsUW YB3mdg4Em0gspmIaxRd/Oxi+WdQRB/fn9x42zXbIkLWwINb8wAI6p31p2mdtjMVP GF4NYq8Ji7vkzmtIb9BAn14Ebv8Q3me8Ku/wAXtEWEGMNqD0xeg+4OYI9tBVN2YV N01pDRl/bJetF2R3d3xNtK+0ZiAR1WtQiHtaAFZurKxf9Io2n/lysMo12rBZXESL 0fGTYFsYjZLGmGkcxNLsPCvWggQA9w== -----END CERTIFICATE-----Generated at Wed Nov 5 15:51:59 2025 by rpki-client