$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/NdjMXh0vNf-6p6kJ9VILPcTBWIw.cer File: NdjMXh0vNf-6p6kJ9VILPcTBWIw.cer (raw, json) Hash identifier: Q6GSYNnoxtghw9vAp8tc//ubqwGaMF+XyD9mD/+tkJk= Subject key identifier: 35:D8:CC:5E:1D:2F:35:FF:BA:A7:A9:09:F5:52:0B:3D:C4:C1:58:8C Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Certificate serial: E2F3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3350/NdjMXh0vNf-6p6kJ9VILPcTBWIw.mft caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3350/ Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml Certificate not before: Thu 23 Oct 2025 03:13:03 +0000 Certificate not after: Fri 23 Oct 2026 03:01:03 +0000 Subordinate resources: IP: 163.61.62.0/23 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 23:43:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58099 (0xe2f3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0000, serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Validity Not Before: Oct 23 03:13:03 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=35D8CC5E1D2F35FFBAA7A909F5520B3DC4C1588C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:9c:fd:de:ef:3c:1a:97:f0:67:a8:26:cf:63: d1:e8:21:17:45:e7:f3:a1:cf:78:36:44:f8:96:c9: 2c:99:51:93:10:4e:5e:4d:fd:08:9d:a7:26:6f:6c: 26:1c:cc:9e:aa:10:c1:04:cf:ed:42:32:27:94:29: de:bd:8d:90:bb:a9:7d:ac:6f:f0:30:fd:a2:4d:a7: e9:5c:72:36:ee:57:bb:79:b0:46:40:1e:19:c3:14: 74:1d:66:27:6d:c5:bf:79:19:f2:14:91:28:fd:97: 17:40:e8:22:41:12:89:f4:50:a8:40:7c:d4:b0:a1: 06:af:5c:2a:6e:70:c1:62:e2:78:85:40:4e:5f:b7: d7:b1:3d:dd:2b:56:8e:dd:c3:93:9f:24:cf:2f:0d: 0e:42:b2:c3:c6:d8:7b:06:88:53:f2:1b:8e:41:b7: a4:d3:0d:3d:9a:8e:e2:59:47:6b:23:75:5a:14:63: c7:26:9c:cf:5b:dd:aa:f1:91:5e:43:32:97:7d:b0: 14:7c:72:aa:69:0a:95:d6:11:65:6b:e3:7b:a8:bc: 8f:bb:a5:a2:2a:17:f8:96:74:85:6c:cc:5a:79:07: fd:9a:25:81:b0:49:da:8c:56:9c:db:cf:3c:55:11: 31:2c:4d:fa:ca:7b:ef:f6:9c:28:1a:2d:9e:4e:49: 3f:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:D8:CC:5E:1D:2F:35:FF:BA:A7:A9:09:F5:52:0B:3D:C4:C1:58:8C X509v3 Authority Key Identifier: keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3350/ RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3350/NdjMXh0vNf-6p6kJ9VILPcTBWIw.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 163.61.62.0/23 Signature Algorithm: sha256WithRSAEncryption 53:fa:ec:81:4d:78:22:c6:f2:e1:e5:1e:a9:fc:04:1e:f0:c6: 8a:52:fc:9a:91:f9:24:06:3f:5f:3b:d4:e8:0d:c2:6a:2a:9d: 93:68:ab:74:84:37:e7:3c:1f:a9:6c:1e:59:60:a3:cc:27:13: 12:b0:b5:17:b4:58:2b:89:4e:d0:2e:0b:3a:3a:10:9c:31:23: 54:de:07:77:d2:98:eb:ee:dd:04:44:16:b4:33:9e:83:90:9b: d5:d8:75:a8:7e:7c:a5:96:bd:b5:7d:33:11:1d:4a:7a:73:61: 63:35:d2:c4:97:05:18:f2:58:a5:7e:67:c5:9b:c5:ea:23:c4: cd:d5:73:99:f8:74:4f:ef:a1:9c:b5:8e:43:05:4e:37:ff:ee: 47:8f:ff:8e:a3:cd:75:f7:10:57:ad:61:1c:34:95:1c:fe:74: e2:0c:ce:cb:a6:22:7c:16:06:59:cc:c9:bb:23:8e:fd:68:84: 14:4c:23:2a:81:98:9c:b6:de:5b:ef:18:5f:b7:81:2d:b7:35: cd:d5:9b:7c:9b:79:4e:02:02:18:13:93:dd:39:65:bd:40:5f: b0:6a:4b:d6:52:64:f8:6e:9a:4d:c9:0e:6a:e4:c4:f3:6d:b4: 52:b1:43:6f:63:9d:d8:d9:76:00:09:41:2b:92:cc:0f:f4:89: f0:77:96:86 -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgIDAOLzMA0GCSqGSIb3DQEBCwUAMEoxFTATBgNVBAMTDEE5 MTYyRTNEMDAwMDExMC8GA1UEBRMoMDQxNjI5QjZBOUVBQjdDQjEzMjRFQTM5NzhG MDM3OTZGODg5QjU0MDAeFw0yNTEwMjMwMzEzMDNaFw0yNjEwMjMwMzAxMDNaMDMx MTAvBgNVBAMTKDM1RDhDQzVFMUQyRjM1RkZCQUE3QTkwOUY1NTIwQjNEQzRDMTU4 OEMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1nP3e7zwal/BnqCbP Y9HoIRdF5/Ohz3g2RPiWySyZUZMQTl5N/QidpyZvbCYczJ6qEMEEz+1CMieUKd69 jZC7qX2sb/Aw/aJNp+lccjbuV7t5sEZAHhnDFHQdZidtxb95GfIUkSj9lxdA6CJB Eon0UKhAfNSwoQavXCpucMFi4niFQE5ft9exPd0rVo7dw5OfJM8vDQ5CssPG2HsG iFPyG45Bt6TTDT2ajuJZR2sjdVoUY8cmnM9b3arxkV5DMpd9sBR8cqppCpXWEWVr 43uovI+7paIqF/iWdIVszFp5B/2aJYGwSdqMVpzbzzxVETEsTfrKe+/2nCgaLZ5O ST9LAgMBAAGjggJVMIICUTAdBgNVHQ4EFgQUNdjMXh0vNf+6p6kJ9VILPcTBWIww HwYDVR0jBBgwFoAUBBYptqnqt8sTJOo5ePA3lviJtUAwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjBYBgNVHR8EUTBPME2gS6BJhkdyc3luYzovL3Jwa2kuY25uaWMu Y24vcnBraS9BOTE2MkUzRDAwMDAvQkJZcHRxbnF0OHNUSk9vNWVQQTNsdmlKdFVB LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZE MUZGMi9CQllwdHFucXQ4c1RKT281ZVBBM2x2aUp0VUEuY2VyMA8GA1UdEwEB/wQF MAMBAf8wDgYDVR0PAQH/BAQDAgEGMIHYBggrBgEFBQcBCwSByzCByDA5BggrBgEF BQcwBYYtcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMz NTAvMFgGCCsGAQUFBzAKhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2 MkUzRDAwMDAvMzM1MC9OZGpNWGgwdk5mLTZwNmtKOVZJTFBjVEJXSXcubWZ0MDEG CCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMuY24vcnJkcC9ub3RpZnkueG1s MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBoz0+MA0GCSqGSIb3DQEBCwUA A4IBAQBT+uyBTXgixvLh5R6p/AQe8MaKUvyakfkkBj9fO9ToDcJqKp2TaKt0hDfn PB+pbB5ZYKPMJxMSsLUXtFgriU7QLgs6OhCcMSNU3gd30pjr7t0ERBa0M56DkJvV 2HWofnyllr21fTMRHUp6c2FjNdLElwUY8lilfmfFm8XqI8TN1XOZ+HRP76GctY5D BU43/+5Hj/+Oo8119xBXrWEcNJUc/nTiDM7LpiJ8FgZZzMm7I479aIQUTCMqgZic tt5b7xhft4EttzXN1Zt8m3lOAgIYE5PdOWW9QF+wakvWUmT4bppNyQ5q5MTzbbRS sUNvY53Y2XYACUErkswP9Inwd5aG -----END CERTIFICATE-----Generated at Wed Nov 5 20:09:57 2025 by rpki-client