$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/OhKB4chqonCKPXLu7o4bJCP-wqg.cer File: OhKB4chqonCKPXLu7o4bJCP-wqg.cer (raw, json) Hash identifier: whok0H5/8TIeV3UPvJIcIG6+UNaFrUWBF+lghgbxdbE= Subject key identifier: 3A:12:81:E1:C8:6A:A2:70:8A:3D:72:EE:EE:8E:1B:24:23:FE:C2:A8 Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Certificate serial: E0AD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3378/OhKB4chqonCKPXLu7o4bJCP-wqg.mft caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3378/ Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml Certificate not before: Thu 23 Oct 2025 03:05:14 +0000 Certificate not after: Fri 23 Oct 2026 03:01:03 +0000 Subordinate resources: AS: 151260 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 18:43:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57517 (0xe0ad) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0000, serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Validity Not Before: Oct 23 03:05:14 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=3A1281E1C86AA2708A3D72EEEE8E1B2423FEC2A8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:1a:4d:14:3b:f7:e6:5b:82:13:76:ea:b6:1d: 92:6b:6a:17:2a:79:27:7f:be:1d:d6:f8:ea:99:b7: f1:2e:d4:54:af:58:b1:45:49:c9:e5:4c:18:db:a0: 98:e2:bb:e5:ce:7a:7f:5c:31:8d:8d:9e:27:4f:e8: 18:83:c2:bb:40:5b:2d:19:d1:c0:c2:77:1f:d5:24: 42:35:65:96:30:a5:a7:56:fe:a6:5e:d8:00:11:13: 73:39:d5:eb:d6:db:bf:f0:c7:ce:2c:a0:40:c2:87: 72:30:45:f7:06:0a:fc:8d:83:d2:a7:f0:e3:a6:4b: 46:7e:93:fe:5e:f8:e3:d5:c5:4a:fe:36:77:72:e3: 9c:13:5a:f6:76:a5:f2:9a:a1:c8:54:33:34:f5:f0: a7:23:d0:dc:90:46:09:2e:be:54:a0:ff:e0:70:27: c5:7d:d7:7e:a0:af:62:0b:d4:f1:f6:f0:3e:d9:28: 6c:de:54:45:cd:88:89:16:59:b7:3b:fd:44:92:59: ed:2e:21:d2:09:69:c8:db:11:d8:84:46:2d:48:ec: 32:bc:0b:0d:85:71:db:d8:d5:32:ae:a4:dc:70:40: 63:57:0b:21:23:af:13:7f:3f:41:28:6c:92:53:8c: 0d:11:74:0d:7c:89:ca:84:c6:52:7e:71:69:f8:44: 3c:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:12:81:E1:C8:6A:A2:70:8A:3D:72:EE:EE:8E:1B:24:23:FE:C2:A8 X509v3 Authority Key Identifier: keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3378/ RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3378/OhKB4chqonCKPXLu7o4bJCP-wqg.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 151260 Signature Algorithm: sha256WithRSAEncryption 2c:87:4b:4f:11:cf:11:49:47:7c:6f:ff:42:10:47:f7:cb:34: 52:26:a3:a0:31:bf:62:50:17:83:5d:b9:f3:4f:3a:e9:ed:0f: a5:97:f1:86:47:06:c7:4e:0d:fe:01:f9:18:5d:7f:a9:80:a0: 29:07:fd:d3:54:c2:76:85:6b:6e:43:3b:41:75:8a:6c:d7:a7: 5a:36:26:54:98:01:f6:5b:e1:2f:36:40:5a:67:48:7c:fa:fc: 4a:b1:e6:87:54:9c:d2:b4:1e:e7:0a:ab:e4:6b:c2:43:eb:8c: 12:b6:59:8d:55:e2:86:b5:7e:cb:a8:e1:06:00:53:d6:cd:8b: c8:f0:71:ab:9f:63:c3:d7:5c:40:18:bc:60:57:a4:ff:ff:92: 5b:d3:f1:40:1b:bd:29:95:5c:97:ff:4b:13:44:20:9c:4d:59: ea:35:7e:79:4d:ee:c7:38:f4:f0:23:a3:a2:a0:ba:e5:5f:98: 09:9b:a5:b3:5d:62:5e:b3:c6:20:b1:21:b5:ce:1c:3d:29:2f: 65:d0:1c:09:ef:02:39:6d:a6:87:89:be:77:a2:c4:3d:96:56: 89:16:07:e0:cc:36:ee:6d:09:f0:ef:33:c8:b1:ed:15:52:0e: c5:3d:7d:75:73:a6:3b:b0:7b:9a:e3:65:5a:fc:03:82:0c:24: 2e:b8:17:70 -----BEGIN CERTIFICATE----- MIIFTDCCBDSgAwIBAgIDAOCtMA0GCSqGSIb3DQEBCwUAMEoxFTATBgNVBAMTDEE5 MTYyRTNEMDAwMDExMC8GA1UEBRMoMDQxNjI5QjZBOUVBQjdDQjEzMjRFQTM5NzhG MDM3OTZGODg5QjU0MDAeFw0yNTEwMjMwMzA1MTRaFw0yNjEwMjMwMzAxMDNaMDMx MTAvBgNVBAMTKDNBMTI4MUUxQzg2QUEyNzA4QTNENzJFRUVFOEUxQjI0MjNGRUMy QTgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaGk0UO/fmW4ITduq2 HZJrahcqeSd/vh3W+OqZt/Eu1FSvWLFFScnlTBjboJjiu+XOen9cMY2NnidP6BiD wrtAWy0Z0cDCdx/VJEI1ZZYwpadW/qZe2AARE3M51evW27/wx84soEDCh3IwRfcG CvyNg9Kn8OOmS0Z+k/5e+OPVxUr+Nndy45wTWvZ2pfKaochUMzT18Kcj0NyQRgku vlSg/+BwJ8V9136gr2IL1PH28D7ZKGzeVEXNiIkWWbc7/USSWe0uIdIJacjbEdiE Ri1I7DK8Cw2FcdvY1TKupNxwQGNXCyEjrxN/P0EobJJTjA0RdA18icqExlJ+cWn4 RDwrAgMBAAGjggJQMIICTDAdBgNVHQ4EFgQUOhKB4chqonCKPXLu7o4bJCP+wqgw HwYDVR0jBBgwFoAUBBYptqnqt8sTJOo5ePA3lviJtUAwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjBYBgNVHR8EUTBPME2gS6BJhkdyc3luYzovL3Jwa2kuY25uaWMu Y24vcnBraS9BOTE2MkUzRDAwMDAvQkJZcHRxbnF0OHNUSk9vNWVQQTNsdmlKdFVB LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZE MUZGMi9CQllwdHFucXQ4c1RKT281ZVBBM2x2aUp0VUEuY2VyMA8GA1UdEwEB/wQF MAMBAf8wDgYDVR0PAQH/BAQDAgEGMIHYBggrBgEFBQcBCwSByzCByDA5BggrBgEF BQcwBYYtcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMz NzgvMFgGCCsGAQUFBzAKhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2 MkUzRDAwMDAvMzM3OC9PaEtCNGNocW9uQ0tQWEx1N280YkpDUC13cWcubWZ0MDEG CCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMuY24vcnJkcC9ub3RpZnkueG1s MBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwJO3DANBgkqhkiG9w0BAQsFAAOCAQEA LIdLTxHPEUlHfG//QhBH98s0UiajoDG/YlAXg12580866e0PpZfxhkcGx04N/gH5 GF1/qYCgKQf901TCdoVrbkM7QXWKbNenWjYmVJgB9lvhLzZAWmdIfPr8SrHmh1Sc 0rQe5wqr5GvCQ+uMErZZjVXihrV+y6jhBgBT1s2LyPBxq59jw9dcQBi8YFek//+S W9PxQBu9KZVcl/9LE0QgnE1Z6jV+eU3uxzj08COjoqC65V+YCZuls11iXrPGILEh tc4cPSkvZdAcCe8COW2mh4m+d6LEPZZWiRYH4Mw27m0J8O8zyLHtFVIOxT19dXOm O7B7muNlWvwDggwkLrgXcA== -----END CERTIFICATE-----Generated at Wed Nov 5 17:19:18 2025 by rpki-client