$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/R2fj9DSSQBFPCs03VtVATczdRXg.cer File: R2fj9DSSQBFPCs03VtVATczdRXg.cer (raw, json) Hash identifier: QsJNHi360Be+FBmAa9go7PcFd8HYAHxy3Y92dHvGZB0= Subject key identifier: 47:67:E3:F4:34:92:40:11:4F:0A:CD:37:56:D5:40:4D:CC:DD:45:78 Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Certificate serial: E135 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3391/R2fj9DSSQBFPCs03VtVATczdRXg.mft caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3391/ Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml Certificate not before: Thu 23 Oct 2025 03:06:48 +0000 Certificate not after: Fri 23 Oct 2026 03:01:03 +0000 Subordinate resources: AS: 63588 IP: 202.136.80.0/23 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 18:43:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57653 (0xe135) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0000, serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Validity Not Before: Oct 23 03:06:48 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=4767E3F4349240114F0ACD3756D5404DCCDD4578 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:5c:c2:69:c7:b3:4b:47:4a:03:1c:24:92:ba: 66:95:1d:15:89:a3:11:0f:5f:30:62:7b:56:1f:87: 5f:fb:91:d3:a5:e7:4a:52:ae:28:32:ef:f4:d6:7f: ae:a9:f1:22:53:c3:31:87:7a:a7:11:a4:97:c6:48: 8b:42:35:e5:b6:43:8a:58:aa:c8:a0:4d:5f:0d:6d: e9:20:69:d0:12:6c:46:7a:a5:4d:c3:b2:69:d5:e7: 84:36:65:4a:ea:e7:45:0b:36:10:61:6f:92:84:f1: 8c:4d:8b:ec:8e:fd:33:19:79:71:f5:5d:00:c4:e2: fc:30:f6:b1:0c:01:cc:30:67:b3:ff:92:b4:0f:a0: 07:f5:7d:c7:40:c7:50:92:07:87:de:d0:e0:c9:2b: ed:3d:b3:2c:7c:59:0b:4c:a9:4f:90:2b:cc:55:68: 00:4c:6a:bb:8b:63:cc:23:e7:4a:70:bc:70:02:c2: 93:2d:6e:06:1f:98:b5:1e:89:f4:86:a7:58:86:53: c5:7d:06:a0:93:01:bf:41:f5:09:39:66:c5:cb:6b: 7c:4f:98:fb:50:46:79:07:7b:f0:b4:4d:31:50:3d: 24:e9:98:1d:bc:de:fc:57:cc:99:c6:bf:a4:34:09: 03:47:3a:98:ae:c5:ef:18:01:de:b1:92:2d:5d:d2: dd:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:67:E3:F4:34:92:40:11:4F:0A:CD:37:56:D5:40:4D:CC:DD:45:78 X509v3 Authority Key Identifier: keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3391/ RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3391/R2fj9DSSQBFPCs03VtVATczdRXg.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 63588 sbgp-ipAddrBlock: critical IPv4: 202.136.80.0/23 Signature Algorithm: sha256WithRSAEncryption 3c:2a:bd:1f:43:25:42:38:58:50:4a:be:d1:92:c3:5e:94:15: f1:e2:3a:c3:cb:23:ac:4b:ff:87:d6:7d:f3:4b:18:06:0c:4e: 96:ad:27:13:71:2e:1f:9e:24:86:fd:ed:cb:bd:f8:b3:f9:2e: 12:ea:78:ff:0d:6a:c1:e6:64:9b:9e:39:05:a7:c4:66:0d:34: 7c:f6:36:16:36:21:f2:d1:93:34:87:2e:16:ec:5f:c8:5e:65: bb:c5:32:d8:b2:c9:93:e6:a0:b8:d4:78:2e:27:82:a6:5e:ea: f0:4f:9d:7a:ea:82:91:51:5c:06:86:b2:db:05:e5:af:d5:56: 11:d2:c0:b7:1f:b9:08:7c:8c:6a:40:69:31:b9:b4:48:5c:fb: a4:cb:f6:76:7b:3b:b6:e4:9b:b4:61:d4:7d:48:87:27:2c:6f: 85:f6:19:55:5f:43:33:33:a5:68:b4:ac:f0:bd:a8:aa:af:46: 6a:df:66:f3:c8:25:30:be:4f:c2:7f:0c:31:80:24:c9:cb:5f: 23:2b:39:48:2d:77:8e:38:7e:f0:67:76:5d:79:cd:25:ab:10: be:73:f5:0d:72:99:44:3b:48:2e:82:9c:30:e3:7d:b7:ec:1a: 84:74:61:47:d7:e7:68:ff:5c:18:93:81:a9:86:9d:bc:ed:52: e3:eb:e3:95 -----BEGIN CERTIFICATE----- MIIFbTCCBFWgAwIBAgIDAOE1MA0GCSqGSIb3DQEBCwUAMEoxFTATBgNVBAMTDEE5 MTYyRTNEMDAwMDExMC8GA1UEBRMoMDQxNjI5QjZBOUVBQjdDQjEzMjRFQTM5NzhG MDM3OTZGODg5QjU0MDAeFw0yNTEwMjMwMzA2NDhaFw0yNjEwMjMwMzAxMDNaMDMx MTAvBgNVBAMTKDQ3NjdFM0Y0MzQ5MjQwMTE0RjBBQ0QzNzU2RDU0MDREQ0NERDQ1 NzgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqXMJpx7NLR0oDHCSS umaVHRWJoxEPXzBie1Yfh1/7kdOl50pSrigy7/TWf66p8SJTwzGHeqcRpJfGSItC NeW2Q4pYqsigTV8NbekgadASbEZ6pU3DsmnV54Q2ZUrq50ULNhBhb5KE8YxNi+yO /TMZeXH1XQDE4vww9rEMAcwwZ7P/krQPoAf1fcdAx1CSB4fe0ODJK+09syx8WQtM qU+QK8xVaABMaruLY8wj50pwvHACwpMtbgYfmLUeifSGp1iGU8V9BqCTAb9B9Qk5 ZsXLa3xPmPtQRnkHe/C0TTFQPSTpmB283vxXzJnGv6Q0CQNHOpiuxe8YAd6xki1d 0t1jAgMBAAGjggJxMIICbTAdBgNVHQ4EFgQUR2fj9DSSQBFPCs03VtVATczdRXgw HwYDVR0jBBgwFoAUBBYptqnqt8sTJOo5ePA3lviJtUAwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjBYBgNVHR8EUTBPME2gS6BJhkdyc3luYzovL3Jwa2kuY25uaWMu Y24vcnBraS9BOTE2MkUzRDAwMDAvQkJZcHRxbnF0OHNUSk9vNWVQQTNsdmlKdFVB LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZE MUZGMi9CQllwdHFucXQ4c1RKT281ZVBBM2x2aUp0VUEuY2VyMA8GA1UdEwEB/wQF MAMBAf8wDgYDVR0PAQH/BAQDAgEGMIHYBggrBgEFBQcBCwSByzCByDA5BggrBgEF BQcwBYYtcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMz OTEvMFgGCCsGAQUFBzAKhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2 MkUzRDAwMDAvMzM5MS9SMmZqOURTU1FCRlBDczAzVnRWQVRjemRSWGcubWZ0MDEG CCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMuY24vcnJkcC9ub3RpZnkueG1s MBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwD4ZDAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAcqIUDANBgkqhkiG9w0BAQsFAAOCAQEAPCq9H0MlQjhYUEq+0ZLD XpQV8eI6w8sjrEv/h9Z980sYBgxOlq0nE3EuH54khv3ty734s/kuEup4/w1qweZk m545BafEZg00fPY2FjYh8tGTNIcuFuxfyF5lu8Uy2LLJk+aguNR4LieCpl7q8E+d euqCkVFcBoay2wXlr9VWEdLAtx+5CHyMakBpMbm0SFz7pMv2dns7tuSbtGHUfUiH JyxvhfYZVV9DMzOlaLSs8L2oqq9Gat9m88glML5Pwn8MMYAkyctfIys5SC13jjh+ 8Gd2XXnNJasQvnP1DXKZRDtILoKcMON9t+wahHRhR9fnaP9cGJOBqYadvO1S4+vj lQ== -----END CERTIFICATE-----Generated at Wed Nov 5 14:51:15 2025 by rpki-client