$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/SAMQHPS71ffgKuM42Mmazfe2CGU.cer File: SAMQHPS71ffgKuM42Mmazfe2CGU.cer (raw, json) Hash identifier: lcLf0v7SXjo2Btxk/XruBAukaSed6fvrlg8Ww+eHSPA= Subject key identifier: 48:03:10:1C:F4:BB:D5:F7:E0:2A:E3:38:D8:C9:9A:CD:F7:B6:08:65 Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Certificate serial: E253 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3249/SAMQHPS71ffgKuM42Mmazfe2CGU.mft caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3249/ Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml Certificate not before: Thu 23 Oct 2025 03:10:24 +0000 Certificate not after: Fri 23 Oct 2026 03:01:03 +0000 Subordinate resources: IP: 2401:5c60::/32 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 09:13:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57939 (0xe253) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0000, serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Validity Not Before: Oct 23 03:10:24 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=4803101CF4BBD5F7E02AE338D8C99ACDF7B60865 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:a0:5c:c3:2d:53:30:01:ef:3a:50:01:98:6a: cc:3b:92:18:78:7c:fe:3c:f9:a0:46:86:1e:4c:ef: 0d:d4:ca:53:b1:32:fd:89:7c:f3:7c:63:0a:38:40: f0:1f:04:dd:b8:ec:41:91:3a:f8:2d:c5:6e:f2:9d: 21:12:0a:65:a4:79:eb:3e:77:21:90:d5:26:da:13: 68:6a:19:0d:8f:7d:d9:e8:6f:e1:33:4f:8c:85:46: 1a:68:41:b9:16:e2:56:de:8f:9f:87:0d:c8:c9:67: b2:81:ab:fa:1b:3d:c2:15:b6:10:22:4c:32:0e:b2: 40:b0:47:8a:16:9c:18:37:b7:9a:d2:89:06:2d:f9: fd:2c:bc:e6:3b:d5:b0:f4:8e:ad:6d:4b:4e:82:43: 4d:1a:e3:e6:62:8e:1c:9a:3c:6e:9e:83:66:8b:42: de:72:1c:c2:f3:9c:0f:d7:8b:24:ab:e8:47:2a:bc: 45:ff:23:3b:3c:8d:02:5a:d9:9b:42:e1:22:c4:77: f6:25:d7:12:25:e2:31:3d:f9:c8:6c:0e:cb:82:af: a6:d9:65:67:97:74:f8:93:62:35:75:ae:09:2f:53: 15:76:02:7a:c1:f5:7b:60:45:e7:f3:f2:d7:2c:39: eb:6c:77:7e:45:f4:dd:6e:68:57:01:b9:de:7b:45: b0:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:03:10:1C:F4:BB:D5:F7:E0:2A:E3:38:D8:C9:9A:CD:F7:B6:08:65 X509v3 Authority Key Identifier: keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3249/ RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3249/SAMQHPS71ffgKuM42Mmazfe2CGU.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2401:5c60::/32 Signature Algorithm: sha256WithRSAEncryption 25:2c:a1:00:8f:b5:7b:73:7a:d3:a5:ac:4a:e8:68:27:a6:eb: cf:0d:07:12:ad:de:04:0f:ec:6f:2b:4e:07:b5:50:1b:9f:d6: 05:a4:4a:7c:80:9d:27:46:62:8e:ed:ac:71:f3:df:f6:73:dc: 8a:50:00:1f:c1:b2:db:21:54:f3:73:b9:ad:42:54:49:f6:d1: 80:31:00:16:f2:b0:a6:38:92:1b:7f:8a:b2:dd:12:8d:7c:bd: 26:c8:5d:f6:f1:6b:50:38:cf:b3:ef:79:72:33:0e:f7:37:b7: 7d:0a:2c:ae:48:fa:c3:61:cf:5f:64:b6:d4:b3:53:9e:79:92: 23:57:1c:ce:6b:a5:0e:89:84:89:dc:75:16:ea:c5:e8:dc:98: 6a:13:c4:76:68:52:be:dc:db:c2:87:4c:51:5b:b5:be:ba:22: 13:4b:98:88:7f:f2:75:ef:a8:0c:c4:75:32:cb:91:35:d9:cb: 5e:cd:3c:81:81:99:e4:b8:0e:21:94:1b:b8:0c:95:d4:c0:27: 22:f4:9f:55:80:1f:35:08:5c:27:b2:12:21:c0:3e:1f:64:7b: 9a:77:47:d7:44:54:5d:7d:36:00:4b:76:9e:cb:4c:66:97:b4: a8:e2:79:6e:e8:6f:9f:41:44:18:d4:c3:d7:40:73:a1:a4:15: 1f:3b:ce:c3 -----BEGIN CERTIFICATE----- MIIFUjCCBDqgAwIBAgIDAOJTMA0GCSqGSIb3DQEBCwUAMEoxFTATBgNVBAMTDEE5 MTYyRTNEMDAwMDExMC8GA1UEBRMoMDQxNjI5QjZBOUVBQjdDQjEzMjRFQTM5NzhG MDM3OTZGODg5QjU0MDAeFw0yNTEwMjMwMzEwMjRaFw0yNjEwMjMwMzAxMDNaMDMx MTAvBgNVBAMTKDQ4MDMxMDFDRjRCQkQ1RjdFMDJBRTMzOEQ4Qzk5QUNERjdCNjA4 NjUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0oFzDLVMwAe86UAGY asw7khh4fP48+aBGhh5M7w3UylOxMv2JfPN8Ywo4QPAfBN247EGROvgtxW7ynSES CmWkees+dyGQ1SbaE2hqGQ2Pfdnob+EzT4yFRhpoQbkW4lbej5+HDcjJZ7KBq/ob PcIVthAiTDIOskCwR4oWnBg3t5rSiQYt+f0svOY71bD0jq1tS06CQ00a4+Zijhya PG6eg2aLQt5yHMLznA/XiySr6EcqvEX/Izs8jQJa2ZtC4SLEd/Yl1xIl4jE9+chs DsuCr6bZZWeXdPiTYjV1rgkvUxV2AnrB9XtgRefz8tcsOetsd35F9N1uaFcBud57 RbCZAgMBAAGjggJWMIICUjAdBgNVHQ4EFgQUSAMQHPS71ffgKuM42Mmazfe2CGUw HwYDVR0jBBgwFoAUBBYptqnqt8sTJOo5ePA3lviJtUAwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjBYBgNVHR8EUTBPME2gS6BJhkdyc3luYzovL3Jwa2kuY25uaWMu Y24vcnBraS9BOTE2MkUzRDAwMDAvQkJZcHRxbnF0OHNUSk9vNWVQQTNsdmlKdFVB LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZE MUZGMi9CQllwdHFucXQ4c1RKT281ZVBBM2x2aUp0VUEuY2VyMA8GA1UdEwEB/wQF MAMBAf8wDgYDVR0PAQH/BAQDAgEGMIHYBggrBgEFBQcBCwSByzCByDA5BggrBgEF BQcwBYYtcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMy NDkvMFgGCCsGAQUFBzAKhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2 MkUzRDAwMDAvMzI0OS9TQU1RSFBTNzFmZmdLdU00Mk1tYXpmZTJDR1UubWZ0MDEG CCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMuY24vcnJkcC9ub3RpZnkueG1s MCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJAFcYDANBgkqhkiG9w0BAQsF AAOCAQEAJSyhAI+1e3N606WsSuhoJ6brzw0HEq3eBA/sbytOB7VQG5/WBaRKfICd J0Ziju2scfPf9nPcilAAH8Gy2yFU83O5rUJUSfbRgDEAFvKwpjiSG3+Kst0SjXy9 Jshd9vFrUDjPs+95cjMO9ze3fQosrkj6w2HPX2S21LNTnnmSI1cczmulDomEidx1 FurF6NyYahPEdmhSvtzbwodMUVu1vroiE0uYiH/yde+oDMR1MsuRNdnLXs08gYGZ 5LgOIZQbuAyV1MAnIvSfVYAfNQhcJ7ISIcA+H2R7mndH10RUXX02AEt2nstMZpe0 qOJ5buhvn0FEGNTD10BzoaQVHzvOww== -----END CERTIFICATE-----Generated at Wed Nov 5 08:28:01 2025 by rpki-client