$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/SYYkKwP7SpwZBhJ-_EwF47m9_rs.cer File: SYYkKwP7SpwZBhJ-_EwF47m9_rs.cer (raw, json) Hash identifier: UD+gkklHbFrEPeckG8BRHs0PjqONdl0sleun9SrbkSI= Subject key identifier: 49:86:24:2B:03:FB:4A:9C:19:06:12:7E:FC:4C:05:E3:B9:BD:FE:BB Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Certificate serial: E2BB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2749/SYYkKwP7SpwZBhJ-_EwF47m9_rs.mft caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2749/ Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml Certificate not before: Thu 23 Oct 2025 03:12:19 +0000 Certificate not after: Fri 23 Oct 2026 03:01:03 +0000 Subordinate resources: AS: 137794 IP: 103.138.134.0/23 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 09:13:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58043 (0xe2bb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0000, serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Validity Not Before: Oct 23 03:12:19 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=4986242B03FB4A9C1906127EFC4C05E3B9BDFEBB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:1a:c7:2c:71:18:21:d9:cd:64:88:56:7a:58: a4:3b:f4:71:5b:87:47:d5:89:62:d7:29:3b:b9:61: 89:6e:4a:9e:20:4e:21:cd:c3:4c:e7:e6:2f:aa:ed: b1:8f:a1:c8:30:45:4f:50:16:ba:2c:ed:d2:8f:7f: 12:b1:4d:11:49:78:42:b9:65:95:72:c7:44:33:30: a2:e7:ee:cc:d2:f3:aa:b1:f6:db:1c:da:19:9e:98: c9:66:d8:0d:e3:1b:bb:cf:71:7b:f8:50:54:10:3e: 6b:18:7b:e7:2d:e3:06:cf:06:e1:b8:c8:0b:85:ce: d0:b9:42:60:d6:2e:08:e0:6d:1e:23:fe:2f:1c:e8: 53:87:2d:96:21:e5:8c:d9:3c:ce:48:28:bf:d3:f7: 25:f4:70:aa:ea:bd:b0:db:2f:74:23:dd:a5:d2:8d: 45:8d:00:b6:ce:ab:e4:3c:66:49:11:c5:35:3b:5e: 62:77:61:62:0d:6b:3f:79:aa:3b:18:0e:1e:04:c6: c1:7d:8d:05:88:25:64:f4:98:eb:1f:ae:2e:63:f3: 84:1a:c3:58:f9:76:f8:04:b0:f8:43:47:45:8d:56: bd:e6:cf:bf:ec:35:0e:b1:73:c1:72:8f:2b:be:7f: 01:ec:2a:25:ea:2b:47:e3:29:65:2d:a5:50:dd:16: 5f:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:86:24:2B:03:FB:4A:9C:19:06:12:7E:FC:4C:05:E3:B9:BD:FE:BB X509v3 Authority Key Identifier: keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2749/ RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2749/SYYkKwP7SpwZBhJ-_EwF47m9_rs.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: 137794 sbgp-ipAddrBlock: critical IPv4: 103.138.134.0/23 Signature Algorithm: sha256WithRSAEncryption 8e:25:fc:3b:0d:e0:5c:ac:10:11:ea:b3:7f:32:04:26:79:ce: 22:25:ab:44:f3:35:63:d8:63:cf:62:7c:c7:db:11:f8:35:66: ad:f1:f1:b6:e6:78:4b:54:33:b1:e1:db:bf:8c:6f:a2:17:f5: 59:02:22:69:88:55:f7:08:36:08:57:b2:57:8b:e7:7b:1c:a2: 9f:df:4c:1d:58:24:80:aa:18:26:58:2a:81:cc:e1:ee:3e:cd: ff:12:72:03:e2:4f:d4:04:2b:af:25:88:45:ef:12:9d:d3:ab: 67:17:2d:42:5c:6c:d3:46:fa:76:6b:b3:72:97:86:79:f2:c2: e8:cc:15:93:c2:98:c9:22:4a:4b:bd:59:de:26:88:ac:43:be: fb:01:bf:55:3d:99:4c:34:78:0c:9d:0b:11:b4:71:ea:46:41: c1:dd:20:85:97:bd:2a:3f:e7:75:53:41:34:47:a5:71:31:a3: b7:9f:5f:ce:01:42:b4:4a:09:dd:20:70:53:ed:2f:ca:1c:c6: 6e:ed:19:dc:4a:ff:80:17:cb:7b:f3:c9:56:98:27:70:c8:4c: e6:5a:57:72:45:7a:c5:40:74:80:cf:9a:13:aa:9e:74:4c:60: 4f:b0:e9:bd:7a:4f:95:c6:47:51:61:15:a4:d0:68:57:f4:e2: a3:dd:ea:b2 -----BEGIN CERTIFICATE----- MIIFbTCCBFWgAwIBAgIDAOK7MA0GCSqGSIb3DQEBCwUAMEoxFTATBgNVBAMTDEE5 MTYyRTNEMDAwMDExMC8GA1UEBRMoMDQxNjI5QjZBOUVBQjdDQjEzMjRFQTM5NzhG MDM3OTZGODg5QjU0MDAeFw0yNTEwMjMwMzEyMTlaFw0yNjEwMjMwMzAxMDNaMDMx MTAvBgNVBAMTKDQ5ODYyNDJCMDNGQjRBOUMxOTA2MTI3RUZDNEMwNUUzQjlCREZF QkIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjGscscRgh2c1kiFZ6 WKQ79HFbh0fViWLXKTu5YYluSp4gTiHNw0zn5i+q7bGPocgwRU9QFros7dKPfxKx TRFJeEK5ZZVyx0QzMKLn7szS86qx9tsc2hmemMlm2A3jG7vPcXv4UFQQPmsYe+ct 4wbPBuG4yAuFztC5QmDWLgjgbR4j/i8c6FOHLZYh5YzZPM5IKL/T9yX0cKrqvbDb L3Qj3aXSjUWNALbOq+Q8ZkkRxTU7XmJ3YWINaz95qjsYDh4ExsF9jQWIJWT0mOsf ri5j84Qaw1j5dvgEsPhDR0WNVr3mz7/sNQ6xc8Fyjyu+fwHsKiXqK0fjKWUtpVDd Fl/zAgMBAAGjggJxMIICbTAdBgNVHQ4EFgQUSYYkKwP7SpwZBhJ+/EwF47m9/rsw HwYDVR0jBBgwFoAUBBYptqnqt8sTJOo5ePA3lviJtUAwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjBYBgNVHR8EUTBPME2gS6BJhkdyc3luYzovL3Jwa2kuY25uaWMu Y24vcnBraS9BOTE2MkUzRDAwMDAvQkJZcHRxbnF0OHNUSk9vNWVQQTNsdmlKdFVB LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZE MUZGMi9CQllwdHFucXQ4c1RKT281ZVBBM2x2aUp0VUEuY2VyMA8GA1UdEwEB/wQF MAMBAf8wDgYDVR0PAQH/BAQDAgEGMIHYBggrBgEFBQcBCwSByzCByDA5BggrBgEF BQcwBYYtcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI3 NDkvMFgGCCsGAQUFBzAKhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2 MkUzRDAwMDAvMjc0OS9TWVlrS3dQN1Nwd1pCaEotX0V3RjQ3bTlfcnMubWZ0MDEG CCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMuY24vcnJkcC9ub3RpZnkueG1s MBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwIaQjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAWeKhjANBgkqhkiG9w0BAQsFAAOCAQEAjiX8Ow3gXKwQEeqzfzIE JnnOIiWrRPM1Y9hjz2J8x9sR+DVmrfHxtuZ4S1QzseHbv4xvohf1WQIiaYhV9wg2 CFeyV4vnexyin99MHVgkgKoYJlgqgczh7j7N/xJyA+JP1AQrryWIRe8SndOrZxct Qlxs00b6dmuzcpeGefLC6MwVk8KYySJKS71Z3iaIrEO++wG/VT2ZTDR4DJ0LEbRx 6kZBwd0ghZe9Kj/ndVNBNEelcTGjt59fzgFCtEoJ3SBwU+0vyhzGbu0Z3Er/gBfL e/PJVpgncMhM5lpXckV6xUB0gM+aE6qedExgT7DpvXpPlcZHUWEVpNBoV/Tio93q sg== -----END CERTIFICATE-----Generated at Wed Nov 5 08:28:59 2025 by rpki-client