$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/Um3mirHCXqVTIWuhLuNonNVrlkU.cer File: Um3mirHCXqVTIWuhLuNonNVrlkU.cer (raw, json) Hash identifier: B6Eo4xV42c019WMGw6bVHr1oYMrTmdahv32t0o4Blp8= Subject key identifier: 52:6D:E6:8A:B1:C2:5E:A5:53:21:6B:A1:2E:E3:68:9C:D5:6B:96:45 Authority key identifier: 04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 Certificate issuer: /CN=A9162E3D0000/serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Certificate serial: E199 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3286/Um3mirHCXqVTIWuhLuNonNVrlkU.mft caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3286/ Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml Certificate not before: Thu 23 Oct 2025 03:08:01 +0000 Certificate not after: Fri 23 Oct 2026 03:01:03 +0000 Subordinate resources: IP: 2405:5d40::/32 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 18:43:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57753 (0xe199) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0000, serialNumber=041629B6A9EAB7CB1324EA3978F03796F889B540 Validity Not Before: Oct 23 03:08:01 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=526DE68AB1C25EA553216BA12EE3689CD56B9645 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:a1:66:98:72:36:42:8e:20:ec:8e:8e:bb:b5: be:80:d4:0f:09:d1:8d:c3:ff:3a:7b:22:87:44:f4: 21:5f:7a:24:cc:c1:a3:89:4e:54:31:3e:65:f0:cd: f4:df:bf:0b:32:ce:91:1e:c4:41:ee:cd:cb:9c:51: 18:7c:4c:0d:fc:dd:b5:41:b5:c9:9f:f6:72:37:4e: f9:d0:d6:3c:d8:93:5b:0f:12:b3:0b:73:21:e4:29: 2e:4f:60:fc:b2:a7:c4:f1:16:f6:2f:b5:6e:aa:87: b8:69:4d:1c:27:90:2f:a9:e8:19:e4:55:bf:e1:70: a7:da:2d:f3:48:2b:aa:23:bc:a6:ba:4c:3d:99:04: 6a:95:1e:d1:d1:cd:e9:68:0e:26:5c:fd:46:e0:07: 1b:b4:35:9d:6e:f0:46:00:86:ae:a6:85:79:97:99: e3:01:bc:44:bc:90:b7:e1:fa:f1:69:72:f9:0b:2d: 20:92:c8:b5:93:ae:0b:46:9c:73:ca:31:9d:a4:bb: c9:e8:e3:a1:65:63:39:39:dd:27:9f:57:dc:8b:dd: 9b:20:e2:55:88:b3:95:3f:91:3d:e6:e3:ff:08:fa: e9:cb:77:cd:d8:da:86:83:dc:34:c3:09:e0:07:e0: fa:2e:a5:dc:30:35:6b:6c:8b:0d:41:59:a2:3f:d1: b1:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:6D:E6:8A:B1:C2:5E:A5:53:21:6B:A1:2E:E3:68:9C:D5:6B:96:45 X509v3 Authority Key Identifier: keyid:04:16:29:B6:A9:EA:B7:CB:13:24:EA:39:78:F0:37:96:F8:89:B5:40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3286/ RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3286/Um3mirHCXqVTIWuhLuNonNVrlkU.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2405:5d40::/32 Signature Algorithm: sha256WithRSAEncryption 08:2b:a8:01:91:b9:b9:45:f1:4d:55:8d:47:f1:b4:c2:ac:a2: 2e:74:97:27:de:e9:9f:03:bc:bb:31:b5:79:96:01:08:6e:25: f9:28:59:2b:1c:2e:81:78:38:e0:fc:03:89:12:10:60:64:bf: 42:27:c4:a2:c3:b4:b6:ed:63:ff:a5:0a:98:76:4a:f9:ec:01: e6:e7:ca:17:d6:82:0b:31:f0:cd:50:4a:88:ec:a9:b0:ec:aa: 41:04:e4:68:fe:a4:c6:ae:95:73:68:e5:7e:ba:bc:63:9a:0d: 9b:85:97:27:ed:e8:1f:16:26:a0:21:94:d8:26:73:11:75:27: 40:dc:82:45:5d:67:6a:3a:e6:33:44:3f:f0:22:c5:ba:6d:ab: cb:a4:3a:37:34:76:b7:d5:b4:3d:e7:fd:e6:87:9f:dd:f4:69: 33:ef:18:1c:23:1a:7a:34:8b:34:50:da:dc:b8:b7:75:1d:50: 53:c9:b8:44:69:77:0e:17:24:8a:ee:7b:31:5c:40:27:a6:28: c5:c5:a5:09:21:4d:55:70:99:36:bd:1f:71:4c:bd:18:c3:26: b1:9c:bb:90:f5:47:43:20:f4:94:86:91:0e:76:12:ab:51:28: 98:ab:1c:8c:12:af:a2:37:1f:15:f7:a9:cd:d5:5c:a5:1e:85: b4:80:e2:95 -----BEGIN CERTIFICATE----- MIIFUjCCBDqgAwIBAgIDAOGZMA0GCSqGSIb3DQEBCwUAMEoxFTATBgNVBAMTDEE5 MTYyRTNEMDAwMDExMC8GA1UEBRMoMDQxNjI5QjZBOUVBQjdDQjEzMjRFQTM5NzhG MDM3OTZGODg5QjU0MDAeFw0yNTEwMjMwMzA4MDFaFw0yNjEwMjMwMzAxMDNaMDMx MTAvBgNVBAMTKDUyNkRFNjhBQjFDMjVFQTU1MzIxNkJBMTJFRTM2ODlDRDU2Qjk2 NDUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUoWaYcjZCjiDsjo67 tb6A1A8J0Y3D/zp7IodE9CFfeiTMwaOJTlQxPmXwzfTfvwsyzpEexEHuzcucURh8 TA383bVBtcmf9nI3TvnQ1jzYk1sPErMLcyHkKS5PYPyyp8TxFvYvtW6qh7hpTRwn kC+p6BnkVb/hcKfaLfNIK6ojvKa6TD2ZBGqVHtHRzeloDiZc/UbgBxu0NZ1u8EYA hq6mhXmXmeMBvES8kLfh+vFpcvkLLSCSyLWTrgtGnHPKMZ2ku8no46FlYzk53Sef V9yL3Zsg4lWIs5U/kT3m4/8I+unLd83Y2oaD3DTDCeAH4PoupdwwNWtsiw1BWaI/ 0bGXAgMBAAGjggJWMIICUjAdBgNVHQ4EFgQUUm3mirHCXqVTIWuhLuNonNVrlkUw HwYDVR0jBBgwFoAUBBYptqnqt8sTJOo5ePA3lviJtUAwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjBYBgNVHR8EUTBPME2gS6BJhkdyc3luYzovL3Jwa2kuY25uaWMu Y24vcnBraS9BOTE2MkUzRDAwMDAvQkJZcHRxbnF0OHNUSk9vNWVQQTNsdmlKdFVB LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h cG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZE MUZGMi9CQllwdHFucXQ4c1RKT281ZVBBM2x2aUp0VUEuY2VyMA8GA1UdEwEB/wQF MAMBAf8wDgYDVR0PAQH/BAQDAgEGMIHYBggrBgEFBQcBCwSByzCByDA5BggrBgEF BQcwBYYtcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMy ODYvMFgGCCsGAQUFBzAKhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2 MkUzRDAwMDAvMzI4Ni9VbTNtaXJIQ1hxVlRJV3VoTHVOb25OVnJsa1UubWZ0MDEG CCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMuY24vcnJkcC9ub3RpZnkueG1s MCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJAVdQDANBgkqhkiG9w0BAQsF AAOCAQEACCuoAZG5uUXxTVWNR/G0wqyiLnSXJ97pnwO8uzG1eZYBCG4l+ShZKxwu gXg44PwDiRIQYGS/QifEosO0tu1j/6UKmHZK+ewB5ufKF9aCCzHwzVBKiOypsOyq QQTkaP6kxq6Vc2jlfrq8Y5oNm4WXJ+3oHxYmoCGU2CZzEXUnQNyCRV1najrmM0Q/ 8CLFum2ry6Q6NzR2t9W0Pef95oef3fRpM+8YHCMaejSLNFDa3Li3dR1QU8m4RGl3 Dhckiu57MVxAJ6YoxcWlCSFNVXCZNr0fcUy9GMMmsZy7kPVHQyD0lIaRDnYSq1Eo mKscjBKvojcfFfepzdVcpR6FtIDilQ== -----END CERTIFICATE-----Generated at Wed Nov 5 15:50:36 2025 by rpki-client